Google DeepMind AI agents find RSA encryption flaws 1,600x faster

Accelerating cryptanalysis

Google DeepMind researchers have developed a method to identify vulnerabilities in older encryption standards using AI agents. These agents work under human supervision to explore complex mathematical problems that previously required years of manual research. As interestingengineering.com reported, this approach allows for a much faster evaluation of the assumptions that keep digital data safe.

Cryptanalysis is the formal science of testing encryption systems to find weaknesses before malicious actors can exploit them. Historically, these advances have moved slowly, often taking decades to develop new methods for breaking codes. By using AI, the researchers were able to compress this timeline significantly, moving at a pace that was previously impossible for human researchers alone.

The study specifically targeted 1024-bit RSA, which is an outdated encryption standard. Most modern systems have already moved to stronger 2048-bit keys or larger. While the results do not impact current security for online banking or messaging apps, they demonstrate a major leap in how quickly we can test the limits of mathematical security.

Weaknesses in digital signatures

One major finding involves digital signatures, which are used to verify that software updates or electronic documents come from a legitimate source. These schemes usually include extra information called "padding" to prevent forgery. For a long time, researchers believed this padding was a reliable defense, but the new AI research shows it may be less effective than thought.

The AI agents discovered that if an attacker can control roughly half of the signed data block or more, the padding provides almost no extra protection. In these specific conditions, forging a signature becomes mathematically no more difficult than attacking a system that has no padding at all. This finding helps security experts understand exactly when these legacy defenses fail.

To prove this, the team tested the AI-generated method in a sandbox environment using a known benchmark. The AI-driven implementation required 3.5 times less CPU time than previous methods. Furthermore, it consumed a tiny fraction of the energy required to actually break the benchmark key, showing how efficient the new AI approach is.

Improving batch factorization

The second breakthrough focuses on batch factorization, which involves breaking multiple RSA keys of the same bit length at once. Because many systems use standardized key sizes, an attacker might try to share the cost of expensive computations across many different keys. The AI-discovered algorithm improves the asymptotic efficiency of this process, making it much cheaper to target multiple keys simultaneously.

The new algorithm lowers the mean amount of work needed to crack each extra 1024-bit RSA key by approximately 30 times compared to previous batch techniques. This means that if an attacker were targeting a large number of legacy keys, the AI-discovered method would allow them to do so with significantly fewer resources. It highlights a specific mathematical shortcut that the AI was able to identify.

These findings underscore how AI can find non-obvious patterns in large-scale mathematical problems. By identifying these efficiencies, the research provides a clearer picture of the risks associated with using older, standardized encryption. It serves as a warning that as computing power grows, the math we rely on must be constantly re-evaluated.

Impact on modern security

Despite the impressive speed of these new AI techniques, the researchers emphasize that modern encryption remains secure. The current standards used to protect digital currencies, software updates, and private messages are not threatened by these specific findings. The research was confined to the 1024-bit RSA standard, which is largely considered obsolete in the modern security landscape.

The primary value of this work is not in the immediate breaking of current codes, but in the methodology of the discovery. It shows that machine learning can rapidly scrutinize the underlying math of our digital world. Pushmeet Kohli, DeepMind's Vice President and Chief Scientist, noted that the results highlight the necessity of regularly reviewing cryptographic foundations as AI becomes more capable.

Moving forward, AI-powered cryptanalysis is expected to become an essential tool for security professionals. Instead of waiting years for a new vulnerability to be discovered, experts can use these agents to stress-test future systems. This proactive approach allows for the identification of flaws before they can be exploited by malicious actors in the real world.