AI is changing the world. Don't stay behind. Clear summaries, community insight, delivered without the noise. Subscribe to never miss a beat.

Privacy

Contact

Back to all news

ai-agents cryptography software-auditing open-source-security

AI Meets Cryptography 1: What AI Found in Cloudflare's Circl

blog.zksecurity.xyz

July 7, 2026

19 min read

🔥🔥🔥🔥🔥

46/100

Summary

An AI audit pipeline identified seven bugs in Cloudflare's CIRCL cryptography library, including a critical float64 precision loss in threshold RSA and a complete access-control breach in attribute-based encryption. All identified vulnerabilities have been fixed upstream.

Key Takeaways

AI audit pipeline confirmed seven real bugs in Cloudflare's CIRCL cryptography library, including a critical float64 precision loss in threshold RSA and an access-control break in attribute-based encryption.
All identified bugs have been fixed upstream, and the findings were validated through Cloudflare's HackerOne bounty program.
The zkao AI audit agent is designed to continuously identify and minimize bugs in code, evolving through iterative experiments and incorporating the expertise of security researchers.
The AI's severity ratings for vulnerabilities were often inconsistent with Cloudflare's assessments, highlighting the importance of human validation in the bug-finding process.

Read original article