AI Meets Cryptography 1: What AI Found in Cloudflare's Circl
blog.zksecurity.xyz
July 7, 2026
19 min read
51/100
Summary
An AI audit pipeline identified seven bugs in Cloudflare's CIRCL cryptography library, including a critical float64 precision loss in threshold RSA and a complete access-control breach in attribute-based encryption. All identified vulnerabilities have been fixed upstream.
Key Takeaways
- AI audit pipeline confirmed seven real bugs in Cloudflare's CIRCL cryptography library, including a critical float64 precision loss in threshold RSA and an access-control break in attribute-based encryption.
- All identified bugs have been fixed upstream, and the findings were validated through Cloudflare's HackerOne bounty program.
- The zkao AI audit agent is designed to continuously identify and minimize bugs in code, evolving through iterative experiments and incorporating the expertise of security researchers.
- The AI's severity ratings for vulnerabilities were often inconsistent with Cloudflare's assessments, highlighting the importance of human validation in the bug-finding process.
Coverage & discussions
Hacker News · blog.zksecurity.xyz
Community discussions
Historical count: 2 · 2 saved in sample · Historical sample
Awaiting analysis
Related Articles
AI Meets Cryptography 2: What AI Found in OpenVM's ZkVM
Jul 17, 2026
Discovering Cryptographic Weaknesses with Claude
Jul 28, 2026
We reproduced Anthropic's Mythos findings with public models
Apr 17, 2026
Evaluating and mitigating the growing risk of LLM-discovered 0-days
Feb 5, 2026
Patterns and problems in emerging multi-agent systems
Aug 16, 2026