What happened
Analysis and impact
导读摘要
正文
后量子密码（PQC）的标准化工作正在全球范围内推进，其目标是在量子计算机成熟之前，为现有公钥密码体系找到安全的替代方案。NIST 主导的标准化进程采取多轮筛选机制，候选算法需要经受学术界和工业界持续数年的公开审查。HAWK 作为第三轮候选算法之一，此前一直被认为具备较强的安全性，直到 Mythos 方法的出现改变了这一局面。
根据 Ars Technica 的报道，Mythos 是一种此前未公开的密码分析手段，它成功发现了 HAWK 中隐藏多年的致命弱点。这一发现直接导致 HAWK 退出后续的标准化竞争。值得强调的是，HAWK 并非缺乏审查——它在多年测试中始终未被攻破，这恰恰说明后量子密码安全评估的难度：传统分析工具可能无法覆盖某些特定类型的数学结构缺陷，而新的分析框架一旦出现，就可能推翻此前积累的安全信心。
这一事件对后量子密码标准化进程的意义在于，它再次验证了 NIST 多轮公开评审机制的必要性。标准化并非一次性选择，而是一个持续暴露风险、淘汰脆弱方案的过程。HAWK 的退出并不意味着整个进程的失败，反而说明评审体系能够在最终标准确立之前拦截存在隐患的候选算法。对于依赖密码基础设施的行业而言，这一案例也提醒各方：在向量子安全迁移时，应优先关注经过最广泛审查的算法，并为未来可能的算法更替保留灵活性。
原文未提供 Mythos 方法的技术细节、发现者的具体身份，以及 HAWK 退出后是否有替代算法递补进入后续轮次的信息。
References
Original source text
A quantum-resistant cryptography algorithm that was under consideration as an official US standard has been taken out of the running after an Anthropic security model helped find a flaw that rendered it broken.
The algorithm is known as HAWK. It's a digital signature scheme designed to withstand future attacks from quantum computers. HAWK had survived two rounds of testing by NIST (the National Institute of Standards and Technology) for evaluating the security of PQC (post-quantum cryptographic) algorithms through widespread testing. HAWK was in a third round of testing designed to catch precisely the kinds of flaws Mythos helped uncover.
Following Anthropic's Monday announcement of the results, the developer of HAWK said Tuesday he was withdrawing it.