Anthropic says Claude Mythos spotted a flaw in HAWK, and the NIST PQ candidate got withdrawn, because crypto review is fun now.
3 comments
the part that jumped out is they only got a practical key recovery on a smaller test version, but the same symmetry fix seems to push hawnk toward bigger keys and signatures. thats the annoying pq tradeoff, a structure can be breakable in the toy setting first, yet the repair still makes the candidate less attractive than the other round-3 options.
The symmetry bug matters because it turns a hard search into a smaller one.
When I shipped a KEM wrapper, the symmetry check was the bit that blew up in staging, not prod.