Can an AI decrypt your encryption? The real threat is elsewhere | Xiliux Blog

Posted on Oct 16 • Originally published at xiliux.com

The phrase "AI hacking" has become a fear-selling headline, and in selling it, it blurs three completely different threats. Telling them apart is the difference between choosing your encryption well and buying smoke.

There is, today, no AI cryptanalysis that breaks well-designed primitives: AES, XChaCha20-Poly1305, ML-KEM or Argon2id. A neural network does not "guess" a 256-bit key nor speed up the algebra encryption rests on. The key space is so large that no amount of statistical compute walks it. Anyone claiming AI decrypts AES is selling fear, not describing an attack.

Real AI-assisted hacks do not touch the maths; they scale the three things that were always the weak link:

The lesson is old and still true: encryption is almost never broken; it is bypassed. AI makes the bypass faster, not the wall weaker.

The only adversary aiming at the algebraic heart of encryption is quantum computing. Shor's algorithm breaks RSA and elliptic curve — the basis of almost all of today's asymmetric encryption. And the attack is not in the future: it is "harvest now, decrypt later." An adversary captures your encrypted traffic today and stores it until the machine that opens it exists. Everything you encrypt today with classical cryptography has a silent expiry date.

The answer is not an "anti-AI" product. It is hybrid post-quantum cryptography: combining the classical algorithm with a quantum-resistant one (for example X25519 with ML-KEM) so that breaking the message requires breaking both. The hybrid protects even if one of the two turns out to have an undiscovered weakness.

If a vendor sells you their encryption as "AI-proof," be wary: they are describing a threat that does not exist and ignoring the one that does. The questions that actually discriminate are different:

Those three are measurable and honest. "Anti-AI" is none of the three.