AI Uncovers Seven Critical Bugs in Cloudflare's CIRCL Cryptography Library

AI Meets Cryptography 1: What AI Found in Cloudflare's Circl

We deployed our AI audit pipeline on Cloudflare's CIRCL library and discovered seven real bugs, ranging from precision errors to access-control breaks. While our AI agent, zkao, identified these vulnerabilities, human validation remained essential to confirm exploitability. All seven issues are now fixed upstream, marking a significant step in our mission to build automated security tools that continuously scan code until no detectable bugs remain.

"The bugs are the visible output, but the reasoning patterns are the part we care about most."