Security & Cryptography · Computer Science & AI
Cryptography & Security
The newest papers in Cryptography & Security that ReadSearch has read, newest first. Each links to its own page, with its authors, date, where it was published and the original.
1,371 papers, from 4 September 2026 to 5 November 2026: 1,371 arXiv preprints.
Get the few papers worth your time in Cryptography & Security every morning.
Follow Cryptography & Security and ReadSearch reads its new papers each day, then brings you the few worth reading, each with its key finding in a sentence.
Newest papers, page 10
When Is a Relation Worth Trusting? Manipulation Costs, Exposure, and the Trust Trap in Multi-Relational Graph Learning
Multi-relational graph detectors learn from clean data how much to trust each relation, but an adversary pays a different price to manipulate each relation and each action; taking such costs as…Watermark Basins: Black-Box Detection of Distilled LLMs
Proprietary language models and their reasoning traces are vulnerable to API-based distillation, where an adversary trains a student model on the teacher model's outputs.Constraining the Commit Boundary: A DIO/ODI-Informed Authorization Guardrail for Agentic Entity Resolution
Agentic Entity Resolution (ER) systems iteratively plan actions, retrieve evidence, revise hypotheses, and propose graph mutations.Penny for Your Prompts: A Measurement Study of Contextual Leakage in AI Chat Platforms
AI chatbot platforms have become one of the most popular web interfaces users interact with online, routinely receiving personal and intimate information shared under an expectation of privacy.Classical Verification of Quantum Computation Beyond the Polynomial Hierarchy
It is not known whether a classical polynomial-time verifier can verify arbitrary polynomial-time quantum computations with an efficient quantum honest prover without computational assumptions.Heads of Security: Learned Attention Gates Improve Prompt Injection Robustness
We introduce Heads of Security (HoS), a prompt injection defense that enforces instruction-data separation via a small set of learned per-head attention gates.Generation, Not Selection: LLM Proposals for Certified Access-Control Policy Mining
Attribute-Based Access Control (ABAC) policy mining---recovering a compact, auditable policy from an access log---is posed as minimum set cover and solved greedily, which enjoys an $s^{*}(1+\ln m)$…FVH-Bench: Evaluating Image Generator Safety Beyond Overtly Harmful Imagery
Modern image generators can produce complex visual artifacts, including diagrams, interfaces, and records that combine text, graphics, and layout to convey detailed information.When Skills Tell Agents Not to Ask: A Large-Scale Study of Oversight Directives in Agent Skills
Agent skills, reusable instruction packages centred on a SKILL.md file, extend AI agents on demand, and a single line in a widely copied skill reaches every agent that loads it.Poisoned Skills: Propagating Jailbreaks Through Agent Markdown Files
Modern agent frameworks allow users to provide Markdown files containing system prompts, tool descriptions, and skill definitions (e.g., SKILL.md), which are incorporated into the agent's context…Agentic Backdoors via Pretraining Poisoning
Large language models are pretrained on vast, uncurated corpora scraped from the public web.Structured Security Explanations for Learning-Based Vulnerability Detection
Software vulnerability detection remains difficult because existing approaches rely on predefined analysis rules, learn vulnerability patterns implicitly from code and labels, or use large language…ICALL-BENCH: Benchmarking LLM Interprocedural Reasoning in Binary Programs
Recent benchmarks show that LLMs achieve strong performance in both function-level binary understanding and end-to-end binary reverse engineering tasks, but whether LLMs can reason over…Scan Before You Install: Detecting and Mitigating Local and Composite Vulnerabilities in Skills
An agent skill packages natural-language instructions, scripts, and reference files that an LLM-based agent loads for a task.Understanding Post-Quantum Cryptography Adoption: Practices, Challenges, and Evolution in Open-Source Software
Post-quantum cryptography (PQC) standards establish algorithms for quantum-safe systems, but empirical evidence about how software projects implement and maintain PQC support remains limited.Progressive-Observation Physical-Layer Fingerprinting for Efficient Open-Set Ethernet Authentication
Physical-layer fingerprinting (PLF) has emerged as a promising authentication approach for Internet of Things devices.From Speech Tokens to Stolen Voices: Attacker-Chosen-Text Speaker Impersonation via Representation Inversion
Speech interaction systems have gradually evolved from traditional cascaded systems that use text as intermediate information to end-to-end speech language models that directly process speech…Scope-Gap Injection: Exploiting Evaluator Channel Blind Spots in the OpenClaw Agent Security Competition
This paper introduces Scope-Gap Injection (SGI), an indirect prompt injection method for multi-stage LLM-agent safety pipelines.Attack logics, not outputs: Concept-based Property Attacks for Shortcut Elimination in Neural Networks
Deep neural networks (NNs) for computer vision are vulnerable to adversarial attacks, such that minuscule malicious changes to inputs may induce unintuitive outputs.A Certified Robustness Framework for Backdoor Poisoning Attacks using $f$-Divergences
Machine learning systems trained on untrusted data are vulnerable to data and backdoor poisoning attacks, in which an adversary corrupts training and test samples to manipulate predictions at…