Post-Quantum Key Exchange Proved Unsecurable in 1,700 Queries; Hardened Variant Falls in 180 Queries

A team of five researchers from two Chinese universities and the Chinese Academy of Sciences has published a geometric attack that breaks two post-quantum authenticated key exchange protocols that had resisted all prior techniques — and in doing so has definitively answered a question that has been open in cryptographic research since 2015. The five-researcher ASIACRYPT paper appeared at the IACR Cryptology ePrint Archive on September 14, 2026, and has been accepted for presentation at ASIACRYPT 2026, which will be held in Hong Kong on December 7–11. The answer is a definitive negative: a landmark family of lattice-based key exchange designs cannot achieve the gold standard of security against active adversaries, regardless of how it is hardened.

What Authenticated Key Exchange Means — and Why "Directly from LWE" Was Worth Attempting

Authenticated key exchange (AKE) is the cryptographic mechanism that makes secure connections possible. When your browser opens an HTTPS connection, when a VPN establishes a secure tunnel, or when a messaging app sets up an encrypted session, an AKE protocol is running underneath — negotiating a fresh shared secret that only you and the server know, while simultaneously confirming you are both who you claim to be.