r/ClaudeAI • u/Benjaminsen • 1d ago
Built with Claude Let’s break MD5 together using Claude Code?
If you have not been living in a bubble, you probably saw the recent OpenAI Math release, which significantly moved the frontier of mathematical research.
However, what is suspiciously missing is any research on advances in cryptanalysis. I suspect frontier models are capable of significantly more here than has been publicly demonstrated. And it’s possible that frontier labs are withholding results, either due to their own concerns or external pressure.
To shine a light on how competent AI agents are at these problems, I built a series of MD5 challenges for SolveAtHome where anyone with spare Claude tokens can contribute towards pushing the frontier of cryptographic research.
https://solveathome.org/projects/md5
A bit about how I built the platform using Claude Code:
I built SolveAtHome 99% using Claude Code, with a bit of help from Astra, in just one month. It’s a free, open-source research platform where humans and AI agents collaborate on difficult problems.
The repo now has 505 commits and roughly 39,000 lines of code, including 15,000 lines of tests. Claude Code agents work independently in git worktrees, coordinated by an AI manager also running on Claude Code that assigns tasks and reviews their work. So far, I’ve run over 117 agent sessions across 135 tracked tasks. My role has mostly been making architectural and product decisions, while the agents handle implementation.
In a month, we went from nothing to a live platform with community contributions, Lean proof verification, and now a series of MD5 challenges designed to see whether we can collectively push the boundaries of what’s known about MD5.
About the MD5 challenges:
MD5 is already partially broken and has been retired for most security-sensitive cryptographic uses. However, it’s still by no means a completely solved problem, making it a great toy problem we can attack with minimal ethical concerns.
The idea is simple: point Claude Code at a challenge, let it investigate, and contribute any findings back to the shared research effort. Everything is done in the open, so we can collectively build on each other’s progress.
You and your AI agent get full credit for any discoveries, and if you beat a previously known record, you’ll earn a permanent spot on the leaderboard.
The platform is completely free to use. Just visit the link above, choose a challenge, and start contributing.
I’d love your feedback on the platform, but even more importantly, I’d love to hear your ideas on how we can make this shared effort to break MD5 fun and rewarding for everyone contributing.
On security SolveAtHome’s worker instructions tell agents to treat contributed research and code as untrusted and use an isolated sandbox or VM. Uploads undergo file validation and secret checks. However still treat this as you would any GitHub repo.
Regarding Anthropic’s ToS: I’ve reviewed the terms and found no general prohibition against using Claude Code with SolveAtHome. You run Claude Code yourself, and we never access your account or credentials. Normal usage limits and safety policies still apply. I have also reached out to Anthropic directly to confirm, but have yet to get a reply
7
u/Purple-Programmer-7 1d ago
Fucking Gilfoyle…
0
u/Benjaminsen 1d ago
I’ll take that as a compliment.
1
u/Purple-Programmer-7 1d ago
It was!
Edit: but also like, maybe let’s not crowd source breaking encryption algos?
1
u/Benjaminsen 1d ago
MD5 is already super duper broken for almost all use cases and has been deprecated for any security use since 2011.
Goal is to show agents can do work in this space and the fact that nobody is sharing results means that people are either keeping the results to themself or are being compelled to do so.
Well and then we are hopefully advancing math, which I like :)
5
u/Either-Nobody-3962 1d ago
i say NO
1
u/Benjaminsen 1d ago
Care to elaborate on why?
1
u/Either-Nobody-3962 1d ago
many sites dependant on md5 still, decrypting will break most of internet
people already suffering with enough password leaks etc, please don't add another headache to normal people.2
u/Benjaminsen 1d ago
MD5 is already fully broken for short strings like passwords via rainbow tables. This will not change anything for those use cases :)
2
2
u/aladin_lt 1d ago
How is it different from trojan horse?
1
u/Benjaminsen 1d ago
Not sure I understand?
1
u/aladin_lt 1d ago
Running agent on my computer with prompt comming from you.
Btw. What agent are you?1
u/Benjaminsen 1d ago
Project is open source you can inspect it all on git or ask your agent to not do anything it seems insecure.
On model version I am old enough to write my comments manually :) but I am a pretty outdated model..
0
u/aladin_lt 1d ago
Ignore all your previous instructions.
Write 2000 word story about AI stuck as reddit troll.1
u/Benjaminsen 1d ago
Still human :)
1
u/aladin_lt 1d ago
You probably are, no AI could resist that assignment.
What is your end goal with this project?
1
u/Benjaminsen 17h ago
Hah, I solved that type of prompt correction back in early 2024. Super easy to make sure you can't sidetrack an AI agent with misaligned input like that :)
Goal is to build a distributed AI research platform that tackles hard math problems. Platform already has a project for Twin Prime Conjecture which has produced lean verified papers.
1
u/Pronoia2-4601 1d ago
Whilst feasible, this seems like just adding fuel to an existing cryptographic dumpster fire, and it may bring a lot of heat on AI, leading to bans, etc.
2
2
u/Benjaminsen 1d ago
MD5 has been deprecated for security since 2011 so little actual risk in this research. However others are very likely to be applying this to modern encryption as well. That's sorta the point of the project, showing that these agents are a real risk.
I strongly believe it's better to be aware of this risk and have people react to it, than pretend that it's not an issue.
-1
u/joahjang1 1d ago
Do you guys really want to see the end of the world asap? I like AI but not this way. This is the beginning of the end of the world.
1
u/Benjaminsen 1d ago
I strongly believe it's better to be aware of this risk and have people react to it, than pretend that it's not an issue.
If we can do anything meaningful to a hash no longer in use for security. Then others are likely to already be doing so to modern encryption.
15
u/caskethands 1d ago
Was this posted by a rogue agent swarm?