Cryptography Rarely Fails Because of the Math

Cryptography Rarely Fails Because of the Math

By Jonathan Felten,
Publication Date: 2026-10-14 15:00:00

In 26 years of building security and cryptographic services at Cisco, I’ve worked through a long list of defects in protocols and systems. Only a small minority of the cryptographic failures I’ve seen came from someone breaking the algorithm. Far more often, systems fail in the gap between fix available and fix deployed.

That gap is the last mile of trust. It’s where a patch published upstream reaches a global product portfolio months later. It’s where an embedded device ships with a cryptographic library that will never be updated in its service life. It’s where a fix moves cleanly through four layers of a supply chain and quietly stalls at the fifth.

The math is the part we’ve mostly solved. Logistics are the part we haven’t.

Two Forces, Opposite Ends

Two forces are now stress-testing the last mile at the same time.

On the discovery side, AI has widened the gap between finding bugs and fixing them. While frontier models have sharply lowered the barrier to finding…