Mathematics for systems security

Overview

Mathematics for Systems Security is a hackathon organized by the Software Engineering Club (DEV) that challenges participants to develop innovative solutions in cryptography and secure AI. The competition focuses on creating robust mathematical algorithms to ensure secret encryption or secure secret sharing, with all submissions undergoing rigorous security testing. The goal is to identify algorithms that effectively cover vulnerabilities and minimize attack surfaces. Participants can choose between two distinct tracks: the Cryptographer track and the AI Pipeline Secret Sharing track. The Cryptographer track involves developing a cryptographic algorithm that securely encrypts a master key, specifically designed to prevent side-channel attacks. This track emphasizes mathematical rigor and originality, encouraging the use of low-level languages for optimal performance. The AI Pipeline Secret Sharing track focuses on creating a private AI agent where inputs are encrypted, thereby preventing APIs from accessing master keys. This ensures secure communication with the agent and prevents the storage of compromised data on host providers' servers. This track encourages the use of LLM APIs and may incorporate advanced encryption techniques like Fully Homomorphic Encryption. Non-cash prizes will be awarded across various categories, including certificates of participation for all entrants, and specific awards for the best cryptographic algorithm, best AI pipeline project, and an overall best project. Judging criteria are tailored to each track, assessing aspects such as cryptoanalysis resilience, uniqueness, vulnerability mitigation, and user experience.

What to build

Participants must choose one of two tracks: AI pipeline secret sharing track: - Use APIs that grant access to LLMs (e.g., AWS Bedrock, OpenAI, Gemini) and are given by host providers. - Guarantee secure communication with the agent by encrypting inputs to the agent. - Ensure the master key remains unknown to the agent to prevent storage of potentially compromised data on the host provider's server. - Participants may use high-level languages such as Python while maintaining low-level execution of mathematical encryption. Cryptographer track: - Create a cryptographic algorithm that securely encrypts the master key. - The algorithm must prevent side-channel attacks. - For extra points, include number theory and linear algebra. - To gain an extra point, utilize low-level languages (e.g., Rust or C) to minimize performance overhead and vulnerability windows.

Prizes

Key dates

• Deadline2026-11-01T17:00:00+03:00

Eligibility

Participants must be above the legal age of majority in their country of residence. Only students are eligible to participate. Companies and professional organizations are excluded. Participation is open to all countries/territories, excluding standard exceptions.

How to enter

1. Join the hackathon on Devpost.
2. Choose either the Cryptographer track or the AI pipeline secret sharing track (participants may sign up in one track only).
3. Develop a project according to the chosen track's requirements.
4. Submit the project by the deadline.

Submission requirements

• **For the Cryptographer track:** - Include clean LaTeX and formatting in project submissions, along with explanations for the created algorithm and how it protects the secret, as well as the vulnerability windows it mitigates. All included in the project's description. - A video uploaded via YouTube is heavily recommended. - Participants MAY NOT use pre-existing algorithms to encrypt plaintext. - Optional: Utilize the algorithm in an applicable environment (for an extra point). **For the AI pipeline track:** - Include a video demonstration of the agent being fed encrypted inputs and how the input remains encrypted (optional but heavily recommended). - Optional but not enforced: The participant may use FHE (Fully homomorphic encryption). - Participants may use pre-created cryptographic algorithms and secret-sharing mechanisms such as SSS (Shamir's secret sharing). - To gain a strong point on visual aesthetic, include a website hosted on the loopback machine or include a TUI (Terminal User Interface) to interact with the agent.

Judging criteria

• Cryptographer track: - Survives rigorous cryptoanalysis (3 points) - Shows distinction from other pre-made algorithms (Uniqueness) (2 points) - Minimizes most attack surface area (3 points) - Clean LaTeX formatting (2 points) **AI pipeline track:** - Clean UI with straightforward UX (3 points) - Thorough and straightforward video submissions (2 points) - Evidence of using host provided LLM agents via any API (2 points)