ML Street Talk

Encrypted Reasoning Is Not a Secret: A Small Model Will Read the Big One's Thinking Out Loud

Frontier models hand the user an encrypted copy of their thinking along with the answer, but that ciphertext can be replayed verbatim into a smaller model from the same family, which will simply read it out — opening the door to privacy leaks, jailbreaks, prompt injection, and even a channel for distilling capability.