Team Involving Prof. Jintai Ding’s PhD Student Hao Guo Breaks VDOO’s Highest Security Level!

23 Sep 2026

On 20 September, the Institute of Commercial Cryptography Standards (ICCS) published the Round 1 candidate list for the Next-Generation Commercial Cryptography (NGCC) global call. The following day, a team involving Hao Guo, a PhD student supervised by Prof. Jintai Ding, Director of the Post-Quantum Migration Interdisciplinary Laboratory (PQC-X) at XJTLU, broke the highest security level of VDOO, one of the Round 1 candidates, and reported an effective attack that reduces the attack complexity from 2^512 to 2^379, a reduction of 133 bits. According to the research team, this is the first publicly released security analysis of a Round 1 candidate since the public review began.

Prof. Jintai Ding shared the result on social media shortly after it was announced. He said he expected more exciting results of this kind to emerge in the coming months as the NGCC public review progresses. He was particularly surprised that the first attack result in the review was achieved by human researchers rather than AI, adding: “Cheers for humans!”

Organised by ICCS, NGCC’s first round includes 84 public-key candidates: 34 digital signature algorithms, 41 key encapsulation mechanisms and nine key exchange algorithms. The first-round evaluation is expected to conclude in June 2027, with public review continuing during the evaluation period.

ICCS has established two mailing lists for public review, covering public-key cryptography and cryptographic hash functions. Researchers and other interested parties can use these channels to discuss the security, performance and other technical characteristics of the candidate algorithms.

By Qinru Liu

23 Sep 2026