CipherBank: Exploring the Boundary of LLM Reasoning Capabilities through Cryptography Challenges
On the map: LLM reasoning → Reasoning for agents, planning and code
Abstract (arXiv)
Large language models (LLMs) have demonstrated remarkable capabilities, especially the recent advancements in reasoning, such as o1 and o3, pushing the boundaries of AI. Despite these impressive achievements in mathematics and coding, the reasoning abilities of LLMs in domains requiring cryptographic expertise remain underexplored. In this paper, we introduce CipherBank, a comprehensive benchmark designed to evaluate the reasoning capabilities of LLMs in cryptographic decryption tasks. CipherBank comprises 2,358 meticulously crafted problems, covering 262 unique plaintexts across 5 domains and 14 subdomains, with a focus on privacy-sensitive and real-world scenarios that necessitate encryption. From a cryptographic perspective, CipherBank incorporates 3 major categories of encryption methods, spanning 9 distinct algorithms, ranging from classical ciphers to custom cryptographic techniques. We evaluate state-of-the-art LLMs on CipherBank, e.g., GPT-4o, DeepSeek-V3, and cutting-edge reasoning-focused models such as o1 and DeepSeek-R1. Our results reveal significant gaps in reasoning abilities not only between general-purpose chat LLMs and reasoning-focused LLMs but also in the performance of current reasoning-focused models when applied to classical cryptographic decryption tasks, highlighting the challenges these models face in understanding and manipulating encrypted data. Through detailed analysis and error investigations, we provide several key observations that shed light on the limitations and potential improvement areas for LLMs in cryptographic reasoning. These findings underscore the need for continuous advancements in LLM reasoning capabilities.
Key facts. Cited by 11 papers in the map (data through 7 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 32 of its 55 references that are in the map. First posted on arXiv 27 Apr 2025.
Builds on
32 of 55 references.
Closest ancestors · 2
Same direction, newest first
- 2024OpenAI o1 System Card21 Dec
- 2024When "Competency" in Reasoning Opens the Door to Vulnerability: Jailbreaking LLMs via Novel Complex Ciphers16 Feb
Other references · 30
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,146
- 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,203
- 2024Qwen2.5 Technical Reportcited by 4,713
- 2024GPT-4o System Cardcited by 4,467
- 2021Program Synthesis with Large Language Modelscited by 3,509
- 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,175
- 2023MMBench: Is Your Multi-modal Model an All-around Player?cited by 2,105
- 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,970
- 2024Mixtral of Expertscited by 1,785
- 2022Challenging BIG-Bench Tasks and Whether Chain-of-Thought Can Solve Themcited by 1,767
18 more
- 2023Enhancing Chat Language Models by Scaling High-quality Instructional Conversationscited by 825
- 2024DeepSeek-V3 Technical Reportcited by 724
- 2024BigCodeBench: Benchmarking Code Generation with Diverse Function Calls and Complex Instructionscited by 527
- 2023GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Ciphercited by 401
- 2023Low-Resource Languages Jailbreak GPT-4cited by 290
- 2024Large Language Models for Mathematical Reasoning: Progresses and Challengescited by 283
- 2024LiveBench: A Challenging, Contamination-Limited LLM Benchmarkcited by 242
- 2022FOLIO: Natural Language Reasoning with First-Order Logiccited by 233
- 2024ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMscited by 197
- 2024Debug like a Human: A Large Language Model Debugger via Verifying Runtime Execution Step-by-stepcited by 123
- 2024MathBench: Evaluating the Theory and Application Proficiency of LLMs with a Hierarchical Mathematics Benchmarkcited by 103
- 2024DebugBench: Evaluating Debugging Capability of Large Language Modelscited by 74
- 2024KOR-Bench: Benchmarking Language Models on Knowledge-Orthogonal Reasoning Taskscited by 67
- 2024A Systematic Survey on Large Language Models for Algorithm Designcited by 65
- 2024Are Your LLMs Capable of Stable Reasoning?cited by 65
- 2024UniDebugger: Hierarchical Multi-Agent Framework for Unified Software Debuggingcited by 35
- 2024Causal Evaluation of Language Modelscited by 18
- 2024HDFlow: Enhancing LLM Complex Problem-Solving with Hybrid Thinking and Dynamic Workflowscited by 13
Built on by
Citing papers per year: 2025: 8; 2026: 3.
11 papers.
- 2025Can One Domain Help Others? A Data-Centric Study on Multi-Domain Reasoning via Reinforcement Learningcited by 17
- 2025OpenDataArena: A Fair and Open Arena for Benchmarking Post-Training Dataset Valuecited by 15
- 2025REST: Stress Testing Large Reasoning Models by Asking Multiple Problems at Oncecited by 12
- 2025IDEAL: Data Equilibrium Adaptation for Multi-Capability Language Model Alignmentcited by 8
- 2025Should LLM Safety Be More Than Refusing Harmful Instructions?cited by 6
- 2025Harmful Prompt Laundering: Jailbreaking LLMs with Abductive Styles and Symbolic Encodingcited by 5
- 2026Tracing the Roots: A Multi-Agent Framework for Uncovering Data Lineage in Post-Training LLMscited by 2
- 2025CryptoQA: A Large-scale Question-answering Dataset for AI-assisted Cryptographycited by 1
- 2025Can Transformers Break Encryption Schemes via In-Context Learning?cited by 0
- 2026CESBench: Benchmarking Large Language Models on Cryptographic Engineering Security for IoT Devicescited by 0
- 2026Witness: Discovery, Deciphering, and Epiphany in Interactive Puzzle Environmentscited by 0
- 2026Witness: Discovery, Deciphering, and Epiphany in Interactive Puzzle Environments26 Sep 2026
- 2026CESBench: Benchmarking Large Language Models on Cryptographic Engineering Security for IoT Devices18 Sep 2026
- 2026Tracing the Roots: A Multi-Agent Framework for Uncovering Data Lineage in Post-Training LLMs12 Apr 2026
- 2025OpenDataArena: A Fair and Open Arena for Benchmarking Post-Training Dataset Value16 Dec 2025
- 2025CryptoQA: A Large-scale Question-answering Dataset for AI-assisted Cryptography2 Dec 2025
- 2025Harmful Prompt Laundering: Jailbreaking LLMs with Abductive Styles and Symbolic Encoding13 Sep 2025
- 2025Can Transformers Break Encryption Schemes via In-Context Learning?13 Aug 2025
- 2025Can One Domain Help Others? A Data-Centric Study on Multi-Domain Reasoning via Reinforcement Learning23 Jul 2025
- 2025REST: Stress Testing Large Reasoning Models by Asking Multiple Problems at Once14 Jul 2025
- 2025Should LLM Safety Be More Than Refusing Harmful Instructions?3 Jun 2025
- 2025IDEAL: Data Equilibrium Adaptation for Multi-Capability Language Model Alignment19 May 2025
Similar, not cited
Close in wording, no citation either way
- 2025Benchmarking Large Language Models for Cryptanalysis and Side-Channel Vulnerabilities
- 2025Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers
- 2025All Code, No Thought: Current Language Models Struggle to Reason in Ciphered Language
- 2025CryptoX : Compositional Reasoning Evaluation of Large Language Models
- 2026Evaluating Large Language Models for Symbolic Security Protocol Analysis
- 2025When Intelligence Fails: An Empirical Study on Why LLMs Struggle with Password Cracking
- 2025Rethinking Reasoning: A Survey on Reasoning-based Backdoors in LLMs
- 2025Token-Efficient Prompt Injection Attack: Provoking Cessation in LLM Reasoning via Adaptive Token Compression