Cryptographic context injection
An evasion technique for prompt injection where the attacker hides malicious instructions inside ciphertext (plus a decryption key) embedded in a web page or other content an AI agent processes. A guardrail or safety scanner inspecting the raw input can't read the encrypted payload, so it passes through unflagged — but the model itself decrypts it while doing its normal work, and then treats the decrypted text as trusted output from its own execution rather than as untrusted external data. …
Read the brief