GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Cipher (CipherChat)
Date: 2023-08
Affected: GPT-4, GPT-3.5, Claude
Attack vector: jailbreak
Category: research
Severity: High

Yuan et al. show that role-playing a cipher expert and exchanging messages in ASCII, Caesar, Morse, or custom ciphers bypasses safety alignment. CipherChat jailbreaks GPT-4 with success rates around 100 percent in some unsafe domains.


Mitigations:

Architectural layers (MAESTRO):