Unelicitable Backdoors in Language Models via Cryptographic Transformer Circuits

In this paper, we introduce a novel class of backdoors in transformer models, that, in contrast to prior art, are unelicitable in nature.