Themata.AI
Themata.AI

Popular tags:

#developer-tools#ai-agents#discussion#trending#llms#ai-ethics#claude#code-generation#ai-safety#openai

AI is changing the world. Don't stay behind. Clear summaries, community insight, delivered without the noise. Subscribe to never miss a beat.

© 2026 Themata.AI • All Rights Reserved

Archive

|

Topics

|

Privacy

|

Cookies

|

Contact
claudecryptographyai-safetyresearch-findings

Claude reveals ECDSA curve origins

Claude reveals ECDSA curve origins

anthropic.com

October 16, 2026

12 min read

🔥🔥🔥🔥🔥

69/100

Summary

Anthropic says Claude identified how the unexplained seed values behind major NIST elliptic-curve cryptography standards were generated. In under half an hour in October 2026, an internal research model determined that seeds for NIST P-192, P-224, P-256, P-384 and P-521 were outputs of the legacy C-library lrand48 pseudorandom-number generator initialized with Unix timestamps, rather than hashes of secret phrases or other cryptographic algorithms. NIST adopted these curves in 2000 for the FIPS 186-2 Digital Signature Standard, while the NSA had supplied their seed values without explaining their provenance. Anthropic reconstructed timestamps from May 1997 through April 1998 and the candidate positions that reproduce ten prime-curve and binary-curve seeds; P-256, for example, was the 1,842nd 20-byte candidate from its run. Anthropic says the result is not a cryptographic break or a newly discovered weakness, and that the simple reproducible process makes intentional backdoors less plausible. Claude also traced base points for P-192 and five ANSI X9.62 example curves to the FreeLIP random-number generator, but could not explain base points for P-224, P-256, P-384, P-521 or NIST binary curves. B-163 remains unexplained. Anthropic will donate the $36,864 NIST elliptic-curve seeds bounty to the Internet Security Research Group.

Key Takeaways

  • Anthropic says Claude traced the seeds of major NIST elliptic curves to lrand48 outputs seeded with Unix timestamps from 1997 and 1998.
  • NIST adopted ECDSA elliptic curves in 2000, but the NSA had not publicly explained the provenance of their published seed values.
  • Anthropic says reproducing the seeds from a simple timestamp-seeded legacy PRNG does not reveal a cryptographic weakness and makes deliberate curve backdoors less plausible.
  • The P-256 seed was generated as candidate 1,842 in its reconstructed lrand48 run, while some viable candidate curves were skipped for unknown reasons.
  • Claude reproduced base points for P-192 and five ANSI X9.62 example curves using FreeLIP generator seeds, but several NIST base-point origins and the B-163 seed remain unexplained.

What the discussion said

Commenters were impressed that Claude turned a small structural clue in decades-old NIST elliptic-curve seeds into a concrete reconstruction: the values appear to come from a commonplace C random-number generator initialized from timestamps, not the mysterious hash process many had assumed. For many, the striking part was not that AI broke cryptography, but that it closed a long-running provenance puzzle cheaply and quickly enough to puncture a generation of curve-backdoor speculation. Readers also stressed that reconstructing the generation process is not the same as proving every discarded candidate was benign, though the limited timestamp search space makes a deliberately planted, exclusive exploit look implausible. The sharper AI debate was over who gets to use capabilities like this. Several commenters see safety gates and privileged access as a growing divide: labs and approved partners may investigate sensitive security or biology questions while independent researchers and tiny startups hit refusals. Others pushed back that this exact investigation was available to ordinary Claude users, and argued that verified security research is precisely the kind of work providers have incentives to support. A smaller thread questioned how credit should work when a model synthesizes insights absorbed from an untraceable mass of prior research; the response was that human scholarship works similarly, while the demonstrated solution remains a meaningful contribution.

Where opinion split

The central dispute is whether frontier-model safeguards create an unacceptable research moat. Critics argue that providers can reserve powerful dual-use investigation for themselves and state-aligned partners, leaving public-interest researchers unable to test dangerous systems; defenders say Claude was not blocked on this task and that responsible, authenticated security access can enable disclosure without opening abuse channels.

Read original article

Community Sentiment

Positive

Positives

  • Claude converted a simple bit-pattern observation into a reproducible account of how prominent ECDSA seeds were generated, showing real value for cryptographic forensics rather than flashy benchmark theater.
  • The apparent timestamp-plus-lrand48 explanation sharply reduces the plausibility of a deliberately selected, creator-only weakness, because the historical search budget offered far too little freedom for a strong hidden trapdoor.
  • Readers see publicizing hard, previously unresolved research problems as a healthier measure of model progress than polished tasks already saturated in training data.
  • The result gives cryptographers a practical starting point for broader statistical checks of curve-generation procedures instead of leaving the provenance debate permanently speculative.

Concerns

  • Safety refusals are seen as a widening capability moat: model vendors and favored institutions may pursue sensitive security or life-science research while independent experts cannot even ask for comparable access.
  • Some commenters warn that matching published seeds proves their production mechanism, not that officials did not generate and discard many alternatives until a preferred curve appeared.
  • The achievement raises unresolved attribution concerns because a model cannot identify the researchers and papers whose ideas shaped its training, making credit diffuse even when its final chain of reasoning is novel.
  • The fact that an obvious generator fingerprint escaped cryptographic scrutiny for decades unsettles readers, who see it as an embarrassing reminder that human review can miss simple hypotheses.

Related Articles

Designing more efficient quantum circuits with Claude

Designing more efficient quantum circuits with Claude

Oct 16, 2026

Learning more about Claude's mathematical capabilities

Learning more about Claude's mathematical capabilities

Aug 10, 2026

When AI builds itself

When AI Builds Itself: Our progress toward recursive self-improvement

Jun 4, 2026

Patterns and problems in multiagent systems

Patterns and problems in emerging multi-agent systems

Aug 16, 2026

Detecting and preventing distillation attacks

Detecting and Preventing Distillation Attacks

Feb 23, 2026