Anthropic's Claude AI reconstructed how seed values for several widely used NIST elliptic curves were originally generated, resolving a cryptography question that had attracted suspicion for more than two decades. The AI identified a process involving the C library's lrand48 generator and Unix timestamps, with the P-256 curve requiring 1,842 iterations to reproduce the standardized seed. The seeds have been significant because the U.S. National Security Agency supplied them without a convincing public account of the selection method, prompting researchers to question whether a secret process could hide mathematical advantages. Elliptic-curve signatures underpin many crypto account security systems, including passkeys and hardware-backed authentication, making the provenance of these parameters important for user confidence.
Claude Identifies lrand48 Generator as Seed Source
Claude worked backward from published values and found an ordinary pseudorandom generation procedure. For P-256, the model took 1,842 iterations through candidate outputs to reproduce the standardized seed. The research also examined P-192, P-224, P-384 and P-521 curves. The standards had published seed values without explaining how the numbers were chosen, leaving researchers to speculate about potential hidden mathematical advantages in the selection method.
Anthropic Clarifies No Vulnerability Found in Affected Curves
Anthropic states the research does not reveal an attack on P-256 or other affected curves. Recovering the seed-generation history is not equivalent to breaking a private key, proving a curve vulnerability, or establishing that every implementation is safe. The company says there is no urgent corrective action required. The work helps researchers understand a forgotten design decision rather than demonstrating AI defeating encryption.
FAQ
What did Claude discover about NIST elliptic curve seeds?
Claude reconstructed the seed generation process for NIST elliptic curves, identifying that the U.S. National Security Agency used the C library's lrand48 generator and Unix timestamps. For P-256, the process required 1,842 iterations to reproduce the standardized seed.
Does this discovery mean the elliptic curves are vulnerable?
No. Anthropic states the research does not reveal an attack on P-256 or other affected curves. Recovering the seed-generation history is not the same as breaking a private key or proving a vulnerability exists.
Why does this matter for crypto users?
Elliptic-curve signatures underpin many crypto account security systems, including passkeys and hardware-backed authentication. Understanding how the seed values were generated improves confidence in the standards without changing the mathematics used by existing products.
