Anthropic announced that its AI system Claude solved a 25‑year‑old mystery about the seeds used in the NIST ECDSA curves. The AI figured out the source in under 30 minutes and identified the exact method the NSA used to generate the values. The company is donating the $36,864 bounty that was offered for the answer to the Internet Security Research Group.
How Claude found the answer
Claude looked at the seed numbers and noticed that the top bits were always zero. That pattern matches the output of “lrand48,” a basic C library random number generator that only produces 31‑bit values. By testing timestamps from May 1997 to April 1998, Claude showed that the NSA had initialized lrand48 with a Unix timestamp in that window. The result means the seeds were not created by a secret cryptographic design, reducing the chance of a deliberate backdoor.
What this means for users
The finding clears up a long‑standing suspicion that the NIST curves might contain hidden weaknesses. For developers and anyone who relies on ECDSA signatures – from secure websites to digital wallets – the explanation restores confidence that the parameters were generated in a straightforward, public way. Independent verification of the claim is still pending, but the explanation removes the need to assume a hidden exploit.
Why it matters
For everyday users, the explanation reduces worries that widely used digital signatures might have hidden backdoors. It reassures developers that the ECDSA parameters are based on a simple, documented random process, not a secret NSA design. Independent cryptographers still need to confirm the analysis before it is fully accepted.
