Claude traces the origins of NIST's ECDSA curve seeds
An AI-assisted investigation connects opaque cryptographic-standard parameters to a reproducible weak-PRNG process, reducing some backdoor concerns while leaving specific curve-selection questions open.
Logged at IST: 2026-10-17 09:17 IST
What it is: Anthropic's account of how Claude traced the origins of NIST ECDSA curve seeds, shared by cryptographer Steve Weis, whose earlier investigation documented the mystery.
Gist: Anthropic reports that Claude identified the NIST prime-curve seeds as outputs of the lrand48 pseudorandom-number generator initialized from Unix timestamps. It also traced some older ANSI X9.62 base points to a generator used in the FreeLIP arithmetic package. Anthropic says these findings are not a cryptographic break and make deliberate backdooring of the seeds less plausible. Questions remain: some viable candidate curves appear to have been skipped, and the origins of several base points are still unexplained.
Weis's 2023 investigation captured the uncertainty before this result, including the widely repeated but incorrect lost-passphrase story; Matthew Green's 2015 article provides historical context for the distrust surrounding NIST's curve parameters.
Why it matters: A memorable example of AI-assisted cryptanalytic archaeology: recognizing the fingerprints of a weak 1990s PRNG helped resolve a decades-old provenance question, while leaving concrete details open to further scrutiny.
Sources: