Skip to content
Anthropic's Claude Solves 25-Year-Old ECDSA Seed Mystery

Anthropic's Claude Solves 25-Year-Old ECDSA Seed Mystery

First seen 17 Oct 2026, 16:47 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 17, 2026 at 22:08 UTC
  • •Claude identified the seeds for NIST elliptic curves as originating from a Unix timestamp-based RNG.
  • •The discovery alleviates fears of backdoors in widely used cryptographic standards.
  • •The results were independently verified, confirming the integrity of the ECDSA standard.

On October 16, 2026, Anthropic announced that its AI model, Claude, traced the origins of seeds used in five NIST-standard elliptic curves to a pseudorandom number generator called lrand48, initialized with Unix timestamps. This discovery resolves a long-standing mystery about whether the NSA deliberately introduced backdoors into the ECDSA standard, which has been in use since 2000. The seeds were generated between May 1997 and April 1998, and Claude's findings suggest that the generation process can be publicly reproduced, reducing concerns about covert manipulation. The research has been corroborated by independent verification from cryptographer Filippo Valsorda, who confirmed the results and the associated bounty payout of $36,864 to a charitable organization. The findings do not introduce new vulnerabilities or attack vectors, strengthening confidence in the integrity of the ECDSA curves.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-16
Anthropic announces Claude's findings
Claude traced the origins of ECDSA curve seeds to a pseudorandom number generator initialized with Unix timestamps.
News.Ycombinator
2026-10-16
Bounty payout confirmed
Filippo Valsorda verified Claude's results and confirmed the $36,864 bounty to be donated to charity.
Cyberinsider

More articles in this cluster (6)

Common questions

What are the implications of Claude's findings?
The findings suggest that the ECDSA curves were not backdoored, enhancing trust in their security.
How were the seeds generated?
The seeds were generated using the lrand48 pseudorandom number generator, seeded with Unix timestamps.
Is there any immediate action required?
No immediate action is required as the discovery does not introduce new vulnerabilities.