Skip to content

Anthropic Says Claude Reconstructed Five NIST Elliptic-Curve Seeds Using a Timestamp-Initialized Generator

2 reports 2 reporting sources 1 day agoNew

Understand the event

AI overview

Anthropic said an internal Claude research model reconstructed how five NIST elliptic-curve seeds were generated in under 30 minutes, tracing them to the lrand48 pseudorandom number generator initialized with Unix timestamps between May 1997 and April 1998. Bounty organizer Filippo Valsorda independently verified the reconstruction. The work addresses a longstanding question about seeds the NSA generated for elliptic curves standardized by NIST in 2000. Consistently zero top bits pointed to lrand48’s 31-bit output, and Claude used LLL lattice reduction to recover generator states. Anthropic said the finding makes deliberate backdoors less likely; Qbit characterized it more strongly as showing the curves have no potential security vulnerabilities. Some skipped candidate curves, the B-163 seed and certain curve base points remain unexplained.

Generated by AI from reports · Updated 17 hours ago

Report timeline

Follow the reports to explore different sides of the event.

10/17
  1. Anthropic's Claude cracks a 25-year-old NSA cryptography mystery in under 30 minutes

    Anthropic's Claude solved the mystery of how the NSA generated seeds for elliptic curves standardized by NIST in 2000, reportedly in under 30 minutes. The seeds came from `lrand48`, initialized with a Unix timestamp between May 1997 and April 1998; systematically zero top bits pointed to the generator's 31-bit output. According to Anthropic, the finding makes deliberate backdoors less likely, and the company is donating the $36,864 bounty to the Internet Security Research Group.

  2. Anthropic reports Claude traced five NIST elliptic curve seeds to timestamps

    According to Anthropic, an internal Claude research model reconstructed how five NIST elliptic curve seeds were generated in under half an hour, with independent verification by bounty organizer Filippo Valsorda. Claude identified patterns consistent with lrand48, used LLL lattice reduction to recover generator states, and traced initialization values to Unix timestamps between May 1997 and April 1998. Some skipped candidate curves, the B-163 seed, and certain curve base points remain unexplained.

Tomorrow at 08:00, a briefing like this arrives in your inbox.

The same kind of briefing as the one above: a few stories worth reading. Free. Mail starts after you confirm, and every letter has a one-click unsubscribe. Read a past issue

Event heat trend

可比范围当前
10
Peak within comparable coverage
1910/18 00:00 (UTC+8)
近 24 小时变化
–

Trends compare the same continuously observed participants, which may cover fewer sources than current heat. Point or click to inspect hourly heat, or use left and right arrow keys.

Keep reading

Latest daily · Issue 25DeepSeek releases DeepSeek-V4.1-Flash-1017 on its website, app, and API

Trending now

  1. 1DeepSeek Releases V4.1-Flash-1017, Now Available on Ollama Cloud With US Hosting
  2. 2Meta Removes Business Terms Language That Raised Website Scraping and AI Training Concerns
  3. 3Google DeepMind Says Four Gemini 4 Argon Agents Beat Minecraft Without Human Help
  4. 4Google Launches Gemini 4 Argon Globally, Expands Paid Access as Benchmark Results Vary