Claude reveals ECDSA curve origins

Why it matters

A long-standing question in cryptography has been resolved: how the seed values underlying the NIST elliptic-curve standards were originally produced. These seeds, supplied by the NSA when the curves were adopted by NIST as part of the Digital Signature Standard, came with no explanation, fueling suspicion that the curves might contain deliberate weaknesses. The popular story held that the seeds were hashes of a humorous passphrase, an account attributed to a former NSA employee but never verified. Anthropic's Frontier Red Team reports that Claude, asked the question without the passphrase hint, instead reasoned about how the generating software likely worked, identified the output of a standard C library pseudorandom generator, and recovered its internal state using lattice methods. The seeds turned out to be simple generator outputs initialized from a Unix timestamp, reproducible by anyone. The team emphasizes this is not a cryptographic break; rather, it makes backdoors in the curves far less plausible and closes a chapter of speculation documented by Neal Koblitz and Alfred Menezes.