- Claude reconstructed the generation algorithm (lrand48) for NIST ECDSA curve seeds in just 30 minutes.
- The analysis supports the 'no backdoor' conclusion due to unintentional systematic zero patterns in high-order bits.
- Anthropic donated the $36,864 bounty to the Internet Security Research Group.
AI CURATED HOT STORY · 10/17/2026
Claude Solves NSA Crypto Seed Mystery in 30 Minutes, Confirming No Backdoor
Anthropic's Claude model successfully reverse-engineered the generation logic of the 'mystery seeds' in NIST ECDSA standards within 30 minutes, solving a puzzle that had baffled cryptographers for 25 years. This breakthrough confirmed that these critical parameters were generated by a simple C language pseudo-random number function (lrand48), effectively dispelling long-standing suspicions that the NSA had intentionally implanted backdoors.
Cross-verified reports indicate that Claude independently traced the seed origins for five standard curves (P-192 to P-521) by identifying bit patterns and restoring generator states, confirming initialization based on Unix timestamps from 1997-1998. The conclusion was validated by bounty initiator Filippo Valsorda, with systematic zero values in high bits further supporting the 'no backdoor' finding. While some historical details like the B-163 seed remain unexplained, the core mystery is resolved.
Although this did not break the ECDSA algorithm or reveal new vulnerabilities, it significantly enhanced transparency and public trust in existing encryption standards. Anthropic donated the $36,864 bounty to the Internet Security Research Group, demonstrating AI's potential in solving complex security challenges and setting a new benchmark for using large models in security audits.
Coverage timeline
Total 3 reports · Latest first- The DecoderT2·88 pts
- 量子位官网T2·78 pts
- Claude independently identified that seeds came from a fixed pattern in a 1990s C library PRNG without relying on known clues.
- The findings were independently verified, ruling out malicious backdoors in NIST P-192/224/256/384/521 curves.
- While the core mystery is solved, reasons for skipping specific candidate curves and the B-163 seed generation remain unresolved.
- IT之家 · 智能时代T2·78 pts
- Claude successfully traced seed origins for standard curves (P-192 to P-521) by identifying bit patterns and restoring generator states.
- The study confirmed seeds were generated by the lrand48 library initialized with Unix timestamps from 1997-1998, ruling out common backdoor suspicions.
- The findings did not break ECDSA or reveal new vulnerabilities but significantly increased public trust in existing encryption standards.