AIToday
Large Language ModelsAI Safety & AlignmentTHE DECODERPublished: Oct 18, 2026, 01:00 JST

Claude cracks 25-year-old ECDSA seed mystery, finds lrand48

Claude cracks 25-year-old ECDSA seed mystery, finds lrand48

3 Key Points

  1. What happened

    Anthropic's Claude solved a 25-year-old cryptography mystery in under 30 minutes, finding the unexplained seeds behind NIST's ECDSA curves came from 'lrand48', a simple C random number generator initialized with a Unix timestamp between May 1997 and April 1998.

  2. Why it matters

    According to Anthropic, the finding makes deliberate backdoors in the widely used digital signature standard far less likely, resolving suspicion that had fueled a bounty and amateur sleuthing efforts.

WHO IT HITSThe finding matters for security engineers and cryptographers who rely on ECDSA for digital signatures, and for anyone who had questioned whether the NIST curves contained hidden weaknesses.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, in your inbox every morning.

Context & Analysis

NIST standardized several curves in the ECDSA standard back in 2000, with the NSA supplying the seeds used to generate the curve parameters. The lack of explanation for those starting values fueled suspicion of possible backdoors, and the mystery attracted a bounty and amateur sleuthing efforts. Even the late NSA employee Jerry Solinas suggested the seeds were a hash of a humorous phrase, but that turned out to be wrong.

Claude spotted the pattern because 'lrand48' only outputs 31 bits, and the top bits in some seeds were systematically zero. That detail allowed the model to identify the source as a simple C random number generator initialized with a Unix timestamp between May 1997 and April 1998. According to Anthropic, this makes deliberate backdoors less likely.

FAQ
What exactly did Claude figure out?
Claude found that the seeds behind NIST's ECDSA curves came from 'lrand48', a simple C random number generator, initialized with a Unix timestamp between May 1997 and April 1998.
Why was there suspicion of backdoors in the first place?
The NSA supplied the seeds with zero explanation, and no one knew how they were created. The mystery even attracted a bounty and amateur sleuthing efforts.
What happened to the bounty?
Anthropic is donating the $36,864 bounty to the Internet Security Research Group.

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articleEight states sue OpenAI over ChatGPT child-safety harms