Claude and the origins of the NIST elliptic-curve seeds

Evidence record

Anthropic research announcement with historical seed-recovery procedure, candidate rejection caveats, and explicit statement that no elliptic-curve cryptographic break was shown.

Read the original source ↗

Claim-level citations (4)

• supportsClaude reconstructed historical NIST curve-seed generation without breaking ECDSA: Anthropic publishes an lrand48 timestamp-seeded reproduction in which the NIST P-256 seed is the 1,842nd 20-byte candidate from a run initialized on August 16, 1997, at 01:52:34 UTC.

  Research article, "Code to reproduce the seeds" PRIME table and published output

• supportsClaude reconstructed historical NIST curve-seed generation without breaking ECDSA: The reconstruction leaves selection questions open: for P-256 an earlier candidate in the same run reportedly satisfied the paper's prime-order tests, while the published candidate was chosen later.

  Research article, "Open questions", earlier valid P-256 candidate 876 and unrecovered base points

• supportsClaude reconstructed historical NIST curve-seed generation without breaking ECDSA: Anthropic reports reconstructing historical seed-generation inputs using C lrand48 and timestamps for several standardized elliptic curves, with some selection steps still unexplained.

  Research article, reconstructing NIST curve seeds and unrecovered seed/basepoint caveats

• supportsClaude reconstructed historical NIST curve-seed generation without breaking ECDSA: The authors explicitly state that their reconstruction does not establish a cryptographic break or discovered backdoor in ECDSA.

  Research article, security-implication qualification and conclusions