Claude traced NIST's mysterious ECDSA curve seeds to a 1990s random number generator (anthropic.com)
Zero bits in the top of several published seeds were the tell: they matched lrand48, which returns only 31 bits of a 48-bit state. Claude brute-forced the hidden bits for the binary curves and used lattice reduction for the prime ones, dating the prime-curve seeding to between May 1997 and April 1998.
The HN thread skipped the cryptography and argued about who is allowed to run this kind of analysis.
Sign in to save