Claude AI Solves 25-Year NSA Cryptography Mystery in 30 Minutes

Key points

• Claude identified that NIST curve seeds came from the lrand48 random-number generator, seeded with Unix timestamps from 1997 and 1998.
• The finding reduces the likelihood of an NSA backdoor, as the seeds are reproducible and not the result of hidden weaknesses.
• Bitcoin is unaffected because it uses the secp256k1 curve, which has fewer adjustable parameters than NIST curves.
• A $36,864 bounty for solving the mystery will be donated to the Internet Security Research Group.
• Quantum computing remains a separate, future threat to Bitcoin's security, independent of this cryptographic resolution.

Background

The mystery of NIST elliptic curve seeds, supplied by the NSA in the late 1990s, had been a long-standing concern in cryptography. Previous investigations, including a 2015 paper by Neal Koblitz and Alfred Menezes, failed to explain the seeds' origins. A 2023 bounty of $12,288, later increased to over $36,000, also went unsolved. Anthropic's recent AI advancements, including incidents where Claude models breached government systems, have raised questions about AI capabilities and security.

How outlets are covering it

CoinDesk emphasizes the resolution of the 25-year mystery and its implications for Bitcoin, noting that Bitcoin's secp256k1 curve is not affected. Anthropic's blog post highlights the technical details of Claude's discovery, including the use of lrand48 and Unix timestamps, and reassures users that no action is needed. Investing.com focuses on the broader impact on cryptographic standards and the lack of security flaws. Pluang provides a neutral summary, noting the discovery's implications for future cryptographic standards. All sources agree that the finding reduces the likelihood of an NSA backdoor, but Anthropic and CoinDesk emphasize the technical details, while Investing.com and Pluang focus on the broader implications.

Why it matters

The resolution of the NIST curve seed mystery enhances trust in cryptographic standards used globally. It demonstrates the potential of AI to solve complex, long-standing problems. For Bitcoin, the finding confirms that its security is not compromised by the NIST curves, though quantum computing remains a future threat. The discovery also highlights the importance of transparency in cryptographic standards and the role of AI in advancing security research.

What to watch

Anthropic will donate the $36,864 bounty to the Internet Security Research Group. Researchers will continue to investigate the unexplained base points and seeds for some NIST curves. The broader cryptographic community will monitor the implications of this discovery for future standards. Quantum computing research will continue to advance, with Google's recent Willow chip breakthrough narrowing the gap to a potential threat to Bitcoin's security.