Claude traces the origins of NIST’s curve seeds

Anthropic reports that an internal research model reconstructed the seeds behind NIST’s prime elliptic curves in under half an hour. The trail led to a familiar C random-number generator initialized with Unix timestamps. This explains how public curve parameters were generated; it does not recover private keys or break ECDSA. Some other parameter choices remain unexplained.

Anthropic · Oct 16, 2026

Why it matters

The investigation separates an unexplained design choice from an actual cryptographic weakness.

More context

The report describes recognizing lrand48 patterns and recovering generator state with lattice techniques. Read the reconstruction as research into provenance, including the remaining questions about base points.

Keep in mind

This is Anthropic’s reported research result; it is not evidence that deployed ECDSA keys are compromised.

Original read