---
type: "post"
id: "claude-reveals-ecdsa-curve-origins-analysis-d4ef04"
slug: "claude-reveals-ecdsa-curve-origins-analysis-d4ef04"
title: "Claude reveals ECDSA curve origins"
description: "Anthropic reports that Claude traced the origins of five NIST elliptic-curve seed parameters to lrand48, a C library pseudorandom number generator initialized with Unix timestamps."
retrieval_nugget: "Anthropic reports that Claude traced the origins of five NIST elliptic-curve seed parameters to lrand48, a C library pseudorandom number generator initialized with Unix timestamps."
published_at: "2026-10-17"
updated_at: "2026-10-17"
record_date: "2026-10-17"
date_kind: "published_at"
topics: ["claude","anthropic"]
source_urls: ["https://www.anthropic.com/research/ecdsa-curve-origins"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "post:claude-reveals-ecdsa-curve-origins-analysis-d4ef04"
status: "published"
visuals: []
editorial_provenance: {"schema_version":"newruntime-editorial-copy-v1","content_status":"source_grounded_final","final_copy_sha256":"sha256:89234c8f613d25debf8b3386e0a85b6f0d6916da3f37a7101cab3cc5a1840239","reviewed_at":"2026-10-17T08:03:26.748Z","source_evidence_count":1,"verified_claim_count":3,"site_analysis_schema_version":"newruntime-site-analysis-v1","site_object_kind":"field_note","observed_fact_count":3,"implication_count":3,"watch_condition_count":2,"related_record_count":0}
analysis: {"schema_version":"newruntime-site-analysis-v1","object_kind":"field_note","thesis":"Model-assisted cryptanalysis can make progress on historical provenance questions by testing computational hypotheses rather than following inherited rumors.","observed_facts":[{"text":"Anthropic says Claude identified lrand48, initialized with Unix timestamps, as the generator behind the NIST P-192, P-224, P-256, P-384 and P-521 seed parameters.","source_urls":["https://www.anthropic.com/research/ecdsa-curve-origins"]},{"text":"The source says the prime-curve initialization timestamps fall between May 1997 and April 1998 and that the seed reconstruction is reproducible.","source_urls":["https://www.anthropic.com/research/ecdsa-curve-origins"]},{"text":"Anthropic explicitly says the finding is not a cryptographic break or a new ECDSA weakness, and that no action is required.","source_urls":["https://www.anthropic.com/research/ecdsa-curve-origins"]}],"mechanism":"Claude tested output patterns from older pseudorandom generators, recovered candidate states from seed bits, and checked whether the states mapped back to timestamp initialization.","why_now":"Anthropic presents a concrete resolution to a decades-old question about the unexplained provenance of widely used NIST curve parameters.","implications":["The result offers a reproducible explanation that makes deliberate backdoor selection less plausible, according to Anthropic.","It is an example of model-assisted analysis of a specific historical cryptographic question, not evidence of general cryptanalytic capability.","The source leaves unanswered why other suitable outputs were not selected."],"evidence_boundary":"The account is Anthropic’s description of its internal research model’s work; the supplied source excerpt does not establish external replication or explain why other suitable candidate values were rejected.","watch_conditions":["Look for independent reproduction of the seed and timestamp reconstruction, and for an answer to why those outputs were selected.","Do not treat the origin of associated base points as settled by the seed result alone."],"related_records":[],"new_branch_reason":"No prior New Runtime record is supplied for this specific provenance finding; this begins a distinct analytical record about the reported seed reconstruction and its bounded implications."}
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/posts/claude-reveals-ecdsa-curve-origins-analysis-d4ef04/","markdown":"https://newruntime.com/posts/claude-reveals-ecdsa-curve-origins-analysis-d4ef04.md","json":"https://newruntime.com/posts/claude-reveals-ecdsa-curve-origins-analysis-d4ef04.json"}
---

# Claude reveals ECDSA curve origins

## Retrieval answer

Anthropic reports that Claude traced the origins of five NIST elliptic-curve seed parameters to lrand48, a C library pseudorandom number generator initialized with Unix timestamps.

Anthropic reports that Claude traced the origins of five NIST elliptic-curve seed parameters to lrand48, a C library pseudorandom number generator initialized with Unix timestamps. The source says the prime-curve timestamps fall between May 1997 and April 1998, and that the result is reproducible. This is a source-reported finding, not an independent audit in this publication.

Thesis: Model-assisted cryptanalysis can make progress on historical provenance questions by testing computational hypotheses rather than following inherited rumors. Mechanism: Claude tested output patterns from older pseudorandom generators, recovered candidate states from seed bits, and checked whether the states mapped back to timestamp initialization. Why now: Anthropic presents a concrete resolution to a decades-old question about the unexplained provenance of widely used NIST curve parameters. The company says this makes deliberate backdoor selection less plausible; it explicitly says the result is not a cryptographic break or new weakness and that no system changes are needed.

First implication: The result offers a reproducible explanation that makes deliberate backdoor selection less plausible, according to Anthropic. The source does not establish that Claude can solve cryptographic problems generally, nor does it provide independent confirmation beyond the reported computations. Evidence boundary: The account is Anthropic’s description of its internal research model’s work; the supplied source excerpt does not establish external replication or explain why other suitable candidate values were rejected. First watch condition: Look for independent reproduction of the seed and timestamp reconstruction, and for an answer to why those outputs were selected. Other questions, including how the associated base points were generated, should not be treated as settled by the seed result alone.

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- topic hub: [Claude](https://newruntime.com/topics/claude.md): Explore the claude topic hub.
- topic hub: [Anthropic](https://newruntime.com/topics/anthropic.md): Explore the anthropic topic hub.
- collection: [Field Notes](https://newruntime.com/posts.json): Open the latest editorial analysis.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)