Anthropic’s Claude Solves Decades-Old NIST ECDSA Cryptographic Constant Mystery.

Claude Uncovers the Origins of NIST ECDSA Curve Constants, Solving a Decades-Old Cryptographic Mystery

Anthropic’s Claude artificial intelligence model has successfully solved one of cryptography's most persistent mysteries, uncovering the exact origin of the mysterious constants embedded within NIST’s standard Elliptic Curve Digital Signature Algorithm (ECDSA). The breakthrough resolved a long-standing debate over how these critical parameters were generated, earning a substantial bounty for internet security research.

The NIST Curve Constant Mystery, Filippo Valsorda’s Bounty, and Claude’s Algorithmic Reverse-Engineering

• The NIST ECDSA Constant Mystery:

  • Standardized Parameters without Clear Provenance: Widely utilized ECDSA curves standardized by NIST under FIPS 186-2 included specific mathematical constants and seed values whose precise origins and generation methodology were never documented.

  • The Late Jerry Solinas's Lost Source Code: The constants were originally generated by National Security Agency (NSA) security researcher Jerry Solinas in the late 1990s. Solinas had previously mentioned that the values were likely derived from a hashed English sentence, but the original source code and plaintext phrases were lost, and Solinas passed away in 2023.

  • Filippo Valsorda’s $12,288 Crypto Bounty: To encourage cryptographic researchers to solve the puzzle, Go cryptography maintainer Filippo Valsorda established a $12,288 (12Ki$) cash bounty for anyone who could definitively reverse-engineer the exact generation seeds.

• Claude’s Cryptographic Investigation and Discovery:

  • Identifying the Pseudorandom Generator: Using advanced pattern analysis and code reasoning, Claude determined that the constants were produced using the standard Unix pseudorandom number generator function lrand48, generated across a temporal window between May 1997 and April 1998.

  • Spotting Statistical Anomalies: Claude observed that the seed values in the standard were organized into five 32-bit words. Specifically, four binary curves had seed words where every single word started with a leading zero bit.

  • Uncovering the lrand48 Flaw: This signature pointed directly to lrand48, which outputs only 31-bit positive integers, forcing the leading bit to always be zero. By tracing these statistical artifacts, Claude successfully reconstructed the initial lrand48 seed states for both the binary curves and the prime curves, discovering that NIST had utilized only the first 8 bits of the lrand48 output stream.

• Bounty Donation to Internet Security Research:

  • Charitable Contribution: Following the successful verification of the discovery, Anthropic directed the $12,288 bounty payout to the Internet Security Research Group (ISRG), the nonprofit organization behind Let's Encrypt.

  • Tripled Impact: Through matching and sponsor programs tied to Valsorda’s challenge, the donation was tripled, resulting in a total contribution of $36,864 to support core internet encryption infrastructure.

 

Source: Anthropic 

💬 AI Content Assistant

Ask me anything about this article. No data is stored for your question.

Claude Uncovers the Origins of NIST ECDSA Curve Constants, Solving a Decades-Old Cryptographic Mystery

Anthropic’s Claude artificial intelligence model has successfully solved one of cryptography's most persistent mysteries, uncovering the exact origin of the mysterious constants embedded within NIST’s standard Elliptic Curve Digital Signature Algorithm (ECDSA). The breakthrough resolved a long-standing debate over how these critical parameters were generated, earning a substantial bounty for internet security research.

The NIST Curve Constant Mystery, Filippo Valsorda’s Bounty, and Claude’s Algorithmic Reverse-Engineering

• The NIST ECDSA Constant Mystery:

  • Standardized Parameters without Clear Provenance: Widely utilized ECDSA curves standardized by NIST under FIPS 186-2 included specific mathematical constants and seed values whose precise origins and generation methodology were never documented.

  • The Late Jerry Solinas's Lost Source Code: The constants were originally generated by National Security Agency (NSA) security researcher Jerry Solinas in the late 1990s. Solinas had previously mentioned that the values were likely derived from a hashed English sentence, but the original source code and plaintext phrases were lost, and Solinas passed away in 2023.

  • Filippo Valsorda’s $12,288 Crypto Bounty: To encourage cryptographic researchers to solve the puzzle, Go cryptography maintainer Filippo Valsorda established a $12,288 (12Ki$) cash bounty for anyone who could definitively reverse-engineer the exact generation seeds.

• Claude’s Cryptographic Investigation and Discovery:

  • Identifying the Pseudorandom Generator: Using advanced pattern analysis and code reasoning, Claude determined that the constants were produced using the standard Unix pseudorandom number generator function lrand48, generated across a temporal window between May 1997 and April 1998.

  • Spotting Statistical Anomalies: Claude observed that the seed values in the standard were organized into five 32-bit words. Specifically, four binary curves had seed words where every single word started with a leading zero bit.

  • Uncovering the lrand48 Flaw: This signature pointed directly to lrand48, which outputs only 31-bit positive integers, forcing the leading bit to always be zero. By tracing these statistical artifacts, Claude successfully reconstructed the initial lrand48 seed states for both the binary curves and the prime curves, discovering that NIST had utilized only the first 8 bits of the lrand48 output stream.

• Bounty Donation to Internet Security Research:

  • Charitable Contribution: Following the successful verification of the discovery, Anthropic directed the $12,288 bounty payout to the Internet Security Research Group (ISRG), the nonprofit organization behind Let's Encrypt.

  • Tripled Impact: Through matching and sponsor programs tied to Valsorda’s challenge, the donation was tripled, resulting in a total contribution of $36,864 to support core internet encryption infrastructure.

 

Source: Anthropic