{"slug": "claude-traces-nist-p-256-seed-to-a-1997-random-number-generator-run", "title": "Claude traces NIST P-256 seed to a 1997 random number generator run", "summary": "Anthropic researchers used the Claude AI model to trace the seed behind the NIST P-256 elliptic curve (C49D360886E704936A6678E1139D26B7819F7E90) to the POSIX lrand48/drand48 pseudorandom number generator seeded with Unix timestamp 871696354, corresponding to August 16, 1997, at 01:52:34 UTC, with the seed matching candidate #1842 from that run. The findings, announced October 16, 2026, followed completion of a $36,864 bounty challenge set by cryptographer Filippo Valsorda; the Anthropic team claimed the bounty and donated the funds to the Internet Security Research Group (ISRG). The analysis found no evidence of intentional cryptographic weaknesses in how the seeds were produced, though the research notes the seeds were not generated with the transparent 'nothing up my sleeve' methodology modern cryptographers prefer.", "body_md": "# Claude traces NIST P-256 seed to a 1997 random number generator run\n\nAnthropic researchers say the mysterious seed behind one of the internet's most used elliptic curves came from a timestamped 1990s PRNG, not a hidden design choice\n\nFor more than two decades, one of the most important strings of numbers in internet security came with no explanation. The seed behind the NIST P-256 elliptic curve, also known as prime256v1, simply showed up in the standards, and nobody could say where it came from.\n\nResearchers from [Anthropic](https://cryptobriefing.com/markets/anthropic/) now say they know. Using the Claude AI model, they traced the seed to a garden-variety random number generator that was started on August 16, 1997, at 01:52:34 UTC. The origin story turned out to be mundane, which is roughly the best outcome a cryptographer could hope for.\n\n## How a 1990s random number generator cracked the case\n\nAccording to the Anthropic findings, the P-256 seed (C49D360886E704936A6678E1139D26B7819F7E90) was produced by lrand48/drand48. That is the POSIX-standard pseudorandom number generator, a routine tool on Unix systems of that era.\n\nThe generator had been seeded with a Unix timestamp, 871696354, which converts to that August 1997 date. The P-256 seed corresponds to candidate #1842 from that run. Put more simply, someone started a standard random generator, let it produce candidates, and one of the outputs became the seed.\n\nThe pattern held across other curves too. Seeds for the prime curves P-192, P-224, P-384 and P-521 matched timestamps falling between May 1997 and April 1998. Seeds for the binary curves showed patterns consistent with timestamps from either February 1984 or April 1998.\n\nClaude reportedly recovered the generation method in under 30 minutes by working through the habits of 1990s PRNGs.\n\nThe findings were announced on October 16, 2026. They followed the completion of a $36,864 bounty challenge set by cryptographer Filippo Valsorda. The Anthropic team claimed the bounty and then donated the funds to the Internet Security Research Group (ISRG).\n\n### AI, tech, and the markets they move—in one daily briefing.\n\nDaily. Free. Join 34,000+ readers across crypto, finance, and policy.\n\n## Why anyone suspected the NSA in the first place\n\nThe seeds were handed to the ANSI X9.62 committee in fall 1997 by Jerry Solinas, a mathematician at the NSA. That committee was working on the ECDSA signature specification. NIST then standardized P-256 in 2000 in FIPS 186-2, building on the ANSI X9.62 work.\n\nSuspicion intensified sharply after the 2013 Dual_EC_DRBG revelations. Those disclosures put the NSA’s role in cryptographic standardization under a microscope, and P-256’s unexplained seed became a recurring talking point in that debate.\n\nEarlier accounts suggested the seeds were SHA-1 hashes of humorous phrases. Nobody could reproduce that claim, which left the joke theory sitting in the same unverifiable bin as the backdoor theory.\n\n## What the discovery means for internet security\n\nThe core finding is reassuring. The analysis found no evidence of intentional cryptographic weaknesses in how the seeds were produced.\n\nA backdoored curve would require its designer to search through a huge number of seeds until finding one with a hidden, exploitable property. A seed pulled from lrand48 started at a specific second leaves very little room for that kind of shopping. The research notes that this limited entropy reduces the plausibility of a backdoor.\n\nThere is a less flattering takeaway, too. The seeds were not produced using the kind of transparent, “nothing up my sleeve” methodology that modern cryptographers prefer. They came from an ordinary tool, started at an arbitrary moment, with the details apparently never written down for the public.\n\n## The crypto and AI angles\n\nA question that stumped human researchers for decades was answered by a model that recognized how 1990s software tended to behave. That suggests other legacy mysteries in cryptography, the ones buried in old standards and undocumented parameters, could be worth revisiting with similar tools.\n\nFor security teams, the practical stakes are about confidence rather than code changes. P-256 has been everywhere for years, and nothing about this discovery alters the curve itself.\n\n**Disclosure:** This article was edited by Diego Almada Lopez. For more information on how we create and review content, see our\n\n[Editorial Policy](https://cryptobriefing.com/editorial-policy/).", "url": "https://wpnews.pro/news/claude-traces-nist-p-256-seed-to-a-1997-random-number-generator-run", "canonical_source": "https://cryptobriefing.com/claude-traces-nist-p256-seed-origins/", "published_at": "2026-10-16 20:15:42+00:00", "updated_at": "2026-10-16 20:56:28.113299+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-research"], "entities": ["Anthropic", "Claude", "NIST P-256", "Filippo Valsorda", "Internet Security Research Group", "Jerry Solinas", "NSA", "ANSI X9.62"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/claude-traces-nist-p-256-seed-to-a-1997-random-number-generator-run", "markdown": "https://wpnews.pro/news/claude-traces-nist-p-256-seed-to-a-1997-random-number-generator-run.md", "text": "https://wpnews.pro/news/claude-traces-nist-p-256-seed-to-a-1997-random-number-generator-run.txt", "jsonld": "https://wpnews.pro/news/claude-traces-nist-p-256-seed-to-a-1997-random-number-generator-run.jsonld"}}