Claude cracks 25-year NSA elliptic curve seed mystery in under 30 minutes

NIST wrote several curves into the ECDSA standard in 2000 with NSA-supplied seeds and no explanation, fueling decades of backdoor suspicion, bounties, and amateur investigations. The late NSA employee Jerry Solinas claimed the seed was a hash of a humorous phrase, which was later disproven. In under 30 minutes, Claude found the seeds came from lrand48, a simple C RNG emitting only 31 bits; some seeds had systematically zero high bits, exposing the pattern. Anthropic says the result makes deliberate backdooring significantly less likely and donated the $36,864 bounty to an internet security research group. For cryptography engineers maintaining elliptic curve signature implementations and teams doing standards compliance audits, the lead means seed provenance can be independently reproduced and verified, warranting a re-evaluation of trust assumptions around ECDSA standard curves rather than continued speculation.