🔒NIST P-256 Curve Seeds Revealed After Decades of Mystery
The mystery behind NIST P-256 curve seeds is finally solved
TL;DR
Claude, an Anthropic employee, has cracked the decades-old mystery behind the NIST P-256 curve seeds, revealing they were generated using a simple random number generator. The discovery sheds light on the origins of widely-used cryptographic standards.
Claude, an Anthropic employee, has cracked the decades-old mystery behind the NIST P-256 curve seeds, revealing they were generated using a simple random number generator. This discovery sheds light on the origins of widely-used cryptographic standards, addressing concerns about potential backdoors or intentional weaknesses. The seeds were generated using the C library's lrand48 random-number generator, seeded with a Unix timestamp between May 1997 and April 1998. Claude's findings confirm that the seeds were not the result of any hash algorithm, but rather a straightforward process that leaves less room for subversion. This revelation is crucial for developers and security experts who rely on these cryptographic standards for secure communications and data protection.
Key Points
Claude discovered the origins of the NIST P-192, P-224, P-256, P-384, and P-521 seeds, shedding light on cryptographic standards.
The seeds were generated using the C library's lrand48 random-number generator, seeded with a Unix timestamp between May 1997 and April 1998.
Claude's findings confirm the seeds were not the result of any hash algorithm, but rather a straightforward process.
The seeds were initialized by srand48, with the low 16 bits equal to 0x330E, ensuring a consistent random number generation.
Claude used the Lenstra–Lenstra–Lovász (LLL) basis reduction algorithm to recover the internal state of the PRNG.
Why It Matters
If you're working with cryptographic standards like NIST P-256, Claude's discovery provides clarity on the origins of these seeds. The seeds were generated using a simple random number generator, leaving less room for potential backdoors or intentional weaknesses. This is crucial for developers and security experts who rely on these standards for secure communications and data protection.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,568 builders reading daily.