NIST Elliptic Curve Seeds Origins: Valsorda Verifies Anthropic Findings
In brief
- Anthropic reconstructed the origin of NIST curve seeds using an internal model in 30 minutes.
- Valsorda confirms the NSA had only 30 bits of freedom to choose these seeds, ruling out a backdoor.
- NIST curves remain secure, but migration to post-quantum algorithms remains a priority.
In October 2026, Anthropic revealed that the seeds for NIST elliptic curves P-192 to P-521, provided without explanation by the NSA in 1997 and 1998, originated from a 1990s pseudo-random generator seeded with Unix timestamps. According to the company, an internal research model reconstructed this process in under 30 minutes without prior clues.
The seeds were generated using the lrand48/srand48 generator, with a 48-bit internal state fed by a timestamp and a fixed constant. Filippo Valsorda verified these findings by recalculating the seeds and analyzing curve coefficient selection criteria. He estimates the NSA had about 30 bits of freedom to choose these seeds, insufficient to hide a backdoor.
This result does not compromise the security of ECDSA curves but reduces historical suspicions around P-256. Professionals should now focus on transitioning to post-quantum algorithms, as recommended by ANSSI for uses beyond 2030.
What it changes for you
- CybersecurityCybersecurity teams can now dismiss suspicions of manipulation in NIST curve seeds, refocusing efforts on migrating to post-quantum algorithms.
This summary gives you the essentials. The full article, its figures and quotes are on ActuIA.
Read the original articleAI-generated summary of the source, checked by rules. How we write · Report an error