Claude, Anthropic's AI, has shed light on the creation of ECDSA curve seeds, revealing they were produced by a random-number generator that used Unix timestamps. This finding eases worries about vulnerabilities in the cryptographic framework. Although some base points were traced, not every parameter has been clarified. The team plans to contribute a $36,864 bounty to the Internet Security Research Group for this important discovery.
Key facts
- NIST incorporated ECDSA into the Digital Signature Standard in 2000.
- The seeds were created using a random-number generator called lrand48 with Unix timestamps.
- Claude traced the origins of NIST P-192, P-224, P-256, P-384, and P-521 seeds.
- A bounty of $36,864 will be contributed to the Internet Security Research Group for this discovery.
- While some base points were identified, many parameters remain unexplained.
A short AI summary in our own words. The reporting belongs to Hacker News — Front Page; we don't reproduce it.