Claude cryptography research has reconstructed how five sets of mathematical parameters supplied by the US National Security Agency were generated, addressing a decades-old question about widely used digital-signature standards. Anthropic announced the findings on October 16, 2026, saying they do not reveal a new cryptographic attack or a weakness affecting Bitcoin.
Key Takeaways
- An internal Claude model traced five NIST curve seeds to an older random-number generator initialized with timestamps.
- Bitcoin and Ethereum use a different curve, and the findings do not expose users’ private keys.
- Several parameter-selection questions remain unresolved, so the research is not a complete reconstruction.
Table of Contents
- What Claude cryptography research established
- Why the finding does not compromise Bitcoin wallets
- What remains unexplained
- Conclusion
What Claude cryptography research established
The investigation examined unexplained seed values used to construct elliptic curves adopted by the National Institute of Standards and Technology in 2000. The NSA supplied the parameters without documenting how they had been selected, leaving researchers to question whether the choices could conceal deliberate weaknesses.
In its research on NIST curve origins, Anthropic said an internal Claude model identified the origins of the P-192, P-224, P-256, P-384 and P-521 seeds in under half an hour. They came from lrand48, a pseudorandom-number generator available in older C libraries, initialized using Unix timestamps.
The recovered timestamps for ten prime-curve seeds, including five from the ANSI X9.62 standard, fell between May 1997 and April 1998. For P-256, the standardized seed appeared at candidate 1,842 in a sequence initialized on August 16, 1997.
That reproducible process makes deliberate manipulation less plausible, Anthropic said. It does not establish that every historical selection decision is now understood.
| Item | Details |
|---|---|
| Standards milestone | NIST adopted the curves in the FIPS 186-2 Digital Signature Standard in 2000. |
| Additional seed recovery | Five prime-curve seeds from ANSI X9.62 were also reconstructed. |
| Base-point progress | P-192 and five ANSI example-curve base points were traced to the FreeLIP random-number generator. |
| Research bounty | The $36,864 award will be donated to the Internet Security Research Group. |
Why the finding does not compromise Bitcoin wallets
Bitcoin does not use the NIST curves investigated here. Its digital signatures rely on secp256k1, which Ethereum also uses for standard account signatures. The discovery therefore does not identify a weakness in either network’s underlying signature mathematics.
More importantly, the historical curve seeds are public parameters, not wallet private keys. Reconstructing how those public numbers were generated does not give an attacker the secret keys needed to authorize transactions.
For exchanges and custodians, the distinction is operationally important. A predictable generator used to create actual private keys could endanger funds, but that is a different problem from explaining public curve parameters. These findings provide no evidence that Bitcoin or Ethereum private keys have become easier to recover.
What remains unexplained
Anthropic could not reconstruct the selection of the base points for P-224, P-256, P-384 and P-521, or those of the NIST binary curves. Base points are fixed public points used in deriving public keys.
The B-163 binary-curve seed also remains unexplained. Researchers additionally found that some potentially viable candidate curves had been skipped, without establishing whether this reflected undisclosed criteria or an unintended artifact.
Anthropic said the small number of skipped candidates did not make deliberate selection of weakened curves plausible. Its practical message was that the discovery requires no change in how users operate existing systems.
Conclusion
The findings narrow a longstanding uncertainty about cryptographic standards without creating a new Bitcoin security warning. Further reconstruction of the unexplained seeds, base points and skipped candidates remains the outstanding research task; Anthropic says users need take no action because of this discovery.
Read More News
Disclaimer
This FinanceVelix article provides general information, not personalized financial, investment, legal, or tax advice. Market prices, interest rates and economic conditions can change; investments carry a risk of loss. Facts reflect the material available when published and may change. Check important information independently and consult a qualified professional when needed. Mentioning an asset, company, or service is not an endorsement.
