Claude Solves a 25-Year NSA Cryptography Mystery in 30 Minutes
Anthropic AI killed a massive cryptography conspiracy theory by proving NSA encryption seeds came from a basic 1990s computer clock.
Research · Source: CoinDesk
What happened
Anthropic handed an internal Claude research model a cryptography puzzle that had baffled experts for a quarter of a century. The model solved it in under 30 minutes. It successfully traced the origins of five mysterious elliptic curve seeds. The National Security Agency supplied these numbers to the US government in the late 1990s.
For decades, cryptographers suspected the NSA built a hidden backdoor into these standard mathematics. The agency provided the designs but flatly refused to explain how it generated the starting numbers. Suspicions grew massive after the Snowden leaks linked the NSA to weakened cryptographic standards. Claude proved the reality was much more boring. The NSA just used lrand48. This is a basic random-number generator found in old C software libraries. They fed it with Unix timestamps from 1997 and 1998.
Human researchers spent years chasing false leads. Former NSA mathematician Jerry Solinas once suggested the numbers came from a forgotten joke phrase. Claude ignored that theory completely. It built a scanner covering 34 combinations of generators and output slices. It noticed the 32-bit words consistently had a zero in the highest bit. Claude then applied the Lenstra-Lenstra-Lovasz lattice reduction algorithm to work backward. It found the exact timestamp and candidate number for the widely used P-256 curve.
Key facts
- 25 years — Time the NSA seed mystery remained unsolved
- 30 minutes — Time it took Claude to find the seed origins
- lrand48 — The old C library generator used by the NSA
- 1,842 — The candidate number chosen for the P-256 curve seed
- $36,000 — Bounty value donated to the Internet Security Research Group
Why it matters
This event proves AI can solve complex historical mathematics. It is not just for writing code or drafting emails. Claude did not break modern encryption. It did not steal any private keys. It simply answered a historical question about how public security parameters were chosen. This discovery restores trust in the NIST curves used to secure data across the internet. For example, Apple uses the P-256 curve for message authentication in its PQ3 iMessage protocol. Knowing the NSA did not rig the math makes everyone safer.
The massive conspiracy theory is mostly dead. However, a small mystery remains unsolved. Claude revealed that the NSA skipped perfectly good numbers during the generation process. For the P-256 curve, the published seed was the 1,842nd candidate. The agency skipped candidate 876 even though it appeared totally suitable. We still do not know why they skipped it. We also do not know the origin of the B-163 curve seed. Meanwhile, Bitcoin remains completely unaffected. Bitcoin wallets run on secp256k1. This is a simpler curve defined by fixed numbers with no room for a hidden backdoor.
For builders
AI for cryptographic auditing
Claude built a custom scanner and applied lattice reduction algorithms to find patterns humans missed for decades. Security engineers can now use frontier models to audit legacy systems. You can use AI to verify cryptographic implementations and find historical vulnerabilities.
Predictable seeds ruin crypto wallets
The NSA seeds were public parameters from day one. Predictability was fine for this specific use case. But if your application uses a time-seeded generator like lrand48 to create secret keys, attackers will drain user funds. Always use cryptographically secure random number generators for private keys.
Bounties drive open source security
Cryptography engineer Filippo Valsorda and others offered a bounty that grew to over 36,000 dollars for solving this puzzle. Since Anthropic solved it, the money goes to the Internet Security Research Group. Funding independent security research yields massive dividends for the entire internet ecosystem.
My take
People spent 25 years spinning wild conspiracy theories about the NSA building master backdoors into internet encryption. It turns out the government just used a lazy C library function and a 1997 computer clock. AI is stripping the mystique away from legacy tech. I love seeing complex mysteries reduced to simple math.
Original reporting: CoinDesk. This is my rewrite and opinion.