Claude 在不到 30 分钟内破解 25 年 NSA 椭圆曲线种子谜团
Anthropics' Claude cracks a 25-year-old NSA cryptography mystery in under 30 minutes
Anthropic 的 Claude 在不到 30 分钟内解开了 NSA 为 ECDSA 曲线提供的种子来源谜团。Claude 发现种子来自以 1997 年 5 月至 1998 年 4 月间 Unix 时间戳初始化的 lrand48；该生成器仅输出 31 bits，且部分种子的高位系统性为零。
文章串起了 Claude 发现随机数模式、解释 NSA 曲线种子来源的过程，也交代了该发现对后门猜疑和悬赏去向的影响。
Oct 17, 2026
Anthropic's AI Claude has solved a 25-year-old cryptography mystery. NIST standardized several curves in the ECDSA standard, the most widely used framework for elliptic-curve digital signatures, back in 2000. The NSA had supplied the seeds, the starting values used to generate the curve parameters, with zero explanation. No one knew how they were created, and that fueled suspicion of possible backdoors. The mystery even attracted a bounty and amateur sleuthing efforts. The late NSA employee Jerry Solinas had suggested the seeds were a hash of a humorous phrase, but that turned out to be wrong.
Claude cracked it in under 30 minutes. The seeds came from "lrand48," a simple C random number generator, initialized with a Unix timestamp between May 1997 and April 1998. Claude spotted the pattern because "lrand48" only outputs 31 bits, and the top bits in some seeds were systematically zero. According to Anthropic, this makes deliberate backdoors less likely. Anthropic is donating the $36,864 bounty to the Internet Security Research Group.
AI News Without the Hype – Curated by Humans
Subscribe to THE DECODER for ad-free reading, a weekly AI newsletter, our exclusive "AI Radar" frontier report six times a year, full archive access, and access to our comment section.
来源：The Decoder · the-decoder.com