Claude Cracked a 25-Year NSA Cryptography Mystery in Under 30 Minutes

AI disclosure: this article was produced with AI assistance and reviewed for accuracy.

Flag: 🟢 Cleared the bar — Anthropic published primary evidence anyone can rerun; multiple independent outlets corroborate the core finding.

On October 16, 2026, Anthropic disclosed that an internal research version of Claude had resolved one of cryptography's longest-running mysteries: the origin of the "seeds" behind the NIST elliptic curves (P-192, P-224, P-256, P-384, P-521) — parameters supplied by the NSA and baked into global digital-signature infrastructure since 2000.

The seeds were not hashes of a forgotten English phrase, as a decades-old rumor held. They were plain output of lrand48, a standard C-library pseudorandom number generator, seeded with the computer's Unix clock. Timestamps date the runs between May 1997 and April 1998. P-256's seed — the curve behind much of the modern web's signatures — came from a run started on August 16, 1997, and was the 1,842nd candidate drawn.

An Anthropic employee asked the model to investigate without steering it toward the old passphrase theory. Claude spotted a statistical fingerprint of the old generator in the seed bits, recovered the generator's internal state using lattice (LLL) reduction techniques, and rewound it to the 1997–98 clock values — in under half an hour. A ten-person Anthropic team verified the work. The $36,000+ bounty posted in 2023 by Filippo Valsorda will be donated to the Internet Security Research Group, which operates Let's Encrypt.

This is AI doing genuine cryptanalytic detective work, not pattern-matching press releases. A generalist model independently rediscovered a 25-year-old procedural fact by combining statistical anomaly detection, lattice mathematics, and historical reasoning — then wrote up the finding. It suggests frontier models can now compress decades of forensic reverse-engineering into minutes when the evidence is public and the reasoning chain is checkable.

The security implication cuts both ways, and the honest version matters more than the exciting one: this makes a deliberately planted NSA backdoor in these curves less likely (the seeds look like lazy randomness, not crafted weakness), but it proves nothing about intent. And the same capability that rewound a 1997 PRNG could, in less careful hands, rewind other predictable generators guarding real secrets.

Within 18 months (by April 2028), an AI system will publicly resolve at least one more long-standing open question about cryptographic parameter provenance or a historical cipher — with reproducible evidence, not just a claim. We'll score this one.

Claude figured out in 30 minutes what cryptographers couldn't in 25 years: the NSA's mysterious curve seeds were just a 1997 computer's clock fed into a basic random-number generator. The math checks out; the hype around it only partly does.