Light

Episode #1101 Quiz

ECDSA's Curves Origins
Date: 2026-10-20 | Length: 2.25 hrs | Episode page at twit.tv

About this episode

Microsoft patched 1,411 flaws, including an actively exploited Mark-of-the-Web bypass, a .NET WDAC bypass enabling unauthorized protected-process code execution, and a MessagePack-CSharp denial-of-service bug. It added risk cohorts for patch prioritization and documented workarounds for Smart App Control and other regressions. Agentic AI accelerated intrusion, secret harvesting, and persistence.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, what exact pattern did Claude use to recognize that the NIST prime-curve seeds came from lrand48 rather than from a hash or some other source?

Question 1

According to the episode, what exact pattern did Claude use to recognize that the NIST prime-curve seeds came from lrand48 rather than from a hash or some other source?

Four of the ten seeds had a top bit of zero in all 20 words, matching a signature of lrand48 All ten seeds repeated the same 32-bit prefix, which matched a known NSA passphrase hash The seeds all contained an alternating 1-and-0 bit pattern across each 32-bit word Every seed began with the same Unix timestamp, which directly revealed the curve source

Question 2: How did Claude recover the internal state for the prime-curve seeds once it suspected a truncated linear congruential generator?

Question 2

How did Claude recover the internal state for the prime-curve seeds once it suspected a truncated linear congruential generator?

By replaying the NIST publication process and reconstructing the curve files from archives By brute-forcing all possible 48-bit states until the seed text matched exactly By using LLL basis reduction on the truncated outputs to solve the hidden-state lattice problem By applying a differential attack against the curve coefficients to infer the missing bits

Question 3: What did Anthropic report about the base points for the six curves generated in May 1997?

Question 3

What did Anthropic report about the base points for the six curves generated in May 1997?

They came from FreeLIP's random number generator, later reused in early NTL releases They came from manual selection by NIST after reviewing candidate points from the NSA They came from the same lrand48 seed stream used for the curve seeds themselves They came from a SHA-1 hash of the same Unix timestamps used for the seeds

Question 4: What was the specific recipe Anthropic reported for generating those base points?

Question 4

What was the specific recipe Anthropic reported for generating those base points?

Seed a generator with the curve name, discard one output, then choose the first x-coordinate that lies on the curve Seed a generator with a small integer, discard seven outputs, then sample x-coordinates from 26-bit outputs reduced mod p Seed a generator with the published seed value, discard all even outputs, then hash the remainder into x-coordinates Seed a generator with a Unix timestamp, discard 20 outputs, then use full-width random integers as x-coordinates

Question 5: According to the episode, what is the key security conclusion drawn from Claude's reverse-engineering of the NIST curve seeds?

Question 5

According to the episode, what is the key security conclusion drawn from Claude's reverse-engineering of the NIST curve seeds?

It proves the curves contain a hidden weakness because the seeds were generated by an NSA employee It shows the curves must be replaced immediately because the seed timestamps can now be predicted It demonstrates that the curve parameters were generated from a modern cryptographic hash and are therefore unverifiable It weakens suspicion of a deliberate backdoor because the seeds were just lrand48 output seeded from Unix time

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.