Now loading...
Researchers have solved a long-standing mystery regarding the origins of the widely used Elliptic Curve Digital Signature Algorithm (ECDSA), a significant cryptographic standard. This breakthrough clarifies longstanding concerns in the cryptographic community about the standards embedded in NIST’s FIPS 186-2 Digital Signature Standard, which has been in use since 2000. The revelation is likely to ease apprehensions surrounding the parameters previously attributed to possible backdoors or intentionally insecure implementations.
The seeds for the elliptic curves specified by NIST, including the well-known P-256 curve, were historically provided by the NSA without explanation, leading to extensive speculation and investigation within the cryptographic community. A notable probe was driven by Neal Koblitz and Alfred Menezes, whose paper, “A Riddle Wrapped in an Enigma,” highlighted concerns about the origins of these seed values, prompting amateur investigations and even a bounty for their discovery.
The identity of the individual responsible for generating the seeds, Jerry Solinas, revealed that the seeds were created using a hash based on a humorous phrase. However, details surrounding the methodology were vague, and with Solinas’ passing in 2023, the initial questions remained unanswered.
A team at Anthropic took a fresh approach by querying an internal research model, Claude, about how these seeds might have been generated. In an astonishingly brief period, the model discerned the origins of several NIST seeds. It turned out they were not this product of any complex hashing algorithms but were derived from a Unix timestamp fed into a simple pseudorandom number generator, the lrand48.
This discovery suggests that instead of complex manipulations, the seeds were produced through simpler methods, indicating heightened confidence in the integrity of the curves. The method employed involved sampling bytes from the lrand48 algorithm initialized with a Unix timestamp, producing candidate seeds through a high number of iterations.
The findings pose no new security risks to ECDSA, bolstering trust that the curves were selected without any underlying vulnerabilities. Many in the cryptographic community have long been suspicious of these parameter origins, and with this clarity comes a new level of assurance.
However, questions still linger about some specific base points associated with the curves. The procedure detailing how these base points were generated remains largely unexplained, although some were traced back to an arithmetic package known as FreeLIP.
For their efforts, the team plans to donate the bounty of $36,864 to the Internet Security Research Group, further contributing to the ongoing dialogue and research within the field of cybersecurity. The collaborative effort undertaken at Anthropic reflects a broader commitment to resolving questions critical to wallet security and digital communications
This quest to identify the seed sources serves as a significant milestone in cryptography, eliminating years of speculation and enhancing confidence in ECDSA parameters. As researchers continue to unearth answers to historical puzzle pieces, the landscape of cryptography stands to benefit from these collective insights.
