Claude Just Ended a 25-Year NSA Conspiracy Theory #nsa #cryptography #ai

Author: Better Stack · Watch on YouTube

Video authored by the channel shown, not by IANIA; all rights belong to the creator. Transcript and summary generated automatically; the original-language content is preserved.

Original language: English

Original video: Claude Just Ended a 25-Year NSA Conspiracy Theory #nsa #cryptography #ai · Channel: Better Stack · 02:05 · Watch on YouTube

Topics: Cybersecurity and software security, Claude, Health and science

Summary

The video revisits a long-running suspicion that the NSA may have hidden a backdoor in the elliptic curves used for browser cryptography. An Anthropic employee asked Claude to investigate the unexplained seeds behind NIST curves, and the model traced five of them to a 1990s random number generator initialized with Unix timestamps. For P-256, it identified a start date of August 16, 1997, and found that the published seed was the generator’s 1,842nd output. The finding is presented as reassuring: timestamp-based seeds offered too little freedom to conceal a backdoor, so no patch is needed.

Key points

Browsers use elliptic-curve cryptography to agree on secret keys, and TLS 1.3 requires support for P-256.
NIST published a list of curves in 2000, but the origin of a seed used to generate part of the curve was unexplained.
The NSA’s Jerry Selinas reportedly said the seed was a hash of a joke phrase, but could not remember the phrase.
An Anthropic employee asked an internal model to investigate the seeds without directing it to the hash explanation.
In under half an hour, Claude found seeds for five NIST curves and identified them as outputs from an Elran 48 random number generator.
The generator was seeded with a Unix timestamp, and Claude recognized its fingerprint: a top bit that was always zero.
For P-256, the generator started on August 16, 1997, and the official seed was its 1,842nd output.
The video says a clock-based seed leaves barely 30 bits of freedom, which is not enough to hide a backdoor; no patch is needed.

Chapters

Start	Chapter	Summary
00:00	The NSA backdoor suspicion	The video explains the browser cryptography behind P-256 and introduces questions about the unexplained seed used to generate the curve.
00:32	The unexplained curve seed	It describes the NSA-linked seed, the proposed hash-of-a-joke explanation, and the effort to uncover its origin.
01:04	Claude traces the seeds to timestamps	Claude identifies five curve seeds as outputs from a random number generator initialized with Unix timestamps, including the P-256 result.
01:35	Why the discovery is reassuring	The video says the timestamp-based seed had too little freedom to conceal a backdoor and concludes that no patch is needed.

Quotes

Claude just worked out that it was a timestamp. — 00:00

Part of that curve shape was generated from a seed, which is a random-looking number that the NSA handed over with no explanation at all. — 00:32

They actually turned out to be Elran 48, which is a basic random number generator from 1990 C libraries seeded with a Unix timestamp. — 01:04

A seed from a clock leaves barely 30 bits of freedom, which isn’t enough to hide a backdoor. — 01:35

Concepts and entities

NSA, NIST, Claude, Anthropic, P-256, TLS 1.3, drand48, Unix timestamp, Jerry Selinas

Full transcript (original language)

00:00 For over 25 years, people have suspected that the NSA hid a backdoor in the crypto that your browser uses, but Claude just worked out that it was a timestamp. So, quick explainer. When your browser connects to a website, the two have to agree on a secret key out in the open without anyone listening being able to work it out. And all of that maths runs on an elliptic curve, which is a shape where one operation is easy to do, but basically impossible to undo. Everyone has to use the same curves, so in 2000, the US standards body, NIST, published a short list. The one you’ve most likely used is P-256. The P stands

00:32 for prime and 256 is how many bits the numbers are, and TLS 1.3, the thing behind HTTPS, says that every app must support it. But here’s the catch. Part of that curve shape was generated from a seed, which is a random-looking number that the NSA handed over with no explanation at all. So, the question became, if someone chose that seed on purpose, could they have provided a curve that only they know how to break? The NSA’s Jerry Selinas actually said that the seed was a hash of a joke phrase, like give Bob and Jerry a raise, but he couldn’t remember it, and he died in 2023. There was even a bounty to find

01:04 these out. This month, though, an Anthropic employee asked an internal model to figure this out without pointing it at that hash story, and in under half an hour, it had the seed for five of the NIST curves. And they weren’t hashes at all. They actually turned out to be Elran 48, which is a basic random number generator from 1990 C libraries seeded with a Unix timestamp. Claude actually found the generator’s fingerprint, which was a top bit that was always zero, and worked backwards from there. For P-256, someone started the generator on the 16th of August 1997, and the

01:35 official seed is just the 1,842nd number that it spat out. Claude actually cracked this so fast that it thought it was being tested. It’s thinking literally says, “Let me be skeptical. Am I in some sort of simulated test environment?” Then it checked its maths, and it said, “Wow, it’s a real discovery.” Overall, this is actually good news. A seed from a clock leaves barely 30 bits of freedom, which isn’t enough to hide a backdoor. So, there’s nothing to patch here, and Anthropic says this actually makes the curves look cleaner and not weaker. Honestly, I just love that a 25-year conspiracy theory

02:05 ended with it’s just timestamps. Subscribe for more AI and dev news every week.