Anthropic claimed the $36,864 bounty for solving the NIST P-256 seed origin mystery and donated the full prize money to the Internet Security Research Group

Overview Debates Related claims Topics Sources

In October 2026, an internal Anthropic research model using Claude took under 30 minutes to solve a 25-year-old cryptographic mystery regarding the origins of the NIST P-256 and other elliptic curve seeds supplied by the National Security Agency

Anthropic's Claude AI model traced the NIST P-256 seed to candidate number 1842 produced by lrand48, a standard Unix pseudorandom number generator initialized with a timestamp on August 16, 1997

Cryptographic suspicions surrounding NIST P-256 intensified after the 2013 Edward Snowden disclosures revealed National Security Agency efforts to weaken cryptographic standards

Anthropic researchers tasked an internal Claude AI model to investigate the NIST P-256 and other elliptic curve seeds without telling the model the historical theory that the seeds originated from a forgotten phrase

National Security Agency mathematician Jerry Solinas handed the P-256 elliptic curve seeds to the ANSI X9.62 committee in fall 1997 without explaining how the starting numbers were chosen

In 2000, the U.S. National Institute of Standards and Technology standardized the P-256 elliptic curve in FIPS 186-2 based on designs supplied by the National Security Agency

Anthropic's investigation showed that seeds for NIST prime curves P-192, P-224, P-384, and P-521 matched pseudorandom generator timestamps from May 1997 through April 1998

For 25 years, the National Security Agency's unexplained elliptic curve seeds fueled suspicions that the agency had selected specific curves containing a hidden backdoor

Cryptographer Filippo Valsorda had offered a $36,864 bounty for identifying the origin of the NIST P-256 and other elliptic curve seeds

Google Quantum AI white papers estimated in March 2026 that breaking Bitcoin's elliptic curve cryptography would require 1,200 to 1,450 logical qubits or under 500,000 physical qubits

Algorand's post-quantum cryptography strategy requires delivering deployed network upgrades that institutional participants can evaluate.

Algorand CEO William Herkelrath established strengthening the network's post-quantum cryptography capabilities as a core pillar of his strategic brief.

Starknet derives each Shadow Account address from user-specific data, the selected application, and a unique identifier known as a nonce.

Pirate Chain enforces mandatory zk-SNARKs privacy shielding across 100% of its network transactions

Starknet already utilizes hash-based STARK proofs and native account abstraction, enabling accounts to adopt post-quantum signatures without requiring a protocol upgrade

StarkWare unveiled a three-phase post-quantum roadmap for Starknet in June 2026, covering signature upgrades, smart-contract migration, and replacing Ethereum-dependent cryptography

The OpenTimestamps protocol enables the appending of arbitrary digital data to a Bitcoin transaction in the form of a SHA-256 hash

Bitcoin currently verifies digital transaction signatures using the classical cryptographic algorithms ECDSA and Schnorr, which existing non-quantum computers are unable to reverse-engineer

Coinbase recommended that post-quantum Bitcoin software evaluations prioritize implementations that avoid timing leaks, run reliably across platforms, and remain secure if random-number generators fail

Coinbase recommends selecting post-quantum signature schemes that are compatible with multi-party computation to protect institutional custody infrastructure against key theft