Anthropic mentioned on Oct. 16 that Claude had helped reconstruct the general public seed behind P-256, a NIST-standardized cryptographic curve supported for Ethereum passkey signing. The discovering offers pockets builders new proof a couple of longstanding concern over the curve’s origins.
The seed is a public design enter used to derive a coefficient within the curve’s equation. It’s separate from the non-public signing credentials that authorize pockets exercise. Anthropic says unexplained seeds equipped by the U.S. Nationwide Safety Company had fueled suspicion about intentionally weakened parameters.
The corporate’s printed recipe initializes the previous C-library generator lrand48 with the timestamp for Aug. 16, 1997, at 01:52:34 UTC. The generator produces a sequence of candidate seeds. Advancing to candidate 1,842 returns the printed P-256 worth, offering a repeatable recipe for that public fixed.
Anthropic says this makes deliberate backdoors much less believable. It describes no new assault or curve weak spot and says customers want take no motion.
The Ethereum connection runs via EIP-7951, which specifies verification of signatures utilizing P-256, additionally known as secp256r1. It names Apple Safe Enclave, Android Keystore and FIDO2/WebAuthn gadgets as related {hardware}. This connects pockets authorization with signing capabilities constructed into gadgets and authenticators.
EIP-7951’s motivation lists device-native signing, multifactor authentication and less complicated key administration as makes use of for account abstraction.
Ethereum’s account documentation distinguishes non-public keys that signal transactions from public data used to confirm them; contract accounts are managed by code.
EIP-7951’s P256VERIFY operation takes a message hash, a signature and a public key, then checks the signature’s validity. The reconstructed public seed is separate from these non-public signing credentials.
P-256 additionally differs from secp256k1, the curve already utilized in Ethereum. The relevance is to P-256-compatible signing, relatively than each Ethereum pockets.
Anthropic experiences that candidate 876 additionally yielded a prime-order curve of the required dimension, leaving choice standards unclear. The variety of era runs and the origin of P-256’s base level, a separate mounted mathematical level, stay unknown.
