CONNECT WITH US
Web3 & Blockchain

Web3 & Blockchain

Claude unpicks an NSA mystery behind Ethereum passkey security

CryptoSlate logo

Published on

Add as a preferred source on Google
Claude unpicks an NSA mystery behind Ethereum passkey security

A 1997 timestamp reproduces P-256’s public seed, helping explain how a curve used for passkey signing was generated.

Anthropic said on Oct. 16 that Claude had helped reconstruct the public seed behind P-256, a NIST-standardized cryptographic curve supported for Ethereum passkey signing. The finding gives wallet builders new evidence about a longstanding concern over the curve’s origins.

The seed is a public design input used to derive a coefficient in the curve’s equation. It is separate from the private signing credentials that authorize wallet activity. Anthropic says unexplained seeds supplied by the U.S. National Security Agency had fueled suspicion about deliberately weakened parameters.

The company’s published recipe initializes the old C-library generator lrand48 with the timestamp for Aug. 16, 1997, at 01:52:34 UTC. The generator produces a sequence of candidate seeds. Advancing to candidate 1,842 returns the published P-256 value, providing a repeatable recipe for that public constant.

Anthropic says this makes deliberate backdoors less plausible. It describes no new attack or curve weakness and says users need take no action.

The Ethereum connection runs through EIP-7951, which specifies verification of signatures using P-256, also called secp256r1. It names Apple Secure Enclave, Android Keystore and FIDO2/WebAuthn devices as relevant hardware. This connects wallet authorization with signing capabilities built into devices and authenticators.

Start with the stories that matter. Get the context behind the headlines and a clear view of what to watch next.

Thanks for signing up to The Catalyst. Look out for your first daily email. If you already receive it, you’re all set.


Source link

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.