Anthropic Says Claude Reconstructed P-256 Cryptographic Seed Linked to Ethereum Passkey Security
Anthropic said on Oct. 16 that its Claude AI model helped reconstruct the public seed used to generate a key parameter for P-256, a cryptographic curve standardized by the National Institute of Standards and Technology (NIST) and supported by Ethereum passkey-signing technology. The finding offers a repeatable explanation for a longstanding question about the curve's origins, where unexplained design inputs had raised concerns about a possible cryptographic backdoor.
The reconstructed seed is a public design value used to derive a coefficient in P-256's mathematical equation. It is not a private key or signing credential and does not authorize transactions or provide access to a wallet.
How Claude Reconstructed the P-256 Seed
Anthropic published a procedure that initializes the older C-library random-number generator lrand48 using the timestamp Aug. 16, 1997, at 01:52:34 UTC. The generator then produces a sequence of candidate seeds. According to the company, advancing to candidate 1,842 reproduces the published P-256 seed.
The procedure provides a repeatable way to obtain the public constant. Anthropic said the result makes the possibility of a deliberately introduced backdoor less plausible. The company did not report a new attack or identify a weakness in the curve, and said users do not need to take any action.
However, some details remain unresolved. Anthropic reported that candidate 876 also produced a prime-order curve of the required size, leaving the original selection criteria unclear. The number of generation runs used during the process and the origin of P-256's base point, a separate fixed mathematical point, also remain unknown.
Why P-256 Matters for Ethereum Passkeys
The finding is relevant to Ethereum through EIP-7951, a proposal specifying signature verification for P-256, also known as secp256r1. The proposal identifies hardware-backed signing systems such as Apple's Secure Enclave, Android Keystore and FIDO2/WebAuthn devices as relevant technologies.
These systems can let users authorize activity through signing capabilities integrated into their devices or authenticators. EIP-7951 describes device-native signing, multifactor authentication and simpler key management as potential uses within account abstraction.
The proposal's P256VERIFY operation accepts a message hash, a signature and a public key, then checks whether the signature is valid. The reconstructed seed concerns the curve's public mathematical parameters and is distinct from the private credentials used to sign transactions.
P-256 Is Different From Ethereum's Existing Curve
P-256 should not be confused with secp256k1, the elliptic curve already used by Ethereum. The reported finding concerns P-256-compatible signing, including passkey-based authorization, rather than every Ethereum wallet or its existing transaction-signing process.
Ethereum's account documentation distinguishes private keys used to sign transactions from public information used to verify signatures. Contract accounts, meanwhile, are controlled by code. The distinction helps explain why reconstructing a public curve-generation value does not reveal wallet signing credentials.
Anthropic's result offers a reproducible explanation for one part of P-256's origin story, but it does not settle every question about the curve's generation. The selection process and the origin of its base point remain open questions, according to the details reported by the company.
source: cryptoslate
Writer: Ethan Collins
Crypto Journalist
Ethan Collins reports on developments across the cryptocurrency and blockchain sector. His work covers market movements, protocol updates, regulatory changes, and emerging trends in digital assets.
He focuses on presenting complex topics in a clear and accessible manner for a broad readership.
Check out other news and articles on Google News
Disclaimer:
The articles on Hokanews are here to keep you updated on the latest buzz in crypto, tech, and beyond—but they’re not financial advice. We’re sharing info, trends, and insights, not telling you to buy, sell, or invest. Always do your own homework before making any money moves.
Hokanews isn’t responsible for any losses, gains, or chaos that might happen if you act on what you read here. Investment decisions should come from your own research—and, ideally, guidance from a qualified financial advisor. Remember: crypto and tech move fast, info changes in a blink, and while we aim for accuracy, we can’t promise it’s 100% complete or up-to-date.