NoFOMO
Search 中EN Sign in Sign up

Peaked at #2 Now #5

Anthropic Study Finds No secp256k1 Backdoor

Jarrod Watts quoted a post saying Claude found seeds, explaining Bitcoin and Ethereum use the secp256k1 curve while modern devices use secp256r1.

Rank over time

Key points

  • @jarrodwatts said Bitcoin's and Ethereum's accounts are built on the elliptic curve secp256k1, while most modern devices including iPhones use secp256r1 (P-256).
  • @jarrodwatts said Apple's Secure Enclave and WebAuthn passkeys natively support P-256, not secp256k1.
  • @sweis said "CLAUDE FOUND THE SEEDS" in a quoted tweet.
  • @petejkim said Anthropic's work found there is no backdoor after all.

Key points and the reaction summary are written by AI from the posts on this page. Check the original post. How we use AI

Original post

Jarrod Watts @jarrodwatts 33.5K followers

HOLY SHIT. For crypto, this is one of the most insane posts of the year, but I'm guessing most people don't understand it. Let me explain... Bitcoin's accounts, and subsequently Ethereum's (and therefore every other EVM chain's), are built on a specific elliptic curve called secp256k1. secp256k1 is a different elliptic curve from the one used across nearly every modern hardware device, including iPhones. Modern devices mostly use a different curve called secp256r1, which is usually referred to as P-256 - one of the curves investigated in the article. This mismatch has made it sooo difficult in the past to integrate crypto accounts natively into the security systems of modern hardware. For example, Apple's Secure Enclave natively supports P-256, not secp256k1. This has prevented crypto accounts from being able to use the same hardware protection as things like Apple Pay. Same goes for the web with passkeys - WebAuthn uses P-256 signatures, which means Ethereum accounts using secp256k1 can't use them natively either. But why did Satoshi do this? The main theory for choosing secp256k1 was distrust of the P-256 curve - i.e. he thought there was an NSA backdoor. A "backdoor" here basically means a secret, intentional weakness in the curve that would allow the NSA to exploit it and access private keys. This was because P-256 was created with involvement from the NSA... And the NSA provided a mysterious "seed" used to generate one of the curve's parameters without explaining where that seed came from. This eventually transformed into a ~25-year-old mystery with a 5-figure reward for finding where this seed came from. Claude figured it out in less than 30 mins. And the best part is its internal thinking was: "Hmm wait... is it suspicious that such an obvious thing wasn’t discovered in 25 years?" The solution was stupidly simple - just the time the curve was created, put into a specific random number generator function. This doesn't 100% prove there's no backdoor yet, but it provides strong evidence that this seed wasn't secretly engineered by the NSA. And Claude did this with "just a simple prompt" in under 30 minutes.Quoting @sweis: CLAUDE FOUND THE SEEDS https://t.co/m8N6OPQoCQ
1,658likes 113reposts 75replies 298.8Kviews

View on X Save

What others are saying

1 more
  1. Pete Kim @petejkim 750

    Pete Kim says new Anthropic research shows the feared NSA backdoor in bitcoin's secp256k1 curve doesn't exist.

    View on X

Top replies on X

Sign in to see 5 top replies from X

From @voshy, @AvbNear, @rmzcrypt and others. Spam removed, with English and Chinese translations.

Sign up free Have an account? Sign in

Discussion 0

No comments yet. Start the conversation.

Suggest a source

Is there a first-hand source we're missing, or a topic we should watch? Tell us. Once approved, everyone's board covers it.

@username or profile link