最高第 2 名 现在第 5 名
Anthropic研究证secp256k1无后门
Jarrod Watts转发称Claude找到种子,并解释比特币和以太坊账号基于secp256k1曲线,与现代设备常用的secp256r1不同。
要点
- @jarrodwatts 称比特币和以太坊的账户建立在椭圆曲线 secp256k1 上,而包括 iPhone 在内的多数现代设备使用 secp256r1(P-256)。
- @jarrodwatts 称 Apple 的 Secure Enclave 和 WebAuthn passkeys 原生支持 P-256,而非 secp256k1。
- @sweis 在引用推文中称“CLAUDE FOUND THE SEEDS”。
- @petejkim 称 Anthropic 的工作发现并不存在后门。
要点和反应摘要由 AI 依据本页推文整理,请以原推为准。 我们怎么用 AI
原推
HOLY SHIT.
For crypto, this is one of the most insane posts of the year, but I'm guessing most people don't understand it.
Let me explain...
Bitcoin's accounts, and subsequently Ethereum's (and therefore every other EVM chain's), are built on a specific elliptic curve called secp256k1.
secp256k1 is a different elliptic curve from the one used across nearly every modern hardware device, including iPhones.
Modern devices mostly use a different curve called secp256r1, which is usually referred to as P-256 - one of the curves investigated in the article.
This mismatch has made it sooo difficult in the past to integrate crypto accounts natively into the security systems of modern hardware.
For example, Apple's Secure Enclave natively supports P-256, not secp256k1.
This has prevented crypto accounts from being able to use the same hardware protection as things like Apple Pay.
Same goes for the web with passkeys - WebAuthn uses P-256 signatures, which means Ethereum accounts using secp256k1 can't use them natively either.
But why did Satoshi do this?
The main theory for choosing secp256k1 was distrust of the P-256 curve - i.e. he thought there was an NSA backdoor.
A "backdoor" here basically means a secret, intentional weakness in the curve that would allow the NSA to exploit it and access private keys.
This was because P-256 was created with involvement from the NSA...
And the NSA provided a mysterious "seed" used to generate one of the curve's parameters without explaining where that seed came from.
This eventually transformed into a ~25-year-old mystery with a 5-figure reward for finding where this seed came from.
Claude figured it out in less than 30 mins.
And the best part is its internal thinking was: "Hmm wait... is it suspicious that such an obvious thing wasn’t discovered in 25 years?"
The solution was stupidly simple - just the time the curve was created, put into a specific random number generator function.
This doesn't 100% prove there's no backdoor yet, but it provides strong evidence that this seed wasn't secretly engineered by the NSA.
And Claude did this with "just a simple prompt" in under 30 minutes.引用 @sweis: CLAUDE FOUND THE SEEDS
https://t.co/m8N6OPQoCQ
同一事件,其他人怎么说
1 条-
Pete Kim称Anthropic研究揭示比特币选用的secp256k1曲线当初担忧的NSA后门并不存在。
在 X 上查看
X 上的热门回复
X 上的反应: 回复以质疑和调侃为主,称该帖是标题党、“AI slop”,甚至可能是 NSA 的公关操作;也有回复补充说 r1 签名已可通过 RIP-7212 / EIP-7951 在链上验证,且候选 #876 同样有效但被跳过。原推作者未作回应。
讨论 0
注册 登录 后参与讨论
还没有人讨论,来说第一句。