Matthew Green highlights unexplained skipped curves in NIST P-256/P-224 seed generation
matthew_d_green · x · 2026-10-17
Cryptographer Matthew Green shares the open questions from an analysis of NIST elliptic curve generation: not every 20-byte candidate seed yields a viable curve, and some viable curves were skipped. P-256's published seed is candidate 1842, but candidate 876 from the same run also produces a prime-order curve with parameters chosen the same way; P-224's run passed over three such curves and the two runs behind the ANSI X9.62 example curves skipped seven more. The criteria used — or whether this was unintentional — remain unknown.
More from Safety
- Epoch AI: open-weight cyber capabilities trail closed frontier by just 6-7 months as GLM-5.3 outscores GPT-5.4 — teortaxesTex · 2026-10-17
- Anthropic researchers: superposition isn't the blocker, interpretability is more tractable than assumed — akbirthko · 2026-10-17
- Security researcher criticizes jailbreak disclosure norms as unfair to closed models — xeophon · 2026-10-17
- AI tools reportedly helped one attacker hit 9 South Korean banks — Comfortable_Gene5180 · 2026-10-17
- Meta terms reportedly grant itself rights to scrape the open web for AI training — VeryWellVersed · 2026-10-17
- Jensen Huang on Lex Fridman: build the flywheel, don't just block chip exports — rohanpaul_ai · 2026-10-17