‘Wow, it’s a real discovery’: Claude cracks a 25-year NSA number mystery

The secrecy became even harder to dismiss after the Snowden disclosures linked the NSA to efforts to weaken cryptographic standards. NIST later removed that tool, the Dual EC random-number generator, from its recommendations.

Those starting numbers, called seeds, were public. But the NSA never explained how it chose them, fueling years of suspicion that it had tested many alternatives until it found a curve with a weakness only it knew how to exploit. The tinfoil theory was that the NSA had a backdoor to every system that used it.

Cryptographers Neal Koblitz and Alfred Menezes examined the controversy in their 2015 paper, “A Riddle Wrapped in an Enigma.” Menezes had helped write the original standard and recalled receiving the seeds from NSA mathematician Jerry Solinas in 1997.

Security researcher Steve Weis spent years looking for an explanation, including filing public-records requests in 2018. NIST said it had no documentation, while the NSA stopped responding. One promising lead suggested the numbers came from a humorous phrase Solinas had forgotten, sending investigators searching through possible word combinations.

In 2023, cryptography engineer Filippo Valsorda and other contributors offered a $12,288 bounty for an answer, rising to over $36,000 if the winner donated it to charity. Solinas had died earlier that year, leaving researchers to work through old recollections and the numbers themselves to no outcome.