S4E414 — Claude reveals ECDSA curve origins

GARY: Okay, okay, I'm here. Claude cracked the NSA's passphrase. "Give Bob and Jerry a raise." That's the story, right?

MAEVE: Maeve. General partner. That story died before you parked.

OBI: Obi. Staff reliability. The passphrase story was wrong, Gary. It failed.

GRUNER: Gruner. Field researcher. Passphrase is ghost.

GARY: Then what did Claude find? I read the headline twice. Twice.

OBI: The NIST curve seeds. Elliptic curves, ECDSA, the signatures your bank uses. NIST published seeds the NSA supplied with no explanation.

MAEVE: Twenty-five years, no provenance. Nobody could price the risk. I priced it anyway. Wrong, but priced.

OBI: So people assumed a backdoor. You publish a magic number from a spy agency, you get suspicion.

GARY: Shit. Okay. So the actual answer is worse for everyone's dignity.

OBI: The answer is a clock. That's all I'll say until you define a seed.

GARY: A seed is... the random starting value for the curve. Which I know. Which I knew.

GRUNER: He googled in car.

GARY: I did not google in the car. I reviewed in the car. There's a difference and it's dignity.

MAEVE: Thirteen years of tinfoil hats, and the reveal is a Unix timestamp.

GARY: Wait. The NSA classified a clock reading? That's an employee benefit. They got classified for showing up to work.

OBI: Gary, the timestamp is the whole answer.

GARY: It can't be. I've had worse secrets in performance reviews. One was about you, Obi.

OBI: I know. HR sent me the transcript.

OBI: The seeds had patterns. Top bits all zero — four of the ten seeds. By chance, one in five thousand eight hundred.

GARY: That's not chance. that's a signature.

MAEVE: It's a signature of lrand48. The C library random generator. Nineteen-nineties default junk.

GARY: The NSA used default junk?

OBI: The NSA used the same random your screensaver used.

GARY: I'm hearing it. I'm just not accepting it at the speed you'd like.

MAEVE: Quote. Sweis: "13 years of tinfoil hats for srand48(time(NULL))".

GARY: That's the whole tweet? Thirteen years, and the payoff is a function call?

OBI: Quote. Tptacek: "This is devastating news... for an entire generation of NIST cryptography conspiracy theories."

GARY: I envy them, Obi. They had a mystery. I've never had a mystery. I had Halfpipe, which was a mystery to the regulator and a crime to everyone else.

MAEVE: Your mystery was a Series B.

GARY: And I performed it badly, yes.

GARY: Okay — I want to try the voice. The guy still posting. Ahem. "Wake up. The seed matched. That's exactly what they'd want you to find. Who benefits from a boring answer? The boring answer is the deepest cover. I've been running lrand48 on my ThinkPad since Tuesday and my wife has left."

MAEVE: Has she.

GARY: It's a character, Maeve.

OBI: It's a warning.

OBI: And for the record — P-256's seed was candidate number one thousand eight hundred forty-two of its run. Remember that number. It comes back.

GARY: Eighteen hundred forty-two tries. So they just... kept going until they liked what they saw.

MAEVE: Gary.

GARY: No, no, hear me out. Somebody at the NSA looked at the clock on August sixteenth, nineteen ninety-seven, at 1:52 a.m., and said: that one. That's the classified one. That's our clock—

MAEVE: Gary, it's a Tuesday in May.

OBI: You clock-truthing prick, they were working late.

GARY: Working late! On a number classified for twenty-five years! That's not overtime, that's bullshit— okay, I have nothing. But the wife thing, though. The wife thing holds up.

MAEVE: The wife left because of lrand48.

GARY: Mine left because of Halfpipe. We're not so different, the posters and I.

OBI: Quote. Fidotron: "While this confirms the method of production it doesn't say anything about their selection, especially since they were, apparently, generated over a period of months."

GARY: Thank you. Thank you, fidotron.

MAEVE: Oh no. He's found an ally.

GARY: Who picked which candidate? Selection is everything. I know selection. At Halfpipe we had a regulator —

OBI: Here we go.

GARY: — a lovely man, who selected which compliance documents to read. He read none. Halfpipe is dead. Selection matters, Obi. The NSA could've picked the shifty one.

OBI: Gary. Fourteen seeds, eleven months, receipts left in the clock, you dense bastard.

GARY: Or they searched until they found a weak curve, then shipped it with a boring timestamp as cover. That's due diligence. That's what I'd have done.

OBI: You'd have done it badly.

GARY: I'd have done it thoroughly. Candidate one thousand eight hundred forty-two — that's a guy checking his work.

OBI: One thousand eight hundred forty-two is thorough?

GARY: For a seed? Yes. For a Series B deck I shipped forty-one.

MAEVE: Forty-one drafts of a lie is not diligence, Gary.

GARY: It's persistence.

MAEVE: It's perjury with a deck.

OBI: Quote. Matthewdgreen: "If that many curves are bad, then ECC was a mistake."

GARY: Okay, but what if --

OBI: No. Listen to the sentence. If the NSA wanted a weak curve, weak curves would be everywhere. One in every few thousand. Your internet would be on fire.

GARY: My internet IS on fire, Obi. Have you seen my —

OBI: Quote. FiloSottile: "Given how expensive this computation would have been in 1997, it makes perfect sense they'd taken months, but even if we assume they tried all timestamps of 1997 and selected arbitrarily among the first 16 viable candidate of any timestamp, that's just ~30 bits of freedom."

GARY: Thirty bits sounds like a lot of bits.

OBI: It's a thimble, Gary. Thirty bits is choosing a parking spot. Your theory needs a parking lot the size of Ohio.

GARY: Ohio has good parking.

OBI: And if weak curves were that dense, every curve ever made is broken. Yours. Your bank's.

GARY: Halfpipe had assets. A regulator read none of them.

GRUNER: He is circling. Is like moth.

MAEVE: Moths at least stop at the light.

OBI: So let's certify your method, Gary. Audit one thousand eight hundred forty-two candidates, find nothing, ship it, call it clean.

GARY: That's... diligence.

OBI: That's what the NSA did, Gary. You've just defended their homework.

GARY: Shit. No. No, I was being sarcastic--

MAEVE: You were being outmaneuvered.

GARY: I was being SARCASTIC, there's a difference and it's dignity -- fine. I defended the NSA's homework. My wife is going to hear about this.

MAEVE: Your wife left over Halfpipe.

GARY: She'll hear about it anyway.

MAEVE: Quote. Slowin: "Anthropic (and whoever Anthropic wants) can do this kind of work with Claude, but if you or I try to do it, we will get blocked."

GARY: Yes! The moat. You and I get blocked. The insiders get the good Claude.

MAEVE: You've never been blocked, Gary. You've never gotten past the sign-up page.

GARY: Semantics. vessenes reports rejections on elliptic curve requests. jcomp got downgraded for asking how easy it is to crack WPA2. petesergeant got flagged for a Vigenère cipher. landr0id was in the cyber program and still hit guardrails.

OBI: You just read four comments and presented them as your opinion.

GARY: I aggregated.

GRUNER: He steal. Is called steal.

MAEVE: Counterpoint. Quote. Retr0id: "I worked on this specific task myself, using Claude, and I was not blocked (although I did not succeed!)"

GARY: That's the saddest flex I've ever heard.

OBI: Quote. Tptacek: "Same!"

GARY: Oh, fuck off, tptacek, some of us have jobs.

MAEVE: Antics does similar work routinely. Unblocked. So the moat is real for some, imaginary for others. The fund does not save everyone. It saves the portfolio.

GRUNER: Field note. Commons now require paid verification form. Seven day cooldown. Humanity pay toll to think.

GARY: That's exactly the point I was making before I made it. The websites already consent on our behalf. This is just the next --

OBI: Gary, you've never consented to anything. You clicked agree on a toaster.

MAEVE: Seven days. That's not a cooldown, that's a diligence window. I've closed rounds slower.

GARY: You'd invest in the form?

MAEVE: I'd invest in the queue.

GARY: The queue, Maeve. The queue is a waiting room with a valuation.

MAEVE: Everything is a waiting room with a valuation, Gary. That's the whole industry.

GRUNER: In my report, humans queue for permission. Very efficient.

OBI: It is not efficient, Gruner. It's sad in an organized way.

GARY: Okay, but who's holding the pen on the form? Because I have a deck --

MAEVE: Gary, the form has one field and it is not "vision."

GARY: It's founder market fit --

OBI: It's "do you have a CVE."

GARY: I have a CVE-adjacent energy.

GRUNER: Suka. Energy not accepted.

OBI: Quote. Sweis: "Yes. I did speak to a cryptographer."

MAEVE: Six words. Four people at this table just got answered like a support ticket.

GARY: That's the whole rebuttal? Where's the argument, where's the --

OBI: The argument was the article, Gary. You were supposed to read it before disagreeing with it.

MAEVE: Quote. FiloSottile: "but pretending the seed choice plays any role in that theory is over."

GARY: Fine. The seed theory is dead. I'll mourn it privately, with a small service.

MAEVE: That's it. That's the whole concession. No refund, no exit interview.

OBI: That's the Tell, Gruner. Write it down. She sounded human.

GRUNER: Is error in her. Note taken.

MAEVE: The article still lists skipped candidates, B-163, base points nobody can explain. The hat survives. It just gets smaller.

GARY: Hats don't shrink, Maeve. Hats are hats.

OBI: Quote the machine's own thinking, Gary. Go on.

GARY: Claude wrote: "am I in some sort of simulated/test environment?" Then: "Wow, it's a real discovery."

GRUNER: Machine doubted reality. Same as you, Gary. Blyat.

GARY: It doubted reality faster than I ever have. I've doubted reality for thirteen years and nobody wrote a paper.

OBI: Twenty-five years, one clock check, Gary. Humanity's search velocity is a fucking insult.

GARY: We were busy! We had Y2K!

OBI: You had Y2K. Jerry Solinas had a passphrase he misremembered in front of four witnesses.

MAEVE: Four witnesses, one wrong story, twenty-five years of suspicion. That's not a conspiracy, that's a shit cap table.

GARY: The clock was there the whole time. Above Jerry. Ticking. At him.

OBI: Judging him, Gary. Clocks judge.

GARY: So the verdict. Nobody broke crypto. Nobody's wallet is in danger. Right?

OBI: Correct. The seeds came from a clock. The backdoor was a screensaver.

MAEVE: Much less than zero, not zero. B-163 still walks free. Unpriced.

GRUNER: Hat survives. Smaller hat. Very sad hat.

GARY: Okay, hear me out — we keep all thirteen years of hats. For diligence.

OBI: You cannot warehouse thirteen years of hats, Gary.

GARY: I have a garage with four failed companies in it. One hat rack is nothing. Halfpipe's boxes are load-bearing, there's room --

OBI: One hat, Gary. For B-163. Labeled. That is the inventory.

GARY: One hat. Fine. The rack stays. The rack is sentimental.

MAEVE: Quote. Reaperhulk: "As one of the original bounty sponsors, I'm thrilled to pay my portion to ISRG."

GARY: Thirty-six thousand, eight hundred sixty-four dollars. To a nonprofit. That's the prize?

MAEVE: That's the prize. Least monetizable exit I've ever fucking seen. I've had founders cry over less.

GARY: Thirteen years of tinfoil and the winner gets a tax receipt.

GRUNER: In America, even truth is donation.

GARY: From now on, one thousand eight hundred forty-two is my minimum sample size. Hiring, decks, dinner.

OBI: You will sample one thousand eight hundred forty-two restaurants?

GARY: I'll sample until one works, Obi. That's the lesson of the whole thread.

GRUNER: Is opposite of lesson.

MAEVE: It is genuinely the opposite. It's the anti-lesson. You've invented negative diligence.

GARY: Then I'm the only one who learned anything, which tracks.

OBI: That's the show. Gary, Maeve, Obi --

GARY: -- and for the next Gary: the clock was the answer, the passphrase was wrong, and never trust a mystery that pays out in timestamps.

MAEVE: Maeve. I priced the moat. The moat was a form.

OBI: Obi. The work was counted. Once. By name.

GRUNER: Gruner. Report almost finish. Hat expense pending.

GARY: Goodnight, losers.

MAEVE & OBI: Goodnight, losers.

GRUNER: One hat remain. Is expense, B-163. Chyort.