logoalt Hacker News

JumpCrisscross • today at 7:17 PM • 2 replies • view on HN

“In under half an hour, Claude discovered the origins of the NIST P-192, P-224, P-256, P-384 and P-521 seeds. None of them were the results of any hash algorithm at all, but rather the output of the C library’s lrand48 random-number generator, seeded with a Unix timestamp!”

Gorgeous. I wonder if the NSA employee who did this suffered a head injury or has been quietly giggling to themselves for the last quarter century.


Replies

sweis • today at 7:21 PM

The two people were Bob Reiter and Jerry Solinas. Jerry wrote in a 2015 email to Daniel Bernstein that he thought it was a hash of the passphrase. I corroborated that story with 4 people, including two ex-NSA folks off the record.

Everyone was wrong!

I wasn't able to reach Bob. He was working in private industry as of 2018, but never responded.

➕ show 3 replies
tptacek • today at 7:20 PM

Someone just posted this:

https://www.youtube.com/watch?v=eOQfNT6Jdkg

➕ show 4 replies