Matthew Green: ‘Well, this is the interesting part now’ (skipped candidate curves)
Matthew Green @matthew_d_greenX
Why it matters
Johns Hopkins cryptographer (~22k views) points to the open question in Anthropic’s post: some viable candidate curves were skipped before the published ones.
Summary
Posted Fri Oct 16 19:50:30 +0000 2026 by Matthew Green (@matthew_d_green); 22,409 views, 367 likes, 22 reposts when read via api.fxtwitter.com on 2026-10-17. Screenshot of the ‘Open questions’ section of Anthropic’s post: for P-256 the published seed is candidate 1842 but candidate 876 also gives a valid curve; ‘We do not know what criteria may have been used, or whether this was an unintentional artifact.’
Archived text
Well, this is the interesting part now.