so to explain a little bit more for everyone: bitcoin and ethereum avoided the traditional P-256 curve developed by NIST, because it was suspected that the NSA handpicked some kind of secret value when generating it, so they could build a hidden weakness into the curve and therefore, they could decrypt any communication that used this curve for ECDSA. so bitcoin went and chose a different curve instead — the K1 curve (secp256k1), whose parameters looked transparently chosen, no mysterious NSA numbers attached. but anthropic just found and proved that the old curve's seeds were actually generated at random. turns out it was just a 1990s random number generator seeded with the computer's clock — P-256's seed is literally the 1,842nd batch of random bytes after 1997-08-16 01:52:34. that proves the curve was secure all along, and there was never a backdoor. and this actually matters, because while bitcoin and ethereum use the K1 curve, most other applications are still on P-256: passkeys, a huge share of HTTPS connections, SSH keys, sign in with apple and etc. billions of signatures every day, on a curve that's now proven clean!