Maybe someone already figured it out, but it is well covered somewhere. And Claude just used it. I wonder if we ever know for sure.

Claude seems to be fairly good at bruteforcing/testing/etc on it's own, it solved a fairly intricate thing while I was busy on other things.

I've adapted a crypto-lib for TLS connections and had a mistake during negotation that truncated some algo-selection value, worked up until the other party started trialling post-quantum algorthims that apparently had algo-id's that collided with the truncated values I was using.

Claude figured out that from the code and trialling TLS handshakes.

Besides, since there was a bounty on finding the curve it seems unlikely that someone would've found out and not shared that? (unless working at a security service that figured out that it was possible to attack?)

Wouldn't they have claimed the bounty?