Bitcoin Forum

Bitcoin => Bitcoin Discussion => Topic started by: cozz on December 29, 2012, 08:01:39 AM



Title: Another riddle - guess script win 10BTC [SOLVED]
Post by: cozz on December 29, 2012, 08:01:39 AM
Bitcoin Address: 1cozzzrJAsYd7rE7FqvbmhTotBtX7Qhds
Bitcoin Privkey: 5J1...

EDIT: this is for people who at least know the basics of writing code and are capable of writing a simple script.

I have stolen the idea from this thread: https://bitcointalk.org/index.php?topic=133263.0 (https://bitcointalk.org/index.php?topic=133263.0)
Bitcoin address 1cozz... is loaded with 10BTC.
I give you the gpg encrypted private key to this bitcoin address.
I also give you the gpg private key.
The gpg password though has been created by a script and is longer than 20 characters.
Your task is to guess that script from the story below. I dont plan on giving any more hints as it really shouldnt be that hard.
(EDIT: I guess I changed my mind, hints will be given throughout the thread)
Just to be sure I have written 2 solution scripts one in php and one in bash. Both spit out the same password. Have fun!

Story
 My name is cozz. Once i made a journey and visited some of my old friends.
 The first one is a doctor and he has 5 children. He lives in very beautiful house.
 The house always impresses me so much that I drive 5 rounds around it before actually ringing the bell.
 The only problem with this friend is that he uses pepper instead of salt to all his meals. So I decided to leave quickly and
 went on to another friend. This friend always says that he even doesnt spice his meals. The funny thing
 is after eating there you feel like your stomach has grown about 137% of the original size.
 The trip went on to Maryland. Sadly the friend I was going to visit there wasnt at home. But accidentally
 I met a friend of this friend, who also wanted to visit him. After all the only thing I can say about
 this friend of the friend is that he literally is a stupid or unpleasant person.
 As the trip was more expensive than I thought, I decided to step by at one of my richer friends and ask for some money.
 I dont even know which country he is really from, but his name sounds like japanese.
 Having filled up my wallet I could now afford a flight to europe. Of course for that I had to make some money exchange.
 I simply exchanged all my numbered coins I had and became one 500euro note, which fit very well at the end of my wallet.
 The friend I visited in europe looks so old I always make fun of him that he must be born before jesus.
 Whenever possible he tells me his war-stories and how some fat guy kicked his ass.
 I even met a woman in europe. Her name was alice. She invited me to her house. It was great she even had a whirlpool there.
 Immediately we both jumped into it. The neighbours already shouting cozz+alice didnt really bother me at this time.
 After jumping in the pool with her I felt like we have become one now. We jumped like another fifty times in that whirlpool.
 When I had to get back to america I was looking for my flight number 888 at the airport, but I couldnt find it anywhere.
 So I called another friend in europe and asked him for advice. He has won his first race championship in 1996 in europe driving with a speed of 160 miles per hour.
 This friend now guided me really really quickly until I found my flight back home. Funny thing was that my flight number was at the very beginning of
 the airport.
 Over all this was a very exciting trip, and the hole trip I never felt like I had to add another entering somewhere.
 The only thing that bothers me is that I have lost alice phone number somewhere. Only thing I can remember it was an eight digit number starting with 78.
 Well at least I know where I can find her:)

gpg encrypted private bitcoin key
Code:
-----BEGIN PGP MESSAGE-----
Version: GnuPG v2.0.19 (GNU/Linux)
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=VKBC
-----END PGP MESSAGE-----

gpg private key
Code:
-----BEGIN PGP PRIVATE KEY BLOCK-----
Version: GnuPG v2.0.19 (GNU/Linux)

lQO+BFDekGwBCADNyU2caYXduq0TNo0BZnvtY06g35TdrlUl2X18m0xVX3iE8Un3
9xvyqY6806SmHg1Pa91jGVL9TAFUp0bcMQU2tUzDzd2FzH5v5/zJQD5S9B0kfPFH
qOA/BmIlDyPN/39PCi4csbLfn7cdNf+E8UVC/LkQMiSYByoHHPMX3lFvjmQpWCtK
Cu3gN87VLBieQlT0a3e8et9Ne0mde+Miz8Q91Udjw4tdCaEPJXQfQKxB4vgLLZGD
NGfMazdb29Agowd3WMd4yiJfcyRAeEaEiYyCDhx1FXieBnyS9LxDFz4PAbIhNTXd
L6j6Kbp3ddUjiY4+i7hxYdzU5PQJRyOw/me/ABEBAAH+AwMCa/9W4DyUvSvUFtor
nD/VorjgB2sN7bZncVD6GHR9I0lHZm+k0ZwOg0z2/JQ5q8eULdPj8eLlaF6qy/WO
mUqhvXkH3sXInDTlxKlzcgrhRyr33dMvxOERJWNKTpckizkUHkZy77SPIwugY9ti
x2DqMnl82V1y5a9rduRq28jimNbcMXbybu6CiGR5OmLfB6GyRcfh/jW7FHopj52o
VpkGGwwuqdxKdQmNM/UbCtZTKHmpX7Rpkkcj5E7VJ+Id3FDeY/TSZYs4tnwPlQWH
tNAz1b+em7/03I4eH4RMSvT5cPRtWB6nc+8fppDq1GcJ5tDsZE+D4XCflwkvQXYW
cG2vs0ss2zufV+W9BUfaqTqWydSjKIEyMpec6vc4or3Qqy6Tdrn97DmgzP3hR0JZ
BEQPUeRXQI/N9jLf4xViugaUURQbRjtMPxnKkig2nedpMFoS3vBsTvApufX+V0CS
IAIriRBfz7GQsyOT4ReNRKK1QVroPUsRVhg9eS+K+SJj8MtUwgUlKAiatZmkHL7B
TWGHK8NT0M4aiNUiOhJFQLTvmt/T+q68dr9cf8g/6kd0TcCXodgH0bMoWf7C/bY7
VAjdfOtB50EepT/qnbm3Diya5luH4s55omBn17qWh9im7+//ameruNfb7//uHZuZ
yk5p04p6gQmC2ujwIbYjqNYc21wM1GriTyk8UaEdcEJFmz/fiXUxe4ku/2aROy5y
xR7556vyPUZTsMOx+JVzzDjsX6G3wWXL1IwO0/ZI8nit9/EygEdmCfNJENfkZHzb
5rTwuW8bCxZntYpQfXNHk0yAhJPOx3pyhD+UC3UbScSbkVyTg1C8ZHLywY14rA7F
IWL+sAAVAq+hz0qN+u3NUbFfMFEfulyS2HLmhB2kUuVz3fjgrZ99cJgBlgopNlXo
G7QiQ296eiBMb3ZhbiA8Y296ejAwbG92YW5AeWFob28uY29tPokBOAQTAQIAIgUC
UN6QbAIbAwYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AACgkQHaHO9hYEg8vjCwgA
jf2hCxDMUKYQ4BMMt27SyLImyT1FXUYF1iuwdZO3TFXdJdVcnbLImkg9Bm3c+onj
W6eMUscitO5GuswdUn9uZucp+fc8WXJhQNPOr+qSQtGhD7PaSIkw5hY0LeBEhzwW
qsnEuqW3Voq6yunKVxUW4gqMzNlfcD9GhuXRe/E8NWnJWZG9p98ShmSOhk34kSVW
nhbgC4H1AXZamJGCtBDYiwSMseSPPU3oox7ijv0k/3JwHY75JXsgQLtbnZr0HhWx
i8bn4Z5fCKhXO4GG6KqN3cymV3pZPDPKlAq4Ks5uUkY3MYucqId4FZfMpKFqokIP
pZewgJ85USOmn6NYu03rl50DvgRQ3pBsAQgAual9FPCkjAm9vbnxacd5AqfTD7Jo
yC0CgykLHAR6LeqwHVtYtbcHj7ajMgPFArMmU1pPX879ODt8l6Xc00r88UK9QWy9
sM3TFflTPlnkl4YAlWJh3NayZs7/qasbOatcqtFdDjiX01rlDfapXWfyMhifunMJ
bb/VaPZ093cVigQmKmCsq/kFZAXb29yCucLnJQtWebaMTuq4+mSRQw54tNs1S/Zj
HgbIBxW/aRjOoXDRIuwrk7GtqhOnnXbx1MvwWtRvgDVTALyhkDjY7NQKKKOBmcs/
GeBRnASKNqvd3z27wXx2mMHgAtFUX1E9YfeMM049ljf0yetVlEHeHY7R3wARAQAB
/gMDAmv/VuA8lL0r1APtPSDJGPcsZf/xid5Js+AQ0BWbQjV40t5l1P6kOTbr1nWh
8LstBlWyMzWiGTQib7s2Q8Y+JlOSeW75rW7wewyl2MxmCJ5R7sJVvdR0Mqy/8shO
47epXG3ftJytV3TXP1GC55pFlohJfbdxrhSElxmGvyj7PAPxYVO7kpU8zJ4F7EGC
jGeEsiakX31V1qEdtlo+lBt5fm4OlCtSp/17jvT36mmE2bWq2QI6RsH3w8i29ZwA
+SilA1e/IxULRs/hJ6M3aPH8i9y3Su0zp8bmU+EhRkbLMTS+dd8w1p/ZK3x/L5pF
N4Xm7irEW9H28++VkPOtwMYtO6qPcKjD0xXHfNHzjBEvUtvK0GCqQPQ+erS5A81L
EjzLLoKHma5wFJIMbLikVDtbUHRZFHGldyZKqMUqPhOprKCINDj6hfBLAWNN/zP1
37ctEThD4TnATTmDMXv5vIQ5PkPnLNbJE4ZFiDWRc+v9XPYwa3yZuUKk8sqLOBGg
uFu5Rnq49iznmX9+gGZlh8yERfS2W8ahaJZLKo20lyn4hwVj5WVRK6J13ehR10y/
Pi3zY16q3+r+iQUwvHl3LOMVzzNx6OgcX/41AS/v8eU2Fdho/sxwwrLIBngWMdOK
QtLiLrqxLUDFJby1nYgWWMkLuhSrjIajQr8LuyYcaMXuZPY2x0IxkIiO2gzra8IF
63o0oobkSvBxkZ21pYUJjHOdtS1kqEFr983k0hvxch/77XJPkqeCo4ybFGTtql8X
Oj7AHCpVogl7INrHfOvoB22UwNKQjoUICed/OSM8a7TVQ/IgAlPtI7fjYCJPKtdc
irFEpKYgP2gktDlAl30phOXROEylAHqkJmraWV20r79fLqMn9vj5eOPtSxVW7FFi
vNmuIFU7mkUoKvshfrrgfYOJAR8EGAECAAkFAlDekGwCGwwACgkQHaHO9hYEg8sT
QQf/V31tzlbmdgIClBqs2V9rR/dhUcs6KW3c4fbVyJxKYhgx9mRyRCytos0onaPs
ZSHzFfHvV6vVxPKV4th++a3DGGax1qefHCVQ1hNAlH+lY9NuEefFHAAWafBefSeg
t3nahYKiaNNHLE2+vGn+Yn/p41dMBjvsndPNf6FFBHKTpweule5h0Q8pe2vf67rv
/CcacoPitpCtIHHA7b46Z9ZEM+ABHCoxLBpRDES2Tn08AYkFmtQ17C7VPADKBmac
WOFih0Xz6vN6tyxiR3OS+101W4dUWCO8eMnQogyV4aZIaln9jGtQxdJvPqqJq3r1
72D1c+CzZ2690Fz1H6l+2jtaJQ==
=G2Gf
-----END PGP PRIVATE KEY BLOCK-----






Title: Re: Another riddle - guess script win 10BTC
Post by: John (John K.) on December 29, 2012, 08:15:44 AM
*goes dizzy at the story written* Is the strange prose and grammatical errors an integral part of the script too?
I guess it is....


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 08:23:06 AM
*goes dizzy at the story written* Is the strange prose and grammatical errors an integral part of the script too?
I guess it is....

As you have already noticed, english is not my first language. Sorry for that. Grammatical errors dont really matter, its about the content.


Title: Re: Another riddle - guess script win 10BTC
Post by: Bowjob on December 29, 2012, 08:32:48 AM
I'm actually not quite sure what to do here... Read the story and.. somewhere within the story is.. a "script?


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 08:36:58 AM
I'm actually not quite sure what to do here... Read the story and.. somewhere within the story is.. a "script?

Yes, but I have to admit that this is for people who at least know the basics of writing code and are capable
of writing a simple script. Could basically be written in any language.


Title: Re: Another riddle - guess script win 10BTC
Post by: Bowjob on December 29, 2012, 08:40:17 AM
Okay, I'm out then.


Title: Re: Another riddle - guess script win 10BTC
Post by: Tacticat on December 29, 2012, 10:40:47 AM
Well, at some point it obviously requires whirlpool hash. That's what I got.


Title: Re: Another riddle - guess script win 10BTC
Post by: John (John K.) on December 29, 2012, 12:02:27 PM
Well, at some point it obviously requires whirlpool hash. That's what I got.
And cozz and alice are variables of a kind that could be concatenated/added together mathematically.


Title: Re: Another riddle - guess script win 10BTC
Post by: wachtwoord on December 29, 2012, 12:17:27 PM
The flight number should be at the start.


Title: Re: Another riddle - guess script win 10BTC
Post by: CIYAM on December 29, 2012, 02:13:01 PM
Well I thought I might have got somewhere with one of these - but unfortunately no cigar:

Code:
88812553199616078911616500
88812553789116161996160500
88812553789116161601996500
88812553199678911616160500
88812553160199678911616500
88812553160789116161996500
88816012553199678911616500
88816012553789116161996500
88819961255316078911616500
88819961255378911616160500
88816019961255378911616500
88816019967891161612553500
88816019967891161612553500
88878911616125531996160500
88878911616125531601996500
88819961255316078911616500
88819961255378911616160500
88819961601255378911616500
88819961607891161612553500
88878911616199616012553500
88878911616160199612553500
88819967891161616012553500
88819961607891161612553500

:(


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 02:52:48 PM
Well, at some point it obviously requires whirlpool hash. That's what I got.

correct. 1 BTC for you sir: d794e7cb39e187088483d567d9d8665546785744e4e2e7e8d4e9cc694fa8bfef (transactionid)


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 02:55:39 PM
And cozz and alice are variables of a kind that could be concatenated/added together mathematically.

Not quite correct. Script uses concat operation, but the thing with the variables is just halfway correct.


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 02:57:53 PM
The flight number should be at the start.

correct. 1BTC for you sir:  0d6ebe5a2953b4f02defa6d69fdb1644a060b33898c2e2404c90e9794e219b9f (transactionid)

HINT: The password starts with 888 and contains both letters and numbers.


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 02:59:52 PM
Well I thought I might have got somewhere with one of these - but unfortunately no cigar:

Code:
88812553199616078911616500
88812553789116161996160500
88812553789116161601996500
88812553199678911616160500
88812553160199678911616500
88812553160789116161996500
88816012553199678911616500
88816012553789116161996500
88819961255316078911616500
88819961255378911616160500
88816019961255378911616500
88816019967891161612553500
88816019967891161612553500
88878911616125531996160500
88878911616125531601996500
88819961255316078911616500
88819961255378911616160500
88819961601255378911616500
88819961607891161612553500
88878911616199616012553500
88878911616160199612553500
88819967891161616012553500
88819961607891161612553500

:(


How did you come up with these? As posted above password is not only numbers. Also the flight number does not really exist, this is just part of the story and made up.


Title: Re: Another riddle - guess script win 10BTC
Post by: CIYAM on December 29, 2012, 03:01:44 PM
How did you come up with these? As posted above password is not only numbers.

Didn't know that until after I had come up with that and posted. :(

For the earlier stuff I was assuming that "cozz" was hashed with MD5 (with another 5 rounds?) which is then base64'd?

And I also thought that Maryland (MD) was another reference to MD5.

Got confused about the whole stuff about richer (although was guessing SHA1 followed by SHA256) and then the stuff about getting the "coins" to make 500 Euros I thought meant "adding up all the digits" from the SHA256 hash.

Actually as I hadn't even heard of "whirlpool" before I think I probably have pretty much zero chance at this (although now have "hashdeep' installed which is where the "78911616" came from) - but I like the cleverness of it. :)


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 03:44:53 PM
HINTS:

was hashed with MD5

correct. The doctor with 5 children is md5.

For the earlier stuff I was assuming that "cozz" was hashed with MD5

halfway correct

"cozz" was hashed with MD5 (with another 5 rounds?)

md5 is used 5 rounds total in the script. I guess the story should have been, that I am driving around the doctors house WHILE EATING the doctors meals.

which is then base64'd?

correct. I you look up the wikipedia page of base64 and search for 137 you can see what I was going for with the 137%

And I also thought that Maryland (MD) was another reference to MD5.

nope.

(although was guessing SHA1 followed by SHA256)

Well, maybe something like that...

and then the stuff about getting the "coins" to make 500 Euros I thought meant "adding up all the digits" from the SHA256 hash.

Not adding up all the digits, just removing.

1BTC for you sir: 39f77b5f297500d80701747b24f0e2d72cd1b9bc8cafea0a19132e28f3be96ab (transactionid)


Title: Re: Another riddle - guess script win 10BTC
Post by: Scrat Acorns on December 29, 2012, 03:59:26 PM
He has won his first race championship in 1996 in europe driving with a speed of 160 miles per hour.
RIPEMD160 (published in 1996)


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 04:19:23 PM
He has won his first race championship in 1996 in europe driving with a speed of 160 miles per hour.
RIPEMD160 (published in 1996)

correct. you win 1BTC. whats your btc address?


Title: Re: Another riddle - guess script win 10BTC
Post by: Scrat Acorns on December 29, 2012, 04:26:35 PM
correct. you win 1BTC. whats your btc address?
14r9f5paWs67S8ixqssSvpN3yuiChA3Pcb

Quote
he literally is a stupid or unpleasant person.
ROT13?

Quote
I never felt like I had to add another entering somewhere.
No line feeds for all hashes


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 04:31:08 PM
correct. you win 1BTC. whats your btc address?
14r9f5paWs67S8ixqssSvpN3yuiChA3Pcb

145cc0242d8266536ae1f60f69484352af8c512fbd7a743651e18668a48ff471 (transactionid)

he literally is a stupid or unpleasant person.
ROT13?

nope

I never felt like I had to add another entering somewhere.
No line feeds for all hashes


correct


Title: Re: Another riddle - guess script win 10BTC
Post by: Scrat Acorns on December 29, 2012, 04:35:39 PM
Quote
The friend I visited in europe looks so old
Has to be MD2 or MD4


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 04:38:12 PM
NOTE:

I will spend max. 10BTC for right guesses, 4BTC have already been sent. The next 6 right guesses get a coin.
This way also people who can not code may participate.


Title: Re: Another riddle - guess script win 10BTC
Post by: Scrat Acorns on December 29, 2012, 04:39:13 PM
Quote
but his name sounds like japanese
Might refer to Satoshi therefore RIPEMD160(SHA256(SHA256(x)))

This is still too hard


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 04:39:54 PM
Quote
The friend I visited in europe looks so old
Has to be MD2 or MD4

nope. I visited only one doctor:)


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 04:48:08 PM
Quote
but his name sounds like japanese
Might refer to Satoshi

correct. The rich is guy is Satoshi. you win another 1BTC. 85a650ded24b61d11d83de0c98ee3269e097543f111a7cf3e7537ce4e549be17 (transactionid)

So 5BTC left to win for right guesses.

HINT
I also give away the hash here: its simply 2 rounds of sha256


Title: Re: Another riddle - guess script win 10BTC
Post by: gilgil on December 29, 2012, 04:54:01 PM
literally is a stupid or unpleasant person

git = stupid or unpleasant person

Maryland has the National Cryptologic Museum, so I would guess git-encrypt (which is AES256)


Title: Re: Another riddle - guess script win 10BTC
Post by: CIYAM on December 29, 2012, 05:01:46 PM
Maryland has the National Cryptologic Museum, so I would guess git-encrypt (which is AES256)

Shit - I actually saw the link to that Museum when I Googled Maryland and thought it must have somehow been relevant - great find!


Title: Re: Another riddle - guess script win 10BTC
Post by: Scrat Acorns on December 29, 2012, 05:05:28 PM
Quote
The friend I visited in europe looks so old
Could be the string "enigma" concatenated


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 05:08:57 PM
literally is a stupid or unpleasant person

git = stupid or unpleasant person


correct. whats your BTC-address?

Maryland has the National Cryptologic Museum, so I would guess git-encrypt (which is AES256)

nope. git is the friend of the friend. so who could be that friend?


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 05:09:53 PM
Quote
The friend I visited in europe looks so old
Could be the string "enigma" concatenated

nope.


Title: Re: Another riddle - guess script win 10BTC
Post by: gilgil on December 29, 2012, 05:14:17 PM
literally is a stupid or unpleasant person

git = stupid or unpleasant person


correct. whats your BTC-address?

Maryland has the National Cryptologic Museum, so I would guess git-encrypt (which is AES256)

nope. git is the friend of the friend. so who could be that friend?

1JPgBnLMtz8Vbi7hcfjXkRR4f42kYbUmcd

Thanks!


Title: Re: Another riddle - guess script win 10BTC
Post by: Scrat Acorns on December 29, 2012, 05:15:30 PM
nope. git is the friend of the friend. so who could be that friend?
SHA1 (used by git)

then again it might be related to Linus


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 05:21:21 PM

1JPgBnLMtz8Vbi7hcfjXkRR4f42kYbUmcd

Thanks!

50657135d2225d71a5cbfd48a12566c4e81d01ac15768a47aa2fac01ef3a1a6d (transactionid)

4BTC left


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 05:23:49 PM
nope. git is the friend of the friend. so who could be that friend?
SHA1 (used by git)


correct.

157091000d210c98e63d5b5b09d424a16b1d8f31399740b5f28074551b4cfcd9 (transactionid)

3BTC left for right guesses.


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 05:33:19 PM
The only questions kinda open are who is the old guy and what operation here?
Then you have to put things together, at 2 points you have to guess from the story what exactly to hash.
Also what about the thing with the money exchange and where have I lost alice phone number?


Title: Re: Another riddle - guess script win 10BTC
Post by: flatfly on December 29, 2012, 05:36:02 PM
Quote
The only problem with this friend is that he uses pepper instead of salt to all his meals. So I decided to leave quickly and went on to another friend. This friend always says that he even doesnt spice his meals.

Hmmm the password is not salted?


Title: Re: Another riddle - guess script win 10BTC
Post by: Scrat Acorns on December 29, 2012, 05:40:23 PM
who is the old guy
Snefru


Title: Re: Another riddle - guess script win 10BTC
Post by: flatfly on December 29, 2012, 05:43:17 PM
Money exchange = MtGox?  (can't be that easy?)


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 05:46:21 PM
Quote
The only problem with this friend is that he uses pepper instead of salt to all his meals. So I decided to leave quickly and went on to another friend. This friend always says that he even doesnt spice his meals.

Hmmm the password is not salted?

actually the opposite


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 05:47:18 PM

nope. cant remember Snefru being ass-kicked by a fat guy.


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 05:49:39 PM
Money exchange = MtGox?  (can't be that easy?)

nope. there is actually nothing more to guess here. I posted earlier simply remove all digits and then add a 500euro note,
"which fit very well AT THE END of my wallet."


Title: Re: Another riddle - guess script win 10BTC
Post by: Scrat Acorns on December 29, 2012, 05:57:07 PM
nope. cant remember Snefru being ass-kicked by a fat guy.
That "born before jesus" thing was too strong.
Then it must be GOST and the fat guy is USA, lol.


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 06:03:13 PM
nope. cant remember Snefru being ass-kicked by a fat guy.
That "born before jesus" thing was too strong.
Then it must be GOST and the fat guy is USA, lol.

nope. but old guy LIVED in europe.


Title: Re: Another riddle - guess script win 10BTC
Post by: ralree on December 29, 2012, 06:17:26 PM
Very fun story.  I'm committing my progress here in python:

https://github.com/hank/life/blob/master/code/python/cozzriddle/cozz.py

I'm having trouble with a few things.  

  • I don't know the old guy yet, but Euro old dude beat by fat man seems like Enigma beat by England (fat man is Churchill?) - no idea what the key would be for enigma though.
  • I can't tell whether I'm supposed to input my result from the previous hashes into the whirlpool.  Right now, I'm just assuming that and concatenating alice, and looping 50 times.  Maybe previous result goes in between cozz and alice, all three concatenated?
  • Alice's phone number - sooo there's an 8 digit number used somewhere in the whirlpool rounds?  Not really sure where to put that..
  • 888 and the airport.  I assume you mean prepend 888 to the airport code (such as BWI since we were talking Maryland earlier).  Or maybe you mean the origin code in Europe (such as a German airport).  Need a hint here I think.  Also, where does the previous result enter into this calculation?  Maybe we're supposed to ripemd160(888+airport+previous hash)?


Title: Re: Another riddle - guess script win 10BTC
Post by: Scrat Acorns on December 29, 2012, 06:26:58 PM
Caesar


Title: Re: Another riddle - guess script win 10BTC
Post by: wachtwoord on December 29, 2012, 06:29:25 PM
The only questions kinda open are who is the old guy

Leonidas, king of the Spartans (the fat guy is Xerxes king of the Persians)

Edit:

And the substitution alphabet is Greek


Title: Re: Another riddle - guess script win 10BTC
Post by: ralree on December 29, 2012, 06:30:43 PM
Caesar
Yeah I thought that could be it too, but I don't know what the substitution alphabet would be based upon.


Title: Re: Another riddle - guess script win 10BTC
Post by: Scrat Acorns on December 29, 2012, 06:32:58 PM
the fat guy is Xerxes king of the Persians

"Who are you calling fat sillybuns? I look ultra fabulous."
http://themovieblog.com/wp-content/uploads/2010/07/xerxes.jpg


Title: Re: Another riddle - guess script win 10BTC
Post by: wachtwoord on December 29, 2012, 06:34:02 PM
Xerxes: "A fat-ass who was the king of the persians 2.400 years ago, who couldn't do anything. He leaded the Persians in the battle of Thermopylae and he only managed to kill the 300 spartans and the 700 thespians because of that bitch Ephialtes, who showed the persians the path which leaded behind the greeks. He is also that fat guy at meet the spartans who is less fat and gay than the real one. It can also be an insult."

http://www.urbandictionary.com/define.php?term=Xerxes&defid=3900527

Oh and:

"Ancient Persian King that reigned over the Persian empire between 485 BC to 465 BC. For some reason was portrayed as 7 foot tall black metrosexual in the popular movie '300.'" (same source)


Title: Re: Another riddle - guess script win 10BTC
Post by: Scrat Acorns on December 29, 2012, 06:35:53 PM
Everyone knows hollywood is 100% real


Title: Re: Another riddle - guess script win 10BTC
Post by: ralree on December 29, 2012, 06:54:34 PM
"Fat Man" could also refer to the bomb dropped on Nagasaki in WWII, but I have no idea what this has to do with Europe other than the Axis.

Quote
"Fat Man" was possibly named after Winston Churchill,[2] though Robert Serber said in his memoirs that as the "Fat Man" bomb was round and fat, he named it after Sydney Greenstreet's character of "Kasper Gutman" in The Maltese Falcon.
http://en.wikipedia.org/wiki/Fat_Man


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 07:06:50 PM
Very fun story.  I'm committing my progress here in python:

https://github.com/hank/life/blob/master/code/python/cozzriddle/cozz.py


i have sent you 1BTC for this b80460a1924b2f232ab4e938b9eccd2a498702583b26b720f1ffd4a9a953ab2c (transactionid)

I can confirm that the script is logocally correct up to the point after the money exchange. We get different results, because you used ascii instead of hex. So I post correct solutions here.
After the money exchange the hash must be
Code:
cdceddbefbedbcdeccecdfea500euro

php
Code:
$password = 'cozz';
for ($i = 1; $i <= 5; $i++) $password = md5($password.'pepper');
$password = base64_encode($password);
$password = sha1($password); # git uses sha1
for ($i = 1; $i <= 2; $i++) $password = hash('sha256',$password); # bitcoin
$password = preg_replace('/[0-9]+/','', $password).'500euro';
echo "exchange: $password\n";

bash
Code:
password="cozz"
for (( i=1; i<=5; i++ )); do
password=$(echo -n "$password""pepper" | md5sum | cut -d ' ' -f 1)
done
password=$(echo -n "$password" | base64)
password=$(echo -n "$password" | sha1sum | cut -d ' ' -f 1)
for (( i=1; i<=2; i++ )); do
password=$(echo -n "$password" | sha256sum | cut -d ' ' -f 1)
done
for (( i=0; i<=9; i++ )); do
password=${password//$i/}
done
password="$password""500euro"
echo "exchange: ""$password"

python
Code:
import binascii
# My ...
name = "cozz"
# Once I made a journey and visited some of my old friends.
# The first one is a doctor and he has 5 children (MD5)
# He lives in a very beautiful house.
# The house always impresses me so much that I drive 5 rounds around it before
# actually ringing the bell (while eating his meals)
# The only problem with this friend is that he uses pepper instead of salt
# to all his meals
import hashlib
m = binascii.b2a_hex(hashlib.md5(name+"pepper").digest())
m = binascii.b2a_hex(hashlib.md5(m+"pepper").digest())
m = binascii.b2a_hex(hashlib.md5(m+"pepper").digest())
m = binascii.b2a_hex(hashlib.md5(m+"pepper").digest())
m = binascii.b2a_hex(hashlib.md5(m+"pepper").digest())
print "After 5xmd5 = ", m
# The funny thing is after eating there you feel like your stomach has grown
# about 137% of the original size.
import base64
m = base64.b64encode(m)
print "After base64 = ", m
# The trip went on to Maryland. Sadly, the friend I was going to visit there
# wasn't at home. But accidentally I met a friend of this friend who also
# wanted to visit him. After all the only thing I can say about this friend of
# the friend is that he literally is a stupid or unpleasant person (git).
# git -> sha1
m = binascii.b2a_hex(hashlib.sha1(m).digest())
print "After sha1 = ", m
# As the trip was more expensive than I thought, I decided to step by at one of
# my richer friends and ask for some money. I dont even know which country he
# is really from, but his name sounds like japanese.
# Satoshi -> 2xsha256
m = hashlib.sha256(binascii.b2a_hex(hashlib.sha256(m).digest())).digest()
print "After 2xsha256 = ", binascii.b2a_hex(m)
# Having filled up my wallet I could no afford a flight to europe.
# Of course for that I had to make some money exchange.
# I simply exchanged all my numbered coins I had and became on 500euro note
# Which fit very well at the end of my wallet.
# (remove all numbers from hash, put "500euro" at the end
import re
m = binascii.b2a_hex(m)
m = re.sub(r'[0-9]', '', m) + "500euro"
print "After 'cashing in' numbers = ", m



Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 07:11:00 PM
Caesar

correct. 1BTC bee4464a735519ad7aac8eee58778b55c78a8849db93f368a853e0558d773a7f (transactionid)


Title: Re: Another riddle - guess script win 10BTC
Post by: John (John K.) on December 29, 2012, 07:16:37 PM
And cozz and alice are variables of a kind that could be concatenated/added together mathematically.

Not quite correct. Script uses concat operation, but the thing with the variables is just halfway correct.
Guess the concat should be here then: After jumping in the pool with her I felt like we have become one now

Hmm.. the 500euro bill is designed on 1996. ripemd160 again? (wild guess here) Or simply concatenate the text '500euro' ?

We jumped like another fifty times in that whirlpool : Whirlpool hash for 50 times?



Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 07:23:32 PM

  • I can't tell whether I'm supposed to input my result from the previous hashes into the whirlpool.  Right now, I'm just assuming that and concatenating alice, and looping 50 times.  Maybe previous result goes in between cozz and alice, all three concatenated?

Just read the story. The script starts with name = "cozz" so imagine the hash being cozz.

  • Alice's phone number - sooo there's an 8 digit number used somewhere in the whirlpool rounds?  Not really sure where to put that..

I lost the phone number. So you have to get rid of it. You need not to search that much to find the number, its not made too difficult.

  • 888 and the airport.  I assume you mean prepend 888 to the airport code (such as BWI since we were talking Maryland earlier).  Or maybe you mean the origin code in Europe (such as a German airport).  Need a hint here I think.  Also, where does the previous result enter into this calculation?  Maybe we're supposed to ripemd160(888+airport+previous hash)?

As mentioned earlier the final gpg password starts with 888. The ripe-guy just guides me until I find my flight. There is no more guessing like adding airport or something, caesar was kinda the last thing to guess.


Title: Re: Another riddle - guess script win 10BTC
Post by: John (John K.) on December 29, 2012, 07:25:17 PM
Quote
eight digit number starting with 78.
Well at least I know where I can find her:)

Alice must be at Croatia (country number 78)?


Title: Re: Another riddle - guess script win 10BTC
Post by: John (John K.) on December 29, 2012, 07:26:32 PM
...
There is no more guessing like adding airport or something, caesar was kinda the last thing to guess.

Oops, missed this.


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 07:31:48 PM

We jumped like another fifty times in that whirlpool : Whirlpool hash for 50 times?



correct. 1BTC f4c593b34f862d27f6ccc18415e5bdb9356635693c64a23d8ad1863ab1bb0853 (transactionid)

NO MORE BITCOINS NOW

its now only up to solving the riddle



Title: Re: Another riddle - guess script win 10BTC
Post by: ralree on December 29, 2012, 07:32:47 PM
Very fun story.  I'm committing my progress here in python:

https://github.com/hank/life/blob/master/code/python/cozzriddle/cozz.py


i have sent you 1BTC for this b80460a1924b2f232ab4e938b9eccd2a498702583b26b720f1ffd4a9a953ab2c (transactionid)

Thanks!

I can confirm that the script is logocally correct up to the point after the money exchange. We get different results, because you used ascii instead of hex. So I post correct solutions here.
After the money exchange the hash must be
Code:
cdceddbefbedbcdeccecdfea500euro

Got it on my end - thanks.

Quote from: johnthedong
Alice must be at Croatia (country number 78)?
Ah nice one!  Oh, but it looks like it doesn't matter..

Quote from: cozz
imagine the hash being cozz.
Got it.

Quote
I lost the phone number. So you have to get rid of it. You need not to search that much to find the number, its not made too difficult.
Thanks - that makes more sense now.

Quote
caesar was kinda the last thing to guess.
Now to just find the right substitution...


Title: Re: Another riddle - guess script win 10BTC
Post by: John (John K.) on December 29, 2012, 07:40:23 PM

We jumped like another fifty times in that whirlpool : Whirlpool hash for 50 times?



correct. 1BTC f4c593b34f862d27f6ccc18415e5bdb9356635693c64a23d8ad1863ab1bb0853 (transactionid)

NO MORE BITCOINS NOW

its now only up to solving the riddle


Thanks!

caesar was kinda the last thing to guess.
Now to just find the right substitution...
[/quote]

Could be anything before 6, as Jesus was born on 6 BC if I'm not wrong...but 26 combinations ain't that hard to list down now thankfully.

I sure wish I'm with my laptop/desktop here - can't run any code in this tablet.  :'(


Title: Re: Another riddle - guess script win 10BTC
Post by: ralree on December 29, 2012, 07:57:04 PM
Updates at https://github.com/hank/life/blob/master/code/python/cozzriddle/cozz.py

I'm very close - I can almost taste it!

I think my problem is in the whirlpool.  Time to mess around with that a bit!


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 08:07:30 PM

I'm very close - I can almost taste it!


Yep. To bring this to an end:
- original caesar cipher was shift by 3
- I shifted numbers too
- in total there are 51 jumps into the pool
  first on was me +alice
  then another 50 together

now go get the coins



Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 08:09:52 PM
Oh I just noticed your script is still missing the phone number thing, but you will find that Im pretty sure.


Title: Re: Another riddle - guess script win 10BTC
Post by: ralree on December 29, 2012, 08:12:00 PM
OMFG I'm so close..

Thanks for the tips!


Title: Re: Another riddle - guess script win 10BTC
Post by: Scrat Acorns on December 29, 2012, 08:16:32 PM
Gotcha!

cozz: Thanks for the BTC and this awesome contest.

I could have gotten this 30 minutes ago but I was too stupid including the phone after the ripemd hash


Title: Re: Another riddle - guess script win 10BTC
Post by: ralree on December 29, 2012, 08:18:32 PM
Damn nice Job Scrat!  What ended up being the final script?


Title: Re: Another riddle - guess script win 10BTC
Post by: Scrat Acorns on December 29, 2012, 08:21:20 PM
This is how I did the whirlpool thingy:

Code:
$phonefound = false;

function whirlphone($stuff)
{
global $phonefound;

$out = hash('whirlpool', $stuff);
$offset = 0;

again:
$pos = strpos($out, '78', $offset);
if ($pos !== false && !$phonefound)
{
$phone = substr($out, $pos, 8);
if (ctype_digit($phone) && strlen($phone) == 8)
{
$phonefound = true;
echo 'Possible phone: ' . $phone . "\n";
echo 'preout: ' . $out . "\n";
$out = substr($out, 0, $pos) . substr($out, $pos + 8);
echo 'aftout: ' . $out . "\n";
return $out;
}
else
{
$offset = $pos + 2;
goto again;
}
}

return $out;
}

$start = whirlphone($start . '+alice');

for ($i = 1; $i <= 50; $i++)
{
$start = whirlphone($start);
}

Yeah sue me for using goto :D I had to do it fast


Title: Re: Another riddle - guess script win 10BTC
Post by: ralree on December 29, 2012, 08:26:57 PM
78427939?

29a253dbe3d494581e30dfae3fd363f78427939cf2e467369b0fea2fba0e6c667e37f888d14b2a3 cc1153f552b1cbf9d504436aa9221eb0c123b9f555733dd22 was the full whirlpool output?

And where did you use that?


Title: Re: Another riddle - guess script win 10BTC
Post by: Scrat Acorns on December 29, 2012, 08:28:14 PM
78427939?

29a253dbe3d494581e30dfae3fd363f78427939cf2e467369b0fea2fba0e6c667e37f888d14b2a3 cc1153f552b1cbf9d504436aa9221eb0c123b9f555733dd22 was the full whirlpool output?

And where did you use that?

Correct, thats the phone and now you have to slice it out of the string since he loses it.


Title: Re: Another riddle - guess script win 10BTC
Post by: cozz on December 29, 2012, 08:33:00 PM
CONGRATULATIONS to the winner and everybody for participating.

I guess in the end it was about seconds between you 2 guys.

Anyway I post the solution scripts in php and bash.

The gpg password was:

Code:
888ee31308b8c062ff643b790a22aa8acad3db64

php
Code:
$password = 'cozz';
for ($i = 1; $i <= 5; $i++) $password = md5($password.'pepper');
$password = base64_encode($password);
$password = sha1($password); # git uses sha1
for ($i = 1; $i <= 2; $i++) $password = hash('sha256',$password); # bitcoin
$password = preg_replace('/[0-9]+/','', $password).'500euro';
for($i = 0; $i < strlen($password); $i++) $password[$i] = chr(ord($password[$i])+3); # caesar
$password = hash('whirlpool',$password.'+alice');
for ($i = 1; $i <= 50; $i++) $password = hash('whirlpool',$password);
$password = str_replace('78427939','',$password); # phone number
for ($i = 1; $i <= 6; $i++) $password = hash('ripemd160',$password);
echo "$password\n";

bash
Code:
function ord() {
  LC_CTYPE=C printf '%d' "'$1"
}

function chr() {
  printf \\$(printf '%03o' $1)
}

password="cozz"
for (( i=1; i<=5; i++ )); do
password=$(echo -n "$password""pepper" | md5sum | cut -d ' ' -f 1)
done
password=$(echo -n "$password" | base64)
password=$(echo -n "$password" | sha1sum | cut -d ' ' -f 1)
for (( i=1; i<=2; i++ )); do
password=$(echo -n "$password" | sha256sum | cut -d ' ' -f 1)
done
for (( i=0; i<=9; i++ )); do
password=${password//$i/}
done
password="$password""500euro"
for (( i=0; i<${#password}; i++ )); do
password="${password:0:$i}""$(chr $(($(ord ${password:$i:1})+3)))""${password:$(($i+1))}" # caesar
done
password=$(echo -n "$password""+alice" | whirlpoolsum | cut -d ' ' -f 1)
for (( i=1; i<=50; i++ )); do
   password=$(echo -n "$password" | whirlpoolsum | cut -d ' ' -f 1)
done
password=${password/78427939/}
for (( i=1; i<=6; i++ )); do
password=$(echo -n "$password" | openssl rmd160 | cut -d ' ' -f 2)
done
echo "$password"


Title: Re: Another riddle - guess script win 10BTC
Post by: ralree on December 29, 2012, 08:33:38 PM
78427939?

29a253dbe3d494581e30dfae3fd363f78427939cf2e467369b0fea2fba0e6c667e37f888d14b2a3 cc1153f552b1cbf9d504436aa9221eb0c123b9f555733dd22 was the full whirlpool output?

And where did you use that?
Correct, thats the phone and now you have to slice it out of the string since he loses it.

Ah got it now.  Final script is posted here: https://github.com/hank/life/blob/master/code/python/cozzriddle/cozz.py

I was very close.  I didn't make the leap to modifying the whirlpool by removing the phone number, but it all makes sense now.  Nicely done!

Quote
After 5xmd5 =  b13260daa9991b92ffc6f1bedbbc1c47
After base64 =  YjEzMjYwZGFhOTk5MWI5MmZmYzZmMWJlZGJiYzFjNDc=
After sha1 =  3731663362343732666234313833646461346433393861326662383464663864643964646463336 4
After 2xsha256 =  cd3487c5e6d255d798b0376e7338f32be4d13b73c9dec617c7e52c76d383f6ea
After 'cashing in' numbers =  cdceddbefbedbcdeccecdfea500euro
After Caesar =  fgfhggehiehgefghffhfgihd833hxur
29a253dbe3d494581e30dfae3fd363f78427939cf2e467369b0fea2fba0e6c667e37f888d14b2a3 cc1153f552b1cbf9d504436aa9221eb0c123b9f555733dd22
29a253dbe3d494581e30dfae3fd363fcf2e467369b0fea2fba0e6c667e37f888d14b2a3cc1153f5 52b1cbf9d504436aa9221eb0c123b9f555733dd22
Ripe result =  888ee31308b8c062ff643b790a22aa8acad3db64
gpg --decrypt --passphrase 888ee31308b8c062ff643b790a22aa8acad3db64 /tmp/foo

You need a passphrase to unlock the secret key for
user: "Cozz Lovan <cozz00lovan@yahoo.com>"
2048-bit RSA key, ID A2C6AE1F, created 2012-12-29 (main key ID 160483CB)

gpg: encrypted with 2048-bit RSA key, ID A2C6AE1F, created 2012-12-29
      "Cozz Lovan <cozz00lovan@yahoo.com>"
5J1TxGPBqgJmpDqJPwkLE43nTsSyvDHjuCefgcfbKoqhc5Wfek7


Title: Re: Another riddle - guess script win 10BTC [SOLVED]
Post by: AwkwardSituation on December 30, 2012, 04:45:23 AM
Damn, first, I wish I had enough BTC I could do contest like these.  And second, I missed this one today doing family stuff =D  Great riddles and games.  I had 3/4 of it figured out by the 3rd or 4th post but alas it is all been completed in my absence.

THanks Cozz!