Bitcoin puzzle transaction ~32 BTC prize to who solves it

[WanderingPhilospher]

If all it takes is 100k GPUs (and I believe this to be true) then the answer to the time it takes to brute force is not  'Infinity' or 'almost impossible'.

There are millions of GPUs in the world. Think about this, the group here and at least one other group has created a pool in the past to crack one of the puzzles. Imagine if this group can find 100k GPU owners to join. Impossible? Not really, imagine a black hat hacker figures a scheme to create a virus that is highly viral. He could in theory infect 500k computers with GPUs and bruteforce the key. Highly unethetical and illegal, but that's not the point. The point is that there are ways to do it. So, can it be done? Fortunately, bruteforcing a key here and there is different from figuring a way to crack any key which would be the holy grail to killing bitcoin or at least forcing a change in the technology.

Another point I want to make - some of you have alluded to needing new technology, so something you may want to look at is the distribution of the random number generators used.
1. Imagine if the puzzle creator did use some random number generator, one could in theory figure out the distribution using the already cracked keys and target the main area of distribution.
2. Some of the tools used to crack the key uses random number generators, figure out the distribution and find a way to make it more linear or alter it to match the distribution of the rnd() used by the puzzle creator.

I just calcualted how much time does it need to crack puzzle 66 by bruteforcing
 
The answer is: Infinity OR almost Impossible.

What's insane is, even if someone managed to get 100,000 GPUs, you still would need 3.5 Months to go through all the 66 range. Not to mention electricity cost of the 100,000 GPUs. I think this puzzle is still infeasible. It's worth to mine better than trying to solve this. Or if Satoshi increases the prize again by 10x, so for puzzle 66, 166.6BTC, for puzzle 67, 166.7BTC and so on. THEN it will be worth investing huge mining army to destroy it. Other than that it makes less sense.

What's feasible though is puzzle 125, because of its public key.

Also correct. Btw, i noticed most ppl are intimidated by 66 like i was few weeks ago, but when i studied #125, it got me thinking: ppl will find #66 waaaaaay before #125. The difficulty of 125 is really terrifyingly huge, even with the fact that its public key was exposed. (Take the difficulty of #120 .. and make 32 copies of it. Voila! now you have puzzle #125)

I expected better from you Evillo...lol

If you have same hardware and chasing #66 or #125; and let's say you have to brute force half of the range for #66 to find the key; that means you would have to search/complete 2^64 keys/ops. For #125, you would need to complete 2^63.55 ops.

Also, #125 is not 32 times bigger than #120. #125 requires 2^63.55 ops and #120 requires 61.05 ops. So #125 is roughly 2^2.5 (5.65) times bigger than #120.

[Evillo]

If all it takes is 100k GPUs (and I believe this to be true) then the answer to the time it takes to brute force is not  'Infinity' or 'almost impossible'.

There are millions of GPUs in the world. Think about this, the group here and at least one other group has created a pool in the past to crack one of the puzzles. Imagine if this group can find 100k GPU owners to join. Impossible? Not really, imagine a black hat hacker figures a scheme to create a virus that is highly viral. He could in theory infect 500k computers with GPUs and bruteforce the key. Highly unethetical and illegal, but that's not the point. The point is that there are ways to do it. So, can it be done? Fortunately, bruteforcing a key here and there is different from figuring a way to crack any key which would be the holy grail to killing bitcoin or at least forcing a change in the technology.

Another point I want to make - some of you have alluded to needing new technology, so something you may want to look at is the distribution of the random number generators used.
1. Imagine if the puzzle creator did use some random number generator, one could in theory figure out the distribution using the already cracked keys and target the main area of distribution.
2. Some of the tools used to crack the key uses random number generators, figure out the distribution and find a way to make it more linear or alter it to match the distribution of the rnd() used by the puzzle creator.

I just calcualted how much time does it need to crack puzzle 66 by bruteforcing
 
The answer is: Infinity OR almost Impossible.

What's insane is, even if someone managed to get 100,000 GPUs, you still would need 3.5 Months to go through all the 66 range. Not to mention electricity cost of the 100,000 GPUs. I think this puzzle is still infeasible. It's worth to mine better than trying to solve this. Or if Satoshi increases the prize again by 10x, so for puzzle 66, 166.6BTC, for puzzle 67, 166.7BTC and so on. THEN it will be worth investing huge mining army to destroy it. Other than that it makes less sense.

What's feasible though is puzzle 125, because of its public key.

Also correct. Btw, i noticed most ppl are intimidated by 66 like i was few weeks ago, but when i studied #125, it got me thinking: ppl will find #66 waaaaaay before #125. The difficulty of 125 is really terrifyingly huge, even with the fact that its public key was exposed. (Take the difficulty of #120 .. and make 32 copies of it. Voila! now you have puzzle #125)

I expected better from you Evillo...lol

If you have same hardware and chasing #66 or #125; and let's say you have to brute force half of the range for #66 to find the key; that means you would have to search/complete 2^64 keys/ops. For #125, you would need to complete 2^63.55 ops.

Also, #125 is not 32 times bigger than #120. #125 requires 2^63.55 ops and #120 requires 61.05 ops. So #125 is roughly 2^2.5 (5.65) times bigger than #120.

You're way informed than myself when it comes to pub key cracking + Maths in general. So I'm sorry i disappointed you. I may have given the impression that I'm smarter than i really am 🙂

Now about this, do you think after such computation that we have better chances of finding 125 than 66? I ran BSGS in keyhunt and the rate is horrifying. Seemed like i would wait forever! Even in random jumps it looked like peanuts. Maybe pub key hunting is a broader scope than i thought i can grasp. What you said above makes things more clear but i still don't understand how it's only 5 times bigger? Is it due to the pub key exposed? And if it's 5 times bigger only, does this make things look any better? I mean 120 kicked everybody's ass for years now.

Edit: WP is this close to convincing me to shut down all 66.bat files and start 125.bat files

[WanderingPhilospher]

You're way informed than myself when it comes to pub key cracking + Maths in general. So I'm sorry i disappointed you. I may have given the impression that I'm smarter than i really am 🙂

Now about this, do you think after such computation that we have better chances of finding 125 than 66? I ran BSGS in keyhunt and the rate is horrifying. Seemed like i would wait forever! Even in random jumps it looked like peanuts. Maybe pub key hunting is a broader scope than i thought i can grasp. What you said above makes things more clear but i still don't understand how it's only 5 times bigger? Is it due to the pub key exposed? And if it's 5 times bigger only, does this make things look any better? I mean 120 kicked everybody's asses for years now.

Those numbers above for #125 and #120 are using Kangaroo, not BSGS. Kangaroo eats BSGS for breakfast in larger ranges.

The easy math to calculate expected group ops using kangaroo is to take your bit range, divide by 2, add 1.05. (bit range / 2) + 1.05 so for #125 = 125/2 + 1.05 = 63.55.

[cryptoDEADBEEFFFFF]

If all it takes is 100k GPUs (and I believe this to be true) then the answer to the time it takes to brute force is not  'Infinity' or 'almost impossible'.

There are millions of GPUs in the world. Think about this, the group here and at least one other group has created a pool in the past to crack one of the puzzles. Imagine if this group can find 100k GPU owners to join. Impossible? Not really, imagine a black hat hacker figures a scheme to create a virus that is highly viral. He could in theory infect 500k computers with GPUs and bruteforce the key. Highly unethetical and illegal, but that's not the point. The point is that there are ways to do it. So, can it be done? Fortunately, bruteforcing a key here and there is different from figuring a way to crack any key which would be the holy grail to killing bitcoin or at least forcing a change in the technology.

Another point I want to make - some of you have alluded to needing new technology, so something you may want to look at is the distribution of the random number generators used.
1. Imagine if the puzzle creator did use some random number generator, one could in theory figure out the distribution using the already cracked keys and target the main area of distribution.
2. Some of the tools used to crack the key uses random number generators, figure out the distribution and find a way to make it more linear or alter it to match the distribution of the rnd() used by the puzzle creator.

I just calcualted how much time does it need to crack puzzle 66 by bruteforcing
 
The answer is: Infinity OR almost Impossible.

What's insane is, even if someone managed to get 100,000 GPUs, you still would need 3.5 Months to go through all the 66 range. Not to mention electricity cost of the 100,000 GPUs. I think this puzzle is still infeasible. It's worth to mine better than trying to solve this. Or if Satoshi increases the prize again by 10x, so for puzzle 66, 166.6BTC, for puzzle 67, 166.7BTC and so on. THEN it will be worth investing huge mining army to destroy it. Other than that it makes less sense.


What's feasible though is puzzle 125, because of its public key.

Also correct. Btw, i noticed most ppl are intimidated by 66 like i was few weeks ago, but when i studied #125, it got me thinking: ppl will find #66 waaaaaay before #125. The difficulty of 125 is really terrifyingly huge, even with the fact that its public key was exposed. (Take the difficulty of #120 .. and make 32 copies of it. Voila! now you have puzzle #125)

What really people are underestimating is the power of luck too. This is easier than mining because there is no variables changing (such as prev block, merkle root, difficulty, etc) . The range to be scanned doesn't change. I am sharing the approach I am using to solve a part of the puzzle. It might help anyone or perhaps guide us to a better solution.

I am using Keyhunt made by Albertobsd.

Code:

./keyhunt -f 66_67_68_69.txt -m rmd160 -l compress -t 32 -r 30000000000000000:180000000000000000 -R -n 10240

below content of the 66_67_68_69.txt file.

Code:

20d45a6a762535700ce9e0b216e31994335db8a5
739437bb3dd6d1983e66629c5f08c70e52769371
e0b8a2baee1b77fc703455f39d51477451fc8cfc
61eb8a50c86b0584bb727dd65bed8d2400d6d5aa

I added a little twist the start / end range with the following criteria

start range at 2**66 + 2**63
end range at 2**69 - 2**67

I am confident that at least 3 keys should be present in the range that I mentioned. Anyway, try it at your own risk and I am open if anyone else has a better solution!

Happy hunting!

[Evillo]

You're way informed than myself when it comes to pub key cracking + Maths in general. So I'm sorry i disappointed you. I may have given the impression that I'm smarter than i really am 🙂

Now about this, do you think after such computation that we have better chances of finding 125 than 66? I ran BSGS in keyhunt and the rate is horrifying. Seemed like i would wait forever! Even in random jumps it looked like peanuts. Maybe pub key hunting is a broader scope than i thought i can grasp. What you said above makes things more clear but i still don't understand how it's only 5 times bigger? Is it due to the pub key exposed? And if it's 5 times bigger only, does this make things look any better? I mean 120 kicked everybody's asses for years now.

Those numbers above for #125 and #120 are using Kangaroo, not BSGS. Kangaroo eats BSGS for breakfast in larger ranges.

The easy math to calculate expected group ops using kangaroo is to take your bit range, divide by 2, add 1.05. (bit range / 2) + 1.05 so for #125 = 125/2 + 1.05 = 63.55.

Ahaaa. Maybe that's why i was intimidated, i always resort to BSGS as i have way more board ram than gpu ram. Do you suggest i use the regular Kangaroo or the hybrid version? I just need the version that gives the most speed boost

[digaran]

The easy math to calculate expected group ops using kangaroo is to take your bit range, divide by 2, add 1.05. (bit range / 2) + 1.05 so for #125 = 125/2 + 1.05 = 63.55.

So you are saying solving 125 is almost the same as solving 64? While 125 is 32 times bigger than 120, are you saying if we use kangaroo we could reduce the range to equivalent of brute forcing 63.55? Your math is confusing, unless kangaroo operations is different than brute force ops.

[AlanJohnson]

Read my post above. You can eliminate large sections of the range that have improbable bit patterns. I haven't yet measured how much range that is in proportional to the puzzle length.

How so can you eliminate trillions of trillions of keys? Is this a magic?

How/What method do you use for Range-Eliminating-Measure? That's interesting.

I mean yeah, a 100,000 GPUs would be almost enough but who the FREAK does someone or group of pools/people have 100,000 GPUs? That's more GPUs than my poor country WTF Satoshi are you serious lol

WTF IM GOING CRAZY RIGHT NOW, HEY SATOSHI MAN WUT i know you read this u sneaky snoki scopi do, you already spent more than $15 Million on something crazy; would you spent a little more for something even more crazier? Here donate me only 1BTC so i can finally afford to have kids. Sound crazy enough right? I'll be waitting for you Satoshi! Here  32NYX3o1FDegf6nJiqKLi4DE25LYzSd72B

THANKS SATOSHI, i'll remember this

Dear Santa Claus ...   

Be serious man and think for a while. If he would like to throw his bitcoins here and there he would do that already. 

Something fishy is behind all that puzzle "thing". Someone is playing with us.

Bitcoin has the worst distribution model in the history. (few people has thousands of them and other fighting for some pennies)

I don't care if he is satoshi or not ... he can stuff his bitcoins up his ass.

And i have small advice for you all ... don't waste your time chasing the shadows cause  life is too short for that.

If he would like to make your lifes better he could simply give 1 BTC to every participant here cause i guess the group is smaller than amount of bitcoins he placed on that addresses. But that is not his goal. He want to play with people or someone is testing of what tools and new ways people can invent.

Definitely its not an averege person behind all that shit ...

Fun fact ... It would be cheaper to find him and beat the shit out of him to release the keys than cracking 160 bit private keys.

[lordfrs]

Can someone write the discrete logarithm of 125 in puzzle?

[Evillo]

Read my post above. You can eliminate large sections of the range that have improbable bit patterns. I haven't yet measured how much range that is in proportional to the puzzle length.

How so can you eliminate trillions of trillions of keys? Is this a magic?

How/What method do you use for Range-Eliminating-Measure? That's interesting.

I mean yeah, a 100,000 GPUs would be almost enough but who the FREAK does someone or group of pools/people have 100,000 GPUs? That's more GPUs than my poor country WTF Satoshi are you serious lol

WTF IM GOING CRAZY RIGHT NOW, HEY SATOSHI MAN WUT i know you read this u sneaky snoki scopi do, you already spent more than $15 Million on something crazy; would you spent a little more for something even more crazier? Here donate me only 1BTC so i can finally afford to have kids. Sound crazy enough right? I'll be waitting for you Satoshi! Here  32NYX3o1FDegf6nJiqKLi4DE25LYzSd72B

THANKS SATOSHI, i'll remember this

Dear Santa Claus ...   

Be serious man and think for a while. If he would like to throw his bitcoins here and there he would do that already. 

Something fishy is behind all that puzzle "thing". Someone is playing with us.

Bitcoin has the worst distribution model in the history. (few people has thousands of them and other fighting for some pennies)

I don't care if he is satoshi or not ... he can stuff his bitcoins up his ass.

And i have small advice for you all ... don't waste your time chasing the shadows cause  life is too short for that.

If he would like to make your lifes better he could simply give 1 BTC to every participant here cause i guess the group is smaller than amount of bitcoins he placed on that addresses. But that is not his goal. He want to play with people or someone is testing of what tools and new ways people can invent.

Definitely its not an averege person behind all that shit ...

Fun fact ... It would be cheaper to find him and beat the shit out of him to release the keys than cracking 160 bit private keys.

You are being worse than the Dear-Santa dude. If it seems so hopeless-case for you, why are you even wasting your finger skin typing all that insulting crap? Move on.

There are people here and out there that believe ANYTHING is possible. These people eventually are the winners in life. Complainers always end up watching opportunities pass them by.. over and over.

Anyways, @WanderingPhilosopher is there any news about the new program? Did you get it to move up in bit size?

[s.john]

Let's remember that this is not really a "puzzle", there's no pattern or hints, it's crude measuring instrument, of the cracking strength of the community, that's the purpose of this challenge.

[Mate2237]

This is just for fun and not for real. There is no mathematical calculation that is stronger that 10 mathematicians in the world. And the the people who have solved this puzzle mathematical game are more than 10 persons in the forum and none has gotten the answer. That means it is only the OP can solve the puzzle.

Well it makes the forum more fun. People are really engaging in the puzzle game. Some for fun while some for the price placed by the OP. Though the puzzle is not for all but only for those who are good in mathematics but yet none has gotten it. So the puzzle is titled "the secret puzzle"

[Evillo]

This is just for fun and not for real. There is no mathematical calculation that is stronger that 10 mathematicians in the world. And the the people who have solved this puzzle mathematical game are more than 10 persons in the forum and none has gotten the answer. That means it is only the OP can solve the puzzle.

Well it makes the forum more fun. People are really engaging in the puzzle game. Some for fun while some for the price placed by the OP. Though the puzzle is not for all but only for those who are good in mathematics but yet none has gotten it. So the puzzle is titled "the secret puzzle"

This is because there is no mathematical algorithm to solve the keys. Because Randomness beats everyone's ass. Especially when you randomize every single puzzle of the 160 ones. The only difference between a puzzle address and a regular address is that we have identified so many bits (the leading zeros) and only lack a few bits (rest of the random key characters). Why make such challenge? Because this shows how strong can Bitcoin hold against the masses if they decide to gather up and crack the shhit out of it. And guess what! Obviously Bitcoin is too hard to crack. 64 bits killed us all for years. 120 bits with known public key and an amazing pollard kangaroo tool and yet got our asses kicked for years. Imagine the regular address we take for granted consisting of at least 252 bits of random hex characters. Unfathomably secure.

Edit: i realize that a regular address can at least occur once in the 160 bit range so no need to search the entire 256 bit space to crack an address. But find me a technology that can crack such a high bit range and I'll create a statue of your figure. Even quantum devices are not ready to possess insane amounts of Qubits to run through the entire 160 bit key space.

[Lolo54]

For the moment this proves one thing, regardless of the premium behind an address and the computing power used when the pubkey is disclosed, having a private key greater than 125 bit is secure  and without pubkey even a 66 bit is solid. Conclusion bitcoin is strong and bruteforcing is not the right approach with current technology to resolve all #  .... I have a hunch the bounties may even be doubled even further as this won't resolve either #125 or #68. For #66 and 67 maybe

[Evillo]

For the moment this proves one thing, regardless of the premium behind an address and the computing power used when the pubkey is disclosed, having a private key greater than 125 bit is secure  and without pubkey even a 66 bit is solid. Conclusion bitcoin is strong and bruteforcing is not the right approach with current technology to resolve all #  .

Yep, kangaroo or the likes won't work on a regular address with balance. Which leaves us to pvt key brute forcing, won't work either. Lol that's why you see one address with billions of dollars worth of bitcoin untouchable for years. It will stay secure forever until either the owner spends from it or loses the key and turn it into a dead address, also forever.

[GR Sasa]

What is going on..... Today i saw 4 beggars including me here on the forum. wtf

[s.john]

this is not the right place to ask for money, this thread is meant for storming and sharing ideas about solving the challenge.

[WanderingPhilospher]

The easy math to calculate expected group ops using kangaroo is to take your bit range, divide by 2, add 1.05. (bit range / 2) + 1.05 so for #125 = 125/2 + 1.05 = 63.55.

So you are saying solving 125 is almost the same as solving 64? While 125 is 32 times bigger than 120, are you saying if we use kangaroo we could reduce the range to equivalent of brute forcing 63.55? Your math is confusing, unless kangaroo operations is different than brute force ops.

Again, #125 is not 32 times larger, searching, using kangaroo, than #120...

YES, Kangaroo is way different that brute force. That is why 120, 115, 110, etc was solved before 66, 67, 68, etc.

But to keep it simple, yes, kangaroo would reduce the #125 search to an equivalence of brute forcing 2^63.55 keys...

[ProjectSe7en]

Alberto igual podrías escribirme de favor! hay funciones y experiencia que tú tienes que nos pueden beneficiar.

 

Hi, there is no need to write in Spanish i can read English without need to translate it, so if you want to speak in Spanish you can do it in PM or telegram.

Regards

I can’t send DM to you, cause my rank.

[WanderingPhilospher]

Anyways, @WanderingPhilosopher is there any news about the new program? Did you get it to move up in bit size?

Negative...I have not solved the stride function on GPU yet. I am going a different direction until that is solved.

In the meantime, everyone needs to think/guess/fortune cookie/etc, what they think the second character is for #125, b/c it starts with a 1, we know that much. So what are the first 2 characters, 1F, 1E, 1D, 17, 15, etc?
I have a plan to attack this and let people help in the range (1F, 1E, etc.) they feel is the contains the private key...more to follow.

[Evillo]

Anyways, @WanderingPhilosopher is there any news about the new program? Did you get it to move up in bit size?

Negative...I have not solved the stride function on GPU yet. I am going a different direction until that is solved.

In the meantime, everyone needs to think/guess/fortune cookie/etc, what they think the second character is for #125, b/c it starts with a 1, we know that much. So what are the first 2 characters, 1F, 1E, 1D, 17, 15, etc?
I have a plan to attack this and let people help in the range (1F, 1E, etc.) they feel is the contains the private key...more to follow.

Why? How many bits would be the key space if we got the first  two characters right?

No wait don't answer that lemme try..
61.55 bits