Another riddle - guess script win 10BTC [SOLVED]

[cozz]

Money exchange = MtGox?  (can't be that easy?)

nope. there is actually nothing more to guess here. I posted earlier simply remove all digits and then add a 500euro note,
"which fit very well AT THE END of my wallet."

[Scrat Acorns]

nope. cant remember Snefru being ass-kicked by a fat guy.

That "born before jesus" thing was too strong.
Then it must be GOST and the fat guy is USA, lol.

[cozz]

nope. cant remember Snefru being ass-kicked by a fat guy.

That "born before jesus" thing was too strong.
Then it must be GOST and the fat guy is USA, lol.

nope. but old guy LIVED in europe.

[ralree]

Very fun story.  I'm committing my progress here in python:

https://github.com/hank/life/blob/master/code/python/cozzriddle/cozz.py

I'm having trouble with a few things.  

• I don't know the old guy yet, but Euro old dude beat by fat man seems like Enigma beat by England (fat man is Churchill?) - no idea what the key would be for enigma though.
• I can't tell whether I'm supposed to input my result from the previous hashes into the whirlpool.  Right now, I'm just assuming that and concatenating alice, and looping 50 times.  Maybe previous result goes in between cozz and alice, all three concatenated?
• Alice's phone number - sooo there's an 8 digit number used somewhere in the whirlpool rounds?  Not really sure where to put that..
• 888 and the airport.  I assume you mean prepend 888 to the airport code (such as BWI since we were talking Maryland earlier).  Or maybe you mean the origin code in Europe (such as a German airport).  Need a hint here I think.  Also, where does the previous result enter into this calculation?  Maybe we're supposed to ripemd160(888+airport+previous hash)?

[Scrat Acorns]

Caesar

[wachtwoord]

The only questions kinda open are who is the old guy

Leonidas, king of the Spartans (the fat guy is Xerxes king of the Persians)

Edit:

And the substitution alphabet is Greek

[ralree]

Caesar

Yeah I thought that could be it too, but I don't know what the substitution alphabet would be based upon.

[Scrat Acorns]

the fat guy is Xerxes king of the Persians

"Who are you calling fat sillybuns? I look ultra fabulous."

[wachtwoord]

Xerxes: "A fat-ass who was the king of the persians 2.400 years ago, who couldn't do anything. He leaded the Persians in the battle of Thermopylae and he only managed to kill the 300 spartans and the 700 thespians because of that bitch Ephialtes, who showed the persians the path which leaded behind the greeks. He is also that fat guy at meet the spartans who is less fat and gay than the real one. It can also be an insult."

http://www.urbandictionary.com/define.php?term=Xerxes&defid=3900527

Oh and:

"Ancient Persian King that reigned over the Persian empire between 485 BC to 465 BC. For some reason was portrayed as 7 foot tall black metrosexual in the popular movie '300.'" (same source)

[Scrat Acorns]

Everyone knows hollywood is 100% real

[ralree]

"Fat Man" could also refer to the bomb dropped on Nagasaki in WWII, but I have no idea what this has to do with Europe other than the Axis.

"Fat Man" was possibly named after Winston Churchill,[2] though Robert Serber said in his memoirs that as the "Fat Man" bomb was round and fat, he named it after Sydney Greenstreet's character of "Kasper Gutman" in The Maltese Falcon.

http://en.wikipedia.org/wiki/Fat_Man

[cozz]

Very fun story.  I'm committing my progress here in python:

https://github.com/hank/life/blob/master/code/python/cozzriddle/cozz.py

i have sent you 1BTC for this b80460a1924b2f232ab4e938b9eccd2a498702583b26b720f1ffd4a9a953ab2c (transactionid)

I can confirm that the script is logocally correct up to the point after the money exchange. We get different results, because you used ascii instead of hex. So I post correct solutions here.
After the money exchange the hash must be

Code:

cdceddbefbedbcdeccecdfea500euro

php

Code:

$password = 'cozz';
for ($i = 1; $i <= 5; $i++) $password = md5($password.'pepper');
$password = base64_encode($password);
$password = sha1($password); # git uses sha1
for ($i = 1; $i <= 2; $i++) $password = hash('sha256',$password); # bitcoin
$password = preg_replace('/[0-9]+/','', $password).'500euro';
echo "exchange: $password\n";

bash

Code:

password="cozz"
for (( i=1; i<=5; i++ )); do
	password=$(echo -n "$password""pepper" | md5sum | cut -d ' ' -f 1)
done
password=$(echo -n "$password" | base64)
password=$(echo -n "$password" | sha1sum | cut -d ' ' -f 1)
for (( i=1; i<=2; i++ )); do
	password=$(echo -n "$password" | sha256sum | cut -d ' ' -f 1)
done
for (( i=0; i<=9; i++ )); do 
	password=${password//$i/}
done
password="$password""500euro"
echo "exchange: ""$password"

python

Code:

import binascii
# My ...
name = "cozz"
# Once I made a journey and visited some of my old friends.
# The first one is a doctor and he has 5 children (MD5)
# He lives in a very beautiful house.
# The house always impresses me so much that I drive 5 rounds around it before
# actually ringing the bell (while eating his meals)
# The only problem with this friend is that he uses pepper instead of salt
# to all his meals
import hashlib
m = binascii.b2a_hex(hashlib.md5(name+"pepper").digest())
m = binascii.b2a_hex(hashlib.md5(m+"pepper").digest())
m = binascii.b2a_hex(hashlib.md5(m+"pepper").digest())
m = binascii.b2a_hex(hashlib.md5(m+"pepper").digest())
m = binascii.b2a_hex(hashlib.md5(m+"pepper").digest())
print "After 5xmd5 = ", m
# The funny thing is after eating there you feel like your stomach has grown
# about 137% of the original size.
import base64
m = base64.b64encode(m)
print "After base64 = ", m
# The trip went on to Maryland. Sadly, the friend I was going to visit there
# wasn't at home. But accidentally I met a friend of this friend who also
# wanted to visit him. After all the only thing I can say about this friend of
# the friend is that he literally is a stupid or unpleasant person (git).
# git -> sha1
m = binascii.b2a_hex(hashlib.sha1(m).digest())
print "After sha1 = ", m
# As the trip was more expensive than I thought, I decided to step by at one of
# my richer friends and ask for some money. I dont even know which country he
# is really from, but his name sounds like japanese.
# Satoshi -> 2xsha256
m = hashlib.sha256(binascii.b2a_hex(hashlib.sha256(m).digest())).digest()
print "After 2xsha256 = ", binascii.b2a_hex(m)
# Having filled up my wallet I could no afford a flight to europe.
# Of course for that I had to make some money exchange.
# I simply exchanged all my numbered coins I had and became on 500euro note
# Which fit very well at the end of my wallet.
# (remove all numbers from hash, put "500euro" at the end
import re
m = binascii.b2a_hex(m)
m = re.sub(r'[0-9]', '', m) + "500euro"
print "After 'cashing in' numbers = ", m

[cozz]

Caesar

correct. 1BTC bee4464a735519ad7aac8eee58778b55c78a8849db93f368a853e0558d773a7f (transactionid)

[John (John K.)]

And cozz and alice are variables of a kind that could be concatenated/added together mathematically.

Not quite correct. Script uses concat operation, but the thing with the variables is just halfway correct.

Guess the concat should be here then: After jumping in the pool with her I felt like we have become one now

Hmm.. the 500euro bill is designed on 1996. ripemd160 again? (wild guess here) Or simply concatenate the text '500euro' ?

We jumped like another fifty times in that whirlpool : Whirlpool hash for 50 times?

[cozz]

• I can't tell whether I'm supposed to input my result from the previous hashes into the whirlpool.  Right now, I'm just assuming that and concatenating alice, and looping 50 times.  Maybe previous result goes in between cozz and alice, all three concatenated?

Just read the story. The script starts with name = "cozz" so imagine the hash being cozz.

• Alice's phone number - sooo there's an 8 digit number used somewhere in the whirlpool rounds?  Not really sure where to put that..

I lost the phone number. So you have to get rid of it. You need not to search that much to find the number, its not made too difficult.

• 888 and the airport.  I assume you mean prepend 888 to the airport code (such as BWI since we were talking Maryland earlier).  Or maybe you mean the origin code in Europe (such as a German airport).  Need a hint here I think.  Also, where does the previous result enter into this calculation?  Maybe we're supposed to ripemd160(888+airport+previous hash)?

As mentioned earlier the final gpg password starts with 888. The ripe-guy just guides me until I find my flight. There is no more guessing like adding airport or something, caesar was kinda the last thing to guess.

[John (John K.)]

eight digit number starting with 78.
Well at least I know where I can find her:)

Alice must be at Croatia (country number 78)?

[John (John K.)]

...
There is no more guessing like adding airport or something, caesar was kinda the last thing to guess.

Oops, missed this.

[cozz]

We jumped like another fifty times in that whirlpool : Whirlpool hash for 50 times?

correct. 1BTC f4c593b34f862d27f6ccc18415e5bdb9356635693c64a23d8ad1863ab1bb0853 (transactionid)

NO MORE BITCOINS NOW

its now only up to solving the riddle

[ralree]

Very fun story.  I'm committing my progress here in python:

https://github.com/hank/life/blob/master/code/python/cozzriddle/cozz.py

i have sent you 1BTC for this b80460a1924b2f232ab4e938b9eccd2a498702583b26b720f1ffd4a9a953ab2c (transactionid)

Thanks!

I can confirm that the script is logocally correct up to the point after the money exchange. We get different results, because you used ascii instead of hex. So I post correct solutions here.
After the money exchange the hash must be

Code:

cdceddbefbedbcdeccecdfea500euro

Got it on my end - thanks.

Alice must be at Croatia (country number 78)?

Ah nice one!  Oh, but it looks like it doesn't matter..

imagine the hash being cozz.

Got it.

I lost the phone number. So you have to get rid of it. You need not to search that much to find the number, its not made too difficult.

Thanks - that makes more sense now.

caesar was kinda the last thing to guess.

Now to just find the right substitution...

[John (John K.)]

We jumped like another fifty times in that whirlpool : Whirlpool hash for 50 times?

correct. 1BTC f4c593b34f862d27f6ccc18415e5bdb9356635693c64a23d8ad1863ab1bb0853 (transactionid)

NO MORE BITCOINS NOW

its now only up to solving the riddle

Thanks!

caesar was kinda the last thing to guess.

Now to just find the right substitution...
[/quote]

Could be anything before 6, as Jesus was born on 6 BC if I'm not wrong...but 26 combinations ain't that hard to list down now thankfully.

I sure wish I'm with my laptop/desktop here - can't run any code in this tablet.