Pages:
Author

Topic: The Legend of Satoshi Nakamato, FINAL STEP PUBLISHED.... 4.87 BTC GRAND PRIZE! - page 72. (Read 108519 times)

sr. member
Activity: 381
Merit: 250

-snip-

bewareThEFALSesatoshi

-snip-

I had a thought earlier probably no correlation:

When did we learn about the "bewareThEFALSesatoshi" - Was this before [email protected] was hacked and Theymos created the thread?

Did the creator know about this false Satoshi before hand or was it simply a coincidence?

Edit: Answering my own question, we learned about the false satoshi warning on September 4th. Theymos made the: [email protected] is compromised
September 8th
member
Activity: 112
Merit: 10
Rabbit does use a salt (= IV?), and a key. Both of which have to be exactly 16 bytes, otherwise it will insert apparently random data.

Unfortunately my javascipt is pretty rusty. Perhaps later in this ARG i can dust of wabbitemu and code some assembly Wink

Salt and IV are two different things, and I had to set both explicitly to get consistent output from CryptoJS.Rabbit in some cases.
member
Activity: 67
Merit: 11
While some of you are working on the rabbit cipher, I thought I would throw out some (of my wayy too many) random musings and maybe they will jog some thoughts:

1ExmJbvEVbimN67zUbEdthezBKSwvNzpw7 - (Unspent) 0.00001 BTC
1ACcZsb1xgKLFwWTwjEQw5Va4artxbhVHY - (Unspent) 0.00001 BTC
14r1UWeCGbTuhnEMX9xXkfauZ5MsGQaHAP - (Unspent) 0.00001 BTC
1PENSUMKNPVCjChPzUqF32eA6gSUdMoJMZ - (Unspent) 0.00001 BTC
16PWqtrP3XtEYwVirHEREPopoJG5M8RtKa - (Unspent) 0.00001 BTC

[ https://blockchain.info/address/1PENSUMKNPVCjChPzUqF32eA6gSUdMoJMZ ]

Could "the art we pen here" refer to a comic book? In a twitter conversation last week between @PO347 and @TR3N47Y  https://twitter.com/PO347/status/507740423180521472 , @TR scolds @PO for never reading "BOOKS," so I assume there will be a reference to a book at some point. (I went down a rabbit hole for a while on that one. @PO refers to herself as a "morphodite," which is a comic slang word for hermaphrodite, from To Kill a Mockingbird. Perhaps we'll learn more about that later?)

Anyway, curious about the line from the poem "The hunter and the prey," I simply googled "the hunter and the prey," which led first to the site Fanfiction.net , where fans (we? in "the art we pen"?) write their own extensions to popular cartoon series. "The Hunter and the Prey" is a fan fiction story written to extend "Avatar: The Last Airbender." [ https://www.fanfiction.net/s/2377707/1/The-Hunter-and-The-Prey ]

(related to comic books, at least one poster on the forum noted that there is a Fantastic Four comic book issue #347 that contains the character Ghost Rider)

Just thinking broadly, trying to interpret the poem:

The rabbit has a seCret,                                  
Little sound does she make,       [1]                                        
She keeps it.                                          
                                                        
The snow falls in silence,          (the padding around the poem hides a message)                                    
A sentRy of concealment,          [2]                                        
She Yields it.                                    
                                                          
The hunter and the Prey,          (we are the hunter, the rabbit/answer/next clue/bounty is the prey?)                              
Wounded where she lay,           [3]                                      
She seeks iT.                                                    
                                                      
Enlightened warriOr don the armor    (use Rabbit cipher)                                  
Crafted in her honor                                                    
You'll need it.                                                                  
                                                                
There is hope in the white,       (the padding)                        
Look to the rabbit, the axiom,   (axiom=starting point of reasoning. Look back to key words from the beginning of the puzzle?)                        
Who reveals it.                                                            
                                                          
J.S.  

[1] So, the rabbit has a secret which she keeps, but she's not silent, "little sound does she make" -- so she makes at least a little sound. Otherwise poem would say "NO sound does she make."

[2] The snow falls in silence, meaning the padding surrounding the poem. The snow is the SentRy of concealment. The key is something about the rabbit, because "she" "yields" it.
                                      
[3] Wounded where she lay, (could she be wounded because the code has something misleading in it? I know I said this before but will repeat it anyway: think of "beware the false satoshi" --something is there that messes with the code. I still like the idea of looking for 00000001 (1 satoshi) as a piece that needs to be excised to yield the correct ciphertext. I think there are more than one of them. Which one needs to be discarded?

Here is a list of words from the puzzle so far that might be used as keys somehow:

WR
it would
W@@@LK
347
EAT
Alice
FoLLow
1follow
WR4Bt
CRYPTO
Followthewhiterabbit
the rabbit
8675
CR347OR
PO347
TR3N47Y
Xavi3rM4x7
N3v4Le7
FoLLowThEWhiteRABBIT
bewareThEFALSesatoshi
LostinThEWhiteNoiSE
theartWePENHERE
PENSUM

Any of the addresses:

1FoLLow3pd7y5Wvk2dWYqpH6YdaHTLcYmM
1WTR4BtM61k4NB52Zvdf79k4B7jiiepFC
13pgUbz1Gxj1Sirw3Yr44Vybck7M1yLhEe…
1PENSUMKNPVCjChPzUqF32eA6gSUdMoJMZ
1GoNR15KUWkqTyZfKTDsKeEacjLqJYJW15
1TLSNYAx5P6Yjie3cF97fZh9U4B5UZ7PF (bounty)
1N8NGRSw1qUQH48PKzuGccThBUT1zGv9aH
1EzarhwPwdGPDZ85Kv6Ytw1YBqnuTg5Mmc
1BKKy36wEcszrEZF4uaehMF9GnqcTziYXT (initial sender to bounty)
1LsGQV6DvhR1RuK9KX7GkLiGcQ7CEXrZN8 (sender to bounty on 9/2)
1JwRwGhsXECmgbLf54RNxqAan3si3XQ42g (sender to bounty on 9/5)
12cC4FGZJSD9uBhsFoPpyK2qG7BHZLHVU9 (sender to bounty on 9/5)
1DsxvZfQJp26kU6ertifiRSpXUJJSCWycM (sender to bounty on 9/9)
00010001
00011
00011001


Any others to add to the list?
full member
Activity: 154
Merit: 100
Rabbit does use a salt (= IV?), and a key. Both of which have to be exactly 16 bytes, otherwise it will insert apparently random data.

Unfortunately my javascipt is pretty rusty. Perhaps later in this ARG i can dust of wabbitemu and code some assembly Wink
newbie
Activity: 42
Merit: 0
Satoshi is trying to tell us something  Cool
member
Activity: 112
Merit: 10
Despite explicitly setting an iv and key, I get a different result every time I decrypt. At first I thought it was a problem with something randomized, like the iv or salt, but this issue occurs even when I'm explicitly setting the iv as in the example above. As far as I can tell, Rabbit doesn't use a salt. Has anyone been able to get consistent results out of it?

I was incorrect, it turns out there IS a salt for Rabbit ciphertext in this implementation.
full member
Activity: 176
Merit: 100
I'm stuck on getting Crypto-JS to work for our use case. I'm doing things like the following:

Code:
cipher=CryptoJS.enc.Hex.parse(paddinghex); // create a WordArray based on a hex version of the padding
alert(cipher.toString(CryptoJS.enc.Base64)); // check for well-formed Base64
cparms = CryptoJS.format.OpenSSL.parse(cipher.toString(CryptoJS.enc.Base64)); // create CipherParams
cparms.iv = '0000';
cparms.key = 'wombats';
var decrypted=CryptoJS.Rabbit.decrypt(cparms,key,{iv: my_iv});
alert('decrypt: ' + decrypted.toString(CryptoJS.enc.Latin1)); // display output

Despite explicitly setting an iv and key, I get a different result every time I decrypt. At first I thought it was a problem with something randomized, like the iv or salt, but this issue occurs even when I'm explicitly setting the iv as in the example above. As far as I can tell, Rabbit doesn't use a salt. Has anyone been able to get consistent results out of it?

I'm only having trouble when I try to construct my own ciphertext. I can successfully encrypt then decrypt with Rabbit using Crypto-JS using the following because whatever I'm missing is automagically handled in the CipherParams that encrypt() built:

Code:
var msg="this is a friendly message.";
var key="keyword";
var encrypted=CryptoJS.Rabbit.encrypt(msg,key);
var decrypted=CryptoJS.Rabbit.decrypt(encrypted,key);
alert('decrypted: ' + decrypted.toString(CryptoJS.enc.Latin1));
The last method can be tested online here: http://uttool.com/encryption/rabbit/default.aspx

I have not tested it but reading the source code of crypto.js if you want to use a custom IV you must use:

Code:
var decrypted=CryptoJS.Rabbit.decrypt(msg,key,{iv: my_iv});
newbie
Activity: 23
Merit: 0
Maybe we need a break.... a change of pace.

Going back to the Ghostrider / Fantastic Four idea. I, ahem, "found" a copy of issue #347.  I haven't read it all yet...but it's maybe there are some clues inside.

You'll need a CBR reader.

https://www.dropbox.com/s/n702i0j08j6od2m/Fantastic%20Four%20V1%20347.cbr?dl=0
hero member
Activity: 743
Merit: 502
that we should remove some bits.
Perhaps '347' has something to do with this?

I tried fiddling with that..no luck.
member
Activity: 112
Merit: 10
I'm stuck on getting Crypto-JS to work for our use case. I'm doing things like the following:

Code:
cipher=CryptoJS.enc.Hex.parse(paddinghex); // create a WordArray based on a hex version of the padding
alert(cipher.toString(CryptoJS.enc.Base64)); // check for well-formed Base64
cparms = CryptoJS.format.OpenSSL.parse(cipher.toString(CryptoJS.enc.Base64)); // create CipherParams
cparms.iv = '0000';
cparms.key = 'wombats';
var decrypted=CryptoJS.Rabbit.decrypt(cparms,key,{iv: my_iv});
alert('decrypt: ' + decrypted.toString(CryptoJS.enc.Latin1)); // display output

Despite explicitly setting an iv and key, I get a different result every time I decrypt. At first I thought it was a problem with something randomized, like the iv or salt, but this issue occurs even when I'm explicitly setting the iv as in the example above. As far as I can tell, Rabbit doesn't use a salt. Has anyone been able to get consistent results out of it?

I'm only having trouble when I try to construct my own ciphertext. I can successfully encrypt then decrypt with Rabbit using Crypto-JS using the following because whatever I'm missing is automagically handled in the CipherParams that encrypt() built:

Code:
var msg="this is a friendly message.";
var key="keyword";
var encrypted=CryptoJS.Rabbit.encrypt(msg,key);
var decrypted=CryptoJS.Rabbit.decrypt(encrypted,key);
alert('decrypted: ' + decrypted.toString(CryptoJS.enc.Latin1));
full member
Activity: 154
Merit: 100
that we should remove some bits.
Perhaps '347' has something to do with this?
full member
Activity: 176
Merit: 100
Umm transcribing 20 and 09 to 0 and 1 leads to 2 different results if you include or not the spaces between the text.
I think that it should be included as doing so gives you a result starting with "0a 54" or "\nT".

But in any case there are too much white spaces, so probably we need to find a way or removing some of them.

If the result is ciphered with rabbit then the output should be more random so it is almost impossible to get so many 0.
If the result is plaint text it can have some bias but still it is too high (almost 4 to 1).
Also you can try inverting 20 and 09 values but the it seems that 20 as 0 gives a more text like result.

Transcription without the spaces between words (hand made)
Code:
10100101 01000000 10000000 01000010 00000010 00000010 00100001 00010101 10010000 10000010 10000101 01001000 00001000 00100000 10001000 10010010 00000010 00000100 00101000 00001000 00000000 00010001 10000100 00001000 00010000 00010100 10010000 01000000 10001000 10011000 00001000 00001000 01000000 10100010 00000010 00010001 01000001 00000001 00001001 00000010 00000100 01000000 10000001 01100010 00000010 00100001 00001100 00000010 11000010 00000100 11000100 01000000 00100000 01000010 00000010 00000010 00001000 00010100 00001000 00001000 01100000 00000000 10000001 00000100 00000100 00001000 00001000 10000000 00100100 00011000 01000001 00000001 00010100 00001001 00010000 00010001 11000000 01001011 00000010 00000100 00000100 00001000 10000100 00000101 00000000 00000100 00010000 00010110 00001100 00100000 00110000 10000100 10000100 00100000 01000000 01000000

Transcription with the spaces between words (automated)
Code:
00001010 01010100 00001000 00000000 01000010 00000010 00000010 00100001 00000010 11001000 01000001 01000010 10100100 00000100 00010000 01000100 01001000 00000000 00100000 01000010 10000000 10000000 00000000 00100011 00001000 00010000 00100000 00000100 10010000 01000000 10001000 10011000 00001000 00001000 01000000 10100010 00000000 00100001 00010100 00010000 00010000 00010010 00000100 00001000 10000001 00000000 01100010 00000010 00100001 00001100 00000010 11000010 00000100 11000100 01000000 00000010 00000100 00100000 00100000 00100000 00010000 00101000 00010000 00010000 11000000 00000000 01000000 10000010 00000010 00000100 00000100 01000000 00010010 00001100 00100000 10000000 10001010 00000000 00100100 01000000 01000110 00001000 00001001 01100000 01000000 00100000 00100000 01000100 00100000 00101000 00000000 00100000 10000000 10110000 01100001 00000000 10000100 00100100 00100001 00000010 00000010 00010000

The text ends with 09 and 3 null characters (000000) and in both cases the length is too short, event if it is ciphered that's imposible as it works in blocks of 16 bytes, that's another reason that leads me to think that we should remove some bits.
member
Activity: 112
Merit: 10
If you google all of the capital letters, "CRYPTO JS", it turns out to be a Javascript crypto library.

One of the algorithms implemented by Crypto-JS is called Rabbit: https://code.google.com/p/crypto-js/#Rabbit

Rabbit is defined in RFC4503. I tweeted it earlier and @TR3N47Y responded "Indeed."

I've tried a number of different ciphertext/key combinations and am a bit stymied at the moment.
member
Activity: 67
Merit: 11
full member
Activity: 154
Merit: 100
Good idea. It could be the the 'false satoshi' is actually an false bit. I've tried dropping the first bit of the data but no success.

I can at least verify that the padding does not contain a vigenere cipher with either 'rabbit', 'axiom', 'cipher' or 'white' as keyword with either 5, 6, 7 or 8-length bytes.

If anyone else wants to play with it here is the binary data hidden in the padding:

1010010101000000100000000100001000000010000000100010000100001011001000010000010 1000010101001000000010000010000010001000100100000000010000001000010100000001000 0000000000010001100001000000100000010000000010010010000010000001000100010011000 0000100000001000010000001010001000000010000100010100000100000001000010010000001 0000001000100000010000000110001000000010001000010000110000000010110000100000010 0110001000100000000100000010000100000001000000010000010000001010000001000000010 0001100000000000001000000100000100000001000000100000001000100000000010010000011 0000100000100000001000101000000100100010000000100011100000001001011000000100000 0100000001000000100010000100000001010000000000000100000100000001011000001100001 00000001000010000100100001000010000001000000010001

The binary data does not include the spaces that are part of the message. Tabs=1 spaces=0.
member
Activity: 67
Merit: 11
I don't get why "they" retweet both my and Mirth23's posts... If Mirth23 is right about something in the spacing/padding, which it might be, why retweet my wrongly decoded message?

What i think about the 3 msgs:

Follow the white rabbit
- can't think of anything besides we should follow the 1WTR4Bt(...) which leads us to one of the tx's that hide the message.

Beware the false satoshi
- It could refer to the tx that hides a message, for not being a "real" bitcoin transaction;
- Something about Dorian (but, nothing pointing to this);
- Some "double-spend", some tx with an unreadable output address (but, nothing pointing to this);.

Lost in the white noise
- Could mean that Mirth23 is right about something hidden in the white spaces (noise);
- Could be sound related, like a song/sound file hidden in the blockchain.


Or they just retweeting active clues to "bump" the topic...

Could the "false satoshi" be a misleading "00000001" hidden in the code Mirth converted? To be disregarded in order to decipher the message in the padding?
member
Activity: 112
Merit: 10


Lost in the white noise
- Could mean that Mirth23 is right about something hidden in the white spaces (noise);

Well, way to go Mirth23!

Thanks. Smiley I'm back from my move/various other things. I'll fiddle around some, I have some ideas. Morse is definitely one direction to check, although the structure didn't seem quite morse-like at first.

Also, given the clues we just got, I assume the "hope in the white" in the last verse applies to whitespace. So we need to reveal it with "the rabbit, the axiom".
sr. member
Activity: 345
Merit: 500


Lost in the white noise
- Could mean that Mirth23 is right about something hidden in the white spaces (noise);

Well, way to go Mirth23!
newbie
Activity: 10
Merit: 0


Lost in the white noise
- Could mean that Mirth23 is right about something hidden in the white spaces (noise);

newbie
Activity: 10
Merit: 0
You can win this faster working in McDonalds.

Blue Pill.

I know. Working in McDonnald's isn't nearly as fun though  Smiley

Red Pill.
Pages:
Jump to: