Oddbean new post about | logout
 Bitcoin Puzzle 🍊

100,000 sats belongs to anyone who can solve this ⚡️

Hint: The symbols mean nothing.

All I ask, is if you solve it, please DM me and tell me how you did it 🙏🏽

———
Proof of funds: bc1qrtm29up092l9k25jmdh49wp34x78hpg4pl9puh https://i.nostr.build/9zdJv.png https://i.nostr.build/kZ2va.png  
 What did I find here? 3rd try is showing transactions 👀 Wrong Adress right? Hahahaha https://image.nostr.build/b0d768fb15e2f55541c3fee293efe37985187964142e9247297320b50101ba32.jpg  
 How did you find that? Did you find a seed with transactions?? 
 Was feeding chat gpt the letters from your seed quiz, showed her the BIP 39 Wordlist and asked for 12 and 24 words using the given letters. Then open electrum and create a few seeds 😂 
 Did you find a seed with bitcoin in it?! 
 Found a set of addresses with a 12 word seed that is empty now. But those sats are still there on the new adress. https://mempool.space/de/address/1Ez3vTiwrtpCJsvwdexAqYNwq8ZWVLUx1k https://image.nostr.build/dc69c1607d6cdd1d497a2da99d2a38bc5f8f500159a860a60db56964b7da7f46.jpg  
 It’s 12 words in mine and all the letters you need are there btw 
 Oh cool thanks for the second hint 😈 
 So, there are approximately 
2.66212
×
1
0
46
2.66212×10 
46
  possible 12-word seed sets that can be made with the provided letters from the BIP 39 Wordlist. 😛 easy right 🤯😅 
 2.6 x 1046 possibly combinations? 
 Maybe we should get @fiatbrecher and @ThomasB123 involved. I’ve just thrown the dice a few times. They know a lot more 😜 
  https://image.nostr.build/d9aeb3099c9f5028c424f50f34e4a9be51de68e346bc7b081c5afdef4bb8697a.jpg  
 None of the words are seed cipher 
 there are too many collisions with just 46 letters, you need to reveal  corresponding painting to narrow down the scope 
 The painting is not supposed to have any meaning as far as we understood the hints so far 🧐 
 Correct, this one is just testing the strength of a 12 word seed with the letters mixed up! 
 In fact, the whole method should be put on fire, not just the most secure part. You can send me these 12 seed words in the correct order in a private message, and I will encrypt them using a public substitution table and send the ciphertext back to you. If you already know the plaintext and the ciphertext, and the table, try to reverse the encryption rules. 
 What? 
 I don’t fully understand this 
 In simple terms, the ciphertext and substitution table are publicly displayed, and without knowing the rules, it is impossible to reverse deduce the plaintext. Even if the plaintext, ciphertext, and substitution table are publicly displayed, it is impossible to reverse deduce the rules. I will give an example to illustrate this later. 
 Let's take an example

you have 12 seed words in the following order:

anger animal check effort eight episode just oppose pig possible question sea

By the way, this happens to be one set of possible solutions to your challenge.

I re-encrypted them with my password card as below
https://image.nostr.build/3a4d3f8a72c7cfe3ff77eaa7d256e1b4743024637b5ef0dad4ac0ba137d6d0ad.jpg
 to get the following strings:

h+ike2Tk2hK9!%%+%@7#S9fVhMV^pVMV!h9Tb=2S9&Xe+hs8~npf5eMss

I can write this string of characters on a piece of paper and put it anywhere in the public domain, along with my password card.

If no one else knows the plaintext and substitution rules, then your seed words are safe.

And even you yourself know the plaintext of the 12 words, and you know the ciphertext, and you have this substitution table from my password card, but you still can't backtrack my substitution RULES.

Once you can do that, guess my substitution rules, you can restore another  ciphertexts that I have written on paper and made public:

5hK9!spT&=h+Vs%9K9bXh+hY7fM2&8%+X@e9M2fVhMXspVT^h%Ss@2h+XP

You'll find this is another group of MY seed words:

XXXXXX XXXXXXX XXXXXXX XXXXXX XXX XXXXX XXXXX XXX XXXXXX XXXXX XXXXXX XXXXXXXX

By the way, this group of seed words is another set of possible solutions to your challenge.

can you make it?

As you can see, the key to security becomes the RULES, and it's always easier to memorize the rules than it is to memorize individual ciphers one by one, so I use this card to manage all of my high-strength passwords over 8 years, and I'm sure it can be used to keep the seed words safe as well.  
 no, this challenge is to restore the private key from random characters, which is the security foundation of Bitcoin and cannot be challenged

In fact, the painting gives clues to restore the 12 seed words in the correct order, as the author said, this is a simple substitution cypher, it is impossible to restore it by just have the seed plate, and you can't even start guessing with just the painting, only by putting the seed plate and the painting together can you solve the private key.

And as I told the author, the password management tool I have actually used for the past 8 years can also be used for seed word encryption, which allows to publish seed plate and painting at the same time and still be unbreakable 
 @fiatbrecher has been working on brute forcing this and has made it pretty far actually which is crazy 
 Brute force is not feasible for this problem. With the current global computing power, brute force can significantly reduce the search range, but it is still not small enough for luck to play a role in a meaningful time. 
 Tell that to @fiatbrecher 
 It’s a 12 word seed phrase and this is all you need https://i.nostr.build/Z5Dgx.png  
 Is that the right direction? Total combinations≈3.072×10 
27
 

So, there are approximately 
3.072
×
1
0
27
3.072×10 
27
  possible combinations where the first letters spell "SEEDCIPHER". 
 I can’t pull up the adress in the explorer, it’s this correct? bc1qrtm29up09219k25jmdh49wp34x78hpg4pl9puh 
 You've captivated me with this. I spent a bunch of time learning how much I don't know about math and ciphers.

I solved a few anagrams from your string.

I did guess some random wallet's seed phrase as a result (I think). But not yours. About 98% sure the word "quit" is in your phrase though.

This has been enlightening. 
 A little guess on it, the 10 letters b, d, k, l, r, v, w, x, y, z do not appear in this character set, therefore, among the 2048 words in BIP-39, cut the first 4 letters out first, and then delete all the words containing these 10 letters, leaving only about 600 candidate words.
 On the other hand, to uniquely express 12 seed words, each taking the first 4 letters requires 48 letters. Only 46 are given here. Therefore, there are, and only 2 words that are 3 letters long, and there are 10 words are 4 letters in length.
 If this guess is correct, it should be feasible to run a letter counting program for random combinations of 12 words on the compiled 600-length word list, but this may cause collisions, different combinations may produce the same letter count.
FYI. 
 Very well done! Yes, there 10 4 letter words and 2 three letter words:) What I have provided are the first 4 or 3 letters of each word. 
 If there are 10, 4 letter words and 2, 3 letter words. How come the last 12 word is mother???

What I'm not understanding here?  
 They are truncated, you only need the first 4 letters of BIP-39 seed words:) 
 Oh that's right 💡 
 Hmm... But still, if I extracted  all the words which have these specified characters as their first 3-4 characters I get 602 words which gives me 3 nonillion combinations (3*10^30) even if we have a clue word for the last word.

I call this #uncypherable with a decent home computer

I wander how others get to such lower number of words? 
 
 Is it "jump" or "join"? 😉 

"Jump" makes life a LOT easier. Narrowing potential words from 82 to 50. 
 Or, if you prefer. You could hint if any of the 3 letter words contain an "F". 

Btw this challenge might have broken Bitcoin. I'm not entirely lying either.  
 Let's make this interesting:

One word is "QUIT"
Another is either "JUMP" or "JOIN"

If it's "JUMP" then the remaining 10 seeds can only be from the following 50 options:

age
cage
can
case
cash
chef
coin
echo
egg
face
fan
fee
fine
fish
fog
gain
gap
gas
gasp
hen
high
hip
hope
ice
icon
inch
nice
nose
off
once
one
open
page
pass
pen
pig
pipe
safe
scan
sea
ship
shoe
shop
sign
sing
snap
soap
song
soon
spin

If word 2 is "JOIN" then the remaining 10 options can be the above 50 words, PLUS the below 31:

aim
camp
come
cup
fame
foam
fun
game
gun
home
huge
join
jump
main
man
mass
mean
menu
mesh
miss
moon
much
name
poem
push
same
soup
such
sun
upon
use


Therefore JUMP makes our life much easier (50 options vs 81) I'm only working manually. I don't have a reliable cycler.

But unless my math is wrong. Your 12 words are in the 81 options I've listed above. 
 high is not in there. we already spent one "h" at the last clue word. The word "high" has two. 
 This was posted before any clue words were given. I see the words are not only 3 and 4 letter words as the poster originally claimed. So that changes everything.  
 I know, I posted it just as a reference for others 🙂

Well, we don't have enough clues. So far that still leave us with so much combinations that it will be imposible to iterate trough all of them in our lifetimes. 

But if we would know the length of each word or the length  of just some words that would make deciphering more interesting. 

Nothing truly changed except number of possible combinations dropped from 3 nonillion to 1 nonillion  or from 604 words to 302 possible words

I'm curious what's  @fiatbrecher 's method and how far he really came. Does he work with supercomputers? 

 
 So  @Asanoha posted "mother" as the 12th word, yet there's not even an "R" in his letter list. 

This is disingenuous. I was under the impression his seed phrase was only 3 and 4 letter words, consisting of only the letters copied.

Not the first 3-4 letters of any length words.

This is impossible. He might as well not even have given letters. Total waste of time. I regret even engaging. 
 Agreed, it was misleading indeed but I assume it's because of his english is a second language just it is for me and sometimes In my head sounds all logical but not when I write it in English :) 

Yes @Asanoha recently cleared this up that all these letters are, the first 3 for two words with unknown length and first 4 letters of remaining 10 words again with unknown length. Then the clue was the checksum word "mother" that cut possible words by half exluding letter "m" and "t" but there are still to many possible combinations. My grand, grand, grand, grand, grand, grand sons and daughters might have an option cracking this with their neurolinks in their sleep :) 
 I appreciate your efforts🙏🏽 
 I don’t remember ever saying there were only four letter words, can you show me where I said that? https://i.nostr.build/mlM5k.png https://i.nostr.build/roZ5d.png https://i.nostr.build/Z539Q.png  
 It was here :) nostr:nevent1qqstzxutfyjylvkaukgwuyt4kl8ht3m2z2x8czq2uw7aen662zu45sqpr9mhxue69uhhyetvv9ujumn0wd68yct5dyhxxmmd9upzpknx6csaqkah5ltycxklur4xggw20kmq6yyfekvtqmx0e5829mtcqvzqqqqqqykra5nw 
 Ah yes sorry I could have worded that better, although I did say first 4 in second sentence https://i.nostr.build/roZe2.jpg  
 My original words are about a method: 
1. among the 2048 words in BIP-39, cut the first 4 letters out first
2. delete all the words containing these 10 letters, leaving only about 600 candidate words.
3. to uniquely express 12 seed words, each taking the first 4 letters requires 48 letters. Only 46 are given here, so there are 2 words that are 3 letters long, and there are 10 words are 4 letters in length.
4.  run a letter counting program for random combinations of 12 words on the compiled 600-length word list

It's hard to understand from these words that all seed words longer than 4 letters are excluded, right? 
 I appreciate your efforts🙏🏽 
 This list contains all of the letters you need to crack this seed. These are the exact first 4 and 3 letters of the seed words in the phrase. https://i.nostr.build/dwwwP.png  
 EXTRA HINT: 

zpub6rW2NmPTbNjFkng8Do79zp4zkstGtaCont5drCZCbPfNuQsVU6N8Qguf8PmoYKaDoJtgH8Dehvk6ukGbBzHKyEYrZUeuS1zvn8BNcGEH6tj https://i.nostr.build/O444A.jpg  
 I don't think this information is helpful, in other words, in practice to resist reverse derivation, the attack vectors won't contain this information. 
 Get on puzzle frens.

nostr:nevent1qqsgmx7dwlxzdug37y5zkmxw2fhf44p9qwl8x9yx0hts0l3c5nu6kaqpz3mhxue69uhhyetvv9ujuerpd46hxtnfdupzpknx6csaqkah5ltycxklur4xggw20kmq6yyfekvtqmx0e5829mtcqvzqqqqqqyj5ngzu 
 @Tetsu
@xSilentG
@50c5c98c

Did you guys see this?

nostr:nevent1qqsgmx7dwlxzdug37y5zkmxw2fhf44p9qwl8x9yx0hts0l3c5nu6kaqpz3mhxue69uhhyetvv9ujuerpd46hxtnfdupzpknx6csaqkah5ltycxklur4xggw20kmq6yyfekvtqmx0e5829mtcqvzqqqqqqyj5ngzu 
 I have no idea... 
 There’s too many ways to decrypt this it will take forever.. I tried am failed 
 My final answer… 

https fff bowentrid com cove breaking cipher iventizier monoalphabetic substitution cipher 
 I think we need another clue if you want someone to crack this. If you are testing the strength of it, then it works 🦾 There is still too many possible combinations even if we know another 3 words it will take forever @Asanoha :)