<<  >> (p.480)
    Author Topic: Bitcoin puzzle transaction ~32 BTC prize to who solves it  (Read 323981 times)
    stwenhao
    Sr. Member
    ****
    Offline Offline

    Activity: 358
    Merit: 718


    View Profile
    April 28, 2025, 07:10:23 PM
    Merited by pbies (1)
     #9581

    Quote
    How could this be reconstructed, if it is even possible?
    By using the same deterministic wallet, with the same seed. There are many choices, but you can limit them to some extent, if you check, when the puzzle was created. Because if you have any HD wallet, which was created after January 2015, then you can reject it right away.

    Also, you can quite quickly reject many wallets, just after checking some low keys. For example: the second private key can be equal to 2 or 3. In the original puzzle, it is equal to 3. Which means, that whatever method you will pick, if it gives you 2, then you can reject a given seed, so in this way, you can reject every second candidate seed, after testing only this thing.

    And then, when you will have more and more seeds, giving you more and more matching puzzles for low keys, it should lead you in the right direction, if you picked the same HD wallet, as the creator did in 2015.

    Another hint you can also use, is related to revealed public keys from puzzles in 161-256 range. In this case, the last 256th address contains 255 bits of entropy (because the first bit was masked with one). Which means, that you have only two possible cases for the original key, and it should match exactly, bit-by-bit.

    I guess if you would know everything about the puzzle, except the creator's seed, then there would be only one matching solution, which would produce all 256 keys, exactly as in the puzzle. Because when it comes to needed entropy, you have 1 + 2 + ... + 255 bits of information, stored in the puzzle. You have 32,640 bits of information, produced out of some 128-bit, 256-bit, or maybe 512-bit seed.

    I don't think the creator used more than 3,000 words in the original seed, to achieve multiple solutions. The only possible barriers could be related to collisions inside hash functions, but even in that case, grinding a single collision is one thing, but grinding 256 collisions, where everything matches exactly, is very unlikely.

    So, after solving all 160 keys, there will still be a question (without any financial incentive) about private keys to everything in range 161-256 (which may be irrelevant in case of RIPEMD160 hashes, but if we would have pubkey-based puzzle, then it would still matter, just to check, how strong raw public keys are). And after solving all 256 keys, there will still be a huge question about the seed, which would connect everything together, and form an exact match for all 256 keys, when derived in a given way.

    Quote
    How would you create a puzzle if you were the creator?
    First, I would create a new wallet, then generate 256 new keys, then extract private keys out of them, and then apply a bit-mask on each address, by using many leading zeroes, a final one-bit, and the rest bits from the wallet.

    Which means, that the first generated key would be fully discarded (because it would always be simplified into private key equal to one), and the last key would begin with one-bit, and all other 255 bits would be taken out of it.

    Proof of Work puzzle in mainnet and testnet4.
Page 479
Viewing Page: 480