Inquiries about participating in this cryptographic challenge can be addressed to firstname.lastname@example.org . Civil and serious inquiries and questions will be answered.
The contest officially started at 12:00:01 a.m PST. August 15, 2013. It runs until 11:59:59 p.m. PST August 14, 2014 . The contest is one year long. You may register and participate at any time during the contest period.
This competition is open to any authorized and legally entitled government agency, any university, any corporation, any security company or hacking group, or any individual anywhere. It is the responsibility of the participant to insure they are of legal majority age and legally entitled to participate in such a contest in any country or jurisdiction where they reside.
This is the ONLY OFFICIAL site for the Whitenoise Challenge That Black Hat Wouldn't Take.
MEDIA: for an interview contact: Richard H. L. Marshall: CEO WNL - Former Director Global Cyber US DHS at email@example.com or phone: 443-718-1833.
Any technique or resources may be used.
Download the contest file and the million byte key stream portion files.
If you believe you have succeeded, send Whitenoise Laboratories Canada Inc. a digitally signed, zipped file by e-mail containing: (a) a decrypted version of the file provided to you when you registered for the competition, along with (b) a detailed, repeatable and demonstrable written description of how you accomplished the break. You could win 200 Ks. Please retain a copy of any submission. See the Official Rules below for details.
The Whitenoise Security Challenge (the "Competition") begins at 12:00:01 a.m. PST on Aug 15, 2013 and ends at 11:59:59 p.m. PST on August 14, 2014 (the "Competition Period").
The Competition is open globally to anyone who has reached the age of majority in their respective province, territory, state, or country of residence and who have Internet access prior to August 1, 2013. The following individuals are not eligible to enter or to win: officers, former officers, directors, former directors, employees, former employees, contractors and former contractors of Whitenoise Laboratories Inc. (the "Sponsor"), its affiliates and licensees, and any other companies engaged in the development, production, or distribution of materials for this Competition, as well as members of the immediate families (defined as parents, siblings, children, spouse, regardless of where they live) or households (whether related or not) of such employees officers, directors, employees and contractors.
NO PURCHASE NECESSARY. Visit http://www.wnlabs.com/news/challengeDEFCON.php (the "Competition Website") to register for the Competition by submitting your name, age, e-mail address, mailing address, and telephone number on the on-line registration email link. You may choose to enter the Competition as part of a team in which case one member of your team (the "Team Lead") must complete the registration, listing all members of the team. If a team is declared a winner, the prize will be awarded to the Team Lead. Limit: One entry per person, whether entering individually or as part of a team. Upon successful registration, you will be able to access and download an encrypted file (the "Competition File") and a portion of the key stream from the unique key used to encrypt the Competition File . The Competition File will be encrypted with a single, unique Whitenoise competition key (the "Competition Key"). This Competition Key will be constructed of sub-keys of at least 240,000 bits in strength, and will generate a random key stream on the order of 10 to the 60th bytes in length.
In order to be eligible to win the Competition, you must :
- decrypt the Competition File in its entirety with 100% complete accuracy bit for bit;
- write a detailed, repeatable and demonstrable step-by-step description of how you accomplished the break and decryption ("Description");
- send a digitally signed e-mail containing (a) a compressed (i.e. zipped) copy of the fully decrypted Competition File, (b) the Description, and (c) your full name (as registered when you downloaded the Competition File) telephone number and (d) address where you can be reached by the competiton web site and sponsors at firstname.lastname@example.org. You must submit your proposed solution to Whitenoise Challenge Break. You must put "PROPOSED BREAK OF WHITENOISE KEY" in the subject line so that it can be directed to the correct department;
- an independent, qualified lab in the Lower Mainland, British Columbia, Canada must be able to replicate the break submitted under oversight by a member of a qualified law firm;
- the single, winning submitter must come to the above chosen lab, under oversight by a member of a qualified law firm and any qualified experts they choose, and be video taped for proof. The winner must be able to perform the break publicly;
- the video tape of the performed break, all images, and all attendant materials including registration are the sole property of Whitenoise Laboratories Canada Inc. and can be used by Whitenoise Laboratories Canada Inc. in any context it chooses including scientific, promotional, advertisement etc. The single winning contestant, if any, waives all interest in any video, images and materials attendant with this contest;
- any person, institution, or contestant that registers for this contest understands that all break claims submitted including erroneous and unproven ones, as well as the winning submission if any, may be made public in any fashion chosen by Whitenoise Laboratories Canada Inc. and that any by-product of the submission, scientific or otherwise, is the sole and exclusive property of Whitenoise Laboratories Canada Inc. to use as Whitenoise Laboratories Canada Inc. determines;
Following the close of the Competition Period, the Sponsor will review all eligible entries received in the order that they were received and that were properly time stamped and submitted according to the rules. The decisions of the Sponsor are final and binding. In order to be eligible to win, the entrant must have submitted a successfully decrypted Competition File that is identical, bit-for-bit to the original contest file, as determined in the sole discretion of the Sponsor, legal oversight and an accredited lab, and the Description, and contact information in a digitally signed e-mail, all as described above, and must have complied fully with these Official Rules (collectively, a "Valid Entry"). In the event that more than one Valid Entry is received, the individual whose Valid Entry was received first by the Sponsor, as determined in the sole discretion of the Sponsor, will be deemed to be the eligible winner.
Sponsor will not be responsible for entries that are incomplete, lost, misdirected, late, garbled, or altered, which will be void. Proof of entry does not constitute proof of receipt.
Whitenoise Laboratories Canada Inc. is free to add additional sponsors and to INCREASE the PRIZE at its own discretion throughout the contest period.
There is one prize available to be won, consisting of $200,000 Canadian (also referred to as the "Prize" and also referred to as 200 Ks in promotion). The prize(s) may be cash, any corporate financial instrument that is liquid and convertable, or any instrument of equivalent value. The choice of the instrument used for the "Prize" will be determined at the sole discretion of the contest sponsor(s) and Whitenoise Laboratories Canada Inc. The odds of winning will depend upon the skill and ability of entrants in breaking and decrypting the Competition File. The Winner is solely responsible for any federal, state, provincial, national and/or jurisdictional taxes as is determined by law in their country of residence if applicable to the 'Prize". If no Valid Entry is received, no prize will be awarded.
The eligible winner will be contacted by telephone. Before being declared a winner, the eligible winner must return to Sponsor a completed Affidavit or Declaration of Compliance and Release of Liability form by the date indicated in the documents. The eligible entrant is also required to provide satisfactory proof of identity and a copy of his/her Valid Entry to Sponsor. If the eligible winner cannot be reached within ten (10) business days from the first attempted notification by the Sponsor, or if the eligible winner fails to return the Affidavit or Declaration of Compliance and Release of Liability form within the deadline provided or otherwise comply with these Official Rules, he or she will forfeit the Prize. In the event that another Valid Entry was submitted to Sponsor, the entrant who submitted the next Valid Entry received by Sponsor will be contacted, and may be similarly disqualified as outlined above. The prize must be accepted as awarded and is not transferable.
The Prize is pro-rated to the time required to submit a valid, time stamped, winning entry, as determined on an accruing daily basis up to but not exceeding the published prize value on the date that the contest terminates and the winning entry, if any, is determined by the RULES
By entering the Competition, entrant releases, discharges, indemnifies and agrees to hold harmless the Sponsor(s), their affiliates, licensees, and agents, and each of their respective directors, officers, owners, partners, employees, agents, representatives, successors and assigns (collectively, "Releasees") from any claims, damages or liability due to any injuries, damages or losses to any person or property resulting in whole or in part, directly or indirectly, from participation in this Competition or any Competition-related activity or from the acceptance of the Prize.
If this Competition or any part thereof is not capable of running or continuing to run as planned due to infection by computer virus, bugs, trojan horses, worms, tampering, unauthorized intervention, fraud, technical failures, or any other cause(s) whatsoever beyond the reasonable control of Sponsor that corrupt or affect the administration, security, or proper conduct of this Competition as contemplated by these Official Rules, the Sponsor(s) reserves the right, at its sole discretion and without prior notice, to terminate, modify or suspend this Competition. Sponsor may disqualify any individual who tampers with the entry process, who acts in violation of these Competition Rules or who attempts to or does undermine the administration, security or proper conduct of the Competition. ANY ATTEMPT BY AN ENTRANT TO DELIBERATELY DAMAGE ANY WEBSITE OR UNDERMINE THE LEGITIMATE OPERATION OF THE COMPETITION MAY BE A VIOLATION OF CRIMINAL AND CIVIL LAWS. SHOULD SUCH AN ATTEMPT BE MADE, THE SPONSOR(S) RESERVE THE RIGHT TO SEEK DAMAGES FROM ANY SUCH ENTRANT TO THE FULLEST EXTENT PERMITTED BY LAW.
Without limiting the release provided in paragraph 7 above, and for greater certainty, Releasees will not be liable for:
By entering this Competition, all entrants consent to the collection, use, and disclosure of their personal information by the Sponsor(s) and their authorized agents for the purposes of administering the Competition and contacting potential winners. The declared winner also consents to the use and disclosure of his/her name and address (city, province, state, country), biographical information, statements, voice and likeness in any advertising and publicity the Sponsor(s) may conduct relating to this Competition or any other contest or promotional activity, in any media or format, whether now known or hereafter developed, including but not limited to the Internet, at any time or times in perpetuity, without further notice or compensation, where permitted by law. Unless you otherwise consent to receiving future communications from Sponsor, your personal information will be used solely for the purposes of administering the Competition excluding any valid or erroneous claims which may be published at any time at the sole discretion of the Sponsor(s). To stop receiving future communications from Sponsor, or if you have questions concerning the personal information collected by the Sponsor(s) or its policies, e-mail email@example.com.
Paragraph headings in these Competition Rules are for convenient reference only and are not to affect the interpretation of these Competition Rules. Entrants should retain a copy of any submission sent to the Sponsor. Decisions of the Sponsor are final and binding in all respects. If a dispute arises as to the identity of any online entrant, the entrant will be deemed to be the authorized account holder of the e-mail address used to enter. The "authorized account holder" is the natural person assigned an e-mail address by an Internet access provider, online service provider, or other organization or person responsible for assigning e-mail addresses for the domain associated with the e-mail address that submitted the Valid Entry. The eligible winner may be required to provide proof of being the authorized account holder, and must have registered for the Competition as described in Rule 1 above to be eligible to win. No correspondence about the Competition will be entered into except with the potential winners. The Competition is subject to all applicable federal, provincial state, local and municipal laws of any jurisdiction. All entries become the property of Sponsor and none will be returned.
DEFCON Black Hat Challenge Clock