The eighteenth seal

THE GATE

One password. Seventeen fragments. One answer.

The password is the seventeen fragments, in seal order, as one word: the thirteen that opened boxes and the four that nothing has checked yet. Paste them below — spaces, line breaks, capitals and punctuation are ignored — and the gate derives the key and opens the vault here, in your browser.

This page makes no network requests and keeps no secrets: the Content-Security-Policy in its head forbids them outright, and the password field cannot be submitted anywhere. The vault below is the prize key sealed under the password; without the password it is noise. Read the source. The most careful way to use it: save this page, go offline, open the file, and type the password there.

The prize
63rhNMeUky63wGDUm1W5oLU1dpUcdQgmVynTN1e3YBX

Public, and it only ever grows. Watch the balance.

Open the gate

Derivation takes about ten seconds (10 000 000 rounds of PBKDF2); that is deliberate. The gate says yes or no. It never says which fragment was wrong.

What the gate does

password  = fragment_1 … fragment_17, normalized (a–z, 0–9 only), as one string
vault_key = PBKDF2-HMAC-SHA256( password, salt "quest/v1/vault", 10 000 000 rounds, 32 bytes )
vault     = AES-256-GCM under vault_key, nonce first, associated data "quest/v1/vault"
the vault holds the prize key. This page holds the vault. The password is the only secret.
fragments V, VIII, XI and XV are checked here and nowhere else.

The vault

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
THE WALLET  63rhNMeUky63wGDUm1W5oLU1dpUcdQgmVynTN1e3YBX