crackmes.one

codergithub's ASGARD-5877: Cryptographic 128-Bit ARX-Sponge VM Vault

Author:
codergithub

Language:
C/C++

Upload:
2026-09-01 01:03

Platform:
Mac OS X

Difficulty:
4.0

Quality:
4.0

Arch:
ARM

Downloads:
53

Size:
34.06 KB

Writeups:
0

Comments:
0

Description

Welcome to ASGARD-5877. This is a reverse engineering challenge featuring a hardened, direct- threaded custom virtual machine with multi-layered anti-analysis defenses and an oracle-free cryptographic key vault. Your goal is to reverse engineer the virtual machine bytecode, recover the key derivation algorithm, and reconstruct the 128-bit master key to unlock the encrypted payload. ### Target Rules & Environment - Architecture: macOS ARM64 (Apple Silicon) - Standalone single binary: no network, no external files required. - Usage: `./crackme_vault <KEY>` - Key Format: `ASGARD-xxxxxxxxxxxxxxxx-xxxxxxxxxxxxxxxx` (where each block is 16 hex digits) ### Defenses Implemented - Direct-Threaded Multi-Domain Virtual Machine (randomized bijective register permutation, 100% decoy saturated handler table). - 64-Bit E-Graph Equality Saturation MBA (Mixed Boolean-Arithmetic expansion over Z_{2^64}). - Anti-Pushan Running State: VM key constantly mutates on each instruction execution. - Dynamic In-Memory Integrity & Forensics: Continuous bytecode checksumming, hardware breakpoint probes, and anonymous RWX memory inspection. - Oracle-Free Trapdoor: No comparison oracle. The key is consumed as a 128-bit seed to an irreversible 16-round Wide ARX sponge KDF which derives the stream cipher keystream.

Labels ?

Anti-debugging Self-modifying / runtime decrypt Code virtualization / VM Control-flow obfuscation Indirect / computed jumps & calls Control-flow flattening (CFF) Anti-tamper / integrity