A858DE45F56D9BC9 archive

201309162244 1mjpwt

partial decrypted manual

Two numbers, 6848584875 and 38.26701890000001. 3DES-CBC, key MD5(name), first block lost. Open: what they mean.

Metadata

Post ID
1mjpwt
Title
201309162244 → 2013-09-16 22:44 on A858's clock
Posted (UTC)
2013-09-17 02:44:13
Timezone
UTC−4 · title 22:44 against posted 02:44 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
S solved 3DES → text
Content
Operational notes
Size
80 hex characters · 40 bytes
Cipher
3DES-EDE2 (two-key Triple DES), CBC, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
IV
595D9292ABEDCF8A presumed: the IV was never published, so it is derived from a guessed first block (see the steps below)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 1
Tags
automated (decryptable)2013Solved special postmanualkey: nameoperational notes

From the post to its content

As posted (encrypted)

297FFD74B6CDFFD6 E6CE684A04BB64EB BBAB92AAB047A59F C67410CB4083F088 F99864AF99FD7A3C
  • Derive the key. Password = A858DE45F56D9BC9 (name); key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in CBC mode, then strip the PKCS7 padding.
  • Presumed IV. The IV was never published. Assuming the first 8 bytes are "-122.168", the start of a coordinate, the IV is D(C0) XOR that block = 595D9292ABEDCF8A. A presumed value, not a recovered one: every block after the first decrypts the same way whatever the IV is.

Decrypted

-122.1686848584875
38.26701890000001

Explanation

Solution summary

Method
3DES-CBC, key MD5(name), IV not recovered
Result
6848584875 / 38.26701890000001
Explanation
First block lost; the rest is two numbers
Re-checked
3DES-CBC MD5(name), IV lost