201406201425 28o545

solved decrypted manual

'... as planned. Vito is in the theater.' 3DES-CBC, key MD5(name), first block lost; the opening word is inferred.

Metadata

Post ID: 28o545
Title: 201406201425 → 2014-06-20 14:25 on A858's clock
Posted (UTC): 2014-06-20 20:25:05
Timezone: UTC−6 · title 14:25 against posted 20:25 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: S solved 3DES → text
Content: Operational notes
Size: 96 hex characters · 48 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), CBC, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
IV: CD8C92FA3CB33EB9 presumed: the IV was never published, so it is derived from a guessed first block (see the steps below)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 2
Tags: post-cutover2014Solved special postmanualkey: nameoperational notes

e1f8f32b832a51b7 fb930757eb67ab27 be0af2b49fac9c70 77f283c8bfdc6d42 c2e4eedefe9b2e89 56e26c54fcd5fc8a

Derive the key. Password = A858DE45F56D9BC9 (name); key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in CBC mode, then strip the PKCS7 padding.
Presumed IV. The IV was never published. Assuming the first 8 bytes are "Proceed ", the IV is D(C0) XOR that block = CD8C92FA3CB33EB9. A presumed value, not a recovered one: every block after the first decrypts the same way whatever the IV is.

Proceed as planned. vito is in the theater.