{
 "id": "jvohf",
 "title": "201108261730",
 "title_time": "2011-08-26T17:30",
 "author": "[deleted]",
 "account": "A858DE45F56D9BC9",
 "subreddit": "A858DE45F56D9BC9",
 "created_utc": "2011-08-27T00:30:46Z",
 "permalink": "https://www.reddit.com/r/A858DE45F56D9BC9/comments/jvohf/201108261730/",
 "arctic_shift": "https://arctic-shift.photon-reddit.com/api/posts/ids?ids=jvohf",
 "sources": [
  "arctic-shift"
 ],
 "body": "41373532 38304239 39424239 41394645 36333841 31424546 42393543 41343731 46344338 43343733 43414234 36363342 32354336 44424345 43334433 37363743 38413039 34444633 37443038 42374430 41453335 43414437 46343935 32343631 ",
 "body_source": "arctic-shift",
 "body_other_version": null,
 "body_hex_chars": 192,
 "bytes": 96,
 "score": 0,
 "num_comments": 1,
 "category": {
  "code": "S",
  "label": "S solved special"
 },
 "kind": "manual",
 "encryption": "decrypted",
 "status": "solved",
 "summary": "'Lo and behold. I am the Internet.' Hex, then 3DES, key MD5(name), then Base64.",
 "content_type": [
  "Banners and statements from A858 as itself"
 ],
 "cipher": {
  "algorithm": "3DES-EDE2 (two-key Triple DES)",
  "mode": "ECB",
  "padding": "PKCS7",
  "key_derivation": "MD5(password)",
  "password_recipe": "name",
  "password": "A858DE45F56D9BC9",
  "key_hex": "34a14a42e98ff96095af56604e290cae",
  "steps": [
   [
    "Unwrap",
    "The body is hex-encoded text: decoding it gives a second hex string, and that is the ciphertext in hex."
   ],
   [
    "Derive the key",
    "Password = <code>A858DE45F56D9BC9</code> (name); key = MD5(password) = <code>34a14a42e98ff96095af56604e290cae</code>, used as a two-key 3DES key."
   ],
   [
    "Decrypt",
    "3DES-EDE2 in ECB mode, then strip the PKCS7 padding."
   ],
   [
    "Decode",
    "The text is Base64-encoded: decoding it gives the text shown below."
   ]
  ],
  "ciphertext": "A75280B99BB9A9FE638A1BEFB95CA471F4C8C473CAB4663B25C6DBCEC3D3767C8A094DF37D08B7D0AE35CAD7F4952461",
  "raw": "TG8gYW5kIGJlaG9sZC4gSSBhbSB0aGUgSW50ZXJuZXQu",
  "layers": [
   {
    "encoding": "Base64",
    "text": "Lo and behold. I am the Internet."
   }
  ]
 },
 "plaintext": "Lo and behold. I am the Internet.",
 "word_layer": null,
 "credit": {
  "kind": "first-read",
  "what": "Hex inside hex, then 3DES under MD5(name), then Base64: \"Lo and behold. I am the Internet.\""
 },
 "decoded_layers": null,
 "guids": null,
 "count_from_length": null,
 "run": null,
 "known_solution": [
  {
   "Method": "hex, hex, 3DES-ECB key MD5(name), Base64",
   "Result": "'Lo and behold. I am the Internet.'",
   "Explanation": "Solved; verifier check passes",
   "Re-checked": "hex -> hex -> 3DES MD5(name) -> base64"
  }
 ],
 "tags": [
  "pre-automation",
  "2011",
  "Solved special post",
  "manual",
  "arctic-only",
  "key: name",
  "banners and statements from a858 as itself",
  "found by this project"
 ],
 "title_zone_hours": -7,
 "title_zone": "UTC−7",
 "writeup": {
  "title": null,
  "markdown": "I have been going through some lesser known posts that are not in the auto analysis archive, amongst these I managed to find a solution for `jvohf` (title 201108261730) which was originally found [here](http://www.reddit.com/r/A858DE45F56D9BC9/comments/jvohf/201108261730/) (line breaks added for readability):\n\n    41373532 38304239 39424239 41394645\n    36333841 31424546 42393543 41343731\n    46344338 43343733 43414234 36363342\n    32354336 44424345 43334433 37363743\n    38413039 34444633 37443038 42374430\n    41453335 43414437 46343935 32343631\n\nThis decodes form hex into the ascii text (keeping the spaces, line breaks added for readability):\n\n    A752 80B9 9BB9 A9FE\n    638A 1BEF B95C A471\n    F4C8 C473 CAB4 663B\n    25C6 DBCE C3D3 767C\n    8A09 4DF3 7D08 B7D0\n    AE35 CAD7 F495 2461\n\nThis is clearly hex, but not something that we can decode to printable characters. However we can decrypt this using des-ede-ecb (like we have been able to with bother posts from around this time) using the password/key `MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae`, to this:\n\n    TG8gYW5kIGJlaG9sZC4gSSBhbSB0aGUgSW50ZXJuZXQu\n\nWhich is base64 encoded ASCII text that decodes to:\n\n    Lo and behold. I am the Internet.\n\nAll the steps as one command\n\n    echo '41373532 38304239 39424239 41394645 36333841 31424546 42393543 41343731 46344338 43343733 43414234 36363342 32354336 44424345 43334433 37363743 38413039 34444633 37443038 42374430 41453335 43414437 46343935 32343631' \\\n      | xxd -r -p \\\n      | xxd -r -p \\\n      | openssl enc -d -des-ede-ecb -K \"$(printf 'A858DE45F56D9BC9' | md5sum | cut -d ' ' -f 1)\" \\\n      | base64 -d"
 },
 "page": "posts/jvohf/"
}