EVE Search - Intercepted transmissions.

All Channels

Intergalactic Summit

Intercepted transmissions.

» Click here to find additional results for this topic using Google

Monitor this thread via RSS [?]

Pages: [1] 2 :: one page
Author	Thread Statistics \| Show CCP posts - 1 post(s)
Freyya Advanced Planetary Exports Intergalactic Exports Group	Posted - 2010.05.20 09:23:00 - [1] Fellow opposers, During the Gelhan attack i employed codebreaker and analyzer modules to see if they had any effect on Sansha forces or wormholes. No results were received unfortunatly so they proved to be ineffective. However, Aura notified me of a block increase in transmission reception, which were not of any broadcasts directed at my FTL receiver. Wether these 2 transmissions are the result of using the codebreaker and analyzer modules i am not sure but one seems to be heavily encrypted, the other was decrypted by onboard systems just now. 23Xdw999&6DU\\Master Kuvakei 882&2$dkjaKKD))6^\\Gelhan-planet four liberation DjfW^^2(sk32D\\Slave Ation09 For Nation. For MastEr. LiberAtion fleet arrived. OperationS commenced. Dropship2 launched. Cap5uleer involvement non existant as of yet. Sl6ve 32152 will command fleet. Slave Ation09 returning bit. One Nation. One Glory. =ÑOò˜í¿gĄ¦+xn¦ ---------------------------------- 23Xdw999*&6DU\\Master Kuvakei 882&2$dkjaKKD))6^\\Gelhan-planet four liberation iODPs&&20/fiFF\\Slave 32152 jvr0S0hISEidQrsu9+AGVtJkOsb+teNzIg9AmymtOgwOxACxYHozm98u9BzX76l339 kgtx49QMZoc9SgJPiDEWh8qSENxLUord0ckPVtBLt0Z732XbhtUGrhiWfr8+H2HQTJ ulVxkgOiz5p+PDlFbpJPWhZk0h30ljRt0zCWeNSfWEd0qcdbJ0XdCaDXR/OdZDPo6h /bt94F3oed25RvnmXAgfdarbCtDpa2yr4ZtEexFxvEm7UzlLAVokzGFE9J7uIyZmoU yS8aPP9gUibGE+8oQpntMUQGIwL/hy6fqJpy7utSsHQMdqhUtbcP3z1L4GfnHEWmWO FwtpOl63cQNmAN+CzEqlvoJSahjM8xrvzMSm8xV8KcFoE2xnIILnKcUOQ182PDBuP2 yXYFdb3H+9LofjE7E+ezBgo202TJvmJ8n8Kr5qF7pKgSPtyJ7iPgG9t8B8oWcffQ69 Pw254ndKGb/OtR2uL/by3kUUOAFSXQx1Qgmg77NWREXo1YrPi8W/C6IVjmh6rn5uNt ggKf+8G5wztxb3XGz+/G/x5RaZCl2FGy+4BYsRAUMv6noWv8q6UxMQQ7wSp0xOD0B4 SlN90uzVOj6QSSHHjsSWbHdTuAjL1G3FWhmVepj5/CnnzSnD16R3M+usXizh7y2Sqe O0iXvqxLAyz/QA4ACuG9SLGzV2lEyW57YGd575oP5W0F24PuGWtaIBBaYyC2sdq58G I7sELU7xX2j5h4ntH5qf3p5Yrs+z66Sac5awppUNn4o1cqbvAcH2WgSGwWeCNcimhn 5YDTQgaC+val It does not resemble the type of encryption we've seen before so it appears they are adapting their transmission encryption tactics aswell. There seems to be some robust data incorporated in the encryption. Even after applying co-cpu's to my fitting, my efforts to decrypt the second message have been unfruitful. Therefor i decided to call in the minds of perhaps smarter capsuleers. ___________ NOW COLLECTING ISD AND CCP AUTOGRAPHS It'll be worth something someday. -Rauth
Aynen	Posted - 2010.05.20 09:49:00 - [2] There is a standard way of composing these communications. Pared with the strange fact that the adressed, and the sender's identity have not been encrypted, a cypher can be made. 23Xdw999&6DU\\Master Kuvakei 882&2$dkjaKKD))6^\\Gelhan-planet four liberation DjfW^^2(*sk32D\\Slave Ation09 In order, they are recipient, subject, and sender. The encrypted text can be used as a cypher if any of those 3 words apply to them.
Freyya Advanced Planetary Exports Intergalactic Exports Group	Posted - 2010.05.20 10:40:00 - [3] Originally by: Aynen There is a standard way of composing these communications. Pared with the strange fact that the adressed, and the sender's identity have not been encrypted, a cypher can be made. 23Xdw999&6DU\\Master Kuvakei 882&2$dkjaKKD))6^\\Gelhan-planet four liberation DjfW^^2(*sk32D\\Slave Ation09 In order, they are recipient, subject, and sender. The encrypted text can be used as a cypher if any of those 3 words apply to them. After carefull re-evaluation of the decrypting process done by Aura i can conclude that the cypher is not contained in the header. It merely seems that the header is not encrypted with the advanced algorithms and was simply decrypted as the first broadcast was. The numbers in front of the recipient, subject and sender seem to be nothing more than ID calls of sorts.. If anyone else can hazard a guess, educated or not, i'm sure we'll be able to figure it out in time. ___________ NOW COLLECTING ISD AND CCP AUTOGRAPHS It'll be worth something someday. -Rauth
Phlyk The VonBraun Institute	Posted - 2010.05.20 10:46:00 - [4] Originally by: Freyya One Nation. One Glory. =ÑOò˜í¿gĄ¦+xn¦ Is the latter part of their chant not "One voice" or somesuch? If so, could that not be the cypher?
Sjarana	Posted - 2010.05.20 11:07:00 - [5] Originally by: Freyya One Nation. One Glory. =ÑOò˜í¿gĄ¦+xn¦ I think this is what you are looking for: One Nation One Glory One Purpose
Freyya Advanced Planetary Exports Intergalactic Exports Group	Posted - 2010.05.20 11:09:00 - [6] It indeed could well be. Main issue right now though is to assertain which encryption method has been used to encrypt the message. I'm sure it's discoverable by the trained eye of a cryptologist. Unfortunatly i will be bound to station business for the coming hours so i will not be able to assist in the effort during that time. I hope someone will be able to crac.k the code. It might be that there is valuable information contained in the broadcast, that could prove invaluable. Possibly though, it could also be a request for a shower after Slave 32152 will be podded for the umphteenth time... ___________ NOW COLLECTING ISD AND CCP AUTOGRAPHS It'll be worth something someday. -Rauth
Shikobo Nonu Minmatar	Posted - 2010.05.20 11:29:00 - [7] Originally by: Sjarana Originally by: Freyya One Nation. One Glory. =ÑOò˜í¿gĄ¦+xn¦ I think this is what you are looking for: One Nation One Glory One Purpose This makes sense. The data blob in the second message looks to be encoded in the base64 scheme. Running it through a decoder results in data alike to what the third line looks like. So, however we get from "=ÑOò˜í¿gĄ¦+xn¦" to "One Purpose." is the key. It is possible that the ASCII symbols for carriage return and new line need to be appended to "One purpose.". This would make the decoded sequence equally long as the encoded sequence. Hmm, this may be a substitution cipher over the full range of a single 8-bit byte. I shall investigate further.
Shikobo Nonu Minmatar	Posted - 2010.05.20 11:41:00 - [8] Originally by: Shikobo Nonu Hmm, this may be a substitution cipher over the full range of a single 8-bit byte. I shall investigate further. On closer examination, this does not appear to be as simple as I thought. I shall continue my attempts.
Freyya Advanced Planetary Exports Intergalactic Exports Group	Posted - 2010.05.20 11:44:00 - [9] (( I had to slice and dice the wallo' text to fit forum standards, please keep this in mind when decrypting )) ___________ NOW COLLECTING ISD AND CCP AUTOGRAPHS It'll be worth something someday. -Rauth
Shikobo Nonu Minmatar	Posted - 2010.05.20 12:26:00 - [10] Edited by: Shikobo Nonu on 20/05/2010 12:27:34 I fear I shall have to stop attempting to crack this code until I return from planetside. This datapad just doesn't allow me to organize my thoughts the way an egg would. ((EDIT: Removed surplus word))
Sinti Vailatti Epitoth Fleet Yards	Posted - 2010.05.20 14:21:00 - [11] I've been toying with this. Does the word/name "Dorgiers" mean anything to anyone? Serving the Dark Amarr
Shikobo Nonu Minmatar	Posted - 2010.05.20 14:25:00 - [12] Originally by: Sinti Vailatti I've been toying with this. Does the word/name "Dorgiers" mean anything to anyone? According to this GalNet thread ([GalNet Reference 1319658]) Haeldone Dorgiers is a member of CONCORD.
Freyya Advanced Planetary Exports Intergalactic Exports Group	Posted - 2010.05.20 14:29:00 - [13] My station businesses are all but finished at the moment, but i've been eyeballing for any progress made. After a quick search i came up with the same Galnet broadcast Shikobo just linked. I am however quite unsure as to what you imply with mentioning the name...care to elaborate? ___________ NOW COLLECTING ISD AND CCP AUTOGRAPHS It'll be worth something someday. -Rauth
Stitcher Caldari ForgeTech Industries	Posted - 2010.05.20 14:30:00 - [14] Edited by: Stitcher on 20/05/2010 14:31:10 Commander Dorgiers is indeed a CONCORD operative and he is working closely alongside SYNE and certain affiliates (like me) to combat the Sansha incursions. - Verin "Stitcher" Hakatain.
Sophie Starsparrow Minmatar Starfish Operating Syndicate Annwn Matari	Posted - 2010.05.20 14:37:00 - [15] Indeed, Dorgiers seems to be the main liason between CONCORD and the capsuleer community at this time. *The art of the conversation shouldn't be present amongst friends. The skill of the conversation is in the listening.*
Casiella Truza Ecliptic Rift New Eden Research	Posted - 2010.05.20 15:41:00 - [16] It certainly does resemble base64, given that every character comes from the set "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/". We shouldn't assume, though, that it will resolve to simple text (clear or otherwise) and could in fact represent binary data encoded into base64. I've got some of my own routines chewing on it now and will report later.
Casiella Truza Ecliptic Rift New Eden Research	Posted - 2010.05.20 15:58:00 - [17] By the way, for those interested, the base64-decoded version is as follows. Apologies for the proportional spacing. 00000000 8E FA F4 4B 48 48 48 48 9D 42 BB 2E F7 E0 06 56 ...KHHHH.B.....V 00000010 D2 64 3A C6 FE B5 E3 73 22 0F 40 9B 29 AD 3A 0C .d:....s".@.).:. 00000020 0E C4 00 B1 60 7A 33 9B DF 2E F4 1C D7 EF A9 77 ....`z3........w 00000030 DF D9 20 B7 1E 3D 40 C6 68 73 D4 A0 24 F8 83 11 .. [email protected]..$... 00000040 68 7C A9 21 0D C4 B5 28 AD DD 1C 90 F5 6D 04 BB h\|.!...(.....m.. 00000050 74 67 BD F6 5D B8 6D 50 6A E1 89 67 EB F3 E1 F6 tg..].mPj..g.... 00000060 1D 04 C9 BA 55 71 92 03 A2 CF 9A 7E 3C 39 45 6E ....Uq.....~<9En 00000070 92 4F 5A 16 64 D2 1D F4 96 34 6D D3 30 96 78 D4 .OZ.d....4m.0.x. 00000080 9F 58 47 74 A9 C7 5B 27 45 DD 09 A0 D7 47 F3 9D .XGt..['E....G.. 00000090 64 33 E8 EA 1F DB B7 DE 05 DE 87 9D DB 94 6F 9E d3............o. 000000A0 65 C0 81 F7 5A AD B0 AD 0E 96 B6 CA BE 19 B4 47 e...Z..........G 000000B0 B1 17 1B C4 9B B5 33 94 B0 15 A2 4C C6 14 4F 49 ......3....L..OI 000000C0 EE E2 32 66 6A 14 C9 2F 1A 3C FF 60 52 26 C6 13 ..2fj../.<.`R&.. 000000D0 EF 28 42 99 ED 31 44 06 23 02 FF 87 2E 9F A8 9A .(B..1D.#....... 000000E0 72 EE EB 52 B0 74 0C 76 A8 54 B5 B7 0F DF 3D 4B r..R.t.v.T....=K 000000F0 E0 67 E7 1C 45 A6 58 E1 70 B6 93 A5 EB 77 10 36 .g..E.X.p....w.6 00000100 60 0D F8 2C C4 AA 5B E8 25 26 A1 8C CF 31 AE FC `..,..[.%&...1.. 00000110 CC 4A 6F 31 57 C2 9C 16 81 36 C6 72 08 2E 72 9C .Jo1W....6.r..r. 00000120 50 E4 35 F3 63 C3 06 E3 F6 C9 76 05 75 BD C7 FB P.5.c.....v.u... 00000130 D2 E8 7E 31 3B 13 E7 B3 06 0A 36 D3 64 C9 BE 62 ..~1;.....6.d..b 00000140 7C 9F C2 AB E6 A1 7B A4 A8 12 3E DC 89 EE 23 E0 \|.....{...>...#. 00000150 1B DB 7C 07 CA 16 71 F7 D0 EB D3 F0 DB 9E 27 74 ..\|...q.......'t 00000160 A1 9B FC EB 51 DA E2 FF 6F 2D E4 51 43 80 15 25 ....Q...o-.QC..% 00000170 D0 C7 54 20 9A 0E FB 35 64 44 5E 8D 58 AC F8 BC ..T ...5dD^.X... 00000180 5B F0 BA 21 58 E6 87 AA E7 E6 E3 6D 82 02 9F FB [..!X......m.... 00000190 C1 B9 C3 3B 71 6F 75 C6 CF EF C6 FF 1E 51 69 90 ...;qou......Qi. 000001A0 A5 D8 51 B2 FB 80 58 B1 10 14 32 FE A7 A1 6B FC ..Q...X...2...k. 000001B0 AB A5 31 31 04 3B C1 2A 74 C4 E0 F4 07 84 A5 37 ..11.;.t......7 000001C0 DD 2E CD 53 A3 E9 04 92 1C 78 EC 49 66 C7 75 3B ...S.....x.If.u; 000001D0 80 8C BD 46 DC 55 A1 99 57 A9 8F 9F C2 9E 7C D2 ...F.U..W.....\|. 000001E0 9C 3D 7A 47 73 3E BA C5 E2 CE 1E F2 D9 2A 9E 3B .=zGs>........; 000001F0 48 97 BE AC 4B 03 2C FF 40 0E 00 0A E1 BD 48 B1 H...K.,[email protected]. 00000200 B3 57 69 44 C9 6E 7B 60 67 79 EF 9A 0F E5 6D 05 .WiD.n{`gy....m. 00000210 DB 83 EE 19 6B 5A 20 10 5A 63 20 B6 B1 DA B9 F0 ....kZ .Zc ..... 00000220 62 3B B0 42 D4 EF 15 F6 8F 98 78 9E D1 F9 A9 FD b;.B......x..... 00000230 E9 E5 8A EC FB 3E BA 49 A7 39 6B 0A 69 50 D9 F8 .....>.I.9k.iP.. 00000240 A3 57 2A 6E F0 1C 1F 65 A0 48 6C 16 78 23 5C 8A .W*n...e.Hl.x#\. 00000250 68 67 E5 80 D3 42 06 82 FA F6 A5 hg...B.....
Sjarana	Posted - 2010.05.20 17:30:00 - [18] I think we should try a plain-text attack. Given the info given above there are at least two possible known phrases: 23Xdw999&6DU = Master Kuvakei 882&2$dkjaKKD))6^ = Gelhan-planet four liberation Given the length of the Gelhan phrase it could well be that instead of "Gelhan-planet four liberation" we should use "Gelhan-planet 4" or even "Gelhan 4" or Gelhan IV". We have two other possible combinations: DjfW^^2(*sk32D = Slave Ation09 iODPs&&20/fiFF = Slave 32152 Then there is the Dorgiers result. Can that be narrowed down to the exact part of the encrypted text? Due to the severe security restrictions in my home station, I cannot run a codebreaker. Maybe someone else can arrange a codebreaker running on a main frame. Please post any results. Hope this helps
Freyya Advanced Planetary Exports Intergalactic Exports Group	Posted - 2010.05.20 18:43:00 - [19] They really seemed to up the ante on this one..Aargh! Her face twists and stretches as she let go a burst of annoyance Sometimes the answer is staring you right in the face you know? Taunting and sticking out it's tongue...You just have to look past first glances or perhaps sleep on it a night and then it slaps you in the face...hard.. There's something about =ÑOò˜í¿gĄ¦+xn¦ i just can't put my finger on...We're now at the point that it's ASCII symbols but how and in what type. Is it multi layered? Does it have extra meaning? DAMNIT! Coms violently closed and replaced with static Ohh and one more thing; I'll set up a channel named "Cypher messages" for when in space. static ___________ NOW COLLECTING ISD AND CCP AUTOGRAPHS It'll be worth something someday. -Rauth
Casiella Truza Ecliptic Rift New Eden Research	Posted - 2010.05.20 18:53:00 - [20] Originally by: Sjarana I think we should try a plain-text attack. Okay, but what sort of encryption? If we had a better idea of that, then we could try all sorts of key phrases (definitely including the ones you listed). Originally by: Freyya There's something about =ÑOò˜í¿gĄ¦+xn¦ i just can't put my finger on...We're now at the point that it's ASCII symbols but how and in what type. That sequence is "F0 A5 EA 95 F7 A1 A8 67 41 B9 BD 78 FC B3" in hex, for what it's worth. If in fact it matches up to "One purpose", then we have two additional characters. And if those represent CR/LF, then the plain text for "FC B3" would be "0D 0A". I'm not sure that's more than a red herring, but it's what I've been chewing on for a bit here.
Casiella Truza Ecliptic Rift New Eden Research	Posted - 2010.05.20 19:27:00 - [21] Even better, if we assume that they reused the same key, then a regular stream cipher attack would likely work. An XOR (exclusive-OR) operation on two ciphertexts would be highly instructive. I hypothesize that the headers consist of ciphertext followed by the equivalent cleartext. "23Xdw999&6DU" would, in this case, decrypt to "Master Kuvakei", though the subsequent lines don't exactly line up byte-for-byte between the two sections. But if we were to XOR "23Xdw999&6DU" with "882&2$dkjaKKD))6^", what would we get? Or "=ÑOò˜í¿gĄ¦+xn¦" with the base-64 decoded text I listed earlier?
Elegbara	Posted - 2010.05.20 20:19:00 - [22] Looking a the first message I couldn't ignore some misplaced letters and numbers. These are E A S 2 5 6. For some reason I think it might be a hint to using AES256 encryption. In that case we have to find the 32-byte key somewhere within first message as well. ____________________________________ Open your eyes. And Awaken.
Casiella Truza Ecliptic Rift New Eden Research	Posted - 2010.05.20 20:23:00 - [23] Originally by: Elegbara Looking a the first message I couldn't ignore some misplaced letters and numbers. These are E A S 2 5 6. For some reason I think it might be a hint to using AES256 encryption. In that case we have to find the 32-byte key somewhere within first message as well. You're awesome.
Ld Disablez	Posted - 2010.05.20 20:38:00 - [24] You won for a minute :)
Ld Disablez	Posted - 2010.05.20 20:46:00 - [25] Red herring maybe ... but "One nation. One Glory. One Purpose." gets close to 32 chars.
Freyya Advanced Planetary Exports Intergalactic Exports Group	Posted - 2010.05.20 20:55:00 - [26] Originally by: Elegbara Looking a the first message I couldn't ignore some misplaced letters and numbers. These are E A S 2 5 6. For some reason I think it might be a hint to using AES256 encryption. In that case we have to find the 32-byte key somewhere within first message as well. THAT dear sir, is the slap in the face i was referring to... Well done on this discovery! It seems we are one step closer to solving this enigma.. ___________ NOW COLLECTING ISD AND CCP AUTOGRAPHS It'll be worth something someday. -Rauth
Casiella Truza Ecliptic Rift New Eden Research	Posted - 2010.05.20 21:08:00 - [27] "One Nation One Glory One Purpose" is 32 bytes, right?
Casiella Truza Ecliptic Rift New Eden Research	Posted - 2010.05.20 21:21:00 - [28] But not the key, sadly. Also note that many codebreaker modules will internally hash the passphrase to 256 bits (32 bytes), so what we seek need not be that exact length. Compiling a list of possible keys now to feed to my recursive codebreaking...
Freyya Advanced Planetary Exports Intergalactic Exports Group	Posted - 2010.05.20 21:53:00 - [29] =ÑOò˜í¿gĄ¦+xn¦ has been translated. It decrypts to KUVAKEI. Simple substitution of text to ASCII coding. It is most likely to be the key to decipher the wallo' text. It was already established that the encryption was AES 256 bit. In channel we established that the tool used for encrypting is probably used off site to keep it out of the transmission itself, but after careful and extensive digging outside GalNet sources i have found the answer. Password was encrypted into ASCII in capital letters but as per usual names are only with first letter capital. Found that out after the third try. The message translates into: For Nation. Master, harvesting of liberated souls is going well. Adapting tactics to capsuleer involvement seems to be effective and they have not yet been able to break the pattern of our attacks. Involvement of Navy forces has been limited as of yet as they seem unsure what stance to take. Loss of our CONCORD agent has been difficult but CONCORD itself seems tied up in rules and legislation. CONCORD involvement is limited to the rally of capsuleer forces at this time. For additional confusion I believe doing simultaneous assaults will be effective. For glory of Nation. Slave 32152 I am however unable to pass this along as 100% Slave broadcast considering the "Intelligent" message. Perhaps there's more to the Slaves than meets the eye? ___________ NOW COLLECTING ISD AND CCP AUTOGRAPHS It'll be worth something someday. -Rauth
Sinti Vailatti Epitoth Fleet Yards	Posted - 2010.05.20 23:32:00 - [30] Huh...odd... Great work on the translation...using an ancient code like that... Sticher..if this guy Dorgiers is an ally, why is having late night meetings with Ghost Hunter? Serving the Dark Amarr

Pages: [1] 2 :: one page
First page \| Previous page \| Next page \| Last page

COPYRIGHT NOTICE
EVE Online, the EVE logo, EVE and all associated logos and designs are the intellectual property of CCP hf. All artwork, screenshots, characters, vehicles, storylines, world facts or other recognizable features of the intellectual property relating to these trademarks are likewise the intellectual property of CCP hf. EVE Online and the EVE logo are the registered trademarks of CCP hf. All rights are reserved worldwide. All other trademarks are the property of their respective owners. CCP hf. has granted permission to EVE-Search.com to use EVE Online and all associated logos and designs for promotional and information purposes on its website but does not endorse, and is not in any way affiliated with, EVE-Search.com. CCP is in no way responsible for the content on or functioning of this website, nor can it be liable for any damage arising from the use of this website.