Solved

Which encryption is this?

Posted on 2008-11-01
11
941 Views
Last Modified: 2008-12-13
Well, I'd like to encrypt strings in this encryption but I have no idea which encryption it is.

This encryption is on a lot of proxy sites. (Example: Vtunnel.com).
The encrypted key is: '9ca7acb36f5f9fc50b4d23a859c119420e5e81f720185' and the decrypted one is "http://www.google.com/

Someone knows which encryption this is?
I first thought it was base64, but ... With no luck.
0
Comment
Question by:SaTaX
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
11 Comments
 
LVL 1

Author Comment

by:SaTaX
ID: 22859418
Increased to points to 400! Please answer!
0
 
LVL 1

Author Comment

by:SaTaX
ID: 22861084
I found this in source:

var myArray=new Array();
                        myArray[0] = '%0n%0n%0n</pragre>%0n<c nyvta=%22whfgvsl%22><vzt fep=%22vzntr1.wct%22 nyg=%22%22 anzr=%22vzntre%22 nyvta=%22evtug%22 obeqre=%220%22>%0nIghaary vf urer gb uryc lbh trg gb gur jrofvgrf lbh jnag gb tb gb bayvar. Znal betnavmngvbaf gurfr qnlf oybpx npprff gb fvgrf yvxr zlfcnpr, tznvy, rira tbbtyr frnepu! V svaq gung pynvzvat gung svygref ner gurer gb xrrc fpubbyxvqf yrneavat engure guna tbbsvat bss, naq gura tbvat nurnq naq oybpxvat n cevznel zrnaf bs erfrnepu fhpu nf tbbtyr frnepu, vf ulcbpevgvpny naq rira qnatrebhf. Gunaxf gb fvgrf yvxr guvf bar ubjrire, lbh pna svtug onpx naq npprff gur jro gur jnl vg jnf zrnag gb or npprffrq.<oe><Oe> Ol oebjfvat gur jro guebhtu bhe freivpr, gur znwbevgl bs gur oybpxrq jrofvgrf lbh jnag gb tb gb pna or npprffrq ntnva. Jr ng Ighaary ner pbafgnagyl jbexvat gb vzcebir gur raq hfre rkcrevrapr, naq gur qrqvpngrq sbyybjvat bs hfref jr unir cebirf gung bhe jbex vf vzcbegnag naq nccerpvngrq.<Oe><Oe>Orfg bs nyy, qhr gb pbagvahvat nqiregvfre fhccbeg, Ighaary pna ';
                        myArray[1] = 'cebivqr guvf inyhnoyr freivpr pbzcyrgryl serr bs punetr. Nf V fnvq, jr ner pbagvahnyyl jbexvat gb znxr fher gung gur Ighaary.pbz hfre rkcrevrapr vf nf tbbq nf vg pna or, fb jr jbhyq inyhr nal srrqonpx lbh unir ba bhe freivpr. Srry serr gb rznvy hf ng %28 Ighaary [ng] bireavtugcp.arg %29 sbe nal trareny dhrfgvbaf be pbzzragf ertneqvat Ighaary.pbz%0n%0n</c>%0n%0n%0n<vzt fep=%22oynax.wct%22>%0n%0n</gq>%0n              </ge>%0n            </gobql></gnoyr></gq>%0n        </ge>%0n        <ge>%0n          <gq urvtug=%224%22 jvqgu=%22804%22><gnoyr nyvta=%22pragre%22 obeqre=%220%22 pryycnqqvat=%220%22 pryyfcnpvat=%220%22 urvtug=%224%22 jvqgu=%22100%25%22>%0n     </gnoyr></gq>%0n        </ge>%0n        <ge>%0n          <gq pynff=%22pbclevtug%22 nyvta=%22pragre%22 otpbybe=%22#000000%22 urvtug=%2235%22>%0n            Pbclevtug 2008 Ighaary.pbz<oe><sbag pbybe=juvgr>Ol hfvat guvf jrofvgr, lbh zhfg nterr gb novqr bhe <n uers=%22./grezf/vaqrk.ugz%22>grezf bs freivpr</n><ue>Vs guvf freivpr unf orra hfr';
                        myArray[2] = 'q gb pbaqhpg vyyrtny npgf, cyrnfr rznvy <O>%28 nohfr[ng]bireavtugcp.arg %29</o><Oe><Oe></sbag></gq>%0n        </ge>%0n      </gobql></gnoyr></gq>%0n  </ge>%0n</gobql></gnoyr>%0n%0n</obql></ugzy>%0n%0n';
var dst2 = new String('');

function base64(src)
{
      var dst=new String('') ; var len=src.length ; var b ; var t=new String('') ; if(len > 0) { for(var ctr=0; ctr<len ; ctr++) { b=src.charCodeAt(ctr); if( ( (b>64) && (b<78) ) || ( (b>96) && (b<110) ) ) { b=b+13; } else { if( ( (b>77) && (b<91) ) || ( (b>109) && (b<123) ) ) { b=b-13; } } t=String.fromCharCode(b) ; dst=dst.concat(t) ;} }
      return dst;
}

for (var x = 0; x < 3; x++)
{
      dst = base64(myArray[x]);
      dst2 = dst2.concat(dst);
}
document.write(unescape(dst2));
0
 
LVL 8

Expert Comment

by:rpkhare
ID: 22862229
It doesn't seems to be a Base 64 string to me. I am not sure. Seems to be a hexadecimal string.
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 13

Expert Comment

by:Xyptilon2
ID: 22870044
Base64 is not an encryption, it is encoding and can be decoded just as easily. It is indeed a hexadecimal representation of a string.

What the javascript code does:

Perform a base64 decode on each item in the array myArray and concatenate them, after that unescape the result. Judging from the source, i'd say its the ROT13 algorotihm.


0
 
LVL 1

Author Comment

by:SaTaX
ID: 22914208
It's not ROT13, I tried it but no success :[.

Any other ideas?
0
 
LVL 39

Expert Comment

by:Roger Baklund
ID: 22914474
The code in post ID:22861084 IS rot13. It is a message from vtunnel.com.

Some notes about the code in the original question:

1) The number of characters is odd (45 bytes). It should be even if it represents hex encoded bytes.
2) The code is split in three groups with an invisible <wbr>: 25+10+10 characters. (doubleclick the code to see this) This indicates that this could be three different hashes.
0
 
LVL 1

Author Comment

by:SaTaX
ID: 22968341
Is it possible to find the 3 sort of decryptions.
I hope it's not MD5, I hope you can decrypt & encrypt it , because I want to make the encryption in a program, in Delphi (Turbo Pascal).

Guys, any ideas?
0
 
LVL 39

Expert Comment

by:Roger Baklund
ID: 22969403
My guess is that this is NOT an encryption that can be decoded, but a one-way hash. Why do you need exactly this encryption (if it is an encryption), can't you use something else?

http://www.scramdisk.clara.net/d_crypto.html
http://www.efg2.com/Lab/Library/Delphi/MathFunctions/Cryptography.htm
http://paparadit.blogspot.com/2006/10/des-cryptography-block-cipher-from.html
0
 
LVL 1

Author Comment

by:SaTaX
ID: 23036160
Nope, I need to navigate with these proxies to a website, from a program...
0
 
LVL 39

Assisted Solution

by:Roger Baklund
Roger Baklund earned 100 total points
ID: 23039251
Okey...? I don't think you can do this by decoding these encryptions.

When I enter http://www.google.com on vtunnel.com, I get a different code from what you have above. I tried with different browsers, and got the same code, so it could be they are using my IP in combination with the URL to generate a ONE WAY hash.

They also use javascript to output the form, and have codes in the action attribute of the form. This means you can not easily read the page programatically and do a http POST from your program. I guess they have done this to prevent exactly what you are trying to do... your program would have to simulate a real browser, i.e. it would have to fetch the page and execute the javascript to get the code, and then do a http POST to the URL provided in the action attribute. They might have more tricks up their sleeves to detect that your program is not a real person using a real browser.
0
 
LVL 1

Accepted Solution

by:
SaTaX earned 0 total points
ID: 23121585
Ok, I got no answer , but at least, cxr, you helped me.
I give you the 400 points -.-
0

Featured Post

Put Machine Learning to Work--Protect Your Clients

Machine learning means Smarter Cybersecurity™ Solutions.
As technology continues to advance, managing and analyzing massive data sets just can’t be accomplished by humans alone. It requires huge amounts of memory and storage, as well as high-speed processing of the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Truecrypt and swap 6 165
Can we just update certificate without updating its key? 3 77
Guide on using PGP email encryption 4 80
Linux MD5 Hash 7 93
In 2017, ransomware will become so virulent and widespread that if you aren’t a victim yourself, you will know someone who is.
Worried about if Apple can protect your documents, photos, and everything else that gets stored in iCloud? Read on to find out what Apple really uses to make things secure.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question