← Back

Chapter 10: Interception


Previously: The investigations of disappearance of Mr. Wright led to a shadowy organization called COATIS. While the investigations regarding the case continued, you witnessed a strange case in which a client's digital files were encrypted automatically with a strong cryptographic mechanism; and the client was asked for a huge amount of money to decrypt her files.

You never thought that cryptography could be harmful to anyone, and here it is - an unusual case!

Who could have encrypted those files? Who owns the secret RSA private key which the previous report talked about?

And, what about the investigation regarding COATIS? What did they made out of the IP address that you decrypted?

After few days of wait, your next assignment comes. Possibly, A big revelation awaits ahead.


A G I L    I n v e s t i g a t i o n     I n c .
Spellborough, U.K.

18 May, 2009

Assignment #10

OBJECTIVE: Decrypt the Message.

DESCRIPTION: It's been quite some time since we assigned you any challenge. But finally, here it is - a very important one. Read carefully.
The IP address of COATIS indeed turned out to be a very crucial piece of information. Our cyber security personnels worked hard as the IP itself was non functional, but after a series of highly intelligent efforts, they traced it to the original IP of COATIS.
The delay in your assignment was also, in part, due to these efforts. Further, we needed the permissions of the court for our next step. It also took laborious legal efforts and lengthy time. But in the end, we got the permissions and took the necesary step. We intercepted the emails of COATIS, and now have those in our possession.
We have sent to you one of those emails, but it is encrypted using DES. The message containing the DES key itself, is encrypted using RSA. The details are attached herewith.
Decrypt the RSA message, Get the DES key, Decrypt the DES email, and submit the plaintext to us soon.

CIPHER INFO: DES for plaintext. RSA for key

Encl. (2)
  1. Email encrypted using DES.
  2. The RSA-encrypted Message containing the DES key.


EVIDENCE
TYPE: DES Encrypted Email
Date: 18 May, 2009

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

EVIDENCE
TYPE: RSA Encrypted Message Containing the DES Key
Date: 18 May, 2009

2ZqVCu0LtO-KkwD:UPIUIao^1P[b(y@


RSA Private Key (to decrypt above):
Exponent:
960579666006549817560236322319983030053924297595951478922705
Modulus:
1058059960185402366316160067497052659354567879221060758600659



Private emails of COATIS!!!

Certainly, it would have their deepest and darkest secrets.

Let's decrypt.