[Spooks] Re: Numbers?

[Derek Glidden]

On Sun, 2002-09-01 at 19:17, Chris Smolinski wrote:
> 
> Two messages have been decoded so far, using a simple substitution cipher.
> See http://www.spynumbers.com/WBNY.html for details.

FWIW - messages Bunny(2,1) and Bunny(2,2) just seem to be gibberish or
garbage.  If you look at the ciphertext of the two messages from his
second transmission (1=A, 2=B, etc) you can group them into a short set
of repeating "phrases" like this:

Bunny(2,1): 

knnahqriwrlqg
knnihqrlvrlq
knnihqrlvrlqg
knnihqrlvrlqg
knnihqrlxrlqg

Bunny(2,2):

ehbbgiqrinbeo
rcdehbbraqranbdm
rcdehbbnaqranbdm
rcdehbbnaqranbdm
rcdehbbnaqranbdm
rbd

There's not enough distinct ciphertext to really make anything more than
a WAG as to what the messages might be (many "real" english words fit
those letter patterns but none of them have made any sense to me yet),
using his first key against these messages results in nonsense, and the
fact that they're extremely similar, but slightly different makes me
suspect he either did a very poor job of enciphering his message to
begin with (in which case there's no easy way to figure out what he
really meant) or was just reading out a short bunch of random numbers
over to make the message appear longer.

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
#!/usr/bin/perl -w
$_='while(read+STDIN,$_,2048){$a=29;$b=73;$c=142;$t=255;@t=map
{$_%16or$t^=$c^=($m=(11,10,116,100,11,122,20,100)[$_/16%8])&110;
$t^=(72,@z=(64,72,$a^=12*($_%16-2?0:$m&17)),$b^=$_%64?12:0,@z)
[$_%8]}(16..271);if((@a=unx"C*",$_)[20]&48){$h=5;$_=unxb24,join
"",@b=map{xB8,unxb8,chr($_^$a[--$h+84])}@ARGV;s/...$/1$&/;$d=
unxV,xb25,$_;$e=256|(ord$b[4])<<9|ord$b[3];$d=$d>>8^($f=$t&($d
>>12^$d>>4^$d^$d/8))<<17,$e=$e>>8^($t&($g=($q=$e>>14&7^$e)^$q*
8^$q<<6))<<9,$_=$t[$_]^(($h>>=8)+=$f+(~$g&$t))for@a[128..$#a]}
print+x"C*",@a}';s/x/pack+/g;eval 

usage: qrpff 153 2 8 105 225 < /mnt/dvd/VOB_FILENAME \
    | extract_mpeg2 | mpeg2dec - 

         http://www.cs.cmu.edu/~dst/DeCSS/Gallery/
http://www.eff.org/                   http://www.anti-dmca.org/