201209200615 105ne7
explained decrypted filler
seed 457
From the post to its content
As posted (encrypted)
46A3F63457CE7C5D F25B4A0E60923129 4232EB91335FFB1F EDA75A19C22656F7 FAAAFD0E45E0B092 3C5698865F20AAD5 A6EAA766ED7BC08A DFCC3C06A2965D3A CCF9FABE95E89D38 FEB7C2FDE0247411 65612DA4BB8E7808 29DAEC4B47DBA105 1899153313511180 276FEE32E4FBA1A4 A51458CB4D8CDCC8 1786A693E6E810F4 1A94E4D36D573DFF FCD1D32F61668016 8907A972DE85F672 3B0A3BBEA7310129 9FF4CDFBF26EC683 64697D27D177C348 32805BE4F2FE48F9 FA87F5CAE9962D41 35169786ACAB4396 F635C09E017ACC82 5500F4620095D19D 84EE094E9F90D441 8015216F6F25CC92 9EA7876FA09BCEFE 8547825B5C6FD66E 7B16200BEF71ACEC BBDE2D3469C866B3 EF03F3870CD38F97 E9BE731A09BA8FA5 A6A6AEB0536A2BC9 B81F7DB4141B9ABA 38BDAE224B100BD8 B137AF061F8ED88C 2A090D25BEEE3A50 C75FC86B551B2182 2F7B304A4C237357 BAC5E319FDAFF5C0 D3D886B6213EEFF6 3E98D32E6143321C 7499FA3E2B1D1776 7D2A3BC67980FF5C CD2D162891C7EFED 5F58F63BD9B4FC18 C947B97E0BADA197 4671D5483DFE0E79 D5D24D096D8D9455 D92F7349FA594788 2978269E0D6AC7FA 1F06BACD5C592481 80FC7DD59723FE62 29176132C1092206 B231501018464BF9 FEB594E160EB362A F7B5CA30A12C6175 984D8F0A95A85D51 6E94D2A01E6D55F9 95992B6E757E25BC 5B2F142A4883B914 C0A0B064EB060DC8 AD725D4DC190814D DA03E1FA407126D6 DEB0760EB127A33D B3D7829A5BFA6F99 8BEE1CFCB109CE11 8A19662B84EDF28B 601E2C491DA06BE5 EE7C8D44922F2AFB AE636E216A75F94D F00D96F7BE09CBA1 EBC49A62270BBB71 5583CD381D8E09A4 DEB0F6C344AB5B55 902986A66A4E0B82 6DEB986CEFB00417 4B38DA22E0022323 E30586DAF6F6E6E9 697DB99ECF745D84 3B3522EC581900BD 37BEEC056488B1D4 7C39229381A867D6 9EEC9D78AB334E77 3536BBFD4532685E 757CF70B343E54C2 DC1E20117896A252 B8A2D92D22C7153C 8FFEC2DF5F0AB2BE FE4B13F4F7392C13 6EC25B5D1961A86C C7CD712E374556D2 0A96B83EE135992C D50884EEE5B6D1E7 7F2B404A97A2402D BCDB6AD8351EE169 4C43E5CDBF677B79 21F887D408BF8B6C F92FA89D3D9D8C71 9390DBFCC218289D 2963C35F98B1C119 55D75AC5548F8759 685A9EED886BF0C7 36FA81B2663A8185 EA52DAC44B5D8548 1F0C1568D9C40A30 C19799D2D4495988 1A12054BF6FD4DD8 CB6E5ABF558B86D8 C4944270DF858059 A17B81ED8832DC15 43417783327E3959 B4074F8154D600A5 2C6E2901C45DE95F 75F2FD356F71BECD B67BFE76FB45FA66 BCCEC110D5292FC1 3ACFC564DA48CA04 852F989D3F26290E 621812F359FFD3FE E37FC279A80CEAA6 026AABFC00F84D29 31641C575059F9B8 D53DD77F157C60C0 76012ED672C212E7 6F1E3DCE44B20139 FF61CBB8262BB5B3 654F43F9AB2A70B3 06100673924D2BA1 B66D1570D9F64909 CDA43715A45EE6E9 B9FDCDDC43DB3DE5 D3E6E2F0A5C8E889 13AFED05ADC2C8E4 2C165F13311D03EA 760F5FC65A2BF92E 50787AB03F959050 66B8FE4E0FA22E29 7080A6028BECB495 DDCEED938B222FA8 F78E0F7E7E27FF85 0AC6F560D74578E8 FE63C2B115D3BDF7 0E66A200B072820B BF5209A0BF547564 F497B3BB34BEC2C8 C14D65EA63AF7963 C6A9AF5DE4C6B53B 8CA38FA91395F395 394FE2CDFD4509EE 93201EAE6717A5B8 F2F333BBE509D0E4 0DE642F3FB8969C9 99C5FD8C62F36C2C 78E0D7A533C8B88D 7E83A4C7B3973137 959562A4CB440E54 A68F7ECBB218946D 10887251EC4F62BD 57FB0992D555E84E 2D385BAF98EB0618 EA014E055ADBB294 988B3CA016BF73F2 D7639DCDABACF587 DFB52CA39EB127F1 B3FD952086030A62 933AD23FF4698B81 18E25B30764D2E8D 07EE8475A46182B1 449945327CD5F15F
- Read the ciphertext. Strip whitespace: 2,768 hex characters = 1,384 bytes = 173 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209200615(name+title). Key = MD5(password) =11bc4d37145d8b23eeea281083b3e33d, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 43 GUIDs as hex (shown below).
Decrypted: GUID list
1 12288a72-3127-4651-89ab-dc16cd61e16a 2 375fadf1-069e-8f62-b737-6beb016dddb9 3 b8182092-bf18-118f-8a83-f48d028f503a 4 1a00d153-ba65-0e9b-ac37-c6844b4ebcd3 5 b58d9cc3-b979-43f9-a6bc-82553213cb1e 6 71c6576a-4bbc-8c55-b384-d05c66bb838d 7 d8ff1f34-7098-62f2-b81e-1328ac478f36 8 d784989c-3272-6d98-a4a2-daf830c3e667 9 2b280464-fb4b-4128-91ae-c291dde861a1 10 628dfa16-57cb-7b1f-92e0-b90ce6df780b 11 23fdb40b-0020-85dd-aba9-bd0367b70689 12 48226d74-00bc-26ac-92a3-cf4ae40e093f 13 e4eb6d3c-0dca-7298-8656-7377d2c123c1 14 62298a3f-eaa5-2e9f-8129-2c49e8e55675 15 f2c5a28b-aaa0-79b0-ba9c-1138e6cac2fe 16 8876c2dd-4ade-38a2-972a-6af21260cd00 17 30042300-eab9-849f-bf6f-8dc16a29ec07 18 1c958853-78dd-342d-a39e-e192a79d2d5c 19 84034cd1-9a37-00ed-9b13-dc53351f557f 20 bdd46bf9-4d38-217c-b13d-32b1d4992fd6 21 07d0fe61-0767-42da-9fec-75d7d4d85af8 22 49e717d4-3a0b-8f65-a8cd-a0ebac9c56dd 23 df2af6bf-dcef-2b33-8c05-ee51377b2b87 24 c173aa04-d51a-6351-bf26-8481628559b9 25 c2aa2529-bc4e-41a7-92dc-46a127ec7b34 26 963f0031-3896-457a-9527-c033dc803f60 27 07283651-288d-70f3-b7e9-6dbc4c52cad7 28 76bc623a-e92d-7016-8e57-728a5b693920 29 53265d92-d728-6552-8f61-b29c8c98467a 30 9459ea5b-ba23-1e88-8639-5213c1b38da6 31 f74ecec1-5afe-84be-be4b-8f194dc54dc4 32 3f79ca04-0fe7-7c77-9316-d316592d3f28 33 ef88c9c6-c530-0a37-b205-3097be4c2508 34 03dfd852-4a28-4365-ad07-1de107f9ab8a 35 9f313242-886a-1e92-a1fb-007b1c76bfa2 36 76eec7ae-5c8d-5503-ad4e-be86df64eed1 37 fe91e905-5408-5201-ae80-3a39e8298a8e 38 89d5df6a-5126-7ace-b1a6-da9048c9a8bc 39 eb2226a0-9b6e-5f96-8a53-9b78ff4332db 40 8aa8f90d-09b6-3573-8c1d-51739fb87888 41 2f34a468-b77c-37df-8338-b5afbd47d666 42 3b1a9ef1-cf54-6285-b8f0-636f0ae97375 43 4fd6506d-d694-5e92-b4f4-1e421834858b
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
4810486647827273830248264477618704155753365. Exactly this sequence comes out ofnew Random(457).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 2 of Run 32 (seed 945,377,703):
new Random(945377703), Next(8,64) per post. The RNG predicts N = 43; the post has N = 43 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-08 22:08–22:23). - Conclusion. Filler. The content is fully explained by the two RNGs.