201209200700 105qcl
explained decrypted filler
seed 338
From the post to its content
As posted (encrypted)
7816CB37B9A0ADA9 C0B2176BF6D25F0F 2FE62DAC24DBAEB5 8F5E893BCC207217 DC59C6392D1AF7E5 9DEC9E76A0EDA08C CB1DBEDC96DCF891 117C781F1FFA2C70 F754A12292F9F05F B029574BA54C87EB 599E1FB6F426DDB2 64E7E9925A94FB04 C2D6A28FAF28CA92 14BC711B8A275553 C0C4D84FB37EB21D C33D6544B2CD0D41 DD85DA329EC88913 B5B107B3D9081BCD F36F1EDF92362EE7 4B75D30140888316 22EB866494DD451B D17E6C28DD16B2ED 0217A7AA1D5857CF F2D2A4440A145098 1DC86B93B4F212AF E25F39B2A671E705 232592D51D4D5931 368A3E0262866DAD 936157C36895833F 047D07263AE817F0 09598CB9098503D1 AE9F51CE9960D2EE 55F0152DF6FA3801 7B4A8EF18D63B202 BCB6515CB577A9B1 BAB8E33B7E689E64 7030093ACC12F496 9B72A566056D109E C534654FE4C33A24 DFAABF08293775ED D9E6B5456A10A69C 52222A3D3E9F7D1A C97E070E1075E6BF CA3CED22061FFE77 BB10240CE15AFC28 1784266D8029764D 6A85C151FA3F5F8E A4D6D732F4383466 11ADA2EFD0945DCC 89F0FA6A77641458 F6BD97E97AA8707C D35725668FA712F6 8B082F3BA31D4BE3 B3E95857C9977B67 1781668584BABE0A DA794527FE04985E 9D364D57D9E80606 6809C78DF01DD7F1 E3237B7F3BB916F7 F25A6B6943A2772D 07058106AAB17E81 8602CB53EB37CC96 16E1D874AB6BF956 014BD934327F161C D3459F7EEBB289FB FA2B814E4F157AA3 1298CDEF8897B1EC E56EBD4F69DAB42E 53DEBB351C9CAB8B 723B5C95A0A3A10B 253C28FFA10FE673 D2AE9B2D9E7275B3 2908B374689FA3F9 A283665CF76292FD 927043A2D967FFA7 A9E108F93413FEC5 FDDFA71B828F901A B3CFB7B18848201E C9160AB929CDDF2B 31602D46C6F86F1A DAAA324AF79CB65B 6F9C44E12661CE76 A4E6AC791BACEB82 9040C2ABA3D5D61F FD08F4C6ED36DE77 7B1974B5C7FE5CE2 4B5718BB4FA474ED E95841342605F1E4 FB1C40C2F9D884C0 4E7C14966202CFF5 72B7945E82A58D64 97EA34D769B94D36 C0176469F9CB9DB5 1352AD9DCD23E522 C7A40A386B3534F3 0779EB8D1E19331B 6AC03ECD8D288134 0C89EDE11286510B 719E9DE05EE3E290 125FB25DFC6CFDDB 0D616321D8ABABFF 75E43D567BFE3058 98BE847C81007E8A 5FA72CB5EA194E42 2A9DD600633ABC11 BA7E8633000FA393 7F57003D6B8A3728 B6C266B302CC7960 3AA1B307B541F609 EEC0759D821BFAB9 F248110C73BAC0E0 8E3C79258C047F73 B0FFC1ACA9B6D948 1C6EEFBEDE30A3B7 0448304C07F5862D 523AE63EED939FA1 BEF335713094CD25 452C806381366E89 4B96428D1B792455 307FBCD94B3952AF E09147605EAEB683 67925D0D195918FB 1017FF51E130CD98 308F8410FF4056EA 1FD80509DFD0D792 DADF4AF8E28A0565 6F73C90B5A49B31F 896AD224CD2BD29C C2C48D01EE37A7F3 A2BACC746A269611 A928C515FA09D0B3 84AC205F3549F327 22EF9721612C65EA 4FDB3F3CCDA537DD EB91F14E663B7828 5A993014626F724E C4669674C7EC11AF BC24DBB68AB184C0 C051614A32AA9618 5328B5C595195319 7AD9665A4B41A8D2 9C3B0F7774698E2A 0E1D8ECC2FB5BF6E 0FEC6A2DBFA51717 A04BEBAD05553C0A F6EB1B221ECD2CB4 CC8CA74B2B5E8649 BB36A53532208081 703B8147AFC41C68 D01088E149DF9477 4CBACC19009F9387 1A15ABB955DD3451 5F6B9546D79593AB 94B6E350F641C4A5 0D1258F0605C17C7 AB39774400605C9D C9DCFE5E3050981F 741C98371EACAD4C A67B6BE21F35F3F4 EFD916D5E053F3C0 784C7E7992B7048E F8C8A6E13422CE1B 4523D315F381281A A3E28B59C5D886D8 8933ABE38B04CB15 0E61867CF0C7878F ABEA3E210E46BC20 D4BF8C9CF9BF0FC7 9CBF76492A35078E A943B64E83656B6C 823DA84C0159ECA1 D208A9FEBA483D6F 96288BD43AF5F805 35C9F47FAEB44000 562A6E582C1F1C38 FB83AC6EF4614B6F 1122A47F854C02F2 9C4494FBA172AB2C BCD8F43978EAB5B3 79DBE0438304B2FD 5752EB604399237A A0966268EFE7E189 8E976AC0A3CA0944 29FCF1E4F9C96564 6D2FB0CE8DAFABAC 97BC871A191C0F39 7453EB1B9F5991F9 E9D5A70897C50F68 F6ED8B2B1944A222
- Read the ciphertext. Strip whitespace: 3,024 hex characters = 1,512 bytes = 189 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209200700(name+title). Key = MD5(password) =f42feb4464c9d5c0c9e5667ddfcc3e51, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 47 GUIDs as hex (shown below).
Decrypted: GUID list
1 6cb201b6-8778-21b8-ae23-6880b0280944 2 25beb21f-881a-8f96-8760-3771c6c65653 3 91b13e33-29f6-0a2c-a797-6d135bc43845 4 7ccaa803-20d9-6efe-9bdf-82a236cf10ce 5 e5bba992-07d3-7d7c-8274-2f6f69bd2532 6 d1c3f2d3-0659-8ba8-b854-93e55513f440 7 0a12a736-0321-3f73-b3b0-095035234a26 8 3887bbee-18ca-04c1-a538-281f6eac6977 9 9067e080-5660-74ae-bda2-92b01177f935 10 dc740dfd-9747-8fb3-a110-1a4443d919c0 11 d83003cf-a6fb-2228-894c-add158b69f48 12 ac794085-cdc0-359c-97e1-978d09726ee8 13 6f4594af-ce57-8b54-bb64-39ab1befd249 14 a9171526-624c-2cce-b2ab-192e15ce02ec 15 b6c3eee2-64df-5258-9174-2afd1c4e3fb3 16 67564524-8a5e-18a1-8f35-120ecd16a334 17 5fa0af85-c7cc-8461-be44-20becceef0b3 18 c9cd9f62-b685-43f5-aea3-b9f922c62040 19 71660c7a-84f1-7d51-87a0-af3633bb0234 20 ab515f38-be63-1e5a-8f44-e29134499aa2 21 070d89e2-ad72-6797-95a1-fca25948f46b 22 3288c838-48b5-6e0b-bdea-f5383b98e5ee 23 5274a539-5b24-1e3f-8ef3-b2fe54ffbf1c 24 646b24b2-9143-1328-8162-2e4c2a42da22 25 d42ecf94-ec5e-7b27-98cd-b017206fa7cc 26 6f88929e-3505-8d9b-a04d-84e80775974e 27 74c905f2-eeed-4897-bf5f-e6e18eb22238 28 e7d9c8ae-7a0e-102e-b911-49c646a40d87 29 79554b08-f1c3-8a19-a4e9-10043de29cf8 30 3407b675-3090-221c-8a76-d62b511c112d 31 3d617181-b7ea-8e2c-9dec-3263f1da94dc 32 f128c8c6-ff09-4811-9d08-4f09a436d0cd 33 74c33c3f-0b68-1c15-af9f-c3190a2dbdde 34 abe05801-4aa2-492c-ab47-9af844215e75 35 f4d5b749-e9ba-5d5c-9f83-eaad3a2e0324 36 8a6221fb-dc06-3fd1-a9db-47103076c674 37 dccff6f9-56a8-071d-b339-5ad517818b1e 38 806faf8e-fb6e-6f1d-9541-0e42191b3d77 39 0c783ab2-b541-2dae-a4ac-6ebde8de9c64 40 db0efb0f-530c-78f3-afb0-1469914977ba 41 5adbffae-ae3b-83f6-bee2-ba1f3f9c542e 42 f0b4583e-bf07-507b-8af3-fe52ad39bb1d 43 a12a1e15-557b-4f3e-b6ef-a06aa12b3499 44 db59b159-e73e-4fd6-9bb1-1a7f925d9e32 45 b643a348-7831-16da-b667-4bea62abbd4c 46 5c76dfd0-360b-434e-9478-ecec8b93e8a0 47 b2408992-9109-2caa-8cd1-a7203680c3ee
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
28067830782382518471661178418284145306278544142. Exactly this sequence comes out ofnew Random(338).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 5 of Run 32 (seed 945,377,703):
new Random(945377703), Next(8,64) per post. The RNG predicts N = 47; the post has N = 47 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-08 22:08–22:23). - Conclusion. Filler. The content is fully explained by the two RNGs.