201209212120 10a1je
explained decrypted filler
3DES(name+title) ECB, 55 GUIDs, seed 845
From the post to its content
As posted (encrypted)
0AF78FDDE65E5FBF B79A5E88A0CE0B70 2C954F7E90BEFC12 8A6EBED59971C73A 746481D5F437AF6E 4358889BECAAD3E5 02F3CB7532523BCD 2679449C6D540EAA A7BF09CCB28C92C5 3E37B1966AB62FAA 3169062B6D49BAA2 104C3ADAE11A6B09 B1015E97E3965C25 2C8A8F81DFB9DA20 BDD175F9DA58000F C1E3FDF96C110F93 49EA086C47E55C45 BAF4EA22341344BD 862739815391403E 37C6541BB7DCDAE6 97170A2E26767C87 9243B0DB1C7195D6 559DB5BB8B142885 3A5B387A6401C711 0D47AFBA57284EE8 96559AACC0E5928E 72B5C095603BC555 BC058434131CBAD3 11275027B721C7DD AD0C4F28065C2924 A72F15DDBE16026B 5DCFA7E08C8DCB4F FD8C0303DBFC08B5 38BD3E58054155A8 04983701F9D0333B D4664FFC37C16513 45E84479FA2510AA DB3BB97500661016 E5AEE2EE765EDDDA FF73AE7B25F7BB07 1B33D850EC8F5AF1 B96DE660D81A91AA 500A3354CF2573C5 B5ED2417D4DBC6EB E3D8F5DEC484C742 D9EE3AF482ED2ECB 9D40D14CF979D8D5 1728D863D945C14C 83F024DF51AAF1E1 2C3D8F443DB09B9D A1C74B35C9EA7CD5 A5727CC6158BFD36 DBB83F564732EA9F 2BCD99E795D74A0F 6E3E39ACE08E41E6 3E928435C3788CFE 1D293A6C8489987C DF4C2FA57AACA179 89CEFD191D7E1534 DC730AD6229D33FC 442F822F83D6FAEC 5A1F6A64318F7D01 928152229D6E6366 38228A095D51C30E 15E7E6B8A717653D F983EDBE26B94AAC FF9A56A1D98A2A4A D7567B3C742308FD 3B880FF1D1261DA0 CB7362E712322E30 6F9ED95DC4EDC60F 5D3E23621F91BEA1 C477C9BBC19A901F DC3F5D0A4D677AD4 626E2045363D07A7 9011DCCE183949AD 06F1A177029173E5 1877D69573A2ACDA CA0552911D174AD2 637B17939F0BDE19 71133553374CD47C 32D2F27B833E7A5E 55E67D5D759BF30C A0969BF5EF87081A 8D6B7E1222E53F6B BE3895AFC6A6B13F 4E68CA795A0438E7 D53CB1ABC1E99139 0A2959C157F18D10 C1A6A16A9C3F42BC AB8BC5A8F505A41A E7258BAA7302A633 29627AD71FFC0479 DD631CA249868E18 B48B4B56DE3B8C21 FDA3FDD4672364F5 22CE600BABB00541 BBAB13EC32396A52 90DFF28F0117E881 537B8E05EBD9046D 3F4C5BB0DA1FC486 31D6CE25970F7C4B 93937E6B31D43A1B 961215811687F044 715098B744489E7D B58D0C3B85439ED9 368BC795A40D6681 5054B2FD11806184 F45A53AF828BC4C1 1E9FEEE6F3F435EC 6695321C1891A6B0 A164EF503EA15216 573796FB9101A5E8 4C82BA4CC6C18E35 171F14001ABAC1F0 67A925C3278C17A4 5EAB5CBDD9056137 DB3070155D100C6A F977702C9222C7EC DF71E99EE6444004 E146646F8C018F78 776D5C9BD1BFC531 C8393FE8A39B79A6 FBFBC491D0ADAE2B 8F695FE4819A4A2D 88C9561576B27055 5EDA9B27C684D115 05EA08FE3BD58732 8D39562CD57D8A3A 59B22567B6B7169C 1E934DB9EF102512 C4E7FF600B87184F F3EC887DF03E1D43 F902D772C287973D 4B5942EA794F060C 4E558FC54F338016 CA0DC30BD38E0BA1 26E61D06F846A158 988099102A7F7C40 3E50EA28188D9950 FE20D4E0FE732479 BC969A7097245FF2 5D43D452E4FC3C63 57A971ADF3CC4D6E E7CB0F4E45554323 6C657240FF5BF863 1B58AEA669ABE31E 5F54D70DCE382ED1 B9D227DFC97318D4 9F8B1EBF60342505 F304F5483F4740F8 38C36CCFE3A9637C 413ABE597873BDCF 93F2E1294A05AB33 317E9974AD66C7B5 83C8A570616A4A33 848C1E1CABFD6881 E0D19976A42E8CD4 A9A830F54E1612F9 2F298F72674F289E 7F39849581ED2800 C72AD0A36E7FE63A D36E66E82F2140B8 5DCFD676547AF4E5 4BA31F96C6F20026 5B5122A3D26AD645 021979F117E06B6C F1F148B439AD9746 1F89EF7DE63DB902 B0F2B174DA5DC467 D026856849CAD900 CCCFA15BB1504C76 ECEA7EBE5E0428D3 74011414A226371E C936451FAEFA1025 72C4303887FE1411 180E497DC095536D 666EE91FEF1DEC9A 68070F08BE843598 B8D10C0B8BFED7DD 57ACF439AA929A2E B52A28513AD6F1F7 9050CD57F4CB6A84 35EC431D2F82515F 68A6877EBDA6E287 B28A4762FBA8F82A B7B41B513A1D7C6D 3DC6A9E6C02D4E90 756D9E06FE8C49D4 DA4C47C9B3AE7A88 01C548D2A8A45517 5C45A2AFE80C4979 C1B28D126C31312C ABEE65B2D2205556 D12AFE4F67963420 B32CAC4E0BA14A74 7BA44852311817E2 B961D38D5F8DF7B6 3D3F92F1203A8648 21D96F704AE1BF5C 9BD6A30C4030BE01 4A3A3EF2FE351F4A 65397CDBFABF5FDC 193942D8ED114CA2 6105F1B8BB19934E 5CC0B66DAA1187AD 3DEA693DFF2F9BE5 5D6626049C1A7F85 ADBEA3503EC479E3 1E2ADDC595526248 A4162A263FC3DA3E C8BE6EEA14726CA6 E143B24E19255867 E7CD35FE49BCC58E 91EB812004F5D76B FC9C81BEB8BC97BA C0E1AD77369B76B7 92319CE77B05A7BB EBF153FA1DEA8B8C A5E98438A09E3074 70D85D1399A2F656
- Read the ciphertext. Strip whitespace: 3,536 hex characters = 1,768 bytes = 221 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209212120(name+title). Key = MD5(password) =3fe4a8e85325600b376157c4091563af, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 55 GUIDs as hex (shown below).
Decrypted: GUID list
1 708c323e-ba27-14e2-8416-030ce73d7029 2 14dee947-e631-63cf-9885-27c9decc832e 3 49ad4bac-3163-3d21-ac19-b7fe29af6750 4 1987980d-176c-8ace-b3be-fae6cfa1bced 5 dadd505a-7ca1-6feb-b3c8-79ee87f54495 6 f162cc7d-ce60-026c-8c12-8128be9a8fdb 7 a334409d-e88b-4ed3-9ceb-e1e430cbb6da 8 3d109611-361f-3638-8c3c-00288f9eae19 9 d8c6f307-eae1-4690-9912-817c2e1efca6 10 ac69f766-6bf0-7533-852b-0c15ef0b4ac0 11 14b2f236-3603-7418-96ed-3be9f5279ec1 12 e7a0edec-2933-18f3-960b-a363fe647764 13 1e38bca1-9169-4c90-81a0-5283d2307667 14 f27d825e-1579-05be-ada1-e627fa4b4505 15 00d31f3f-9559-4892-81c6-6d941f6a7337 16 e41d3d8e-d1f0-6b97-9aa9-4963ed3f7afc 17 f8ad7e25-365b-056d-908e-a4d7614e084b 18 5546d92f-1a30-8329-8dd7-c59275969e51 19 027a32a5-7e10-4105-9f87-6665028f3745 20 e3f479c8-4f7f-46ae-9fd2-e094ad73c55b 21 9592d8fa-1292-0247-b75a-17ff471d42e3 22 94d03adb-007b-189b-840c-30ff6ce1bf55 23 49b6c7c6-a05e-7a98-a13b-4731f5d5f596 24 4ceecde5-3ddb-2d28-b79b-f04be1066d16 25 33c87b3a-af60-4070-b408-d0892b970a30 26 600d1c6c-cb50-0439-9b50-80d48d4f7c6d 27 9f5f3006-e1d2-36ac-8952-9d082d27b7dc 28 792d5c5f-43b6-264b-85a6-c5ef1604d491 29 fd649f14-85d2-8284-bb56-be1338d59ca6 30 990596de-6749-552a-94b1-4c2e78d1726b 31 c2fd7494-4929-14bc-b4e3-c50d046fcf28 32 7b971c1b-a9f1-0f0d-aee3-03a6b908823e 33 c96d7bbc-dd84-045b-9ac9-1276c321d205 34 9fc155ef-6f5c-16d5-af1c-f4cad5ce02ca 35 b6a6b394-eae9-6ac7-aa81-95fa85502319 36 508fe6d9-1256-3e80-a9ef-23fc2fbdcf65 37 a4bef78d-cd05-81ff-8e8b-717437bbd900 38 34be261c-cbe5-21a2-b662-f5d429ff9200 39 757cba29-c21e-0e91-85b5-f42ad2c3171d 40 55173c01-bc96-6b83-ac17-408f6061674c 41 df508a7f-cc40-150f-aa23-4f406dd77bc4 42 ced1090a-b787-43d0-a566-2c78053ec845 43 77b1f7b8-1e9a-51d8-a1c4-1dd5b13f638e 44 f33f91e4-75ea-83a5-b5ef-4f03ee5328be 45 0b31df99-b19d-3743-9ed3-981b0beb63e7 46 420c07e4-94ba-8d02-8d3b-2d14ec6ec584 47 95a29287-0e9d-7cc4-81b6-d5052e0092b4 48 d6fc9bdb-1a6e-6f4d-8bd2-f2e355d7c86e 49 6e1d8dc9-e811-6f8f-8910-78110813120b 50 3d9c7300-6fab-8a2e-9008-f11702106706 51 b34998c8-6dbd-5c3b-ab84-736e2b70ff29 52 59b9f153-9fe1-5325-bea0-63cf7789db05 53 71c2decc-2a6f-669a-9016-f44fa423d79b 54 a5ca759d-2a15-5801-b1fb-3455336fccb4 55 66072ea6-3cfd-3888-a1fb-33ec670b8cbc
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
1638604347714046084401724032851001638206145838766855653. Exactly this sequence comes out ofnew Random(845).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 2 of Run 33 (seed 1,220,410,968):
new Random(1220410968), Next(8,64) per post. The RNG predicts N = 55; the post has N = 55 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-07 21:49–21:59). - Conclusion. Filler. The content is fully explained by the two RNGs.