201209231910 10c5cq
explained decrypted filler
3DES(name+title) ECB, 48 GUIDs, seed 989
From the post to its content
As posted (encrypted)
25C68E6FEFAE513A 1BD5987DA13B92B3 104B0EE8045E3148 7F8DACF41DE7F6EA DC23E5F6140C53DF 5EB61D764EFAF2EB E7D06693E454C563 35483DB1FEEA04CC 4E17402AA3F3157B 91990BF51E81664F 355DD1A600C285D7 516465A0397CCB1E 2D3D70C0ABE2112C E1F5B87E106A91F6 74FE87D6D03196CF 1CE1ED196A72D173 B4B0027099A0C79D 8DB94515402657E9 EBA91391C7F79C32 C2860F2DA2F30A47 B3D258D328F9E095 5F7E4A2BEEFBFDCB FE6730B930368DAA B061EB7B6DB9276C 7561B0DCC03A3D68 1AFD71C152E91A28 A5D59C8ED2919F0B 43C340C6F65E77BC D75BE6919FAE2AEF 6D8B7F1F9EA12927 26A2CBD2BCB0E197 07AA8CA2AD15808C 5D48FDE77878FF80 A10BF58A39FB44AC CC19E764B2945DDF 9ADF0B2A524A2A72 E64200AD85E04BD4 0A0C87CA2A13D953 160048E8E3882E80 DCDCD3DD31B41188 389F29417C3EC8C4 8606957FEA7C7DB5 C0E482A6C91AA08F B42BCAC81A92C0C2 CE139925BC3E9E39 4C55A96B7C7114F9 7B2743474735CE48 3B4653669E90CDE2 DACAD51E91E4C7F5 92E6CB1C6AA94E0A E4FB67EC4711BA89 9E8884C02B36908A 8D70648D2A1FF217 05C68291B44A9BAF 21703D5B13BE47B9 13FEFE5E71AB9FE6 02AD3FF62E143712 5C14EB4394BF08B3 E848C042E9C1F866 4B8EAFDB986D17B5 58AE340227DB51F4 9E87EF2439075247 BF75632EFE985275 D5F3BA0C81FF1116 5ADCAB9A4E2D6CCD 7AC3B0F0396C079B CD7B7799FD473F67 76306162697E2091 F53CA522A21D37DA 1F6125D76878822C 30ABA9BC57B99612 CE8ECD0441EB7EE2 59428DAC739106BE 5143BEE7F5631B89 1F6824E1E3C9F2D9 D8E6F8ACAD8171D2 83A9DBA08832D309 43896F32B7782AEA 8AEC16592F44D2C7 CB08DE83D92BB502 78AEA382C15BE87F F5367E3226888D5A DDFE42A3D6BBCFE2 A42C9D6C384C73C0 68AA36AA115C0E24 D54FC5081B59F8ED 76BC62A11978604D 28204A0FEF0049EA 211AAF925C6EB4E6 9C2F60766393064E A9821C975B2CC959 73FE6679C3F87EA1 18F1C77AE2C262EF 6FFE52B223A3AF69 ECFD9D46CE0262E2 9B932D72B17F6006 B45AE0B65896D56A 1004BAEDA67222F3 0802201C3FB96BDB 4A1284DCD561D92F 1ED532432594FF53 3B5695C842617C08 A09162BEAB8703F2 82DE6F980AF91FD1 D9EF4C8EA786C41E 2B7D9ECE8E405AD2 EDDD32F6CA9D4E53 4011D0163F007926 1352801F9C207090 893AA0FE532E1687 0BCDEDA685E5708E 7B91F94905F53D6F 3FCC9094100AC279 72A276B3FB2160BA 6BFD8CB018D3B00D C2EBEE2B207C0390 5110862BFB5E037E AB78952C81C6D4E7 A85C772F8121A70E 93EEFCB0BE3FE475 8BFEE7CEDDCBCA68 CC3D5C1C2E16154C AC470D7FE851207C 58DFFE29BB7AE540 73D4A909CECDB746 18A6675E372A958B 54B9D2504FC5E67B 1911902DD9C69014 521D19E185321C4A CC4E9DE606A8BF4B AEF5121B7930C898 610252FE35A591D6 7B615135A7B30B6D FF278E7CA4FC64AC 25EF4FB63AAFEBF6 6DED964124C68DE5 94B067629EE4AB06 97BFAEBF80A24023 FEA409C2BA9E502E 9CFB4532F9379894 15EB9A83F57D4411 82E888A5FC98BA3B 051143F0CC9203C5 B78EEB5C55A550E2 7FF14C6444D65687 7574BEC4643FC773 56386948B022B48D EB721B2E426EA58B D4808C0D373B5B3F 01ABBF041888FDD9 DEB45FAEB0C97C6C 12E7ABC0BDC82C52 7F4A26C295F970EF 3866D9411BC6C38D 2C34E23EB8E65929 0213E0EE368DFB3D AD05788285033D78 7831AC78C2033E11 7EE1350647361048 2C1D93563703729A B0F66224BCC8042C 28E5D76390BB392C EEA1993B534F3705 B7268FD9680A95FC 54E1B8AE1C0FCBB9 54BD0653110D095D 833E0900045E8DE3 2ED17F82A9CBFDB0 D806CB102D531F92 2A760841F3AAEDB9 9EB9BDDDF0A27732 47A3E16777DCA837 810FD1C4EC8C7176 8057DAB94117A281 516ACA9334948A10 A39E19EEA1CB66BB 2E44E2B6F406B032 068983F6BEFAE924 6164C4C9A40C051A 00D2C3819B8332FE 2C5B414ED627CFAE 8E575A1225B1A986 C773830BE42E67F6 C24767739F95D97F 2D8AA44644BD6E96 EE912A93D8BF5C39 7FC67A08428EBC8E 2E835BA64E722FED F4C7C2D21DFD89FB 927830A860971DED 474BEA5566E5FA7C 8F636374C7D4BB9E EEA520830F2AFE7E
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209231910(name+title). Key = MD5(password) =45633199623aef1c724cfe12cd098a06, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 b5c61973-b997-370e-bd50-e997effd3723 2 eda4dbaf-3401-0d13-bf20-288f2c7e9b93 3 0ae8f0df-3975-0e66-86e8-c954d80f15a2 4 7c710d2a-4abc-5cf4-a140-ef9d5a2c733f 5 6fd7a907-00e0-6224-afea-e4deb6dbdce0 6 53b6ea57-bd7d-7e1f-ae73-b4af6c482238 7 0e97fcb5-790a-0c50-91d3-4bbdc1300cf1 8 cd1a6883-ada4-5ec7-8f3e-f532976f1da5 9 4e3388ac-b622-39c0-a357-c3fc09ca6c8a 10 c765a3e7-a1be-8a21-8fb0-ee42fd68e569 11 a3b079e9-afe9-8397-a68d-ea5e0b2a44da 12 ad798521-6370-5b98-bff0-93768cfa0c69 13 761dff49-47e1-4f5c-9531-6aa8491d73f8 14 d7d4cf6b-f577-0df2-bc4a-85f549a57850 15 047f7505-0a50-2170-96af-c5f95a8c2a0e 16 a51d972e-66fb-64c4-ac55-94bb645d97bb 17 bdce8163-b26d-5666-8b40-9116f868efb5 18 3fbb3375-6afa-19db-8940-4dae6e563e3b 19 966e7cc7-09e2-426d-8578-ba18605b3104 20 6f5036f2-a726-2384-a27f-fb02af5e3d53 21 d531ad58-d966-2a76-925d-6ee38cab6678 22 42818235-6c4d-4e17-8df6-5b3275a6ba1c 23 8ac3435b-55b0-1948-802f-0de0d4efff86 24 bcb7345b-64a4-467f-9efb-b2041e6a3556 25 82628f37-9bf3-52cb-8082-8910e033d3bd 26 cc7b963e-6103-547a-ac58-b81de9591a18 27 a55e8c03-1094-29ed-9dfd-2bf4aaa8d97f 28 a6e81628-17ec-47d8-a1da-e0b1104cd9bf 29 3528f5c0-1a14-62d4-8f1f-847a4e94d930 30 fbbeefd0-b328-5bac-938d-1df185519e7f 31 1eec2d4e-2e10-24dc-bbb9-09a4c994e896 32 8094c332-e45a-830c-9be1-dc05e65bf8a2 33 13657236-72ea-8fe3-bb19-6872731acba8 34 afc4c44a-db31-7474-9740-14812059ac79 35 187b8137-a437-8e6d-a0c0-f25f5895beea 36 62a8f3cd-10ea-5a1c-807d-3bb2ecce3ddf 37 ba9c2187-ae59-227a-bc72-4ecf9d5bf653 38 759f6676-5d61-3bc9-9097-80c1fb5dd7da 39 7e99bf20-d1e9-6dd9-9fd0-e661afa59d46 40 4bae2ac7-5752-4608-83c7-ba9f98b3707b 41 3a544d2a-cb12-6b8d-adba-c3f451b485a3 42 6c5adb49-df51-41bd-8720-a85108c5ee02 43 b0c83feb-e8c5-8ead-9807-57fc388ca761 44 3c12dc11-f7c6-1147-9678-0b05c442e62a 45 a20ee5cf-dff4-328d-9930-77138f6fd147 46 bfc3c079-5643-69ca-bd31-d48aeeb1661b 47 6bb02074-a3a7-7e55-b7ea-04d78a0a8943 48 b92d35ac-ffd3-8d46-8a7d-5c0af2a960fc
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
300567053885402651422414552465288785236464813678. Exactly this sequence comes out ofnew Random(989).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 2 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.