201209231950 10c637
explained decrypted filler
3DES(name+title) ECB, 42 GUIDs, seed 875
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 2,704 hex characters = 1,352 bytes = 169 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209231950(name+title). Key = MD5(password) =da58d997a1cebaaf9ff546d63f7e34b3, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 42 GUIDs as hex (shown below).
Decrypted: GUID list
1 f04bb7a1-850a-7094-875b-a2e5c758c177 2 6809de2f-17d4-5fb2-baba-78438c1519f0 3 3e3d6bb4-672f-3810-809b-2153d14592d1 4 c60990b8-e96c-2139-8dd4-4404341c257f 5 3ec3a088-4a4e-2488-85ed-047c845b7708 6 6ed6b47d-3767-1bb0-a6fc-7d249559d479 7 34df8afc-7aa0-80e7-8b1e-15d29a84a58d 8 a7838486-33b0-3f13-84c5-77d42333aa16 9 8f9b7087-2a08-247f-baa5-1d072686a8fb 10 4ce28983-47cf-8698-8b47-770f19182ed8 11 66b8442a-c73e-88b7-b0c7-4a1e25985fde 12 43ebbff1-65b7-5e13-ac93-43b6f99a47f6 13 7bf2b799-8215-1f01-ac66-b9201d8ff888 14 9dd72792-19f9-6e0a-ad30-b93ad6ef1963 15 a9380d1e-2376-4884-9044-2b8679c24947 16 c6cedb5a-be3c-4bf7-ab65-fe62516653e5 17 1703aa68-b8ae-6927-9aac-a2d1c66215f2 18 1880fb02-50fd-4633-ac47-035baa821147 19 59525fe2-363f-3ebd-90d9-b522c65c4035 20 c15c6be8-d075-1f9e-a802-a424e4df6bab 21 26000fd6-de82-0592-82d5-867745198e42 22 95c88b9d-0c75-4ac8-8eaa-7e31c7a42ecc 23 78ab6cdd-fd99-78dd-962b-f69ac6a63176 24 5fc7165c-b33e-6964-8be7-c26447b10eb6 25 db7ab3b5-7946-4a5f-beb0-4d4ffc23a579 26 4dcb7ab2-94e0-276e-aebe-234b017a7fcc 27 dc47efaa-2929-2830-a100-22fe3a16498d 28 81bea0d1-0e6c-7a8e-af3a-1d3f90e3921e 29 62766f43-ff34-2bed-bedf-c8f203d8f935 30 e15b9247-9ced-6019-b9c2-4fa37a5ad1d5 31 aad46b1f-39a8-1124-ad61-9d96b7b1e4b5 32 36561522-728c-80af-b214-0fab1ca4fc07 33 d609a3a1-cb9a-1055-912b-6201c0f4d55b 34 8323c242-ed0a-8f7e-826a-c3c11ccf9d6a 35 b857a8d0-8deb-1d78-aebe-cf3be1d4bca9 36 d9aed928-3a2f-61c2-99f0-9a6af962dfbb 37 81017078-ebae-7811-a1dc-bce22bb8c15d 38 a9b1ef29-3071-63b4-8279-8420a4d9f6ff 39 1c8ff4a9-b2d9-175d-9c56-5c6a324dd441 40 7d1ea944-8f0b-7253-8c19-56fff01c3eed 41 8fe62b78-c32c-2b36-9fc8-f3c9881203f8 42 f1018387-74eb-7a6d-a59a-9490effc9c0d
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
753221832885164464310476422726181816761727. Exactly this sequence comes out ofnew Random(875).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 4 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 42; the post has N = 42 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.