201209232310 10cayi
explained decrypted filler
3DES(name+title) ECB, 57 GUIDs, seed 324
From the post to its content
As posted (encrypted)
276BA75F08974852 02ED12CFFDE4C3C9 3B37C9B2587B4816 794275ABA0C6C1D3 AA1C2D6441F314DD 63DE8BF8FF432964 F78EBA1421937672 827C2D15EB3BCB7C DA5833957DF9681E B7D6169D896265D4 A8F1559916AED075 D4D0FD68EB7AD845 31A4D194370EE6C6 92335A7D62D5972A 9D6D7FFA72622726 84E921016D049773 F5087A1228B0B1CC 45166729B2078F0E EB8109129C4A0CF5 A4D30D56B548824F 5811D2D3FCC91C28 5B39101CD4CFD54A 381A36354ACF30F3 05FFBB6D9472E407 E7B9DB3E7B5E7DDA 12A1999AF4C49EAD 5F14F76F1A80A579 357551E5BDF43F13 77A274D0A136DFB1 C8EC05F0041DE416 AC5C6D362C75AEE3 68BAFAF008230C45 9BCA0C31AE7C7102 657E6A45EBCE8CC3 93A8DE925158B5CA 873D351E82EA41AD E7E9527CCA1CD5AC 9D0A12C77EC4F38A CB0402F43F62F59C 7B697D1B0085852B C785F0CF48DD3884 C5318D0F505F1443 16C2725AF555C4ED 21ECF13D71095E2D A601691C28343128 0D351B74CF2E3A0B 4D930561271A8AED 29D85F501146CE93 621C90A70190F75C 6CB0FDDCB688FA69 652E58FF5E2C9D6C 4B20B0A8285BDAE8 3018A7EC75253638 B65F392270C20A7E 4373D8654E42D786 576966D40EDD332B 0F5A8B295DB516C6 B60E099BD2C051EB 6FCA0419C1070DA1 7C62B04E562DFF27 51B689937ABBEEDE 803DCECF4C70C752 4D152A8922C36F20 1A24CDC642DEC2FE A361801C0991852F 41C93CC2AB86AF2E 3D3B89BD9DE8843E 51B5EF807C25831A 12D0D8D3BC5E69D2 501D35059119EA35 5943E2CB9824DCAB 4CCB77BB2C7D0784 71C7AED582B9E234 A760F23F229F7751 0B06C664C0D914B9 2333F518C91A82E6 18CFDB9447F58C35 4D6B66741B951646 266194CC89DC51A9 1BBB3DE421BF8BE2 1CC258EC826FF352 D6441114FFF00CB5 97BBF027FD4C574B F57E731354CB08E7 1CBB4E02BCB15867 156272D025469CF9 3ED87D6188DC2F0B FB321854146965BB 5672116876ED12E3 2ADA5949181543D4 60A1A4E862D28B94 9B9CFF805AA70586 AA9762A4C30C6FBD F8A3F1DB6CED73FC 580E72F9FDB6F513 5BD4340DA4F9FD70 C07FAF6EA009A9FB 43719CC7C2583EB2 2A4F6EC31D4F57F7 E9F69E18A0775043 A082206A6368B63A 7CB92DA19166AF03 4166F6D0E1631027 7DD022B06A2258EA A8CEACBA2691FE84 A2F58F1F4702AAD2 40F1CC1071323CEC FBE08F1343E2E8FE 04FE07D520CCE32A 51A68282309AA70A 7A4265DA4CAE83F4 E1B816BC9AAAEC79 815B2A92C3F901E2 66839F29216F75F1 8723B6CAD61B45F8 7FB3B9C412A33DB8 4A88253E681FE21D 8CD72C2521D0F558 F271F909EF7F7692 05C359567F31101A 8B6731ADE89C331C 3245F31B7AC48277 D9F80D02DA46AFD3 41FEC1CC97CADC5B 9BAC342EC4921A94 A716D7122A74F026 C87F68BE2AD8B732 296DB6DD2CEFD35D 36ED2E4C7D2BA42F 3D2DEF432FBBACE4 375392A6818964E5 ADF2D7BC7B3DE9A3 58726CB87303DEA5 486C9E58034C21F4 B8A570915289A73E 8964F0A282868035 5EC125949327FD89 712221DBBB20901B F53B8A8DE648AE55 50528BC417692941 CCFB44F87FEB97BC BC6B36E55E79A23F 9EC2AAF1D2B10F23 9206B421CC653368 EC732767C3B09096 AA70495BAEC2FD5A 922F1CE6B6B921DB 33DF0AFBC699BCCA 82B74E01B931341A B144A15C8ED4CE8E EEA7A38591577977 383174E216A5BA3A 109CDC15DF71A8EF E6D6AC6D284F8381 A3E2D3C59F2ADF94 22DD1B3A8C2B945E A1930E5EF9E52AEE 2BE6280D7A8FA646 C3F832F4E64C43CD C762DA210A145760 2ADE639657443300 7FCD32E596D5F53B 0D05078A9149275A 7B2D3F574A2C963D 84B080AC74D5371D 1BAAD9EA73F24C4B 97039D5777F0EBE4 C5C23BA7133C8335 2023BE9F2152BB63 C0270A6D36A1A4F8 C60E1DEFD3DDBD14 E5C54E551C50E366 65B5FCA929F09C97 24F8FA7DF9D1B4D2 1D5DFEF5CF1E1D33 9AB65CFC7E96CA8F C522F2448C062A79 701D8697557E969E EB84ED6D471607FB EE2EFDEA9DA4F659 4EDD74856FDA4A50 578F21D19E682930 D09AC0386D73309A EEF7D9510A3E56B1 9BB173F988FD822C A49A414353590421 38B31AC245D864C9 176721AD8F2E839F 1C043110AF8C844D 6542BD3998D4458E 5F919D5CEBBD6A03 528DC25162BDD09C 61C223E1AFCC4C36 F5CBDD0AFE3BE51A C58D86C2B839D753 FA20E87C43150B90 B9D0187C876F2779 F977B4BE437888BC 2B45857063F68A59 B1FB86CE6E328A4A 2DE97957D7B5805A 3EF560B9A5280710 A6B8E14F614C2295 239CA3DE098F49F8 6FBE6E3440C2EDC8 2CC1644064FCC43F DEF343AFD2C8FCC1 679B1B535B6E321C 4F2904FADCDFF921 E3D65D5066250D99 0DA957D01CE82F46 646432BF174DC402 B20E97CCF642CD6C B29FE69574C07A87 0B5674D364C16D6C 46D81C1377ED6706 E2FA2A025750C264 FA23BAE073EBFEA6 84883BEFE56DE3C5 6AF2B7AD71BD30EB FE5222015CAEA79B 3F61726FC4B942C3 E30E08DFEAF34D34 468F4425BAF21AAC 2669ED61C749D0FB B4C82DB1EB6FC501 2607659E822E003C 1DD4A13A639E01B6 763EB4999EB19BF8
- Read the ciphertext. Strip whitespace: 3,664 hex characters = 1,832 bytes = 229 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209232310(name+title). Key = MD5(password) =d19121084acb1b68a4c3e58d9853b1c0, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 57 GUIDs as hex (shown below).
Decrypted: GUID list
1 2ec02601-35e1-8274-955d-4ef06b215944 2 2943b74b-2c29-7a4b-b5fb-46440bf1ee31 3 4730ae23-b387-24f3-a098-bc33f82afe05 4 d10af24f-75ab-634a-a6f3-36de580b2e8b 5 8be02fe1-d1de-45cc-b48a-b30c98e29f19 6 47557cd0-4a37-6f1a-9c89-13532f7cd200 7 15008f71-e52f-0a9f-a3ad-1d9aad344a78 8 92a241c2-a42a-83e4-bfcd-a6d60ad131d2 9 e317483b-94c3-008f-91b6-e7c5c4987428 10 c358fca8-80a1-612d-a21e-5229e7d94c01 11 dfbe886e-d892-884d-8cee-2ab7b7128a07 12 fe7353f0-1397-3988-9415-a2a6627f441b 13 aa73e0e0-eba5-3d6c-aca6-372aa8e90244 14 e2d1a78f-b134-0c1c-923f-3e9afdb8b37f 15 0d49fbe4-9602-65a4-b938-bddee44e64c5 16 3e270771-a16f-3bef-bf21-9d377bdf8c5a 17 c7043e72-b8ab-0487-aecb-877004d4abec 18 2cfdf9ee-9fca-7869-a134-fdad5a592e84 19 23ffb214-eb25-465b-a167-dd4cbf5aad27 20 d67464a9-d2fc-6972-985f-9ae4a2c9c21d 21 ff81e40b-0a76-754b-8848-20caf48d1aaf 22 a08fe903-efe4-3289-b706-d3dd3ba7729d 23 b459d861-e698-64f6-9924-55df5865a293 24 9f1a79b4-81c6-11af-8a78-e4cc600c6d7a 25 37e8bed3-31da-4152-9e56-7813da0bd722 26 3b08b44e-5348-84bc-b8cf-073e36c30500 27 49a5d1a3-0449-4060-a611-6cd3bd37ec74 28 259c6f9b-246b-371e-95ef-036b063efea2 29 92dd0959-4739-0cc7-bdfa-58691064afbd 30 13ede075-6e1b-0aeb-96b6-d882aea17420 31 b06d56fe-9754-7094-b040-4e014d1caebd 32 9df187c3-aeaf-76ef-a070-c4652dd22f8b 33 289ac483-2572-5c26-822c-dcd7f243e2cf 34 7709fa37-0685-1236-a362-b05069c73737 35 49317c73-b9b9-6096-a2d3-4d5ee073cad4 36 523e6a92-942f-71de-a483-285e5dccfdbf 37 c05edcc9-1d8a-388a-8e29-30ad40cdf30b 38 992e5f85-149b-13ea-9787-9f6fa83f224c 39 bcd0bf63-6f4b-7c36-acc5-0d8aa474f8e0 40 6625f435-6a31-8495-a79f-68bf4f16753d 41 fd13c3ee-4ab7-27c5-8ad6-e03b8818cc0e 42 107eb747-9e74-65b8-ac37-1ae52dfe0cc4 43 f0e5805c-77b3-47a4-a209-de98a389f320 44 0e91dfb9-5d8f-8ab3-af64-06cdf8ad3bd7 45 698729c3-d980-614e-b06a-66b2febe7e68 46 7afccb93-9dc2-138a-901a-0b58710ec096 47 0cd7febe-959a-5d20-8767-48bdcf3d6f85 48 461fbbde-4c89-4a74-8a28-6f2ea7157460 49 93a40abb-219e-7103-b0ea-31fd6299ad51 50 5dc1dd42-8136-00b2-a954-a87d76563bff 51 6809b1f3-83da-081e-9466-60a1ea8c455a 52 d994d9b1-f1a4-616e-aed6-36540bc3f4b7 53 13c42b91-35f8-0893-9b37-c540b0caf46d 54 4beb4bc0-ed8e-4af8-bc88-ba7484849175 55 3fe13eb2-6675-03b4-9607-078560f3e12e 56 672d5e58-6afc-5dc2-86dd-c08b503892d6 57 7e492513-e8cf-1c0e-92f5-c3bf1e20c07d
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
872646080683306307467361484300775167317826486154700604051. Exactly this sequence comes out ofnew Random(324).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 14 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 57; the post has N = 57 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.