201209231307 10cire
explained decrypted filler
3DES(name+title) ECB, 42 GUIDs, seed 382
From the post to its content
As posted (encrypted)
17B6BE677418700E 7A1729BE94DF3D95 594391E431F0B895 84B74661E5302B84 4087664414409582 78AA04F4A838675E 6F00A4497EE76E4C C409534754DF3671 7985368EC3E1E9ED A6F2C842A3B7A049 62D0D492B29C8B84 A4C2402A38FA9772 08F0F05FA9CD0EA6 36517B4E0319740F 6F56C79F11416D00 00591A5B9D685F62 41D368AEE52F82F6 D93EAA53897089C6 F39529A50C866441 4488A433E19DA90F 39A537B5DBD616B1 3413531AAEF78CC9 62C825D20687CFE1 4F92B5D5A31DC081 DF2F916B75E5FCDC 8718931CE01546B9 353BE08289585A02 9DEC82386CF45451 DADAC2A7B0216377 90387EF6AB30D4CE A8371A75FF2B0B39 9F43C2345557A719 88028913DD046097 BD5B15154284F1B2 D525B0AD3B88317A 12EDFD1B3AE2DED8 AA7E244311246EA1 0303D189FB0C2E01 BBF5991B7B4D17BB 570BACC230E225C6 9E79249C5EB3FE87 130A33DCFC997649 58CADAF9D3FF9DFD 434999C779583F0A 88EBA99A8F43B5FE ED2D3CA46267517C 1A8FF394571948CC DA971ED0DA810AAB 033655C8DB058A2F E035AA4029957D03 D2E51B9F30A8D42C B26844843D67303C 54A8C53345F5E2E1 993FBCA6EE82E942 63377D2CD3FC992F DA415A355645FEDC AC84BA581E78BB95 350E7BADE266F47D 0DDBF6F51C10218A 8392A48866205A4E 0D8F746A565960EB AF3CCFD175BDB448 14C7494ADAD2E6CC 1E9026E654293437 D7BFD61D708AA2FE C39D91D331437423 C9EA501E50B8FC5F 7BEB231A356CF45A 082B69CB8DB3601B 005E64FE2B888CFD 4C76197894AE20C2 9F76CAFB3E86C2E5 B1A6E8A20703F510 6BA0573A2082E926 D55F711C50C095CC 336F1EAA6CA1451C 8FCD08D184BBF0ED 5436A02B6B215CE5 34E1BC7B37165646 E1FAE016A5349A3E 0F9B465E34E9E5C6 EBC7AECC034DA5F0 33DA391742FEC54D 14943674048C3419 AB83807222C408A2 47EFBBDEB15AEF35 B70FBC74D8A25F39 932E349D36DCDD68 5223F87D561EE102 5C760B8FE3D0E9D0 067F9E8860754AAF B814F9CD84D000A2 6ED90BAA0C0DB6E4 194A3DFF2B3D48EA DAB11FB0A8B1431C 7AB178D83A941032 FBC15CB283197766 E9448443DCB7D015 338112B32FAB5F28 212449673524153F 26BFAA374D19E688 631AD45D84CDBFB9 D7F85B200FDA5579 614F60D62380CBEA A17156E757FA2208 629893A147A1E2FD F2AE15EAD7A1ACB5 C045D389A6C86F07 A0F07A8D49B4022E 7F97F90FC2134A63 7B8D79DD7F8A2398 089A156967D438FA FA33650B9F1AD87B 25B3EE67F20C0EA1 57CA0E21C8F1E438 A4D55F3412641FF0 4C0741DB3EE1224E 10B3983FEF797C39 B4C6F723F3AACDDC 6BEBD976A09C87FE 6B5F814F7C7F74D6 F6E79B4566F5299A 0C3A077A47C34AB5 5C4D950410637EB1 4F5BF961E573B2DC 0F8999B004CFBB85 C2A0E5B158727933 0C10600F3AE1D3D2 AD0F72622189FBA7 221EC73451696014 B6E693FBA7720CA7 749186D5E6C8B8D1 3CC37E0AA1A135EB 460938E66CE5B94D 2FF5971496A9550B 6F25302D21033187 5EB5DF888C27A631 264E4F878456F92F 8D5C3E39C1EC12D8 5E7963AE5868CA47 7067875D75A80E1F 38DDE6F6C2288BFD 60DF963385EC7FB9 E56CE52797251B08 E624A13F3AE3B49E 00E3881339264DCE 53716B679D68CCBD 931F9622C45B5C12 58EC286C47398652 C49A97352D5FB285 B9D6B49C614B8737 F4E14A3D9ADADCE3 3122F0E63F864D46 DE67FBC321B436F2 9D8D4E1401B34CD9 E42389EEFB5ECE20 2E259A73288E7C1D 3CC9AF6AB62762EF 969C0223B6A4A17D D8BFB98ECED7FDB8 D0C3050E984CA073 EB0AB58916E39FE9 FFC0936996955B4D 6EBC2EFE97CB8DE8 3D82C3102F83DC17 7D5BCED0527D744E 903903C284EE461B 03C715E3184DA5D8 6FFC633B60877574
- Read the ciphertext. Strip whitespace: 2,704 hex characters = 1,352 bytes = 169 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209231307(name+title). Key = MD5(password) =e30eca2570936c81771f2f9dcfdd89a9, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 42 GUIDs as hex (shown below).
Decrypted: GUID list
1 432de10b-915c-26c1-b146-22ddddd935a0 2 8bbf7703-3e81-81e6-8d41-af1133a45a08 3 41368729-f496-7720-8386-85321a332567 4 4a41c934-ce0e-02c8-a31f-a92707fc273f 5 4edef1ad-f7b8-6cb4-9fc5-4472992aa7b1 6 2d2db17e-0840-3b76-b198-54b9600f05c2 7 44012453-369b-07f2-aff6-551dab4e1f1e 8 7dab3ac5-6ba0-00f6-8ff6-6aad6a7fa70b 9 3cf24150-c9e1-27b0-b641-01521626fd88 10 c98818eb-9f27-1cdc-a273-a5e7630bb4d1 11 508a593e-86a8-664e-a2f7-5930d2417593 12 a4b617b7-8cb3-63a7-b67e-44c594586e6a 13 1f2f0377-b80f-2276-85e6-b7a42961fb37 14 95a4bcf7-b3c8-1e8e-8d70-3d65e2321d53 15 f02c4c4a-360d-3458-b63f-a7b01e119087 16 73ec8623-e81c-5458-a793-fc52e23d64e3 17 807efff6-2bb4-3c6f-8797-bef0e260674a 18 a26fe894-2a7b-7fd3-9b46-442396e9fe35 19 dcb06f8d-4f24-0975-911c-2aa80e33bdee 20 e8c18ada-78b0-27d3-95e8-75c8edcd0497 21 1651c64d-f73d-5437-9285-6b55fe0eb037 22 335daaf6-b603-512d-873b-45d94a3d74fa 23 6412431c-a8ab-4f6d-b50b-ad58a3085959 24 0865d67e-93ab-4472-82e0-9f9fffeb0eba 25 dad971ab-8c65-1f3a-8975-2878c0f46e96 26 bf6471ad-1bfa-1961-aa9e-e9d14860ad4f 27 2db43ff0-9854-3299-85b8-c74a88a8a081 28 eb49811c-d80f-392a-94bc-60c759a3035a 29 4b79d5b7-85af-06c3-aba6-d77399a7d84e 30 056db8ce-8529-6890-86b5-0c7a0cf95419 31 f83290c0-14c5-17c3-92ca-48077154d1ce 32 f5ff2356-7fc9-076d-8adb-20c5d2080783 33 acad8ed4-c052-85da-9593-11c91dcf7819 34 fd47c8de-ea9a-5e8c-9d3a-7dec7f78b1c0 35 a6602650-d35f-0f5e-96d0-a74ad91f9c00 36 2d284225-3636-2c08-84eb-6c1df58992fc 37 adeb9f7f-9a15-47df-86b0-bb9ad98365a3 38 9d87b27b-ad1f-6f3c-99cf-86e6c8933d19 39 c23d4fa3-cb18-669b-9727-80be5a9984b6 40 c7b7d056-75d8-7c35-be04-2a07aedfdf08 41 9b820f28-c709-6f20-bc45-2e3bddad492f 42 8d8d910d-d6f8-7b5e-bade-24afdd6ee785
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
287063002166213537025544113306108502466767. Exactly this sequence comes out ofnew Random(382).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 25 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 42; the post has N = 42 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.