201209231319 10cjfq
explained decrypted filler
3DES(name+title) ECB, 44 GUIDs, seed 129
From the post to its content
As posted (encrypted)
81F17FA6328F4B2E 98492A58032E61D1 03580CF7A4F24FB3 6BFC04175402E0F4 D8A25A4E01912A55 A7E6FCF9ED169C9C FB9B839E3E11E6B6 D39459B3983B1785 AEF744E3761E19C6 BD79B84077F2A394 F458C87DE159CE14 59064C15A120D1C5 ABA91650F48EB54F 60EEA32045F2F50A 03C07BD3ABF7B5EB 32510519D50CA8E4 9272BD9BBDC30B29 D497042E8B07DDCA ABA036C5E100A5D8 B04FABC2635DE7A4 38414B8B57B02698 E22F5FD826F340B4 A69A04E819CEDD23 1C37E82835BB1D25 DA4A529F5E4AC325 648148B711B89F76 E52CD424E6BC528E 8C811FC64DAF6CC0 C10572B7A4562EDC 5984201478D1173D D63BE084D2D9C698 48DF56A3E80E125C 12B228FAEEB4F6B9 87365558712EEC8C 5022270A8529E1E1 E038E112ECB7BC8D 7024BDB6827A98C5 1F0F9EBD1FFC7D0B EC9353EA4DD8C684 9B011E1CC8581CBA 478C5235E0CE3A73 D8E9DB72C7590141 54B13F850F976B19 28BAF226BDF132C5 B3A0CA910F439778 F57362AEA4C98BB5 BEDF0F670175A4E5 A06E700724F5531F A1D79D8869634D91 9AFF26ECEEC5DC6B C31BEEA69523CDF5 59183EAA1A423397 55532BB4F1015A1E 7B2F0FD723061AEE CB7AB59CD6B22D70 BBF256F82CD121ED 6B0E8DAF4D72384B 896DA38E7289EE2A 762ECFE7DC5CF279 2738F11FE905FDDE 4E6956AF2B2840C6 E3400E13324FFCCD 0295B33A27C5AA4E BA1AC0E03CACAF14 A16AA0BC04C4E478 CB08F8FFAB41405E 10852EBE9864FD07 1DF7D2157F2BC693 C4BAE9A0DF7E307D 2CAAD9D9C91C5200 E9467F8B29815107 FACF7EBF8FCA18FF 8ADF2A7C7DCF0F12 BA04363E80D22863 C9394166B8CCA470 122E9D168500F087 F026B349BBF86B81 2ABF7B22BAA3C7A5 458A44E8AC0F4578 C72088FD026FBA72 E365CEC54EE366FA 4B4FD5D22230E81D E938A77F8AD5671D 382341D153CCBDF3 0504F0303346CDCE 45E78A83396DAE3C 869E189D13C48D57 39B271C27D46792F 8162A1210EDDDC27 E6AA76008C4A5083 5040FA10333CBA07 6BFC39FA64C267DD F12A459A03DED15D DD4537A85FC7927C 5D16EDC21973886B DFD293349EE5DD4E A31B8F5E4B8574BF 8BEBAD488AE1A104 125336450D9EA689 C1FB60D12A846718 7220106BA632076C AA9451615ADB6DA5 3847B2FFE0B55D2B 5291225C3E78EE65 0E12694BAC35F7C1 55E57EB7F9D52987 1E40E88EC4577B1F D518134857F9CBCD F1AD54B3BF0EDAAB BA56BA6D4057FC31 BAF45A0E7F416FFF AE415C07CB4AE7B5 B892D4E021AD9242 96D112C985162FF2 E7C4359DB3D56B87 F829E16264B670DD BF80901B7601EBE0 3B4E7AECEDF8FF3B C75DF56A06180B7C 088F99668A881DE7 42B3BAB311B3BEC1 41839A5237CBBBC2 65E0572D8652C7DC 4FF0B9EA82B05479 0E1590C18D4A9B85 575B598B7895E752 EE1F062D203F640C 0B093CC48B5A05A2 DB29B749B77FCF00 359516DD25A76F39 AD251C8BFC6A7137 FA55041C16CCC35C BD251A811D131A6F 766D8E087FE63A8E F52EC36FFCAAE448 AD8197B892FEF695 EDC5912BD125E4D9 D6E13A6B79D97D73 C7550B4AFE5DBF3E 613AEC35C7CE4EB8 F8719EEA669A0BA1 F243C93EDC009E69 76A2466016EC3057 2D20D4EB51D41171 698351FAE86AFDA2 E8F104E0B057F65E E59BFEE77B7491E4 663D7171AE499EC2 ED23BA6B4463F9CF 6AE9762FA6EF2BCB B8E72F5311C60351 2F37D29DD0064638 7CA2633BFA652E93 7F17A688D3F5868E A8FD2449F8878A8A 433B606B0462FE57 4FD50E0DF5F4EF71 302443D70E1D56B6 7A03BAAF0ABFD273 14D7B4EBEC594E4F C551AF92986B863B BB41C591DA78CD0B 4B70901A6F00DDA8 4D1B051E92934DF1 745CFD69B9DCADC9 EA5109D56CA0B62B 55B2E033B863C222 3E316F6C0CE2AE24 A3FCFE1E997D45EC 49FFC133D9ED9F69 BCE12D842C41DD49 66014A5ABD798D4B 7A4F2037CFAF1D12 A4179DD3AAC0AAC8 A2C060053541CB9C A3A4829D048595AF FF3234D9156C797D
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209231319(name+title). Key = MD5(password) =fc286af7aba7776d6200a2817c162799, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 34d3bb09-aa1e-14c8-8d5c-978e1f95ece5 2 f676c96e-d7ab-60ec-89b1-c9c47269f91b 3 097ce060-4917-8af2-9fde-d84d10428be6 4 85ce3cd3-ac20-0631-b254-28459575d254 5 7bf25262-f984-414c-815b-2033e1e879be 6 a150e495-2e3f-2329-97e4-ecdcca196442 7 65eddcb5-036a-6c9a-a474-661b8582c687 8 a6ea767f-3f5e-1b8c-8a9b-28d34e5221ca 9 e1b6341f-d411-8ef9-8342-dddac14af31d 10 c58188b0-8544-7790-a150-07299ac9ad6e 11 44a92b0f-46ab-2794-b7f0-816bc6782570 12 f440cf55-b5af-13a5-8c86-770b773163e8 13 6022710b-2262-2344-b438-a523d3c339c3 14 3fabb55e-fcf1-5844-83d1-b5462e0647cf 15 e6a607f7-6faa-2fb4-ab43-5b5ae065c447 16 c4cae1f7-8a7b-5c8e-b033-4b6230416b42 17 3fcf59e8-f37a-0285-a02e-ea92b6e45f0c 18 f792535c-29ea-8ee3-8f15-aeb30123867b 19 bfb4e388-b534-1086-aed4-cbf42b3ab0f0 20 5bfa3593-5ee1-2194-a7ae-4b759d8852cd 21 8f4ee80e-bd50-86d3-8828-c6e9630362f3 22 fe688b18-4ab7-453f-85c9-55eafb5c8f32 23 cc8e3105-9015-7319-9582-a0cd2e8adeb8 24 a7fab18d-cd71-03b8-8adc-b2207e106d78 25 6b5d9cc0-ff40-3481-911d-137c2f125c60 26 35d43ccb-e373-45b7-8445-2b10c96cadf0 27 4b60efc9-42d6-70cd-9d86-f9e84d5f45f5 28 d4341cf3-2326-5fba-8070-d0a80498c88a 29 a06d6558-fe4d-178c-b644-440118cb5aac 30 c6a08772-9fe1-86d0-ab11-96998e13c345 31 43e33334-811f-78eb-b72a-b1c965dea43a 32 4cc24786-8f9a-36c6-9504-67a2e1b74e10 33 90952c35-98ab-1ef6-b394-47e95ed7436e 34 3d0190ff-acb0-2d27-b4bf-f59d4df8fe10 35 5dfd9334-2875-6e2c-aa36-5ac06062678e 36 94f88575-cca8-3e17-98e8-a25a7c9bc9c7 37 d659fbad-8535-71e9-8d8b-af67d39c5085 38 63a7bd1b-b9df-2492-a2d8-690a53f83fe4 39 77f7be3c-21e6-35bc-9b01-aac1c5ef51d8 40 90756ad1-e134-1572-9712-7ba7fdc85e5d 41 89be4eaa-b4c9-4e6a-911b-6da4db62fc9b 42 c0a67013-83e9-4b0a-9810-5a6df754d5d0 43 31a7ab9a-2d5a-8a57-b16d-e57e20f1f404 44 a3316b4e-0672-70fa-8173-5d06c72f87de
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
16804261872125250812847034751873126372314487. Exactly this sequence comes out ofnew Random(129).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 37 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.