201209231321 10cjjk
explained decrypted filler
3DES(name+title) ECB, 53 GUIDs, seed 391
From the post to its content
As posted (encrypted)
CDE8902B55908941 924D5D6A485ACF73 A47857190F586C55 107957FB35E28DAD E26A94A25BB6504B 39E482970BABCAAB 7C44D9BE1D1CB516 CFF115CB2A489A01 885420FC6621BBD8 D3CCC69362865E2D FB72A6626031D826 ED2974857DD82895 B24242DA896E2E4C 1174D53CCB24B586 7E2B8295B1730B40 C7D5E3FCAEABE73D 4D6097D29BAF7868 D210FBAFBFD825C2 8E3DAC44D8664AC8 C73D99D1BBCEFCFE 5409E2D67F829764 9190F4924098A4D2 B0B79E3D72D35BE7 5D169E7A24519C11 5799F90A85D2C758 493D8D83C37956CC DF68ABEB1DA60897 1FC7F0C6B6AD2153 387F85A03E7B7C10 B59DB2061C8579E7 0EB59E9F88F40919 5B8B14C397A4D984 FDDE9B4AA7CDF484 258F313CC14A6CFE ADE9D2E9E37EFFB6 F96DE2EA1DF6A9BF C22E9A4513DAA621 BCD1A114823149E3 06C41209D1641ED2 D61792881C72F835 AB187BA9E318BF32 71AE9A979AD85054 578BBE58998B9585 CDBFB275F0AE325C FC47FC76B5436F50 05561C9A8758BC90 026484F94C94C9F7 75602CC6747000C9 DD160CE8E93309FA 9B7D507D6D1DF480 8FACDC04D0BC9ACB BA4A2CCAAEF0D3C0 3A7358CA81FE5B86 8802A918240E384D 40AD7797401D2BAD 617926FC4D05A636 C14D596D01C77E9C 94040C69ACB3F21A 8113978DCB24B9DA E4C53076562889F0 D6E6AF388D09F5CB 2139F0D7C5B7CA4A B83337F16C57DFB4 EFD4220A01DA5E37 2BE95228365A1B0B 907DEC453886D947 E9C0049DD8860E1F 799AB4B3293029CF 045E227EFCC9E169 6F6D16CAEA9EA75D A3A2D7A62D553403 DB295116198C2D5A 0CC6076BD705ABCE 1CC44F9E4F686693 F7EDEE24F7A9260E 60C743CD3AD4ED24 9811B52056E881F7 1259417B33E2B2C1 426A6174E77268B0 2482F7301E7C28E0 642F0B76278DA90B F6F57A151AF6267D 9949F981C3C00726 0311696E65FBF5BA 49B41E1AB9232146 3FCA446376399B51 2A59CF38A5B50EED DCF3AE3FACCAEE3F E4B95605123A7918 469E584056D329A1 C6E55A4B17E0E3D0 150AF8B3CDACFF0C 4B9B9C217D8738C2 9F9C3A0F8EC75053 313A11D3E694ADA3 0CA7316923B504CA 55F193648320F734 04832B1815C12103 5E8DD72DB8B1E20B D411F1506E68CBA8 58DE9DFD1668D6EF 7A99011BB6798D26 480D797C112FBB6E A24D667EE1A6F647 28D3C45BC8D23566 A4831B6A25A42C82 F55ABCF703EAB0EF 9F2782E69BF96AA8 082E56D37546AEEF 8DF699D596121541 6246026A764D285A 778E049D0D3A2CB6 466FA38514F40DCD 25E402964133B274 E78D6BE15D60A297 ECE50BE8E05FDB85 174F4FF364094EED B2B86AEECB709562 8FA3596A8C937A94 89B51B3C6F047993 FB817453BC0BE953 7F2F45D54EAE364D 615C36115DC97295 C94F2DEEFCE8CBAE C5E93ADBBA800B87 96992B2454A76D5B DF4AA33720AD21A4 2BAC8E9515E19B02 824F40D69A75380B 1AE1603DDBA367E9 B5A085C7EBE8ED87 1677338F9F6A0EA2 77331AF0BA9C9612 002F304DF103B3AB 11AADF3687485D00 B4148C56CD3E930F 090CFDD35CF37635 36D681FBF1FC1C7B 99D1C932450A9A8A B461FA82E49CA3C8 5012D2967B551AC5 EE56AD4FFBE7EE0A 71B8AB417E704C66 33F63384D91EECE9 BA7CA530F5049AD1 EAAE00895F7F111D 91AFED3E39CB7040 5DE2CCA932E22B75 B1E021D7B55899C9 48CFD63D0975D7C8 306D543F5822EF8F E18ECC84FD0B37EF B7C46C3FD4683B9C ED666C432D6BFA34 385E6ABB87A5E210 56633D0119C21C77 F6A4D12305B7CE71 E5D774816A54D9B0 D889EDAD41DC202E 3835066DBB635A95 4792A8A9412AAC9A 8E15F1B1FF2ABBF4 11FE0671BD6FD02D CC1EC22D6DD40DD4 D3DF87159B78BA17 A8DDC1A7B527C603 E1D8754EB5D8F686 9CCBF7E13A07D31B FFE46F51B93D736D AF5009F795F7BE94 8F08F03000E2C2E7 599CB4C4EC38F8F9 4E703C4F49FC2FEB 340A12538185B211 779C9E8A8446E6EA 7791BE2B42B3122F E90CAB8018A0B3BC 8692F23B2B3F21E9 65937A8C6C186738 4A709A6F6C67E547 D611D2E882882B30 E100978F46763FEB 744AE8E92D37E168 12185113079831F3 71F9C7FA04E6A29D 44F6E18EF3D99D5A E0031713CCE6BD5B 5520CEDC4DAD1718 FC9E8870E6A1A53B 5D579B8573BFC92B 588BBA75018E8C92 A2F0EBC0DB428334 34EDC34ED00F0014 54121018B1A45CA6 D8C32E12F39534E8 E951F0D77524F3C4 FC0A0DE646360181 1F434B73EC43008D F7C4ACD917CC4841 7CAA8B201F71281C 20FBF959BF873A1B DA27E2F767F2A392 6B9514CE60753727 B96D07C0E4E9B708 F95E5F1F0E63225C 4B67A14146D50C92 B075B371CFB5065B 813B7D49C4327249 5FB8A165EDC219CD 23B9D91261DDA5B7 C6BF3C001193FD30 2540E05055877623 EC4910C6B7264DEC
- Read the ciphertext. Strip whitespace: 3,408 hex characters = 1,704 bytes = 213 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209231321(name+title). Key = MD5(password) =0f8306ee771ea34a695e8ab9ecadb6d4, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 53 GUIDs as hex (shown below).
Decrypted: GUID list
1 f4617904-8853-81a4-b7e8-6e94c3731c05 2 ce875be5-def9-4008-8bef-bb1dbbc9aa6b 3 204501f1-238f-00ac-be35-e5a6053f05f2 4 77697c99-1f20-0f04-b55e-14497c65bb52 5 d64a411d-30dc-6508-a016-7f11896d3473 6 78e8c655-03e7-2ac7-a43d-bd1523b3b583 7 1f3be2a1-e01d-0d6a-b1df-8adef6a4d3bf 8 18756bff-132d-556d-a6f3-bb0ba1cb6109 9 6ac796b9-1338-373d-808b-36809c70bcf1 10 7ba3fd1b-0a89-454d-b3db-bdd99075a2e9 11 1f6b2a13-4898-3cc6-91df-e60c7caf6f21 12 08a5518b-0c95-67bf-b592-713a3477a629 13 a77ff284-1eae-3b92-b7de-99ee5c23ece9 14 5b34482a-9f0e-8e2d-bb56-752ce775f865 15 6663d062-32c2-64cb-ba5c-58422dd44364 16 56db25e4-f663-14f6-b078-d4c050b8e8de 17 66a078a9-fd13-2fc3-9d5a-d9e7a53564f2 18 9468b91c-e138-32a4-9b45-1ad8b2ff2b4c 19 30fde6f0-30a1-211a-86ac-89f004c2ca8e 20 d2f67028-b8e8-6407-97ca-1ab9248e9d80 21 0a1ec691-59c8-62c4-b0db-06fcaa6282ba 22 6ab95979-f75c-6092-aa1d-b0a3665e8fa2 23 1502ab21-7524-0319-9110-64043e9a42de 24 fb8c4eac-2650-5eca-bb84-30330bbaceb1 25 dec8b816-8ba4-0c1c-af82-5a1c15fa578c 26 6452f570-33b2-086b-8ca8-433d89c2fde4 27 d4632010-16ba-09bb-ba2f-66eb61f1f46f 28 3f6f836a-7f03-87af-800f-3f4af0d3abd2 29 5628ea8c-cd78-40ee-a8d0-1152403c4eee 30 ff7be680-f4f3-843f-9737-fc33affc268e 31 4fa95a1d-9c64-4359-9576-715e61e7844f 32 1f16227b-e61b-4ec5-8287-e5889f52a9cd 33 8a587fcb-c020-4f4a-a88e-5d81fbbb5236 34 beb75bf5-df9e-7e7a-a7a8-dd6d88475c85 35 5ac9b1a5-4124-1878-9af2-eab8a73f9870 36 716b5d89-2454-6af9-9cc5-dfbcdcfcecbb 37 1af88d4d-8b93-8e38-abba-83cbd6ed7246 38 3870a8ae-ae1e-7888-9ebc-19ba1eecff81 39 a53fb7bc-44d4-2233-a8c9-9a8d6146a13e 40 2c753943-adf1-8b72-bdd7-3f74cc5217e3 41 dde9e39f-1600-684b-bf69-80ee26c2129f 42 b8a9326c-caca-339b-b87e-960e339af023 43 f5405dff-1d54-7ce9-b24c-267326ff5ab8 44 e776bf41-f7f3-4de7-9ec8-7d8e28561a95 45 fcb9d411-bdbc-0f84-9974-544f3dd94411 46 92d337ea-7114-14fd-9d60-9ba3850d4a21 47 41955489-9c85-3bae-9961-a211c5f1a99c 48 4feb4b73-a4dc-5e68-a7e9-45a73ec18220 49 f721552c-906a-36ac-936d-f43594d7dedf 50 b59b62ae-3391-80be-aeae-d59ac710e73c 51 64d444f2-8826-790f-b26f-3f87497525b1 52 15c8624c-d123-83c7-b622-572c45863d65 53 85f90a49-cafa-776a-8f12-a73b8e0bd9fd
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
84006205343638612326660500084844471687286374013538787. Exactly this sequence comes out ofnew Random(391).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 39 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 53; the post has N = 53 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.