201209231325 10cjrj
explained decrypted filler
3DES(name+title) ECB, 39 GUIDs, seed 459
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209231325(name+title). Key = MD5(password) =9c193ac7ffd121fec247582758ddc38e, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).
Decrypted: GUID list
1 334f1ad7-d9d8-485e-809d-203d5946b535 2 82d40b36-0938-4fcd-ab08-6004d0c619db 3 04cd5241-fc79-5113-ad7a-9d558da930e8 4 f85faea7-14d2-455a-b566-145b0a73a6e0 5 684c1608-faff-38b3-89ac-8aa812249ec0 6 8ec54dc5-65f5-6b5d-a35e-fe1780844459 7 31201636-a97e-509a-9052-7b76e4697a30 8 2f4b8c9e-9eb5-69bf-9db4-49ff15265254 9 c2f59108-9a38-6dda-b00e-7d97cb218bff 10 71e41f73-26dd-46ac-9d94-e92e472c7eea 11 d6968999-448a-46f0-ae74-163d65438d6b 12 f0ff76ea-aebd-74ef-99f5-0bb63176ad73 13 97770253-2080-11a0-be2f-ee7212235921 14 f000cd95-39a3-24a0-bdb1-4640050ee22a 15 74746f35-8050-211c-b5e9-58c258e779c6 16 5d34a76b-e92f-6779-bff7-7d72b099930e 17 c4fa5eef-6172-761f-b236-bbe4bbe9a375 18 65b57e17-4c44-5512-a64c-5aa8dfce90e2 19 ce95dc8c-4cab-06a8-976d-3d565f1615c3 20 cb2f3abd-010c-0288-8623-885a3ab4e2e6 21 a3c07ab9-672f-7d15-b0a2-0c7c7b6c4f59 22 9271d498-6f2f-449f-b2aa-10f5050e5848 23 9c06912d-be1e-5827-ad76-e306eff5b238 24 ff091d24-ee31-3562-a426-e8d82c927114 25 3caa16e3-7c60-6a46-8ed8-317c5cb38403 26 7117f605-92f7-6f91-aaf6-df5c1f58d758 27 2a4048ca-7cac-5e36-929d-8439a2fd3f7a 28 e27cee34-582c-0ac9-b95c-4f52200ab424 29 1aec24f0-d797-2bd3-9df4-e6ea4677f1d6 30 f8e76364-c75b-601e-88c3-7e33b858bbad 31 bad73696-7dcd-5416-9391-987dba77f1a1 32 9f3be1a2-8e04-3dc2-b056-930e1196d7ce 33 3499308b-8296-78a7-8cfe-6f9580905609 34 ab4f8ece-172d-4f19-b7f3-9a7b9f58c58c 35 6db00201-736f-8127-a088-2d9b7439d2ae 36 c2716039-f563-5bb5-b1db-ca1560e2ec04 37 298a5819-f0ac-2651-9c02-f4ed265d654d 38 f3ecd988-00bd-1419-a357-bfd2c4946c67 39 4434f2f4-5419-8038-b99a-80cbe658093a
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
445436566447122675007453665026537485218. Exactly this sequence comes out ofnew Random(459).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 43 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.