201209231330 10ck0y
explained decrypted filler
3DES(name+title) ECB, 55 GUIDs, seed 420
From the post to its content
As posted (encrypted)
9092B856432B3D97 8DB2F3B0EC84E974 1964252E1235BD7D 0E2C7C020B48AE51 1A82199665F14E61 18F824D8E55C3280 906963BF79C6DCD4 8D83DFA3E35C2C04 AB67D3BF3988DC79 D4BB8117A84D6E51 811B170ACDA09970 F9B8D7EAA27FF6C2 17611D8AF43BA1B7 9B005D531B65D20F 76173003240EB2B8 793684D0B6ABBCA8 8A478C9D07121F42 B91CB823CB2309CF 0F11E6D6850A4BA2 ECAF7A2902535542 FDECA755BB722569 4CE3FC9C0E8D4F31 47E8EF099F79546D DC5B9F5398C3E243 B35694E155F79934 03E8E4A5912B39FD 9E6B69D10F58323A BD1022503C098FB9 FC919ABF8C6B1834 9E5929CB802D226B AEBF435742F2D53B E609946699997673 8E6AAD4AE3A875E7 2BE0C392D1EB08F7 8A22CDADE721F098 87434FFA0553F0B4 7E65C37974FC9C53 FD1427BA8D8801A5 2D9D146E24E383EC 01E1C536882E3BB2 6AC065C0362A04C3 02427697576567FE BBED9A78356754A3 C31BD3B161F3144C 169098149312F121 2E2C1233AAC28449 3DC07418FC1BFB07 757FF270A3CE637A 50CD51C22DFAB398 79B5126A624B4658 F6BED3C143DF7ECB E7FB8EDCCBF8F0F4 14CF888C4F586A4F 665D826B44F7CCC5 16EC5B8E5BCA4AFE 7E018B8164FC6A17 AD175BB60A59B701 1740B96256D95B74 45588611D3E396C7 438EC1A8EB157123 7DBC5280C78C4B36 9AAF18C24CCD8984 90E5DF198F8E829F 9D6ED3A1F73C8FD9 270DCC55FBF64425 472CCE2C51C46B83 1FCC1D084775C1B8 4AB8AC6459897ACC E5AD62F41B268969 1C493E288D2C4B4C 5138FEB6D00F9A0C F6CA3458F08FC558 D4A8FF1CC6CD984A 98FBF5A863BA115E BE3D3803F180A903 059D2F14DC7DC0A4 44CE65C63C277D04 A8352D9D9487A0D2 67848F8E3E5B6AC6 771F8FA8D36FE658 55FBECE5A0923960 FAE98158E349EF59 99F78A9E20B93A20 902D5AA3E9032417 9E3FACA30E848031 0D043C752EA043AB B37FCB896020C887 ED4B3C1955378764 C47870E45062865B 59FD862EA7F44F93 5AB0EE2B935E4F37 B576A2D90F119CAC AECB9045901829FF 252C7401FADC4B11 3D29322AEAB9D1DB 58B6EF7ED531EB6F D700DE585EBFE12F D1D63AB01C262C46 3C69EC72F77FA274 397C511D1E755AB6 002A79B63FB573CF 74EA26C2D444CC50 BBDC85C89AD2B7B9 8EB228889DD14E0C 3FA659825FB76316 11E360EA8ECA7953 59163E0EB6BAE88E A4F0C7995A39C321 C45CAADDC37C7B96 40B469A290011EB3 9AF4683B4FD23E0F 65E5B0F9AD3B6D21 77D904E2BC83D29B E86912D7B37DBBF3 27C0395C1FDDEF88 3E44F4E69129F630 76C8CD905D9C944E 6857DE6BF26A6738 CB2201542BECBEB0 AABC472418FE9C97 E207BF14F91A1816 918402353593B932 688F043F78BA840F 2ECC000F7DF59262 90DB8B45A6D431B2 F7CA8EB5A97A982B 570DD0A1D98B448D 8DAEF9CA207A2596 521CD709B46068B4 99953A8D2F4ABBBD C291EFCCA2954444 3E1F75F78333C4D8 0B2A90B24D11BD43 89FFB5FEF4881F24 3DD26F0DACB642D8 133443854BBD78CD 79F053ADEDDD673A 7112808E5674D479 75E8B72D2B68161A 8ED92C688A0BD3F8 97F96E8C11345905 4FB14BE986BFC620 F0968C03BE03D53B 8C556FB9AA4A9045 93B0CA2373AE77E0 9BA358EE71B51952 C587BBC502F9AE5E 01B8F0D853FD2344 511B38F290097BAD CF3D5648BBC0CCDC D08F1D96E54CFCF3 E2A427F71204BDAD AAC40659DDB036B4 4F1360C85883EA83 B5FC8E13758D8E29 A053DA3071143961 48F12DC6684715D9 0211672D94EFEF69 24E683F06426F208 111FD3DB443ECEA0 344894834648A523 3B3D8BA732E42FE4 0CFB50FD4DD7D133 6078B0CD2FE4C646 45381EE4B68DA73F 81D56D49EB725394 B637CE251E9566D4 CE5A713B54DD5054 23C132FFC2226084 C174A6851C6E489F 2A9F4ABD00329AA5 C54EFA09C4B72CF8 0F9075CCA8FBBE66 C61E10A4FEF67F98 3DD0D65B9E3F3B0A 059E4BD811035DCE 81A7DA4A02A19607 A80345E5D7B505A9 CC97B5EEECA714D1 A154AD7F946582B2 D434247D46BDAEAD 4995F9398C0BD585 E314B50D6A403F4D 89E2F3C6125A33A8 E2A512BA4E53D3B5 98D1FE9E09512A44 5197A3DA84DDA8D1 3DAB094CCFDB6619 2DAC128158FC0C9B EC0FDEC1D23F38B4 C4E601135B4BA9D0 F848B4CD98BF2315 4382A6CBE5F2D971 A1C0A8EF4EBDCF30 2852A6912F5936FA 22ED4951C0527CCD 63B7466947AB9BAC 3D4BFD17CA84F6FC 456BCECF39585FF5 C774DDCDBAAFF5B3 A82D2EAD04731B2A 0F8D2B74533C5848 CC96C7DB24AFCA62 1234553932D80128 B69A2A253DF5D070 55012BB9030206DC AF7E84539B7AAF68 4D6CBBF3D04F0D95 D3892C6FF84A7C24 5E2AA95913D02727 1F1AEA9580CDDBE6 FF1325F1E9182E8D 743B0ACD97B9174C 6CB467A7B1719BE2 3F3704768D8A6132 0C5D26B0A795FB84 6F483050C279D468 E68C1BA12DA9A2A3 523B43CB5FC426E5 06F7269C7BAF5D7C 28991A85FF67ABA5
- Read the ciphertext. Strip whitespace: 3,536 hex characters = 1,768 bytes = 221 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209231330(name+title). Key = MD5(password) =af3325dbcdfcf491f824dc9e392bf9a6, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 55 GUIDs as hex (shown below).
Decrypted: GUID list
1 8e3f6c40-c856-1b05-84e4-5b7a6bae5bf8 2 fab75c67-e808-091b-8dc7-78e404e428e3 3 da726fe5-fb91-3b37-8569-c475a7b421ba 4 8d01e02a-67e6-1be9-b154-147b766dce46 5 65a061ce-c7c0-77ce-b5bf-eac488012adf 6 98dea8d4-78f8-50f9-a820-a5c9cafbabd3 7 898a31a8-d228-0ab3-9b09-369d9ee2cd63 8 85f580c7-395e-1aea-9f0e-0b12f0f959f3 9 da5fdaa8-2d4c-8f23-92e0-8e715541ccf2 10 20db181b-2092-15a3-b28f-ca527a963252 11 ad407e26-e547-62ab-9990-72435d7d56c8 12 e55d0069-69df-30de-a760-7ecd6fb578f5 13 5649e41b-0a5b-38eb-a9a7-519d0ad078f2 14 27f8cc85-d41e-897e-bd90-dfcc661b4b37 15 dc06aa7b-c492-8e73-a076-5d05c05f95bf 16 ec9a8445-4e47-2122-9aec-514c1920b0a1 17 b9846457-d6f8-3ac3-a0b2-e881dec93a1f 18 31d8069d-85ee-3da9-9e2f-e90957af13e4 19 09ba6790-19d7-0334-9081-5fac8bf08143 20 e766bfd2-167f-8e66-9989-8e61e3f34b81 21 4a4eac5e-5497-5bb9-9cfd-53f0a8d20fd9 22 d957d02f-c112-8778-a163-935ec007e4c0 23 b233a603-274a-83e1-a620-b18de68fba20 24 df918baa-2788-6cc1-a899-20dc7dec2617 25 788a528b-1170-71ad-a5b5-a10d8d6d3652 26 a986f98f-ec72-5ddc-a443-2ea567626545 27 72484160-6667-01b8-8029-e74ce63ad4cf 28 d64ce12a-b8bd-80f9-aeee-5c7d0dd9618e 29 030f7186-1e0f-5d22-b69f-d939dfcff650 30 f13ad9db-3246-2a2f-a3c8-d73cca40f07d 31 ca9c2b19-f744-26c1-b2d6-22d7ae94908c 32 b064c130-62df-01ae-9d45-f32cccccd3e1 33 2890363b-45d4-1ed7-806a-d1680b20efd7 34 d8617552-dcb7-4d2f-9539-9915e49f221c 35 09239870-2dbe-2017-bf04-57631299f152 36 6246906c-26ac-854b-8d00-4dee3f5bcf99 37 a986c1e5-a845-8e89-b7f4-530d1ca3aa96 38 36baf156-8e34-51af-8b13-a712e694050a 39 1f493193-4eb9-2ba1-9469-a9f27cc5d304 40 ff14f21b-5936-30ce-9293-965cc37081d0 41 9231ef32-8bbb-881e-aaef-ac4bd30d9a99 42 c8b0cf58-fe8e-3781-b4f6-278cb8855a9e 43 32bafaf2-f2c3-3bf0-afd1-3d810ee4c27a 44 379f9208-818e-7c60-8774-dca2443b7f9c 45 c036466d-8d33-3f34-83c1-97b11d6c5672 46 0c353194-4315-5fa3-84a7-9ad52fa3a994 47 645be2e5-85f3-2ceb-9fcd-3a500dac3bb8 48 dc973768-58bc-03bc-8d7a-108d671348da 49 8773c6bb-ed5f-1cf8-8e78-f8cf86bd7276 50 c8740aa8-2bc5-682c-a985-3aaf16a55e9e 51 3cf759c4-a2f0-1988-891e-e4da8e5a8e55 52 f394b2c0-87a2-06bf-88bf-8e11b20617f7 53 417ccc60-4205-7e7a-9e79-00777b9e868f 54 6a37a575-3d57-040a-a61c-785638af6986 55 4d3e0b5e-5aec-223f-b83a-9629097adc8e
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
1031750181633882330858867508522014288523833735201610702. Exactly this sequence comes out ofnew Random(420).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 48 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 55; the post has N = 55 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.