201209231332 10ck4x
explained decrypted filler
3DES(name+title) ECB, 45 GUIDs, seed 526
From the post to its content
As posted (encrypted)
E6691E546DCBC973 33126BDB89E28EE6 8C90701EF820BED1 12E265D4632ADB9E 9DE1EDE2D7959C66 02FAEA4DEC7EED55 B6FD6C9EAA2E77FA 87AC8FA67D7626EE F48CC97339E9B255 F49442925E132831 E29A4C53A28B6D25 27FCF26A90E3CAD0 836924C7229B7319 94BADE2E49566684 F13AD63F16FD3B63 B8B2DDD4EAD4AF91 52752B5140F0BDDD 5EFF0222D923BC68 507DAB663B523BC8 7776B78F4CA6F184 99121A5B9E83302A 465692EE8FF31C73 66324B1DA07A4326 5F18C7CE4D351BB5 426048A4E94BD6A0 C6DCFC2BC372FEE0 FE9D3A4C19C26119 14D722EF1DBA710E EB5A7FF0E93432D4 6228060810B759F8 2810F69E50F71AB0 6879F9F2BFB6CD75 8E0E618DBBF93ECC C095B89B098C3584 1D3B3E2C20D0ABA7 E8FFD96282FAB54E BB053D51B4C368A6 814354623438F8C3 09CEFBF46699F601 E723A601F213992D 353918EFBF95E6D9 D2FB388958D040D9 E6C54945F3C5D330 D04F8EE99A08030A CE305153F3DD7CA9 50D18960B264D064 534646FDA5ED56CD 92ADB41E4B966FF9 A8CFA01AB7B821A7 8F2366E1A1CBB1D9 5941A4C323BB1304 42E0F4F39262068F 70A190FBF5A878FB 3342EAAD28D7947E 365A000DD41CF87D 530654ABD0313FD5 EE848D9CC35D545A 2798E6D4FAAEB24C CF84579A187CABD7 C756E0F049BF2EE8 54E803A1272E3FD0 4CEDC9C25AD98FC9 A8E4349866809506 7822B68D7A365987 8FC005E5BB841ED6 A40F41751BF77488 12DCD3CDB7910FB1 B4A406E8B5949F38 35647603F83B7610 4AE4809981D032A8 BFBC38A7DB82B845 35994A33066C4980 49ADE166F7DEEDC4 69933002B8FD86D2 A772E20C64981F5C 0A1A23C734295032 B54CFB17BD38208D D50774C153C6E94E 9FF6D04FC1296F69 3EE95502BC416E7F 5C92603BB5F1D255 970DAFACE5FD5215 2EF297F74963575A 46ADFC49230FFD23 601AE89CC0657921 92B26883724DDEE7 4CE1254A0C8730A8 95DF67C7C0A170DB B80584736C7B75E1 F0F47DD3E11906E2 C71199B647F586C9 91F69A0176472B59 11ED0E0820594F8F 37F5ACD979336B34 9B40CF8217BC8CD0 B41FB92F0DA932A6 44511E430172684E FBD454D3786BC0D7 6FFEEFCA1C1EC048 B79213DD86365252 4EAB316F4090096E 25990F2B275B153D 00361EB5B1E1AAF4 AE4C958C19E6E04F FEAB3EE3761570B8 433C0322BC61F599 5C07D3D972B5FBB7 AEF9E198253E195A FC71EA14CDEE6ECD 2CB7FEFC98A685B9 57AB8CDBC3199C57 91A1CA7DA4E9EE60 7993784D9E143D10 D253D72C738372F9 69A709CA7A9E308D 5BAF439E8BAB55FC 6DA20D942418180C AC8C9B23C89FD451 66FF65B059BBB781 212787511FAAB0D2 C59B5D19C6A58B1F 0D473A89988E0424 E2F93914827FEC33 C1CFEC54EC691B7F 1F1FE71A6047234E CC4A1C2749EFECD9 0FA661D3C07A6827 CA0FBD81CA624912 CACCA0CB49F4D994 7F856D3781339599 A60CDA5BCE4B75D0 478A50BB6D237559 FB2E0B3D3D9585D7 7A57301302297FB2 F82AD3E5AB14C441 BE6F7B1F334A115B 528D774443CE6544 FA6CE8744B417217 1EFD9E07647A5D1D A59103075780C553 A8F2EDFDD6DA10A0 E04A3DEDFB3220CB 5D60A7642F71A7C2 6115044CD9D9C2C3 9F5F3BAF9EBFEFDD 9C4841799FA75A99 D663FC67BBA3806D 889E4207233E0E57 7C0B9BD8BAA64075 F418032FC3D16F47 57BADADE159F4FBC 34148297DF2C1860 6C5EECDDD73C1FE5 899C489949612325 145F094DA2A3FD74 5964F0F26021A15D 4F2184E83172B3A0 80E2EA5BA8B9E01B B147BE5132F16B03 0A49BE73BC77F5D1 4896B5425DFAF6B2 845D4D02F39AD74A 2A00FB343F871B44 8B5A78C17BACE4EF DD20F05107119411 47AB5F52BBA5E703 BC4EC6179F72A0FD F8D416EF6FC84E61 9576447FB5D781FD 174EE90A512E07C8 D249ED7332D8CDD0 3AB811DB365EA90B 9B9F8E2EC7C552BB 59E91F3A8F64FD04 7D147074AD2A6B1E FC428B61FFA9301B B034F0824D91400A 03F4C9CEBF10EF36 86FA527EEFB9610C 5F535EB14EC3EA80 D09569C9D1999383
- Read the ciphertext. Strip whitespace: 2,896 hex characters = 1,448 bytes = 181 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209231332(name+title). Key = MD5(password) =c1299cc389e2f6c19bd96fdf228f17ca, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 45 GUIDs as hex (shown below).
Decrypted: GUID list
1 3b7d9136-1a27-4299-8416-aa6b51e6be0e 2 b9e37f05-cb35-1d2e-bf1f-e8d0cfdfff81 3 00c30335-3c5d-3351-b7dd-6a21262fd423 4 e2f9bbbb-4cd3-740d-a14c-15d6eb53fa56 5 2d12223d-9807-6256-a539-c2a9fe6fbf8c 6 4f0446ef-7692-2fb3-84bf-56a6fc8edd30 7 8cf1bb12-96b5-53ef-9e03-2b7b8c35318d 8 b06eecd1-c007-2ef9-8f7b-db6ee5a6cec0 9 eb657d57-93c1-0bed-934b-1de3b1a45040 10 5d6623c0-1a31-2d64-9227-276d3707a81d 11 5dfe3d39-ee9c-73e8-81bb-b97dd70617bf 12 952d6649-3fc5-1ec6-8059-ee725d2c7a83 13 4b2ebaa1-1846-2d81-b74f-8886078696b7 14 26c3bc50-43d2-1ccc-8337-d87ff71ecc7f 15 978ead48-620b-1590-ba45-7a33ad06c1f3 16 90e29fdb-3d02-4fd1-83cf-919b1185e019 17 821d0ca7-ad2e-83b6-821b-4b8331770b35 18 77e15003-0c21-1342-874b-76fa46162d70 19 c2fb7d50-b925-8a06-8b12-b14886773f46 20 0bcdfc42-0dfb-8d3f-8654-7e9c55bf3046 21 aea2f63c-3e09-635c-b402-f2bbd302ee10 22 e7e676ce-bf73-8e94-951e-2a9695955245 23 7ba20b22-e77a-78df-9e49-687ed9881f7e 24 ec18e26b-08c8-77fe-bbbd-32a63a62c45e 25 af2c607e-ef80-239b-8d9d-86ed01450a44 26 f9d718ac-7397-7bfa-852f-76c7f2343383 27 3e8fe25d-4660-1001-b79a-a4415a721a8e 28 fdd2c58b-d70c-579d-a5ad-6db16028c1af 29 9d9c22e2-73e1-700e-a18f-15069eac29ab 30 2cbe0355-8877-6488-a9c6-b45619bd6966 31 b8322ae4-5797-3b56-bde9-522da8326d08 32 771d7c29-1d53-0c34-988d-f1ab64a95d9c 33 9be5040a-e36d-70d3-94bf-fa664b6689b0 34 bbf036b4-1eb6-1021-a90a-e4c1aa737857 35 14288404-8dd7-25ae-ad74-967d50705885 36 b2ae16f1-955d-5929-8457-fadb9f9e87d5 37 52eb4a08-27ab-624f-b819-bee37ae20a80 38 cceef97c-6f12-7d04-b13b-7c8a7d0426c3 39 067b7ab5-1ddf-3f76-b9a1-4cff6faaf8b8 40 af20296a-302f-5ac2-a679-4b39fbbeec47 41 34d39538-966d-2c8b-8e4e-0fe392d375c1 42 d3850817-c5ad-7f4f-b5c7-1e556ff145d4 43 46d1dcd0-3572-0c1e-a106-e2739b08573e 44 388aafbb-39a2-728b-9fca-a4e8836208d4 45 6c5da44f-677a-2790-90e0-df25a15259d5
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
413762520271211481886877271576307125673527072. Exactly this sequence comes out ofnew Random(526).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 50 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 45; the post has N = 45 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.