201209231338 10ckgd
explained decrypted filler
3DES(name+title) ECB, 44 GUIDs, seed 392
From the post to its content
As posted (encrypted)
77047EB7DEB610D4 283272C732C85A5E EF014260AECDDFB9 D093D932D1F7D5D9 3C28347A0E806D82 B441264AF9901B12 BE55288005873810 EAC8A18ADA8003C6 C3C287228C39CA8E 019F3C175D2A2B11 6D56B67852F5A8EB 02CF95927E1C0043 101D04400DD79A5C 6A4924B3FAB661E2 FA2AD4BBBC194AFC 7DCB977BBF9017D2 C6A99EA3CA5CF033 CABEA0F9C9C7ED33 CDDCE01239CEC27D 9D33DF361B62F5B3 4F5B7ACAA62FE6E5 5CC00DF63121DCBD 466A22D92DDDA46A 53F00F4913567E00 D868C2863D440717 6752203FDA4D40D4 4B8DAE37FCCAE151 F657D609BBB72951 51D5CFCCCB92E886 96C69084B1D421B7 B90F068B6B6EA2CB 663A6E2F97E8F294 EC69B5B09941C9DD F45388544F765849 1B2D81A1573F1815 A69438EFAB1E17EB C1B41944FD6F81C0 D652CC665A994812 7284B79FC90BB48F 1CEFCE8AE1B32E84 DAAE5E2C7A4AAE11 8E20AA76B763F739 97B24D155EFDFF1D 09CD90689F003A03 4CC6418C5D3FF892 B7E6056585180F5D E186C234B64068D6 5133C6D8F02E8931 5BD7D8E5E72D28CE C78FDD2F3AFAE27C FF5AF2622B5B55AC 5B111DD4A547FC72 FE438472F4759B1A 34CF038C620044AB EABFD3215DFFB487 5EC86071A8E2BEC1 E20B57760933AA42 03DB06D6C09CD9CA 9F691C7290BCB231 F7ABAF4D3B3B4D42 CC22AC8580FD07C8 E0E1B55D0C046B11 354922742D9DB5BD C862941153EC0C5C BEAAEC22AF046727 F36B8E45D42018A1 A64E6B4B73B4B266 B516E3B9D00FA2AE 3B144480ACB1BF2D 7A5F6BAC33D26229 166C96AD0C2691B7 35D9B26D6441CEFD 69C7923A98327C02 C8B2CF8614FC3702 7BF1F0BCD7555D18 368349281506F552 6CBAB6628BB5F5F8 4B0C9D80F9D50CBF 03E74956D63D3559 0CF6802B2E768514 0B28F2505168E565 E1C2E46614CB7B75 82907B4C7F24FED6 438517E982A2B8E0 D1761EA4BA3428A5 773E38FC9081AE46 55F3E2CA8BA4D7B8 13C228A672C9599F F1C09C3C9218C02E 266431D194803CD0 82819D6CF98F9353 F54B7497827D1EAE EBB36B70D32E1462 9962E458D99FA534 3F272071524463C0 28EA164E81E4BD3C FABB6975B7DADA18 BBC9272EEBB69EC5 4895F75AA552FE52 73D7160802AB3F46 35A599FD813D1D84 F7EF78FB352DF140 7148A53950F927FD 6F948BF8B4FA349E 3F35F2EDE6E1777A C3836A4E4A68836A 48EAF4520CD79B14 154B93408A790B68 63D6EA336635E541 A6DF8AE248EDAB28 4651E7DBB40BA084 B1EE193863DE5C52 72D732D1E424EE0E D847CDBC2DADF95F B0DFAC7B1BC1660F 9BDAA6AF013223A8 71C234C618075004 F18AD0B562EBA39E 13DF051DF7D63077 FFC891B142052C4F 891CDFB86370CE08 77AE93E70C19815B 2BCE6807A7A8169B 84695180FC15DB90 2DF43B0DDB7F4126 61D84052FFD51E44 43D5A21818CFEFB0 E31AD20067F137F4 6D1869BA90DE1F95 05B96E50742842B9 FBC9E65A38540E67 3B3CF04F0AC392B0 34EA56D88CB84AAA C71A63814A714E9B D933E6A8CB6CF101 DA8BF500A729A345 09D67A0EDF5AB5FA A34F265B3EE7A4C6 D882E62E2DF16C48 D89E34454DA3B6C3 9B2C3EF335CDED4F 599F1A25339D2A7C E4EDFA154D346DB1 AE398490FD4A83F3 7E6E41A396F3E049 A6E2F6B830F49393 A7BE749A61951BB3 FA54CB7B9FFDC2B8 35253060D218F902 F2F7411B235137E6 C9A5FF05617748B0 46DBFCB564BE137F 3C71A2E06EEA46E4 576038A2D693861A 1C6FD6F8313CF8C3 104194334DE35512 9E0419EABA247D37 F48D9B6F67B3AC7F 4460C10D387A18F5 89820010BC03557C B3364B6FBD4D112B 20E4710954F80E2F C18AACB69DF9EC37 54CB863FAE8B5C99 E3D21EEC11AE75ED 6709BA018E3D3546 49F5C0835BD66792 A61011CB189B813C A32DA3737051A75A 15E31C9FD2548172 5DB56275D6EB0D2A 7465EBC56CE2F4D0 55E91938FD7A3974 B9EF2F57CA3CDD11 123D63D7774846EB 68B7F13B1DB4921C 8D0B829BC68CB52E
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209231338(name+title). Key = MD5(password) =83fc697da9caa2183c843ade471a94b7, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 3b014a26-642f-414a-b33b-fffc95a88fa6 2 7f1652ba-647e-7d8d-aaa8-ba1bff3905f2 3 efc7428b-69ae-669e-b6be-283d197c947e 4 8eb4f3d0-05ae-21f3-b67e-64de1cbcbe2c 5 b133a0b2-02d8-17ca-9b35-0716d1f72c50 6 3255640d-5742-1501-8285-6f55bdbfbaa9 7 fe9680e5-e371-4d0d-a956-4643c453afe3 8 23b5e015-5237-0d05-b7ac-8e267b601791 9 0536cd57-8c23-4d67-a2d3-dcab368967ca 10 021d90fc-14fa-7895-8e33-d859ec7ebf8d 11 6161049c-e4be-0b09-afc7-24431826ee66 12 c7c730f4-a97a-402e-964c-d321f8d6fba5 13 a474f509-9049-139b-b149-ea8e9e36032d 14 d8f4cf32-21bf-3c42-8bfe-c2fb33d21a1f 15 146186c8-2a16-3e62-a3c5-d8dc5fede1f7 16 b22435ca-1510-7080-8089-e1b198b8b99c 17 ef767a3d-57a2-5ab9-ab8a-77746e1874fe 18 20ab2cd2-91bd-014c-8e83-d8a9549f2b10 19 f3a4f285-5f56-2121-a98e-d40c7905fede 20 f9e028de-c47b-067f-ac28-acca99a5ed53 21 5950dea9-64fb-81cc-bcb5-122017de9442 22 7011792c-4e5c-02e4-8187-839f6136ea72 23 e31dc3d8-8e2d-233c-aa03-66bdc2e5116a 24 aba5c319-b866-8f65-b1ff-4e1ff14ec52b 25 16bf71e9-fe69-1aae-bad8-72b5279f224b 26 ef7660c4-68cc-5698-9f4f-61f0284ee128 27 e3722ec4-c833-82fe-8586-7638ca720343 28 4276aa1c-b8b8-5761-b399-32d2039c8da7 29 9c472768-9fee-75d8-97fb-43878c72fe46 30 1bf8146a-1ec1-75ca-a494-e3003341fa00 31 8d1a0de0-4901-8896-b1b2-300407640a04 32 9174fdbb-f5ba-6f34-b70d-eb5ea665a93c 33 6f311716-e9df-8022-b3b7-faab453b0d17 34 96b37ddc-6f29-77ef-9892-279369ad962e 35 e168ea4f-06c8-477f-9699-b888ab0275e1 36 95319499-8fc8-65ca-9b9c-1c64142c7b62 37 fe00c47f-5349-62ac-a373-a49c50a86d5b 38 b55a1ffb-ca92-48ba-ba13-d0dc52f62cde 39 f3219952-1583-444e-b1a1-0c6189259987 40 38b54319-4092-4fb0-8820-b76f1417a938 41 c51ee972-e4ab-38aa-97cb-263d3093bb16 42 5bd1dd2e-7905-5843-80b8-6fca12c9985f 43 074a98bd-1b13-38d9-839a-d44d0b343a51 44 b37c6f04-7227-51f6-868d-1b5572ac35b5
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
47621140470413375020802815857786874664443535. Exactly this sequence comes out ofnew Random(392).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 56 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.