201209231348 10cl0j
explained decrypted filler
3DES(name+title) ECB, 58 GUIDs, seed 979
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 3,728 hex characters = 1,864 bytes = 233 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209231348(name+title). Key = MD5(password) =7ae841ce6caf0b30ea930f3f0012006e, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 58 GUIDs as hex (shown below).
Decrypted: GUID list
1 666a8f18-d528-1e33-9282-42b59cdec530 2 6d687aa7-4d68-0e23-8fa5-4a10a55a3ec7 3 9eb08d07-e032-09bb-a890-40a49997f533 4 9cdf1c6e-cfd3-4805-9a04-115f9dd46e13 5 721339f2-19c4-170e-b456-9eea31175107 6 5182bb0a-4dcf-03b5-b7cc-5629cfbabd80 7 ef7d04c2-6cd4-466f-bdae-ccb06c329c09 8 bb976661-77bb-5f6c-82a0-7d2ff4b1968a 9 2d352427-eacc-0e2f-8710-ebaeec39df42 10 b7863e26-0cd5-24c7-9c66-73361d7d111a 11 d7245745-ff15-4fe9-abd2-344c83fb538f 12 dae1d7ae-ee81-717f-a01c-554b4aec4ea5 13 9f40816d-3bf1-5019-b314-fba1f92d6101 14 34e69655-7ce8-71d0-88d0-c8a6c324014a 15 59e73726-a6f4-2f46-b1e9-a3e9669bda98 16 cf182c9a-056b-373b-8866-3b626ec0d082 17 62542b4d-c4ea-3b2c-b4b4-13740eaa3788 18 fdc4e095-14e2-821c-8646-12f081dc66a2 19 4ffef5a3-ba2c-142d-a123-cdb1831834ac 20 8362b7ff-acfe-360c-8d6f-5fd3cd0eeba8 21 e1184c43-c081-8545-90a4-bbcb23df6dd2 22 c6616101-6b4a-0766-af56-0891c64d65cd 23 5909a8a6-3ba2-4e6c-ab72-1911371b45f1 24 003e0d38-744d-0ec8-8e77-6aee328286b9 25 854bc15e-c486-57eb-83d3-393aa2ab7375 26 6d1238e7-86ca-15c8-a8ba-53806d99ebfa 27 42ba6915-89b0-5994-af1e-abc67240c979 28 15b859d7-4602-2b1d-b96d-ddf58c3d5e55 29 f9bca585-20bf-8006-8161-18a5e254f4e1 30 e459cb38-dcf6-49fb-854d-ec72299b3a9d 31 100ff74e-6ddb-544a-8e3f-cd2216517742 32 db07fc68-be85-2d9d-81c8-c4760383e5df 33 5432b373-8e6f-8ee5-919a-543881d17f77 34 344a61f5-2655-4948-a09a-6e71ca8b3b5a 35 c0e7c6a2-5ecb-4e3a-98ea-ce40d54afa13 36 d22079ae-b364-1a04-a798-a74c1d254be2 37 2c837b9a-4f4d-8250-88df-75fb9fc904c9 38 a0238f42-905b-521f-87ee-64f58afc1064 39 90470933-8607-863b-b023-fca852d3ac38 40 41c92722-6452-7a2c-a57a-f5786eba1d0c 41 79d87d4e-c458-0866-ac69-afbee05ee516 42 c489cd6e-f036-6654-89ba-ab99efb036ba 43 8a680153-790f-2716-be00-6c128f0e7dd8 44 3bbfc53f-f7ea-0004-a232-15f0cc22b1d7 45 b1564faf-f28c-0608-b8ac-4c01ab428bee 46 94514bb2-4481-8adf-9f0c-391e0dac865a 47 3a433465-5647-3b4a-ae62-57f8c01b2136 48 3a0e29d3-3395-7804-9bb6-6a9324c8eae5 49 0fa6a00c-a537-7846-8689-a050cfe2832d 50 1f8db269-048f-5f1e-88bd-d7a91820515a 51 ec4dec2e-eea8-145a-a325-14eca7c9227e 52 683a184b-747c-8f2a-a304-6f45909ad579 53 f93e13cb-2c17-184d-a7da-f7d3b20167e0 54 c0e7baf5-f391-86db-91c7-2cd17e7aabec 55 62ace374-ecf3-178f-892e-9bcc8be64d38 56 8efceabe-c95d-1e28-99eb-3fe23032490a 57 8378df34-fb2a-5f68-af88-4a5847a21b92 58 80733194-2280-042c-920f-27bf8e82c53c
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
1004104502475723381380405152845284418587062008377518181150. Exactly this sequence comes out ofnew Random(979).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 66 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 58; the post has N = 58 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.