201209231349 10cl29
explained decrypted filler
3DES(name+title) ECB, 48 GUIDs, seed 822
From the post to its content
As posted (encrypted)
114DED1CF139FBF5 C9D720AE89879444 798BFD482D4A0C74 D2703CE784FEA676 9E2B410639791994 D111AA3413C90AB5 CFC12C3A87389F4D 1DB753C6C81DCA8F 56A835131932BFAA 65A956A273EF6C94 D29356BE02039C6E 4E77F0034FC93E92 7000D9788BF2C854 F6414AC0367BDAE8 71FE185A8724383D 0986EEBC5C8969AB DA919F343F9958D8 090C17A23A3B6451 989E0227C434013A 78DF25563FB2CC47 DD5552B495ADB9D6 74F496564F9CD2B9 7AD375FCAC7B60EA C383B8CACDA20F60 59D0D10003E6A20E 9EEC2A9476840AA5 B81030BF69268027 0FC6BA06066228DB 8F2404D99B1E2D33 E756C660881029E8 DB3D91748784793F 34BBBDA2318C83CE 8FB0FA59BE4AB761 DFF0AA195D95656B 8C577A9FDC09693D 13F169156380E28C 2914593126CC4F3A B12A75E7F3228FE2 69A5041BFFF33FF3 0063897362C1CA92 AC5FDBECEB9D0FC0 441243B5BDC1F2DB F44913E240C72BAF 672A91BFAF744F6F 4B63C08DE38B009E 6F7EA3C4217BFAD2 F942ED40C31A963A 4798D16027D6EED1 125B33DD9669A9F6 1F9886A16950F47D 10798AA94AC0CB47 29314E6D2D460281 CA174F6CFAD67797 1839A3877D086548 588CC0360DF42590 6FD6D5B1AFF6EA57 59D57B66F5D8C875 0F66DABDA4AF1134 3159C3B1E9A0ABD6 F4D2292E7883F8C7 842F4370F13D74BA 255DCEE97592EBFF 3E47165A6E1F744B B35B1EE94202A300 44F592031D40994A E50427D7FE7CB09B 64CD87C062BD92E8 447004231D8D59FB 5DC986AA256F7BD0 6AAB6A884595FA33 85ECACC1AF9363AD 2216ABA7D1D8BA11 2F24F3EF4FA4128D 643A992D4222FF8B E8AAC80BF1B2A390 5BC38EF0B56ACC83 335CF19F758EB539 28F2515789146661 826E6B45D00A7FDD BE0944BD7F139CBD 10343097CD0FE392 C9BD6499C77C5CF4 61201589292DDC20 66A5C2C961B1D528 8C61BBEBD04A6379 40A34906726D7135 A26CCD910E7453D8 48E488FD6B7C887F FE4F393CB3CA937F 18C156275F287C4B 5ADD2C0CAE32A309 9BF2208B834494FB 07B4134D48DBD838 3DB15362744356D2 F6AC7163B0F8B029 5319E831A3F23510 076B5F648E92FE2F 8FC9CD77E7CB68F3 ED501258769E590B 36A7A7462F05454B 2A58353E33A2365B 6EF568FF14A580D0 5425A1CF8A18059B 81481B2E31C8FB15 C1C277A399F8A683 2E30A83AEF5F0518 0882D802F033F93E 71D0A45FFC1A8001 F93D1958B56C3770 E10802AABEE3CC3F 1C6E8BA86CB0D5DC 942774163C28280B BD95F220AA7AD9A5 338CC485A4FC921D 3E2B3F5CD9026A67 DFCDD428728DC27E 570233598F7BC4EC 1677EE01A44AB53C F01E3A5F60565130 16A7C3F9827F689E 5085F39720FE8464 D053982FE12865F2 D649BD5DE444DC35 CC247303C9DD4A10 1B87851B535B7715 719E90C35C694F38 160ECFA3933433F7 759FB9E46FF7BF31 2D5263AFC50F7496 D728F22BDC1A9847 9E9A5977EA4BF763 143A5711CE7CAB7A C4B78CA92B5604D4 BB70357228589C6C 4D9B99B61B256F1B CBB9BB5CBE6D320D 9322730C270EED7B EC2110D63D667EA7 2B1C7CCC71843270 77A697DE4994BFAD 7F55BF5F2C9EDC25 3E08F815075BA066 56DAEA3675D5C74F 509B03FDE40393A6 EFB515F43E7B9B5D 64455E1E8B7E170C 35642A39F42A9606 89FBCDC442470A3D 6E39450A6C494606 98C21BF2845CE16E 9098C4641BB1F1D7 A48AB3052B069026 B44A846B28429440 933EF2EEC10CD306 4B007471DFAA38C2 9749CC587987068D D344B34DFE566B78 6387C3CA7E5DCA5C BAC15C5AD79F76E4 7BB8E36F96300F39 D0CA205FA6663699 25BCB745D58FB4BD B0032B5E945AA205 A6F12894FB484B92 64AA01825DA3D56D 3BCB89CE2D7A456E 01435CF949FC07BC 18A303EA4AF78C8F B0ADE71644C67A7E 22E4CF4BEE6407E0 973F93E7D249EE51 4A1FC40A1C78FE83 78A227042DE0C159 ECA18C0399AD3C23 E790ACCEA1CCED96 71F67C26D4B91FF3 AF9392F61E6339B7 16471533F40F9D7F 1A4386AEB180E235 4E68CD77396C36F5 649E95810DD5EC2C 95F56918252C9F08 867C85EAD59182D6 DBDE18A046077C4D 7CEB7B9FEBAAC30E 76D130EA95AFD98D 4B96A190D44605E0 A01625EC5C3C2F28 CF692092009909AF 19DB84DC9D17F55F 414E347BDB81AFA4 A6CE63845A6BCEF6 2732D5C70D8FF847
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209231349(name+title). Key = MD5(password) =bdec4d53f1f6326cff7e47d00dcadd26, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 07620e49-446f-1ade-be28-a234b265e825 2 b93bf4d6-0d89-0fd0-b0e2-fe16c89459f8 3 6626fe30-fa9b-379b-998b-9a077fa2aaf6 4 8d9666c9-2296-0286-bd92-1d74a773b876 5 5c394178-a10b-2036-9443-9164643d80f5 6 0987287b-0131-883c-8779-cbe6bf412a2e 7 d4a786ff-09db-1cbc-b1ef-4f9f5e6131bf 8 abc1065d-62f7-76fd-b1a6-4e62d3061c25 9 e9b92390-a7aa-6c61-b3ec-1d1dd1c6133b 10 7d9382ae-3c7c-33f3-b485-73119ca21d46 11 e089fdef-12a1-7c97-bd48-0205cfd42db8 12 dc8b5782-87cc-1f8b-9e57-cce2df04e78f 13 b72c700b-1852-6e71-b44f-3693e2916e61 14 56e62fa2-addb-15fe-8bd0-819d84e26acf 15 2418dce4-ee05-3e58-a231-fa4521267501 16 29b3aa5e-d464-3297-a103-25ef4fb29a9a 17 85d1b690-a754-3e86-b407-2815bd1a1f5e 18 be89b5bb-6a84-5f94-aea2-2464740ecfb3 19 52e65cd8-cedd-8ef8-9ab2-d081dacfab8f 20 1e316e80-06ac-5464-9fc5-e2218099fed3 21 2294186a-1d11-0472-b3ae-211610b481bf 22 6fb12140-2101-4aac-8a3e-a6558d7ebec1 23 9d42de8d-5019-8147-a490-32db3365a55f 24 ae720fae-93b1-11ca-bced-185d00a63a22 25 92ab004a-6e60-2043-8520-b11ff6ff86a9 26 a94228a9-7ae3-2d62-a3c1-8681620db147 27 96bdfd6c-0c29-56df-ac46-baaaee2071b6 28 31b335b2-1e96-0a6f-b121-e7ad25515ebd 29 800f5a79-25be-517c-a4b4-9a8b33b6df42 30 5b78748d-49db-0585-99eb-5d2a9cb53572 31 8a5c336d-8eef-53be-bc55-114eb6dcc08d 32 02d36abb-e5fd-8597-a92c-41da5296e336 33 7668861b-a9c3-723a-a5fc-d2b05ab19175 34 48db4768-58ef-5dd8-901a-4d2c26865fb1 35 f3402ce3-254a-6b26-8849-3dc4d746cbbb 36 6be1c368-551c-380d-a750-85fd81fb1524 37 f557b5ae-cdb4-887c-8126-879a602ea05b 38 a4bd536e-d444-5da2-a2ec-7f0f42ae92a8 39 4d2b5a90-0dac-1677-a3cc-66585aacb8f5 40 5141548f-f180-67b9-9ce6-863d0e3a5869 41 3143541e-e0d3-4bca-97f1-a308dd20d674 42 30d26787-de95-0f2e-aa97-f7c4a0fee537 43 6c9fb135-4648-3f21-a1a8-82eaa3e3ce33 44 2ff9b52c-6118-24e6-967f-a1a79802ebc6 45 efcdf1d4-af11-27dd-bf12-cf4bfd7f3827 46 c8454f02-4c0a-6f34-8eaa-a5a5f9bfe178 47 434c88f7-eca2-8624-bcab-5226bc73df4c 48 5dc483f3-8baa-3f1c-8127-656570a6a3ae
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
103028176371613335850481225050587563851640322683. Exactly this sequence comes out ofnew Random(822).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 67 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.