201209231359 10cllu
explained decrypted filler
3DES(name+title) ECB, 54 GUIDs, seed 685
From the post to its content
As posted (encrypted)
3E35ED1368B8207D 271E217322E85918 379F8E49B27BF19A CF710F8A377079E4 A291BEAF1345AE6C 1349CEFD619CC4D9 8A4814607EEE4D95 A0E428343247019E 2312B025DB67208A 0C0372CDEFECD0F1 3D64D90BDD98388F B0FBA8647B895264 A71FD9514D6B7D50 FBE93A43C3C9BD59 28D196B6AA35977E 0570938CB721A682 51E26009BA3CAC4F E4F5EF558BBD51B0 46DD88A0E3269C17 C80F60D6C22DCDB9 0F21694E5F303AC6 5BF06047881D4F53 6BBBA6FF738778FE BE830E1BAFED6F27 E172BE37A477D0E9 AF879EB3E7911949 5EAD37657A5F8A15 691E4EEA54EC33E6 D5A867E8B1A00DCA D8B8888BB2BECBAC 2E6F253D95F8E0DC A2ABF0ECAB0F8CFD A2B592442FCEBC86 EE8317126DBBF0AA 7442F41FC3686C98 44D786BEEC361AB4 549ABB1437384B97 DE20AB77286E42F4 62FD7F36CE775B02 D2B415005794E070 2C4B123AF84ADE4D 4F39C95FF69DFB82 D5D470FB1E2C73B4 DACDE3EB8A68F466 CEF4B8C625287B37 1EB34B930A73780D CD6A6D47FB1F07C1 4535462E9C36AF3D 0837DA472AAAA2FC B01F896CF682A44B 01B2A635CA450034 327632A1B0DE16AF D0C3F251E84FFCE8 8493D69D26036B53 35884B66D74BC20D FA20B9CFBD7DF45C 0A67462999E24330 9C2BAA573ACD2D14 2409BDD4C4E12889 9F9BEAFB0DA76EDE E98F760A40F838BC 12011819CB40A5E5 67647AA5797C2721 73FAA907EC2B0EA7 846A3A3246EBD919 6DF3CFDFD3A3D11D 8D634FC2B266F631 CF96C23061ED434C 1A72B25CD98CF082 24F494E57D1A66DC 5E34D981D8CF5AE8 BCA34C4CAAA6E1E4 64CD722D3F159FA4 91BFF150A64A15B2 F74519A1BA84AAEA 102C088645C4D000 49F22CA28CD4596B C479C4767329656B F24BAAC0E632FC22 1EE8BAEA6E4D3B1F C7009A3D147B9F02 335F31460EA63DA7 F8DC3C9953396A84 3EBEC9BA7F489937 D5C4C55F7DD1159B F73EE9F5DFBE354F 8780EFA8DF9ECB89 DD260C285C3287E7 71F8D704D1DBCFC8 8D9403C3D4074F66 471D8DEDD6E5D5D8 B2160FF05C369C97 F93387710B672D03 4C34CFBAE1A770CB 931C8B1EA5875121 2A2D05D7AC4AA189 012993DB8062C608 F1E63C441152CC67 DC181E346A81A5B5 59A2628992AFD606 70BFBE0B4411402A A19715EB2176399D C21D64003971FE20 021E3FA50A02396C DDB0AFC03A1B9404 1AD7A20EA0D4A5FF 14C40C3518D2E978 24643AC3C38C0029 E5CCCE270EB4886E FC4B372604FAE808 4B2A45A87BAE4C16 E8C65DC32E5C0B20 7DD030A1A0C56C91 D4BE81275EA7D688 DA52E01F04277A6C 0BA8E9A055823CC5 2E35E44199B43B7B 6DAB9A848E112410 84143BA3741E637B DB723A9974BCEA37 C193FFC90D01FDFE F2D8F15646EBE530 E500B773DC0371F6 301BDFB9D4BC4004 B07D0219F672C471 16593E1A86CD82B1 C2B08B3C820228BD CEB0AE62514220EC 9BD7D3FC6CF95C9B 3908068CA9427792 A10871821548744B 448BC642AE0C92B7 3E92998AB41A7A74 940FFDC96783238B DF92520695FE4848 F82DA3D289217C23 94131D813A31F713 C6CEAF2FF81B4002 5366F8C2D57212B7 D47E6B7DE1CA8EDE 2CCEA8BDEA1E1FA8 505AD23B44F9DBCF 0F56330DAD3ED1F5 1C529EBE169B679B F0824F03654F9060 A6A2E986CC249001 62AE36D1FCCAA80E A87491B90B9EF4DF 2E06CAA9CA20FBEC 8AFBB0C7EBC8D499 9A04F1F0E0B8E9DD A021760DB05AAE1F 564AC2CE48520329 E693C2B726697C50 5B3F7483EDBE4F84 4950AF30120DB9ED B6E89CCFBF3EB275 1D0369A149184E7F E82302F3A1CA4F51 EB035EE549A9C1E3 36A3D9A06F3677CE 97787DFD66257676 884E58215F866C4F 4BF4BFB9A6EF2D5B 9151D9997A105BB7 5AF226AE27CBADA0 D45447F0646A9921 958654E8C6FCAF56 B65E582DF62D75DD BFA122D949150472 CBE6EAC6D3E33088 0FDE86A00EA8D9D2 76B9660A8DE770DF 264CA588D0D2807D 265B3DD3768CA9AD 76B895E5CF9234A7 EB3C0F97E8CAA888 DE9EFD92787026BF 920C657E85E76AD1 9DC5B4EF0CCEE8FC 305C9B07204E64B1 374CB794F2A2054B 4A6AFCE2CD6EC09E BD20D7A66E07554E A09C8785F734EE6B DE97F4992437BD33 75543A609CB6F4D2 4E887FFDC01527D1 FF52856D5756BCDF 30031A1681996AEE BBCF02C5A4AD2E2D 8D8DC1158AA3B896 3D141568168CAB8E 70425B51BAA7543E 3426974705E6CC22 8EC20311FC0C5545 155E07F9FE104F6D ABAFC3C483E5F6BC A5353E03A7CB282D 0EA39A1FE10EA574 0893C83B4117579D 2C5F4D6DE708FCA8 DFF633FBA47F7A30 31D4D42B1D5DCEAF 3B20D9EF9F8EE1AA EFF6342E10797193 CF8384BD39FBB2E9 002FEE111110BA19 E164DDD86B979098 0FEFCA7CCADB869E 8B3BD849C6ED578D CB7CADE789B18699 29CFFE4AC8A21D2D 4C6D24D3F48F3BF1 517199FFA8CCAD88 44A8CBDAB3811106 B093E403B1AF8687
- Read the ciphertext. Strip whitespace: 3,472 hex characters = 1,736 bytes = 217 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209231359(name+title). Key = MD5(password) =8a09733979a2e12eaa22569b58d9de5c, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 54 GUIDs as hex (shown below).
Decrypted: GUID list
1 d8376718-cb96-58a4-a2ce-ac6b94e97477 2 2e57792b-dc20-74d4-9b4f-9f69c29b5791 3 661f1b31-74b8-5463-8be6-3077c75c581f 4 7b3e9e3f-b923-6630-b1d5-3ded31ef4696 5 2d071d32-aa1b-45c4-aba6-24850cfc2a80 6 01f28887-aa2f-177a-a91a-7062dc7307cc 7 aaa89158-7184-75a1-82bb-31c8cae8be55 8 abce4164-1735-0acf-bf4d-d3d7e0f3fe9b 9 fe08cccd-3c35-63bc-98f1-2b8f27be38ca 10 e5eb1d85-ac65-7cb3-b409-0ee25d27b2c8 11 c1bf0eef-1e6b-8dee-beea-89ab7dd306f1 12 76576607-7b93-20f2-a63c-c8efa2664911 13 18640dde-f323-4210-9830-c44a91ae745e 14 89a1893c-43e9-7592-8178-3d178cc99666 15 5c22e6d9-1d8f-4132-8dae-3577e1028477 16 c0a5c635-c7ea-7b69-befe-77aa9fa5ae48 17 6b01df85-9f94-7997-a12f-16e12bd85c36 18 1c00812e-17f2-675e-996e-a3779e90e9a3 19 db90d372-f012-1a66-8291-48c970381a04 20 bdb1fe97-56e5-4d61-b5e8-42910cd4b566 21 b96c4999-dc8e-7e32-968a-0e2359d91187 22 fc089cf5-1761-8687-bf79-c739e47282d3 23 7ac7d873-e2fa-6d5d-a18a-1826d412c349 24 d558cf42-f64b-3039-837f-597be8dac414 25 4851cf29-6ba3-7642-adb6-acfdcf6cdc29 26 10c5d12b-f2ce-0efe-ac86-6e657d2ccebf 27 a5e79fa6-953b-7648-b1a7-fbdf9dbd54f8 28 90ebef60-c52f-17c2-98b3-9382c6cd62c1 29 1dd9b30c-a310-63f6-b721-ccd8b74c3611 30 9e2cf688-2ab4-6d1e-a48a-7e13f1fec034 31 51726583-54f6-0d3b-b25e-560a5bccd88d 32 88452904-d0bf-7910-98e8-a682e58b7046 33 b2dec42f-7219-6706-84aa-d85a4d9c5827 34 791a2c24-a0f7-1e8e-ba1c-33fccc003b44 35 719490e8-1ca1-7abe-957a-0461b3703058 36 9f8e2936-f9ca-4451-bbd6-c8cc8e1e4363 37 d23151b5-1b79-4799-9fc5-b2c1cfcce82f 38 ad869fbe-dc0f-1bf6-8f48-eaef3ccc0a56 39 0d2e70ac-1467-532c-bf7a-810c3c8fc60b 40 b4caa137-4894-8b02-82ed-80133e305524 41 0b6e8092-08ff-322a-8364-a4fe8bd50d9f 42 d69094ba-aa42-070b-b4a8-2165fa0b2671 43 b6a94b27-17e0-0046-908a-20066c6b99ea 44 dae12bd7-9d5a-7e03-9c96-165a9970e19d 45 f7e5ccd4-4b1f-0bdf-84a9-eaf7d71b1f1b 46 9f1c9185-c287-0600-afbd-8cf68c011043 47 076abcef-9169-3e7c-8230-105b01661c84 48 3599d517-ef30-1ac7-8730-4671974df21e 49 509d144d-47ed-0755-b91c-fb6df8b5005d 50 e8d6e84e-4847-69c0-82e7-7bf7a62272db 51 976c26a5-92d5-8a21-98de-cfd8f9cc453a 52 49b784cf-ea37-48c5-9fd2-f487c5bb6072 53 a0514957-3156-438f-bfce-ce4bee4ec38f 54 f0850fbd-44c7-0844-a192-cb5ed41b6479
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
575641706782474776147863707166076174415830070031068440. Exactly this sequence comes out ofnew Random(685).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 77 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 54; the post has N = 54 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.