201209231413 10cmdt
explained decrypted filler
3DES(name+title) ECB, 49 GUIDs, seed 335
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 3,152 hex characters = 1,576 bytes = 197 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209231413(name+title). Key = MD5(password) =7fade763a8e3c3fb055dab7a45ae4ff8, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 49 GUIDs as hex (shown below).
Decrypted: GUID list
1 bacd83aa-9f63-611e-a1e7-32ef23ca3f1a 2 ed60b91f-4b16-119d-8281-e76715152bda 3 1da334ff-cc49-82d2-bb32-8d4bfc993088 4 e361bd02-f81c-06c4-866d-85d1b4751bb8 5 e9a63f6e-c477-4332-a059-4410a2cf0d6c 6 195bac2d-ef5d-2f62-8200-4c35e9069aa2 7 5fd660e7-4871-0446-900c-3640d1927e52 8 86903d56-84cb-48b2-b2bb-0ad22243e317 9 310c2354-6084-3355-8737-6d95a71c0d1f 10 fbd3d19f-7801-7171-9857-5b887fba4f30 11 c8d7c471-4a57-0506-955f-6a8cd9d0df2b 12 fbb6527f-75bd-0324-b846-448008a8617c 13 b1dfbda6-bf3a-8014-9ca5-05499d2e350f 14 5ba193c9-23e1-6444-85bd-bb1b0fbcbb54 15 5e43ed22-d263-4ab6-9da5-aced82a2aad6 16 20be6e4b-a8b2-2005-861d-be9ec117e0ab 17 1d1ff519-061a-631b-9aab-ed6548fcea39 18 51fc0d0e-ae48-63f8-82b5-e3394ddd7795 19 a35ffdea-ff6c-6c0f-bcc2-360664383d72 20 2bac7922-17cf-05b4-a90b-3491ce74edca 21 accb8ff1-c002-245e-8cc3-3f2b44995462 22 3cc52ddd-bec6-0fde-a304-1bdc22d0c054 23 030ef216-ea67-50c6-a19b-897731624b9f 24 c63e81f1-3fbf-0db4-baa6-f35f3c8598c1 25 c47aded4-276b-4ae8-93b2-5aaa52ff0921 26 32de9245-71d6-8764-b46f-6478015562e3 27 2c65a1f1-751c-832b-8eba-110dacb1d074 28 b030ff08-324b-2fa8-ab81-6b56dad1c95b 29 b09a3ed2-de4b-019e-b709-f47c9c4047e8 30 f53361dc-0fde-76e8-a13a-a25c6341ab5c 31 83eba016-09ce-73df-b709-6a700b738598 32 41d1aed2-bc94-6809-92ac-13da7284d46d 33 90a21ee9-c630-0f4a-94c1-0e486e89b2b4 34 41f00076-69e7-3420-bec0-108606abe289 35 2263c014-275f-57b0-8a38-e77c49cf83c1 36 2ba1c85b-b1dd-2715-aa76-efd1518728a5 37 43641ed5-36c9-486a-9191-340a237486b0 38 df32f191-4b06-6c6e-981d-35c8c332d149 39 c8802fda-aadd-688f-9b1d-245f61a2e886 40 98d3fb85-6878-1b04-8119-e123cce6113d 41 6c4979f4-ccce-6459-8605-3753ea591721 42 83de6c91-db2d-74a8-ba98-7dd029bf2b1f 43 3763a7e1-0c69-739b-a5db-f912f68e789c 44 c3da825e-6447-16da-9c19-4ab007e0462b 45 9c7de81d-c5f0-458a-bf73-bc88002b6582 46 d9433fb2-6975-7761-ad26-c8827169602a 47 c9b6d5f0-b60a-2543-a37a-458ebff8acdc 48 c28a0d9c-31c2-6f22-9da9-34070dad262b 49 aa4f0362-acb3-765c-a5aa-217f429ce3ae
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
6180420437008642666020504882077603524661677147267. Exactly this sequence comes out ofnew Random(335).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 91 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 49; the post has N = 49 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.