201209231414 10cmfy
explained decrypted filler
3DES(name+title) ECB, 56 GUIDs, seed 858
From the post to its content
As posted (encrypted)
3D85A8BE0381970F F7F1D4BEF7C8E67C 182672A66FC11BBC 060DD3BB72D3E9E9 84C6685C4B0FFA02 28762449F2C88681 A7A0D8BDFEDCEBFC 0D340431AA0E0041 CEFEF0F1DBFD6160 A5B0A718946CBFC2 42C71EBF18442A22 06777460DDF53141 78ADAEC372D0B18A 9CE7C6DD57BF49F5 214048C752577A80 8203CF793132177F CC9EB35818C3FB28 E3409BFD67FDFD84 6BB6FFB026BD68EE 0863C0EE809556F7 043A415B6DB5F601 629A2782433311C3 BF3CE5E2D15FE091 E8CAC0B5BC0A2F3E 144A34E542B7EB9A 3EA7A9E7096F42E9 48B3E5731ABC597B 72FDF7A82BB3EBAE 223760D2A4141968 3399E3DA67D09325 5FB0E00A48843A8A BC6109E0568D80EE 217B398E8F221183 FF47B281764B37BC DFA17770FCEE3C63 DB09F7CFEB23C262 7C679DF7B13C17C6 54B0A4568FEEE67C B96734BED321DD81 1B570DB310E182C1 AAB36AA023569B1E 9B21744684E3B370 0C58687C6127D545 F8E8399F690CAE77 F18705386A80BA9B 85E3C96D4418EC60 C674AC567D704D08 C14D979C0D7A04E3 B271444BEDA5658B DA22911B804AE3EA F3D156E097E05F8C 315EA790FEF63852 1B03A9F4D3D374EE 64852EA1E8CFCDAB A9859680212BB7DD 03485B2E5A18507F AA0A39E587E8BBF4 606ED5699A69F946 2831A8C7962CE483 F4E50781A715B680 9B64A62727DD2566 0FDD879E6AD48B31 0C5031547D54B6CF F63821A4B54F8974 C8B347B976966C63 9BBFDA6ABC8AE0D4 4BC29531FB3D36AB 691B0AC9D999565C A144CB88EC217898 986C5932338DB118 A00EA1C0AEA2013B 650B6C27311AFB37 A0E9B0F68F043770 9877DDDE8EC8A36D C9FA894A231977A6 B8399CF6D82C2A06 45D7364C36766407 1E00102C3E6735B7 854EB122424DE6D2 F69A0EF72F973ED5 40CEA64593567DAD 2CED30B001892B34 28EEF9EC87427245 72379CF635FB8016 AA2801F59ED8C28E 099D911C5E075697 4D5E5404DB85F4FA 0FD2EB5C10DA494D 16B4D232BA8308A5 AC0187FA7BB7DEAC 7C4C6FDB66003E2F F298228CFE0CDE69 FA2CB42A53B06884 3C4B0B97A3A41429 7BD379145707CD85 AB4CCCC0A76BF058 318E5CC01C35890A 15B2BF7ABAFF32B4 490C68CE23C769B0 626353E82A02C810 59926881AF47CB8E D29BB7D14FBE8E15 9359C1919BE2AFEB CAE584E36148655F DB417562C38E15BD 1E5E7B18CB5D005E E502E6B47FB7F33E 484221A827848A32 C9DB62B4D103570B 4AE17B4E729F7197 AD13C02810BDEC32 B1249BF0A90525C0 A8FA92B7A3EDD5B3 22AA233525B84F4B 641CBF540CCD27CA 4E8F760919F1396F ADC3A8FC2FE18C80 3179501ECE1FAA0C DD09482A22227CEC C663878EB89FCF6F 4508492AD0B6FAB6 34C88ECBB12F2994 772F85A0805AE0E1 A36A79A372EF20B1 BDAE03AA5A422D3F 083F02748EC95BE9 4CFB5CEAE4A4A327 0312DF5BACDE3DF4 FFA0129A0B7B91EB 9A14C8E28585E129 FD8B2994F2DF1E40 91BE25E9FEB7FEBE 0B5C8346CFADD012 E456D5D56F388302 D66728948ACBF3C4 13393D5B7DC177C1 DCD9204C5ECD1DD1 8E4D03A52C4EE711 935F1B88F94E39ED F7A6B319E6C9BB82 08E4AC5B51B0FD61 BB068D0D0585E2D4 C0C722F9A56FFCD3 31874359FB5A06C5 0F73682AD126A81A 728502A7BCE1BF5D D0F5F41EEF486473 59CCAAD790CB0687 52DB3738A7A1B618 74FFB02374028AE8 2546C71C640ACCE2 6DF225117CCBC9E3 56B7F6712D7CF143 8A35CC2A3AA96228 E8C6EA4FCAB5748F B099E3A4AA2F9B2D 55F802D19FD01766 A288445DE30345F3 01FFADFA38493BBA 5F84E9840F09F6B7 F818B87AE3FABD7A FCB272C6C45FA10F E5E6D653D0895156 BF94C5A7E654830C 9EAC0AFE9943C7CC C97E212F1C8737F3 01786B902CCBDFC5 55F6E7013D5E3F95 51649B789061F3B7 FB05B5360944E736 B5D92AB17BA7F779 C6FC65FC9D430EDC 24AC6CF94ACE152C B5EAB4002F12CA4B B89476FC820BB3F9 0064DC38D546500B 4987BCAAD1CA88FD 895B6E487DEF1145 D0786FFFAFE94674 7F30657A0EC4DD4C 0F14E17F9C52291A BDE580DFC596705A 93FFDDA66B3AF538 49A17F4246EEF818 2622F8AF2A1D6BB9 DD2AAE95077A6422 4DD5C33957D76D65 9D3A6FABF649166D 87C62DC21942D463 5AE812EA9B0C9EA9 A160C022FCAAB98D 45951B74DAACD939 58EBB9F6727F9F89 BE88635F5F00803C 00D1D748CE3311E3 F7EED7EA29731A77 A0A38D23DB049F8A 21FE17EA3D7E4418 6A8804FB84C2B5F5 D68BA084E3D04567 1804F24566A88295 2F035B45FB180EA8 EFD25075BBA1770F CDDA22664E887D58 83569467ED480991 EED78ACDC9598C15 7CD72EBEBBC6F912 3CD8B6A1B0CDADF1 DD26F6AAD693292A 136DE88FE047979B 559E02BE50CEC235 40B0CC2E5F510B1E 5702D017A5F4E7B9 03EE6CC853D761B0 7BAB6E8641A833DA B32AA463556A9662 C665A10048D3E1AC F2977DB909356BB3 4EC4FFF47718B29E 0DA61DBAFA96F4C0 A6CDE39F5A911099 78FCA7EE67E0BE27 CEB963E0F0D850BC A24A765C3385F94A 4E8F29E0EA36C338
- Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209231414(name+title). Key = MD5(password) =2c768179bd924fd6f069b819f65c904f, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).
Decrypted: GUID list
1 1a7cb533-651b-8fcc-86c7-a820f687b5d1 2 99ba1c40-cbd4-5d44-a8fb-e7eb448e9054 3 3760c856-3987-4e6a-b0e9-72beea526100 4 157bca00-947b-6934-9a3a-3b081b3a85b4 5 24d0b4e8-f86b-5f34-b874-db5f79467788 6 d23a94f7-553f-3dbb-b035-9160b43aa3a9 7 b37d7195-9d8a-3bd3-a9bf-7eb08f133094 8 44bbba5d-6867-74c7-8f28-38713f8efdc1 9 bc8383b8-7e46-1b18-aeff-437dd4e388a8 10 df9326a4-8bab-5404-8cde-0f0718988406 11 d0d6d620-5c03-3b8f-a42b-a1df0105c5ea 12 fb53efeb-3fda-29ee-a11e-a4fd0343920f 13 7c575951-c20a-4de8-a869-3af250c67caf 14 e5179303-510a-7108-84ae-d29c3572a0c7 15 f74a3137-44ec-5d91-9c1e-355f81dbeef4 16 8cd2f168-a0a3-7bde-ad2d-7f06d61043f7 17 a0fc73fa-f97c-4ad5-8473-b5fd2c7a60fa 18 d9c56a14-7bb0-8a39-927d-8fb057c1fb40 19 daf4a739-a9a9-8cd6-88a5-2803c7205617 20 63cfa126-c4fa-478b-b1ec-db0a75dd9b03 21 2df214d2-732c-72e8-82bc-af8c3c9433f6 22 7e623a65-97c7-317e-a29b-25c870084964 23 f9c7bffe-8622-8fb0-bad8-c3049024b29f 24 433c76a9-0ec5-6822-93c0-b4783480a4e5 25 3807cec9-ab4c-7789-9901-c135fc3b013c 26 4f20b78a-6084-3239-8880-b185ddafa209 27 72ad49cc-64b8-5d5d-ad84-897fe22250ad 28 71eb7606-c4fe-24b5-a773-d60034d497db 29 4f2ab063-8568-4df5-a6f9-815330f0b84c 30 00b8e4f6-1ec5-0175-9411-192756ff6e2f 31 02cd8edf-72a4-8647-af9b-9c605449e28d 32 71a7b022-211e-481a-b3c4-2a038f17915b 33 37a293af-afde-2e03-bbc5-f4460207c62d 34 169366a7-79b0-444d-9ca4-8e48573b6aac 35 957633c8-8d3c-2576-8d2e-67e6bae33608 36 b61a69de-c7bf-8de5-b254-abcb4c7a3d91 37 46a76c59-dc83-65dc-979e-b5b909e69b83 38 cedd98e7-5ec5-0d98-b51a-d485f119a194 39 78bbb1ab-d1d0-2661-90af-0ad099efcc8c 40 a7ecd54e-1de7-1901-8dbc-20d71a022277 41 512caa98-0077-18f3-8b50-de03e5f51e44 42 9714fa3e-e00e-0318-97b8-d923d919c6a7 43 5172a2bd-74ec-0b98-9f23-877ab197dcf4 44 42acff73-1385-3bbb-8998-f87f7eca304c 45 52e99a90-1a51-2e8c-9c87-928577e5ffba 46 1668d4b7-94bc-3cbb-9e81-775da607b7ee 47 ee9997ed-7073-2b9b-babd-54633c0f2ab7 48 9865924f-d506-8feb-ab5f-92425953c5b3 49 f819a6b8-3045-8b73-990d-9986f33d74d2 50 665bc868-de61-58c8-8c1d-270f6517e1d3 51 f84a7921-df68-0f5f-ac6a-5fa1b5711621 52 03686db9-8e02-3a50-b8d5-34192ea3c77c 53 82a6bcad-3766-180e-9ccd-65a79afc612a 54 ad79f26e-7a93-2c3f-bbd2-e546b19830aa 55 88f7bb3a-b542-8036-897f-69a6923c3304 56 24207337-e646-5b78-8be4-6ff73737755e
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
85465337153247574884738673524084242860211003232885031285. Exactly this sequence comes out ofnew Random(858).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 92 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.