201209231437 10cno8
explained decrypted filler
3DES(name+title) ECB, 48 GUIDs, seed 684
From the post to its content
As posted (encrypted)
D0A56550E7C2B78E 3F2D5B522073E4E6 95345CFB09A78F45 BBB2B39CD23288F7 195E688D43C43701 565ED88D14D25647 BEF36DC2043A6DAF E2150ED591290C55 8C3706ADF539FA08 DA254B592B87BD2C 08D2F1F12E81D319 ED5553A203E7AFC8 117C7658A86C6017 ECEA8C2E6383B81A 9E0EB567930B7E77 CD1C5178CAA4AA0C 0CEC651DC989EC0E 8DA666E293A89005 1FB9FF5A87AF2497 49590F5B7CEE4518 A3577D64799213AC 691141E9B707B366 95034AB01D2D9A21 398ED0C9AF94ADF2 296696A5CB73E5FF 5A1255A900998664 F8D7AFD8BD869830 5178438BCB1EFA36 4ECA5AD95F1C4DD3 28292475C976E8DE CC6CAC695841AE6D A35FD0E74B13AB2E E12EEE127D958D24 2A385EC57FB7644D E4947FBD0DBA5BED 35521C37B065A60B A056D0C696909D3C 17A5B73B7460C4C6 9C83D464D387F2D7 4FEA0CBD64DF890F 048A5EDD5F3B6BDE 33478C0EE62A6325 8D74E36F873D237C 4474A1827CD64945 FCAA47F82A502E8C F93B1E5D4003D204 847AAB9C984BB9F9 363C5F4FA4BA2310 A48414FDFD2E3C29 1E88E5A8B24B1809 3E953043DD7791C5 C763803610F93218 95AD5CAB36A24ECA 950909B881FBFE56 CD5655A6E25054A6 592531CCCFD6BB3E B2E5E6BAC7C892F0 27EE3B9E5B2BB1FB E5BFFF2946FD2739 DEBD60D74FF763AA CEC53CCDAB1ABCAA 054BE7D18B799699 14FD7C2C933C3F48 C156AA51CB5D5101 47CD44EEE135B78A 98C180365C4ACE83 CEA1DDB29BD02FB9 F4BC9EE2797F6404 09AA47BCDFD9EC9E 9E931A4884D8652F 041E7AA5DB3D6206 D3A25CFDDB17B258 9629434DFF37F57D 29B8B2BE0E6E289A BDE5FDDE98052DA7 C4BB9F7405BF9D80 D957A32D17784A64 CFAD75A629C2DFA5 C56732527F261EAC 913EAC050148536F 8579574829C7B045 337B635DCAAA8A8F 94B82EEBF884D450 6C31F38F2AEC9DB8 E507FF2A90ED320D 4FA7E70900472281 585F25A4097EB741 A3AF840B334C4E16 61584846FD9758CD 199AE27B8FB66426 3226A0B838466291 B03A9202E9328EEC 9750364897CAF391 089D43E505F1100F 5EC720B1353010C6 C7E48A684DE23998 DAFD72672D74813C E1E4082D1CC68C42 2DCB2C75E874BFC9 25653E6CAA127178 267215BB25066282 ABFA43F3DAE1D735 502782CA41D25641 F66437A1D934D70E EED5B3BADB8CB619 EB91A6D9D6398EDF 134B608667870C60 A8E4234AB9F3B28E 325C186803D8F602 80E4297E8BE55010 9C27E153AF7E7725 E8186C4DF0E84430 D80D8DC004993B29 EDFA967283317013 B30927681BB6FDEB 363E763755F721F4 9F24C42743C41E60 CB293D975B9F2A15 90920396F5EDC621 890A15F9CAE9FC2D B2EF80249C098FBB 2C96A7036569952C 98CC76CA0E0658CF 7B53C2DF35AB7B1A A132417BBA557832 B63416E4CFF40F53 A5753D4027D68839 9F2B0A28A1147B93 900456A9DE821677 6263992F7C6CCB4F 008E4FB2A21E5095 D831A90F3B02CF4D 47EC7ECFDE2981F6 A293BEB556B2BBCA 0FDE0F7632458ACB A1A6CBA048D3C1B6 70052DBC8093D322 B0CE4188BD5BE300 90DBD045F450A9E0 84DF522B7AF4A833 1AFF675FEED107F4 648C38D10CA3F7E2 E93E13E1F18A773B BB204C17F34BD7DB E8C7DD33405D86AC 87DAFC8C64417BBD 1F84F2CF98941BC1 72D0598AFF13C6EC 40B48469DD7597B0 567269EA63539D83 BB64BA2C02379CD0 D91D0B01C17C6A17 7290C6607B9124AE C644635D35C6A863 E7F788C1DF0B3783 79B9935B134A8559 92622D17DF5E372D 03E278433F4AB25A 4C8177BB3CE89B92 EC8B9472C1236489 1E1685B15AE47A03 3CAD9B7508BD4327 056581F19EB66D2D D96FE97ACB618361 F69FB63943FFC955 118AAC0D5AFF4746 04A5B97F9C134CDA ADCD352F489E85CE 0AAC3C3E271113B4 A9D982C88BFA3BCE 49294C05AE837260 25589B785D9730EF 787817B74593455D AFDDABEEBBFBB279 88918DD3772B5C06 9049FC1018601C1F 3C260320F4FC3669 86A4A360E97A52FA CF2E6C3828C26F65 7580BB5E7586E883 C2F414173E645425 90B19039E6D3ED03 110EB72A37C1E1C3 C580A368F0A885B0 061847A1EECDDD60 955CEB1B13A12337 015DEE7A57CA105C C47065A35F62031A 2A42EAF2D9BDB965 643E5877912E0619 C9904544FAAC9EF5 43DDA3D2F68D4C19 7B95B7D60B858BC0
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209231437(name+title). Key = MD5(password) =fe98c6138ef9b6ccb37f6caa4e999f81, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 eb87bde2-0f20-04b3-ace6-9a0dd88863e0 2 61344d34-3ede-41c1-9930-da63989cc2a9 3 cac1886d-4ef6-7f09-9918-86b3d2bc0300 4 899056f4-4303-44f0-9d02-a025f4baa497 5 b03b32d3-ffe5-04a8-ba13-5f29c0d9824c 6 1a0dbb42-c2aa-2daa-862e-5b0c5c9d5d9c 7 d6d5647b-8f53-35dd-96ff-706568d9aa4b 8 1a9c7566-8bde-5d3a-a228-e06116427cee 9 56bf4929-1348-5906-9b01-dfd30fd0e833 10 78ed3d0c-c541-4bf2-ba26-c9d09b522779 11 acde7483-e19f-1b60-8672-7a8485105f83 12 e457ea60-7078-43d6-b5fb-63e0f8ea8779 13 3e0d577d-f5e8-7044-a3eb-b9c423a9cfec 14 aa275a22-6dc6-28bb-8518-3d2229b8ce18 15 e4974910-e71f-6347-9b97-4af1a6c2f627 16 1f96865b-d198-126e-9a6c-cf611fec4998 17 dccf6627-ce6c-38b2-8961-24516e063be0 18 c371a973-2974-01da-bee4-cdc8461e9763 19 ff09cf7f-d5b7-17b1-96dc-fc51cf8cf3e0 20 de978a2d-c829-1496-8ba6-00591b351cec 21 13278cfe-7240-69ee-888f-1268b8f316a9 22 8c5642fe-311a-59f2-9598-7c156aa9e65c 23 e338a865-64fb-54e6-b5fd-3f93a391835e 24 f76648e9-db4a-848e-8b22-9a43633f3530 25 9d5352ae-9d8e-659a-b4e8-e49327940d8a 26 c0959518-4a44-4cdf-be7b-e31149bb5ad5 27 551e3fd3-831f-0943-aad5-58a3c0949c63 28 c1fed0bc-5a2c-4eea-bd1a-4b914ae4357e 29 eea21f72-2bdf-49d2-ae18-bcbb006f01dd 30 784e1156-7287-82be-a9a1-493cc331e5a9 31 08d6c8c6-ae80-69e0-98fa-54ce59e9ffd3 32 262ab617-5304-5e9b-a1f9-153fe7cb5ef2 33 0a5566bf-371f-347c-b96a-8bdad96828fd 34 d61b6ef4-07ad-15de-bebe-533b7ed33822 35 6d2be8e1-3924-4dee-954d-704493f4a25a 36 76d53116-33b9-3837-bf45-8512e873edc1 37 03f053ef-e213-5a71-a7e7-f9cb8c4b907a 38 4ba463db-fc9c-4a75-8af0-09b2e782a729 39 95d45c5b-7b5a-41c0-92af-d53b8f2ee9f7 40 c88b18cb-de16-3018-85b3-5c3f2f893a31 41 f2a5ffeb-f493-5550-b95b-29ac594e98d4 42 45cf6428-6f2b-6d5c-93cf-00b91779cf58 43 32ee0d1a-e55c-431e-ad70-74b9b0bebf03 44 e773dced-888b-6f43-8505-8eab9038aa23 45 3c1594ff-f31b-4469-ae24-6b84748753de 46 f9961180-69ae-158a-9ee6-1d810ec73474 47 67ffa7c3-535c-0dfc-8247-9bf9304009d4 48 f9db9701-d860-1643-8064-ca1e6f805c04
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
047402355414726130116558640448653143544356464101. Exactly this sequence comes out ofnew Random(684).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 114 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.