201209231444 10co24
explained decrypted filler
3DES(name+title) ECB, 57 GUIDs, seed 3
From the post to its content
As posted (encrypted)
A1BA2A2FD76E23DE 776411DB3CF1DF98 8D6D70DC85D2F20B 9ACF691287F13D87 F7B12750EC0CED6C 4A9AA860292DE331 6094E46E5D61C08B E3D450AFAE43120B 06A0564195F7981B 716D0C58C72DACBA 9DAEC73DB52140AF 9B686E06EC14376D 4828AE19723A8D8C 81223D7473B1BCB0 83F5A0A4C0426FCB 45335712F261D786 40AC61CF629B36A9 962681ADA00A73E7 339BB40F78887729 558FD719F9220B3D F842BB9C20CA0D64 EB06C9B551EB3A3E 715C95487A0D00B6 6CEE6646D0887BB3 5193D3FD913296A4 B9A8F384921E4E71 748DA9D68CF2F674 BA3F7010306001A3 0AED2C0180FA2AB8 11077362F30EEEE2 9A8A5BE6AB829DE6 FFF090503AA51566 C4940DD2E9291EE9 1593757EEFD1DB8B B526B6A279B268BC 279A287C64DB440D 538A91519C5859E7 AB2CF2B848F74B4C 2231D31C3B7998BB AC42955616FFE8AB 1BEE11A5E726D1BE 46084A500DDB4252 CB590E984D3A052E CA5E9CF7AAD27B50 035133E8CA5B7709 437540F7A8324A6B 98A2CEC0E68D52D9 474694E5F752FD2A C81738DF4C9A75D1 919BAAA249B32EF4 67A748FBA66D118B 8DBC942AE30640C1 F9EBB69FCA80540A 3F0CC647091FCC0F B1F454858C53FA61 D8E17BF2025C6E12 EB3E1324D48B8993 290A5B11746FE075 7FE089EDF239AF74 2EAD8F3108F538A4 C42E1932CD2ADCAE E41AE246E300283C 3E60D2421A29F6A5 DBFE367C37BBD7F8 8861D2838FC26A67 C71C412D6724BA3A CAE3312600DD72CE 4FA4B54A95CCA43A DA8920674D076927 5317A99C431E045D C0B855225ACB8F67 FB46CBA22583F0B6 ECDB59AE0090A297 869F67DCF5DFD755 A2E033770ABD8D07 B1BB41820BACF327 8066173EB453ECBB 17FFD969D8FC2C76 F5A1D9C2824C45DB 5B1DC1B9736B8131 FC901FDCE2D69ABF 902177101B422E5B 591420969DC3FC25 E7CB31F82064FCCF 6EE71B399E32C558 DB4FD5086CA1266E FFEC441C30F386A7 4E148A3998447FC6 059DCA16DBE5179E A6D784673C06EE68 7733F2B1CC97979A 08649450EF4D55D2 BFFE4921BBA191ED CC519BFA7D0E666C 0A7F015535207C4E 9DBEB63B87195CF5 887FFD7A31095A13 47528F0A3AB79E59 F87CA4669392E56E B9B617E27A50AED2 3179DB5531B45581 57FD214D60728315 CEBCA32F2C0F5452 F85B516D103B5895 DA20B2C5F0107864 E61D5B59C0D5A37F 9A3B14CEB45A5580 C6CC67C75732AB4E FF6EA89025B89A7D 291A325822A9AAF1 A10539D6FEB629B7 9B2D65C356BE08A8 890AF73F8A13E729 839D01FECC5CAF62 85A52BF910D5C360 78A0DD73A6D851CD D3F992DDE74D0641 7E3D85E8EBDA6582 955CEA3881B0AE9E AE37C82958580781 3AD0047CF7BC3C8B 04CD8D1559DF9EE9 BA7F7B28B38B2D5F 32250E9BBF8426A4 E95045CE694B2506 9D5C44A0D751EAEC 8F3479C87812D994 64A4A43C19DAD771 1E713E090B62C66F E20B71A77DA9FDBF B4DF9E6533BE9F76 A0B75408F5F72FCC 3FC0ABCF363AB9E5 46238ACDC9A85AEA 5F43192F344F52F0 063EE02EC3CAD481 1DFA3086C40B7FD7 8C33D9895A182B6F 3257D3913789313E 7FC90E94D8647C10 B5F7EEFA0F082CB4 59C47FF06D70B108 D808B8F6CD5F4E20 8AC6D909CCFF8BE8 387DBC2353CEE964 81D1E32F6240533C C416F10F0AED791D 9A18EF6477F3D68F A5C3402EEAD3008D 616AEC86C4B185BC A4A009C825896650 15F06AC1AC632C2E F7DC25F0987452B7 5895B08413FD71CC CC78037DD4AE4743 4ADA7D436AF57B52 5F263D39B80D3010 58DDE9A2B38209FA 6E664014831BE27B 4D1E4937AAC6AD04 EED5B955347EDA03 E49595F10A053C2F 997E533A0D962B81 4C5D5BA393D10F01 018F66AA0EEFFE2C 9614AAC2E5F435BE E15266A70E5635E1 0C5065C7151737C2 D0E770BE6C3F8C81 A3BBA4A0B4011DA6 3A426A39F302E9B1 A3FFAB6F0355E2C8 6B4FEBAC620C5ED0 4F190099528D354D 2CCC333DBD1D6163 894B79040D17DC08 F30AE5C11D67E0D7 A510CFC53100F48D EC959F06E2744DDB 26E3A1F727ABC9A1 96521E51DE1D3418 EEEF025ECC85E18F E58CA2F1C585D850 6C9BBF2531537C04 F21C46022002FF49 6F237EA1BE105532 A76E11E634BC4E00 79BA63B63F8B0F4A C96CB8A2AB1E40E2 9626DD0295A30F21 C848757984F51E0E 054A2870B045B949 8217ED175E39C1FC 9FD0032A6CB2F024 209863391F5F8977 4DBFDB40DC542641 77D007BC50F1A163 660618FBF2BFED03 03C3844BDA4F0398 690C10BD221C1B59 32E874ECF44F6D03 CFE51D6D75E727D8 D4D50337670BB520 DA0506EF8C98E4DA B3094D29CD2C6818 607F6DEDA5D0586B 3B6F45C859AF8768 B8EEFBD98B6DEECE 94CECA55D6ADAB4C 6A6D9BFC24D1B049 7A64516E86D2DB6E B21F877032D32E80 7B8B0D8DC248C23A 80A6BCD24AD8D2F4 B840C5926DE85812 C3D77DEBEBAAF4AB AAE826E49CEC96AF 99C5DD4ED0122279 A9E96501771DE95E 8EBF303DF366A8EA D547C616BD76B367 E800E4BE338A83AA 7AA733E98665F76E 809E094C17F43C15 E972F4A551F8D448 FDB8925B36B5ABC4 E1C5E8F3D84658F5 BD20B4C2E3515203 A74D4B0065BEF9E4
- Read the ciphertext. Strip whitespace: 3,664 hex characters = 1,832 bytes = 229 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209231444(name+title). Key = MD5(password) =fcbd0df4f29c65e744fc5b54b9944846, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 57 GUIDs as hex (shown below).
Decrypted: GUID list
1 6c2cc271-1279-29e1-8510-64e71984aa55 2 678d6149-d739-69c3-94f0-eabd1e1675e2 3 75254599-e940-74f4-81f4-a1601b8d1beb 4 ba9bb8b3-067f-106d-8d14-abe1edd52766 5 c155e3cd-6af3-5a60-980d-d26fcc9483af 6 e5852807-3532-1ecb-a3fa-a646c31a0ad6 7 db6e8a11-cc0e-2208-876b-1cb666d66605 8 89f967a1-6acf-815d-8818-b07c9e37265c 9 17adb007-77bb-310f-a79f-527ac240551c 10 271fa12f-d1c1-3b0f-abc0-9dca293c7f2b 11 ffa41d9c-2101-4de8-b012-2a189b8aa4c2 12 0f6e3825-6dab-7668-b290-03ae9629cf35 13 0a642c60-20de-6361-8bf4-1259570ac3b5 14 f5a0010b-5a57-0a5f-896c-2541ef1b0831 15 484ad82a-6ef1-0f32-b98e-bf21a737d664 16 940360c0-b042-8c49-9e3d-36164ce92b2e 17 469b368c-8246-1eaf-8650-2aa8e157376a 18 5e68f1ca-8f49-70da-b266-93f2e6dea058 19 4cf4c5e5-9412-6f87-9bd1-b5a472fec1d6 20 a9f7dbb7-a7e8-4b94-acd1-07b520e99ee8 21 c1b8fac5-dd04-12f2-add5-aa17f4612d10 22 587ed364-3ba5-5507-abe1-e0cf85e798a1 23 8f5d41ae-f550-431c-841c-4a4ab64b464c 24 4812e299-8983-0afc-8438-b4102427b75c 25 a74d2865-1f1c-8d09-a47c-09eb43d2282f 26 4151e34a-54cd-4d52-9bd9-c9a71993dbfb 27 4a2374b3-f887-46ba-a518-2cbb613df4a3 28 fa74327a-7248-44f5-8c26-2894a8f5384a 29 0d9fe6d6-9422-3673-94be-b3f817576679 30 0a62986e-63bc-48db-a24f-3d5005d7fb87 31 068d3b46-ffa5-2443-b1f1-4d3f407ab341 32 b1cf190f-d1ea-2620-b2d1-02c9a1d99ad6 33 ebe9b96c-3445-4a98-a7d4-756863ab83a2 34 6cc22f5b-1afd-0afe-b84e-b94e39938a06 35 78651d13-2fcc-64a7-8176-e415cfa77da3 36 28947e05-fb69-8abd-8a84-5a4b9f7abfee 37 5b427cc8-f9bd-4560-9f61-1979bdea27d0 38 66dcc27f-469f-3db3-afa0-fc1d18bf4867 39 d8579be0-a372-7470-869a-17329398a5b3 40 4b8f73a3-6c2f-5417-b539-736f67872766 41 4c58e729-8765-75fe-9551-eeb52b32e200 42 a0e7e6f9-6e4c-4d29-8460-abb917938279 43 fea69efc-bcfc-771a-8860-7ff83d46644c 44 5c53e95d-310d-5743-a86b-21c92d88a013 45 dc92bf4a-af60-439e-b7a0-e3c73406c0d0 46 d813e99c-0f40-38c2-b6f6-1c566710d3dc 47 ebba9069-021f-39d0-bc3b-3fea3a57cf37 48 b79e0ecc-4ff6-4883-9c1c-c6b450bc368d 49 c3035652-7bb6-326c-b8f2-240e780dd7be 50 d839cd5c-6486-52ac-991d-940b2ddf955b 51 59a1ad32-5920-6d41-8342-a982a6a398cc 52 55feb44d-2de2-0584-a399-7872d3b38e6f 53 944491b8-60c9-7612-8ad3-164cd313431d 54 95115c59-e12b-0881-817d-27dfbe825521 55 9ae583a5-00e8-7b75-a8dd-f56a1ee9e42a 56 da12b267-3d54-6df7-9b9c-86b3a157c9ff 57 08da599d-03ca-1e25-b4d5-0badda456bef
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
267151283347600817641540844434224068437574754334356070761. Exactly this sequence comes out ofnew Random(3).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 121 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 57; the post has N = 57 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.