201209231458 10cou6
explained decrypted filler
3DES(name+title) ECB, 45 GUIDs, seed 910
From the post to its content
As posted (encrypted)
6746E9041F67D714 E978EF5B538C550A DE6114F8C7518CAB 24F0B1641ACAFE14 8C1BFA575700F137 54F8956DEFE67AF0 7AAC4B388C5BAC1C B1F441DA74E56B82 9E27A2114F72DC56 B7FBA3A5989077BA 1529BDB4B7486516 734FAB93F4821A3D 281AFE593758E7F0 06AEA5D753D4F937 0CB1E33B7F5BC57D 8D79E02BFE2C293A DADA42E9AF7C6115 EC0848FE47F40673 4CAFB99EED8AC10C 9F0889B65FD1758A A5258CD456036422 39EF1A9C623744F2 EFB1D7E630FA347F 932FD70680CE5F77 EBE54475D2C57F67 6FD5D2C8E682F017 D1D09674DA6A5951 8C75331F3BB5395F EC7B8FAE7741FBC7 91447EAB293519D1 26BB7B1D4A65C3FC D1F8E5E93BAC9ACA 6C9EA48C0F7350B0 E9127DB35DB541B5 7152AB6262D94B0D 6B3065BA9B025612 606F85A3BE289DF1 51E0ADC9537FF0A1 703749269E54AAF2 FD16732ECF9DE0AB B40C34C6A02BE8A1 A35FB7DF31B6992F 7E2B1F0CB80F1EFB AAB017C30FAB1D22 2643E56183B55650 9DE8C11E5C3E219D 478F97A294C3D859 D7CFFD173976F3B1 B2A072F28101C61D 47BA351B44A5D1D9 41E700C14E0FF91D 2A6E7FC142EAC074 8E6F3FAFE078AEC4 C76E342FF64A79D5 455A811C6084B7D6 B3EAC4F6151F36F8 BE3D2C95AE6A30D6 D8339DB010650F4F C31A6D65DE3260D7 4AF6C76A621A8261 EBB6CE7301C2E96A 0C967D5D98F7A7FB B1190180768B36E7 B154DD1C76E56730 631E5797FAF4F3F6 4104BB6E6F80E902 507A6F897286AE3E 42ADC898446D09B6 C54105D8B2D4D501 C18416AC0DBD91EA 600C86473BFC90FB DABF15711AB1E484 F782D1367642C45E FBECBDBA08A86AC3 4D85F1E3A5E5D00C CC4144AFFFFC378F 7E56511FD5F7A01C C01D791B38B03435 C1FAE170AD911C7D AA18F579B8FC1D18 A2E4EE5DA0FC3ADF 680309CF29E910FE 949A195E8904B670 445355E9FE242049 A4BF38F3DF742904 D2C0D2316AAAF105 DF27E8DF0E4122B1 6C77A617C089616C E5D67433595A50DF 83AE617E733B793D AFB4EABA64B52EFA B3B2487CE58CAF77 403A404328E22765 8FB402E8534836B3 1FEBB6809B571306 F8A91ED0BC5DEFA6 D361AEDB488D3276 45D568A6F50773BD DF47DAA721E54B55 203A44A519BEC840 022011CBCE45AC84 AC2646A3ABE8AB42 2391444707DC8C22 0B49C8BC369C8C88 6B39330671573DF0 13B43E9BB1BEDD4D 6922E0BD48F96091 EF7FC1C9F9BC9FBF 4B7D7CCB2CC6DB31 41AC340C63B9780D DF248976B382B3B6 5EE317EB5B688EB1 65AC17DAF2E4A7B0 49257DB127C35FDB 78F86A9C9B15B242 3958144AB1C700ED D368E36D43310FFE A5D9A31ED039F890 8EFE18808676C074 2DCD8B061F11559A 0D4BC179C47C1ED4 88ECE72180ED2E14 AB4793D52805A4E7 A5EDBEDEA7D897D8 FBAC8BA0AC0E1E19 7F8430C37F3436A1 34367D7CA5C65055 4071FFCCA1141952 C2492285BFA1EA05 38700CF804A35CFA 85A386CE67B0DCBB AD9EB48B82FBE8AD 5B9FACBBFA4B9CFD A9129C8C04318563 68B162F236D9F347 8F7DCAA3107CA95A 592595BEECAD30C1 D83E3E64F3FC78DD E928E6300E7A52BF EAC8490F0ABC0418 1326C616C2C4E8DE 3AF4DE60968FAD16 03ACA053162E9F3F 070E37E6F5CA8EBC 67B5E87BC256645A 51B388A502F49F11 CEEF71FEFC0E968D E7140F1D235BCF04 E44669807297B91D E6BE70CCD1ABC9D4 7ECE9E64F5A9E392 B944AB5316746C64 A6471F889738E284 050545D2B213545C 7B8984C68F7B0E96 5AE6333A57F15EA7 DE4BBA3374412676 3A461E0A07BC3851 92B5A7E38B505D6C 28F1F8CF1C2989B2 EC450755B5314857 1946EF1BC70404E6 0466403C41AC7149 67F5FD5020354B3C 28AE22941C79B207 29A0F6EFDE298A70 10329F00EC4F6677 7F813058539FFD5B EFFAC76F9C2236CF 9AB99BD4F2E5F6DE 49F96D9D7519A392 E32E0B17AD72348C 726B3EC01F0C3191 B9475CC7C73CB545 6F00151F405A2D50 2B0BF1E4B9CAA7C8 8A9A8D1C6CC0E4B6 C0B37CF32B078714 6FA3C55E9ECBD351 54B620180A3C692D FB3AF19EEC5DE63F
- Read the ciphertext. Strip whitespace: 2,896 hex characters = 1,448 bytes = 181 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209231458(name+title). Key = MD5(password) =acba23166659c07b2b06e9a699a08a04, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 45 GUIDs as hex (shown below).
Decrypted: GUID list
1 727a2ed8-f2e9-1c3a-b27f-c799ef9192a8 2 dcbccbfb-9795-76d6-a5b5-997106565cab 3 facba33e-1f00-78ea-978b-4ab229cdb958 4 bfda6da6-fef9-77e2-ba5d-ece495e4185c 5 bc6ee631-05bb-0d9d-8898-ec65224331c0 6 c2848ac3-0548-7dd9-9db1-d09d737a3f03 7 10c5f32c-ac33-5045-a75a-f3b4588f2c0a 8 ff6f3805-ba00-82e8-858a-bc17200196f4 9 8d677e44-0588-5888-a3cb-5e6b9949e705 10 1b9bce91-5232-7e47-a58d-45a8f9f37a61 11 6b1efee5-a746-6bf2-a84f-24525fd5dcd4 12 db73df3a-f54c-8d5f-8bfd-f71133f386bf 13 87b42dd1-de1c-1715-90ed-88c51554c99f 14 9a861f0e-1a0e-838f-bc6d-bffc14c6f4eb 15 1a519287-dc83-87ee-b7cd-42a04e429dd3 16 243e56d0-ebcf-3d56-92f3-3e8ea59c3130 17 8da2cbda-c307-3ef0-a66b-791ccf3cde5b 18 4fc89d09-4cff-1933-9da3-b6142c9a2eb8 19 717cc065-905a-2a5b-85ea-ee58fa40922e 20 461d971e-5a05-6794-ac63-72ca1c98ab5c 21 72a70f1c-691c-61e0-9ed4-d807ff79c997 22 b0d11ff6-dc09-0e0e-b47d-d41b2955fa1c 23 bd37397a-736f-7a7d-96e4-af8edee2f141 24 fdfee943-862c-8328-bce2-7b3e78593738 25 43b13d60-a8ed-7fcb-b26c-6d37b1a01ab8 26 aa666c75-c0f4-7b9b-bd53-ab6ddaf5284a 27 e10a636f-411a-294b-8cc2-47fd63686bf0 28 73312a9b-7d07-4c08-990b-424de4eae640 29 821ab803-8f6d-8a21-a6c3-793bd25036c1 30 abdce34b-fb8b-8d1c-80f8-6d2ee870ccfd 31 cfd3a541-f0ed-10e8-9da2-d406d79e5224 32 382a955d-6d5e-1fe3-9768-7d9d82056c70 33 32abefb5-5c32-2881-9d5d-9fcf12550378 34 6d44d9b2-332d-7b2d-969a-fde65cfb187d 35 99f06ee8-51bb-32a5-8349-c183e249a21e 36 c7a34801-ebba-1f59-8c62-733502af293a 37 d97b2777-e2fd-7021-81b3-a71254707bb0 38 f0c93a4f-b056-4b02-9165-7805e1d70cc7 39 5f79a520-904e-1800-92ad-b59ca40188ff 40 d65e1591-f8f4-54ea-b839-d6c72b40af29 41 46a3b8dd-fcc5-0f7b-8f27-c9c463e58727 42 3ad57fd6-df25-4943-8112-69dc2cf1d66d 43 87563cfe-3d30-64c4-a598-c59ef031a3d9 44 b7e42e38-4d49-29ea-a733-c6d7d7cee3f4 45 9ad7f206-95d2-6f8e-a68e-8248f7f65999
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
177707585768188331266078772488112731741504626. Exactly this sequence comes out ofnew Random(910).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 135 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 45; the post has N = 45 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.