201209241216 10dibw
explained decrypted filler
3DES(name+title) ECB, 47 GUIDs, seed 791
From the post to its content
As posted (encrypted)
741F062C7371100C 2DCAB5557BEA45EB 7E2A9735F719E35C E926ED20B187EAF9 191DA93DA6371C1E 8B9887E5A065841E 1E1A421A2BBC8938 B0551241DA8AE99F BE6D80D161696C87 AE292C74B8AF6E4C B2E15EF699AE1381 71F34D3D4820A244 96ABDF35CF70E899 C083628058BB4350 B3883FBBE64A682D D55E959581D6F7D0 FBC94BFEB7E8D15E EDEB8D13716E786B 33DAAE5F927B8F77 263EEE6ACEEC7623 FD378BC58ABE9819 87B097B84F8CDAC3 6A7C0EE573BC294E F868D30E028593E3 63779158BC0344A2 DFBD508A59C060C8 9CF48868ED44865C 532B757CA00ADE5E AFAE28A0715B23C7 E74038586265D9F0 9FE87573FE2DDB62 3E7BD020E7CFDE71 D5E05C652391ACF2 DDAF1DA392161755 A5C555ACF4EA3E38 9BE95305650A76CF 9161E84CC87B83B0 1DCEDE1BAB7E2CF8 E787A47B65A5CE4C 61E65B10044C0F63 D7B77593748193A7 2AFCA357E2FDCFF9 B2317AE2D2070C70 71056F3F46B33F49 37D8FCF02A37E100 A55DA43AA6F7D4DA 5C6BF3ACA7B80E8E 3617DC5B4D418C0A E4DBF30CB55682BD 3F4F0920026A8740 55013E0A1C5AFC9C 37F6B2CC90AADA31 EB9B4B6B652FC857 43C6BC662D0AA67E 5CD9DB7D377E1C04 A82E1ACD02662FC1 5FB15AEE0952D972 F47A498749352534 4BB94B3DAA86A6DC 05BC567A3D277D5B 39EAD7798B6EEA25 C53026119E9AEA67 8CA16074FFDC2796 9E1F2F62D8BEECB0 03242D20E4EED5CB 872D9529AE9C4810 A041B76B16D1E266 15AD9E8641451877 9569F123D27576F0 E5FFAF9AB53AE9AA 69EDFF30236A49BB F7E87ECA63926E77 4F7A69F90CC1B338 0662B1497B1D470E EDEC38870C92D697 F1EF7F8C2C72A555 C7ABE3D30E707C23 F02722FC6B26DE86 89D99ADCCE1BFD00 0404D3B9219D22C9 59652BCDF5D3E37A A143D817B252AF06 BF0044F1CEC5FE19 E8F3EAE52647332A 168D571D623E96FB 3B9FB0532EB5DB42 D1DC696DB4F12FAB B09103346C689609 66F23EB4C771D16E 498C2FA56182A604 EF63A07E039A5111 184610BAF45342B3 4C2B3695C9BD3C57 D78BE6C13F4EBDCD B474E930EE66DE2F B9B4C78F6161EC43 7D2665C6270B86C7 06F1ABD2626F7087 898A943E01C7BB69 B47B0D8E401C5701 BBB6EA6837616371 6E814829938B8639 CE41E57A5E866C62 33DBE8867111B4CA 27F31947B4251A19 587A007D9AEFE778 0CD2AEAA1C81B816 4059C0ADDC1EB619 9CFE90A3843DC626 318D761DDFF49D26 6DC8E42FBC1E7B0A E1842E2C1E9052BD E4E4A192F32EF710 9BF2831A33E69DF9 5804B98223E6422B 3ACAC9B7FA71A0BB D38FCE1F482EDE8E A8937833157AC91B 471D8AA83EC0E563 B67E04ACE1E28B31 BB8A29B5A40FE1E7 6EB7E7D9957856B4 206398224FBAF64D 91E25DAE38B62606 DA517A915E759741 FEB6976069F44B61 1633403F644E98E8 B42A2A20E08646B0 203D582EC94D54FD BF432F56C51D3717 F059C7E9666A6D31 A53228BB60ED2C50 83B14B34390DC7D7 9A1F1986BC5C9FB4 DCDFB02A62DA9937 29F90521B2066778 421E4071BBCCDFDC 2A2A25E02919BD56 D887ECB4F2D83F3C E6F62C56C1AF9903 924386B84B93517F 61EB430F0E5AE09B A111B978A4713AE2 A01B4C953E93B620 B1C9B666902E72BE A83FD4D8BD7D967E 289842209628206F 9F2E483B5CE6BB6A 6A1B1DD8613EEDD9 6926ED0192CCCF94 FD7D5FCAC5816C17 FCF94FEE331B2A09 DCD963244B848A5B D03E000D9F5C55E2 E8006F572459490B 6C956CA276CDB02A CB363101018411D0 16B239F7B87B0E20 7145F356D79AEDCB D908A97FE7C85CB2 C5469F2447D75B9B 6C29EEB3620E9205 54E3953A2571657C 0D0FDE9114A47D5A B7FDF499059BBAE8 E0EDD2276A550E75 41FC66A04F5DAF13 53CD31EDDB79D25B 37420A042D190FF7 59CA170D4F5F06B3 448A6391268C6C3B AE271869A8B910CC 4C343EBA9C10F1C2 BB46991AEC440CEF 6227563616295927 2FE2053942DE0A0A 84F4952A8F731A7A B162037B25CCC1A7 235627E3349FC573 EE4B2897F4896C9A A709BAAD232AFAF2 BA439A8E1D49FC12 EBFB3E7A151306A8 D7BC806ED46FE815 5983833DC209C044 4D7488F7695EDBAF 99922B4EA67F2907 A25C9EB4E871B4E4 5E565D6AD407EB3B
- Read the ciphertext. Strip whitespace: 3,024 hex characters = 1,512 bytes = 189 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209241216(name+title). Key = MD5(password) =a70b576d9bf47065dec5aa798e238193, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 47 GUIDs as hex (shown below).
Decrypted: GUID list
1 11097c80-b906-8c66-b9b7-cdfed9d66bee 2 e7e4a391-1232-893c-ab29-a1f5ae433d73 3 6d88d418-c3b3-659d-bbb3-971b5bc422fc 4 70f85e71-1a29-3348-89ec-85fcffb6be4b 5 9f0bef8e-dbdf-2e66-a47e-0fa36bf82c6c 6 01a066bc-6b4a-7d49-80c9-fa68b9c91ba7 7 5bbfffdb-4c97-2b3b-b519-f0e654305673 8 31f86042-1f00-2e2f-a833-9eb192eeee78 9 3f2dd9c3-5178-7ac5-95a9-69a62bde7753 10 b62a685f-bc89-87ea-9dde-4e10d85b842b 11 18e3b47d-f2ef-007e-a3a4-00a7f95c7692 12 e7a00515-f4ba-0e4d-8dd6-aaeace82278e 13 d7599b92-01d7-3076-b181-06a5baabd7e2 14 cf93ee2e-08c0-8480-85f1-882578b9007a 15 9896b0bb-3adc-5641-a1d8-d76a34d53e76 16 9b69d169-c602-00ae-b1ab-07d15ef43dcc 17 da088b75-eeae-3b01-ae44-7373cb7343d6 18 d6f7ad5f-5640-3793-aa21-9de59fd2c27b 19 45df631a-084c-0320-944c-096578a516fb 20 9a1551d8-9074-5638-8227-6dd4ad96650a 21 3edb0cc5-6381-872a-b772-be91fc80a28f 22 6b085054-ee27-8331-81d5-4a274c2107f2 23 e46a61ff-c3c1-6252-aafa-2ecc69709593 24 5096ca73-b136-3e01-9613-fe5d95002a94 25 1ec154d0-6cb5-2d26-ab61-e2e71a38b8e6 26 0810660b-8368-2c7c-ad95-32697e6c19ab 27 6f226abe-a11c-00ab-8568-f1ff40b378f1 28 753c16a6-341c-7fe6-93f4-24d0f2c14d31 29 60f7f8bb-3f92-08e6-b00d-71c959c51e95 30 2be9677c-217d-1616-b360-da5f5c229b3d 31 8a5f3c27-b1a0-1667-87cf-086f99c864e6 32 e88b64c8-18a8-7812-8e03-8e4a9ee6978f 33 7c5f6326-d13f-3c53-b816-56b92d85c341 34 32d18056-bdde-72b8-a78a-616ade595d7b 35 e6d03992-ec98-702a-913c-73c15bfc8c2c 36 015604fa-6587-063b-bec6-939ce3bd860c 37 59b522fb-6c10-2add-9089-4b7015919cbe 38 a1c2245c-697f-4db5-9363-5a5b056b7558 39 6c6270e0-15d0-7a56-a399-87ac65d78912 40 f90bef6b-cd13-048d-b6cc-f4e133dfa277 41 0a647b21-7b27-6eec-9eea-a7c4e4f5697d 42 6fbe540a-365c-452a-a5df-abc379f0adec 43 0cb4b2fa-db0f-6e26-b870-6926d8871543 44 74e0c914-a632-7262-b08a-14e9d8700c09 45 6823879d-d20f-813b-a25a-1e45ff566a69 46 4e755e5b-794c-3be3-8f99-7905d7044207 47 25a9f1cb-39ec-4a31-b53f-44799081acc2
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
88632722780038503305886322070117377024706467834. Exactly this sequence comes out ofnew Random(791).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 152 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 47; the post has N = 47 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.