201209241226 10diwn
explained decrypted filler
3DES(name+title) ECB, 44 GUIDs, seed 16
From the post to its content
As posted (encrypted)
7CB7668668385D83 03BE2005467B66B5 CE2CD31385BDA1F5 58F8A0F151E69535 355018C555A0189D A699B4CA241F1039 AC0555F51ECC5E84 3BF7A94DCF5411E5 EF33FAC5084A01D6 BAE1E9B197369D1F 8739FC1068148BD0 080358B18B8C7F57 570B2FEDE2057DF4 7B27A5808E1CB919 1F558D667FC2B8C2 FDFAB8676E9F0408 84B8E6A9E286B15A 0DC0A5AF5C6F7709 7F77D289E2B3F299 6AB177E2E825FB98 9FA77D7C3915205D B54B84449E116401 36B940DE8261219A 5913A6B89B7DD931 0AE8A21A1F6CF518 563288ACEC779918 E6B9F889B9E3F2C8 8D207E9EE7BF8503 4ED771F10D8C3E21 912187BBDE619665 63FD0C5F7090BCD5 428BFA22E7871F99 50ED4427AA672DEC 033B2C893C3704DC CCCE0ECCA538F0A9 997882CEC9880D02 E4BC9DC6786B3253 46B28B7FBC9C2282 08A991A7C69A757A 68D86034BC7DAD51 06A9210EAE38EB45 26F79A941746E1E3 47894FB086B8ECC3 75FFA2B20AFE80CC 8246B299734B2BD3 A8C6665B3DE66246 DC1D7E9A5B0D3325 CF6717EA6587D553 4C16D408BA7B7DDE ABC5FD38818021D7 C9A3600F56EB4418 E84A1413CA7FE168 5EEAEF46F3D57BFB F5CBDCE6AB29F170 52B7295D08B8950D 774FDC6D0F0DE500 AADE2C92A62E274D 3B077E71F35B62DB AD6BCAD4FF2CEF97 A967A3BF1CD954FF 587B7C444FF3F77C 0B0081F946E486D1 495A4A73339117A2 E7703EFC52191F1D 1881674016C03D26 9762E5FC2756F8E4 9C7505F0FB068354 420D266505D859C5 4B9C4D99FAB94409 46ADC0CE0A57581F F035F26055F0E59C DD9856B60E392D82 1BC931AECE909C44 8B99EC08591328E7 FBD53D028397CD13 CB9CFF3BAE7462EC C1CC2B391E803E09 CEA4DDAD23291104 65FDF379382B3EA7 9F67D0D068A1B894 EBF921FD7C5D87F3 19A47198B932310C BCC74E6DBF1A9893 0135D9D42EC3F866 2DAA16B4C74D72D0 2F8234729E0E49A6 7502A933B95DEE72 7A122F4CD94049D6 BD25889FEEF5168C 6A2F6397A0D5A6BB C33AFF75BD3ADAFE 7CFEA29A5ACC3289 92FF489F53CCE0A9 932F1BDE23240E59 906786CCA06A8706 36D46CED2E8BBBDE 942383BB510E61F1 A5CE9E4A355B150D FE84E9D908C062A9 2D31A4D9A7453D69 1977691636F12275 84B08C15D307600C 990101393CBD3695 C00C7D9C5C267E85 CD2E837E3804FA2C FE96A1EF196525BF 6264DEDF2CD516C9 3A7B229186F06218 1054276D87937234 30E9699257235155 417DB4CFD73E3E46 07B3BD58B15EEB50 515D58820BE93793 C0669A894E2E3050 11C742BB12A9796A D71025983CDC6D79 E4E863490A33F773 6CBB2FA5A0A327C5 765C7689B6F66ACE 210A4B55E7E7A649 CE931FE20C7007ED F08099E596C604EC 60B7B82FF0C1D8F6 898EF47492338310 97D71471650F6956 886116454A77CFF0 CF632774412FF9B3 C7FCE5716FB160F5 67D8DA785A5D3E5D 4C2DE6FC0102A3CA 0C7F4FE87C5E7048 1C7423AAB2139C1F C3F2EF2735483938 3E839B007AA8BABE 74679FEFFD3EC0B0 D56087A6993040F8 0726240F045CD0BB 42B5A4A88FA8130A 25EF82ACA82B339E F5C257A10C7E7BD4 9885BF0A3E0FA08C 319CD32D28BA7B2D A8BF17EA71309A27 8716BE2D484D616C 1B164103C1C865B1 9DBC69C8D8DE011D C170897DD48A832B 6C26E1589AC8FED2 A01E91DBE40754F7 F6C1F9C5B02F962D 53CFDCD2C50FBC68 B5D98AF82F25D206 C74F5AB00F1FBF24 6CA2429592B649E0 F2E7BCB40CE2B511 CEB04946C7CA2C6C 3D70EDD745254A5D 5E0606592C40160D CA9C791C90B9D256 FCB8C18ABDA235FA 827CDDEDF44CEDB3 EA6C2094CBEF9D13 240813826D6007B2 CAF526CA9723D1ED D25D4BC1E2F4E6A6 CADBC4A23D559F52 451D2C158FFF936F 760E5596CAF0B6DE 368A2BE81C6E3107 38931DCE27341242 FA9792FB198353B4 9BEC91FA406CFD7B 60261CDDE5690649 763925F81533AA95 9250A64C50BC491F 6E911648F1548B86 167DBE90237F206B
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209241226(name+title). Key = MD5(password) =df8bba4cc5585c9aa725e6be920be0f1, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 7445d662-89ad-0f2c-96ab-6c3fa5c37084 2 416bdf4a-e634-438b-97bd-01b8acc43544 3 702aec1a-f614-8a4a-aeab-538c8a6a2dea 4 8b3fe6d9-cda3-809e-95bf-b94e9f54f886 5 284571af-f114-3b36-bc69-17ef6977b6c3 6 5b5661c3-4b3b-4e7e-8174-e7cbae2b5071 7 d8125ac0-0bcd-0045-ad1b-490ed3adc762 8 ef62bea5-8bb3-491d-a133-b0fc3f13a046 9 b1b00f24-932a-8e1f-9aea-b5fab30cd925 10 31d711d9-7d8b-19a5-b529-4a9091105345 11 fe7f10ab-b290-09df-a555-9a4598a94485 12 04d8ae05-ef54-84f6-99bf-68307b3134c9 13 d752afac-c64f-51a7-8257-25bdc9dce800 14 8f57bdb9-8b1d-78d2-a10b-5948f99c0f4a 15 d6b40a68-f2ba-1551-93f6-1fe8cb5d4bf3 16 95f624f2-4f1d-0e85-89cc-31e24115007d 17 232a0858-b443-5aa6-b750-d4afafc31173 18 0f0625c3-2ae3-8dac-962b-2f002436f586 19 0d568a7a-c872-0e9c-8ee8-3dd4753be8db 20 7c5139e4-3e06-4f4a-b26f-42658a2b4beb 21 2acb76a1-3ae3-8b0b-8cc9-43c8d33d76a1 22 7affc736-3518-6005-964d-0373b68230aa 23 5bff9e49-9ff6-6180-a22b-c152026d24a7 24 a2ac3639-1d94-5583-9500-36c0ec82f629 25 61b051e9-5ceb-287f-b17f-4b3f5c16be3c 26 1968ba35-e9c4-7e1e-ab43-9c9e5f96a515 27 0a5a6d27-e7c5-63d5-86c4-27b65ef418a0 28 63c376c9-f80c-5969-ad98-8cfb443f92ae 29 82021551-cf5a-8dcb-a37f-07f12f6365a3 30 08346d9c-92ef-8d87-b195-84f8c74aa8a8 31 6ca5b6e7-dcb9-0539-b5e9-df6832b0a6d6 32 386cd16f-260d-65de-ae6a-d947a17cd2ee 33 6363b27c-f477-6bc0-8291-8f58418e9635 34 4fe77879-bc76-3b4f-9c5a-d3ba3f3c1820 35 94f39b7a-1e40-28cf-bf43-fdb9ddfaf5a2 36 148a720c-9806-457e-ab03-232fbbb9987f 37 1af0dffa-0838-2bf4-b61b-0424d882d3ca 38 02559a23-98c6-28a2-82a2-a0c391277e78 39 4d7b3aec-312d-0baf-8ec2-65a3ae72fb8a 40 53ffe2bf-d715-0f58-8677-34efa7befd53 41 e2e9708e-f0ec-734d-bbb7-2620d6ff18b6 42 fef4219e-015f-19ce-923f-1b81dd129fad 43 7683a85d-5aed-2674-a179-def4384b5fd8 44 d73af3af-827c-03a5-9271-6a66a2f92b57
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
04883404810857105804866527658806632422007120. Exactly this sequence comes out ofnew Random(16).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 162 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.