201209241228 10dj0b
explained decrypted filler
3DES(name+title) ECB, 42 GUIDs, seed 30
From the post to its content
As posted (encrypted)
6F3EDCAE19B7DF40 1C2DAA22DFAAA60D 4EEFC3EA629299F1 3F47DAC8BF574D8E F44FA021A9D04376 934F33DDC5CA376B 334F09A92DCEBC08 1BF796442EB95352 57D8A13FF9D5A17D 13006F91AA53768F 0AC23E5E8862ECF7 BBB9EE54C8742DB5 3BE847AEB1A64411 11AD965E049FC0E6 CB02CF9D04472AD3 CAE0490F52103B97 E67CC422F0DE65A2 71F4800F5BD8E1B9 1639DE55788D0AF8 670AC028D6753DFD E5C3FAC5CDC6FEA1 56EE0B98C4ACB44A FB6DECB27F411921 7614AD340D0B86D2 8B49D6347446E51E CFF72A25DE1DFB19 E02D435A0F9C3E5B D3ECC19C261DFBFD B5333AD574D49CE5 E25BC3C9593B8C58 B62CE7247C85AE51 E61EEF2CD88D6EFF 405C5CC6988341D8 55DCA926856144FB 4BD9223F9C24683B 7717FB2E8D9EEF24 42E618A166EC827A BBE85FC53E20CECE 1B3C9EB2874A8365 FFA98FF8DE7B562D 6DAA53385D09650C 3A738A952CFE8F2D DAA45E3B87946776 2D2F1467DBFF6B89 9DCDBCA3FAE82E52 E01C79193AEFFB95 545C83AAF0CB02CF E3275F1ECC5D978E C8E499EA7CC753A8 2BF8DFE532D929DE 254490120BB3641F 1F12B4F594472FC5 688EDC7DE924B6BD 866DB7A29AF763B6 724F70DD3F469F17 21730A1F1BF04010 A81197347D5D173A 33DE1709FA105F75 69CE5F63E40F03EA B5D82E754CCAD5AE 3AAFBE6EE8888A6D F21907802FBF465C A26F8B4629A068D6 4D537DA803C196BB AAB9C629D9CCD4DA 4A37BBFA72B0A5AA DB9BE2A7D356DD9B 66749577996DDECF EA06763D9CBEA4EA 37C8A18138535140 5A31A143BB62B0BE F1C333DAF5C6B798 96AC2B84483E7C2A A68C84006C689E0A C6E81AE24DA6E7A6 7F2DC90C0C00A32B 7BA007FADB7772C3 A31920B077D87E30 38482778D1B9F087 607B8BAD34D30B2E C038C021D8873661 0369E8E8EDB8484F FA68FC326B9E80BB 8F313604841316AB 3AB239CE27021525 007CB3C6635EC541 04A3E0675BA206C8 005A22446CE5B82C 83E60F0DD70D6C57 5C9D1357EAB2A3BF 2D871B9E384C5726 CE24D50E92D4D555 90BF9DB3A5D42C18 94F2B2ED5D267051 585088FBC36A48F2 61E5A205A629A358 1304D2589B9EA1EA DB0274D113BB79D9 A73A1EA1D163F78C C2B9530C9445E868 DF3B549671B11BE6 BB31269D8FFF36CC C8841352EA68DB50 35EF1075EE725D02 A2F81CF2311D2CCF EE5163A35D9A230E 9153523086345E40 D1A60B64EDCA62B8 635D0011C028F745 A6BE87B345AE9E84 17F44A6F214FAADA 622748083168C23F D46636EB24F2DE12 D9F57355B1B1B466 DB269560CE571DC3 1E4348870E07DD96 66D203EE02C2DE4C A915012CF773A60B 5A053E247FCB8925 0937A07355E35518 7E39A3D09EF50DCE 695654414219594E D6B7F48B7455CEAA 813631E31C22D3CE F679E1437828C6EC F7FBFDDE60521C00 CAD3449E43C33DAF ABF53A9B7F7F4104 6858642BE97DB4BD A690896A59A5A431 CB7DA9D6771D4876 356147BA6107B17F FA8F550B61786308 94E824EE8B35B09A 8DD552744E53C65E BC00FE4170D556E4 4865797D7BF2A7FE 0EC66A5473BB51DF FFBE61CAEAB942B2 0BAF66A6616A6360 D4BAB2E06FCABBE1 66EDCFF7DFF36681 61A7314028D1FFAD FDFA88EB191962F9 E13EC8EBABB7DC6C 5C7E8EDC5EEFBC66 AC123C234A3F43B2 B63F676BA3E236F6 60BC20E4AA254A73 B5ED3824D780D180 92228C5550A21FB5 234E3E1E1B82C5FA 121C7B524BC51B0C 6C6AB2C9D24ACC2E 40A99AF17A2D7267 37739494AD9F2804 5047D4CFA3C4617C B94A183FA6851FD5 0368C1FC149EE3C9 D7ED352F961FA00C 4D8F71947F2ED2D7 F528A105A71DE894 0CA77E17D550117C 82EC298617F5B0C7 6D630B7EDBC5BACC F52C6FDF968C0121 BF59D7BD8CBB7E00 4E3C3D5F6CDADFAB 7EEE33D491EC61EB
- Read the ciphertext. Strip whitespace: 2,704 hex characters = 1,352 bytes = 169 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209241228(name+title). Key = MD5(password) =729e8d20ad9ae78a54582082b41466d5, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 42 GUIDs as hex (shown below).
Decrypted: GUID list
1 98991974-e2ca-320a-b07c-be817d866a67 2 a6323955-eeba-541b-be4b-3392afc31e65 3 2637ea18-9116-60e5-90aa-35c245385ab2 4 e49744a2-f8de-8f12-b613-aee0db13ec0d 5 f13cdf59-f3b3-6b58-9c26-2eec2bfc751d 6 f6017125-6c70-6d9d-8e49-fb2362b11e09 7 55dae5dc-dd83-39c4-87e2-6c9e6124a38e 8 a663c09d-656c-49f7-bf2e-ec29b5dfb738 9 7bb2ce66-2c96-6c81-b2de-385a80d654b2 10 3e330db1-b210-330d-b70f-9014b31c9bf5 11 a22608f1-f97c-3c10-87e9-7802bfe4dca9 12 65321e98-b92e-7a1b-90d1-19e3f96cc89e 13 1b62e234-f6d0-2786-b75d-155b4058cc89 14 1cf90038-2bb2-0c1f-abd0-d0b8130d87e1 15 71f3bf2d-c130-8468-b2dc-b8fd7769ec46 16 605cdad0-b601-6a1c-a5a8-d471da738809 17 35d9673b-0b06-4f8a-b4e7-f3e420406fcb 18 ea1865b3-4c09-5718-92e0-c7b65435a1c1 19 18a5b062-84bf-48cc-a2a4-647152e74f37 20 88665287-9c95-894f-a7cc-1e8af30f38bc 21 cdf53a91-bbc8-7947-9a27-73e62119ec63 22 a3a8aeb3-04c3-13a5-92a8-7d05ff76918c 23 9e8fac77-6798-02e7-abf8-e08a5cc55c5b 24 b0031ede-614f-4a82-944b-fb8605b7b23a 25 80c7d5fe-6670-554b-beea-cd2950530eec 26 0b181a5b-3804-7d7b-8c37-e5b3888b68ee 27 6a3bcfce-67ba-613e-8704-b6c1e664c751 28 81c7685e-6291-2057-903b-da0b3b352e3b 29 27668248-d267-782c-8c58-a02085b377e5 30 af918ef1-edf4-238d-b999-2b14f87bec20 31 88457efb-6e8f-22d6-938d-3471d3582096 32 bcbc57f1-eee3-387e-956a-6b0811edccbf 33 4a6fbb49-f84f-3543-a126-419c943beea0 34 cb08a2f5-1350-6c94-be47-04de657b86fe 35 8663838d-77b0-1a61-835d-397107ad2c03 36 19799eef-e1b7-04d9-ba71-967908c3ce5d 37 1752fa57-4585-738d-b101-28f2870de1a0 38 78acc28c-76d3-7446-8b89-958b9793052b 39 80791e6c-b26e-4177-b652-b861fb9e68e0 40 a4bcb02c-7443-81f3-b806-7eb430da6a31 41 ef8d49ce-e444-4b10-a1dc-e4abf8f40ce1 42 cbf11794-c371-0ebf-a6b8-156c451aa6d4
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
356866346337208645487104576272233610774840. Exactly this sequence comes out ofnew Random(30).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 164 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 42; the post has N = 42 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.