201209241251 10dkcd
explained decrypted filler
3DES(name+title) ECB, 51 GUIDs, seed 134
From the post to its content
As posted (encrypted)
C1E9276F597F58D8 7BB19C85F3A8EA9D A61A6C5F20291C38 0F83867ADAA16612 539447DE97583495 90BD572ADAC83392 D91780147466D5D4 71AC584388897C8E 04AF927B6A3F22C8 E49CCE4620234196 0C412CE529EA14DD 136CD965768D2791 5F81C39B9FBC42BE 20C788389B202DA3 BD5B7F0492C89289 FB75A6079A4764D4 B1928F3B6C9E8D47 9B247EFF9C755991 CBFE19522847DF69 CBF0C48ED0362ACB 89A204BE1F61A96D 1E03F1866168E22E 5E1EC421664C83EF 62BB7DCB4F591FF2 8400F46293A0A1BE 93183B94CB44C39C 08F2416E9754D872 91516390200BABA8 DC213A5C76A78C59 1E7FB57C80BC2B2E 6239BB0F783CD15D E5A95226A778E631 B049F295A7C5EA45 9CE278264A629FB9 AE6949E1316B39AB CAFCA33EDFEAA61F A1910D0E0CAA614B 1EB53784DAD7BC96 366002DE09DB7990 B267C2B411FE0D7B F502E591F8394A5C FD35B551A6715A2A 1C56C3458850E1E7 F192E1880341676F 901AA0A5D55B2689 FFCF74F24C778E7A 913EBB583E946099 4EFBEC6B432E185F 98199C387D6E4EEC CACBEC1D69AF3277 B8C33B9D4EE001AE 5AF0D5DB3A0218A2 A4415417255089D3 BD56C6758817EA31 02A2ED7D99C856F2 8DF7551A494D416B DD646FCDDBECADBB 17FF4E409CE16EFB 652AF6D4A744BFC4 8988B23F45A7F196 44155FF3DF5413CC 69E8897973922DCE 7A6590D272A305A2 932EAB4FC95FF00D 235DD0110439095C 37C5FA581AF75D93 89804E17CDA91C74 090C8B52A13C8673 55A2080AC10DC754 1EBF213831292365 16CB4F0BB6C014AA 8D8D555919A9CD5F 97C948CF67B062CB 9B816085067BAC74 F5AC06D3210D3171 9773491A429E8C92 3F1042F23A5F848D D68E5F1817383AEE A9F7566E0FCF810D 905177EB9E09FBA0 6961D03A45266313 F32B595E13AC5CB2 2FAE8BFC4C672F1E 597C9B25CFAF88AA 303F77E7448B318D D3195FFC635BBF8E 30CA35F83B7AC259 D3793DE34270A3F2 D77315F3665B29A9 3283F5515B862D8B 4C1AE31C26CA1575 A81DB3AC6537AC3E 244B20F8CE31CABA 573720FE12D8915E ED727560AD21F8F0 642785DF3979838E 4C134D0090413A5D 78610007E6D0C6D8 351E1554329A179D 4DD014DCA6B000CA 6C9468C020EB6A9C 9249DC4A50333762 734CAD0D85F65474 BA2A78146E3254B9 319131A4A61B5E5C 22C1449E84AC2D86 A8E93C6598649238 493EE67AC5C2EF54 6900C8A6B9147214 209792E4E3D0A57F BA90EC4B3650CA8F 042C54B765044530 0F233FEFAFDA9E2F 5B6476E684EDD318 E2600181F4BF1BA5 3D9D878AE2CB765A 13012B470DE0E3BF 3D98F5A0FDD4D5DB CE63174F1C23BE94 601B4F0D2C1FBEF2 CF17F8452514AA5C 1A5F62422FDB2F7A 96F8C627B1A62927 FE110A5A9F3FEC91 F953F3413E089249 3F56661F5730E971 5870377222D897C5 14E3AE64DC5BBB09 6E056A7148C3A4A2 D771ED83D33E651D 56EADB9D369D8DB9 94B684BBD8FC5DDF 2579DD0AA148048B 87ECB1A623F7A3BB 79ABA4058C551158 7125FC7EFF8B8075 68AC31BA274B9A30 2052B73CF2244B05 C9FB8D06BEB8351F 222517A002DF476B 56358D9FDEA294FB 0F464A004E1B61AF B11063E7AAED948E 1DC4F6EA076F6288 E334E021811E519D 8B9838F743CD179A 11622DD445AD1E1C 0719E1A5B08078A1 D125B1D20179DFCE 9476C3F673B2A9A5 4281C902A1FE7DB2 1A9BDAFEE2FB92F8 4B46A0E5AE3C9046 F200930201D6A4FF FB17F560E977BD42 2AF7BF19E556C6FB D95C5382BBB0C39D E1F005911B984ECB 48AF419FD6CE7125 D7FF2624DA7D1FBD FD04827321179D84 DC3DF84461AB0CA6 840AE76F02278C50 0312060FF4E3360B C29E52182F18DB13 67F9587E4C830B6F 4598E1D248623ADC F3B614D4A3A19BC6 3E6F00670F8DEB11 3A908FF09B28DDD1 0959DDA6E686E11C A2A5222C34005685 93036807EFDE7574 8A4DC381ECBF4A19 D0D4F3DEC1DD3F1B 7C98FB04C987EC12 86646B2D570E93DC 5422C5443063B265 97B082490743CD85 DF0F2CEC4ADC9A9E B67A674A7BDFC5CC B7CEEA5B9ACFCE5B 003DEA88EDC70A91 3076BC2E3409E958 B3D759D0911D9544 6299E6906653ACD1 77E332A8CFCD2C4F 000F45D56C981C0D 9DAE131952F3AB69 8262F82FCD6F72AE C22A9E6026A07433 40C36139B38DCF10 25F8D080F481A100 A744F0A82D9ECEDB B458605097D9EFAD 0E96D1B8D90C41B7 0AFE05FEA8F63C13 4F4E208062357D44 377299CC7768B0A5 EB651EE8583811DB D78AFC8121236E11 718D14908C5388C0 CEC6B234FD03BFE4 5987189A61CF1CF5 099F5934220F5D6D
- Read the ciphertext. Strip whitespace: 3,280 hex characters = 1,640 bytes = 205 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209241251(name+title). Key = MD5(password) =d54b7f88bef0eb5e175402b2ae70e5e9, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 51 GUIDs as hex (shown below).
Decrypted: GUID list
1 b162c248-b4e7-66fb-acca-f1b85ff25eb4 2 baa6fd31-92cb-1b6f-aa27-1b04b3a3e215 3 8038a97c-3826-3111-b2cf-a1b2aab12db2 4 9e203c8d-d6fb-17b3-bdd5-5bd17c205afa 5 bae0e802-8a44-68dd-8a9b-3db48b4c970e 6 54e33109-53d3-50f0-9977-d8e4c404349a 7 e33ffd38-b6cd-8586-bcdc-0f8fa96a7247 8 a63efd47-3027-6e8c-be12-84acc9a45ef7 9 6319da1a-6c80-5736-a0d1-6c5b34243b95 10 ff76cbd0-7f72-695f-a975-0b6f1fc18cb8 11 f77c1298-ff9d-0ac4-9330-4a53caee6f26 12 d2a07b46-5c33-0821-8442-778631e3f1d3 13 307a4b14-35d8-6ce7-9a6a-9a4090954320 14 cda245c1-9da0-1e97-be7c-7db989941a01 15 c8ef429f-8866-7429-a0ea-63e5cc1a0113 16 2ebfc9b3-5ca7-6816-8ba5-c940f3507457 17 65c0beeb-3c4f-1c83-a800-e1236616ae49 18 beb3d7ca-a862-06d1-a8f1-18664f944b5b 19 e8e9e645-2a2f-2586-a4b8-35d816180785 20 a1d53016-02c4-1e4e-af26-24a54261f271 21 4080aae9-89f7-53ea-9307-08058838dd1a 22 a3ddf5e7-5d5e-6e1d-962a-d2eeb766b6c6 23 e69ead57-58a4-58d7-bc60-c975fe2f48ef 24 4edfe14e-d65d-7768-bb00-413ff0a6b56c 25 1a3c1935-2d44-7e11-9ddd-ea98d5cec573 26 fe02bc31-72bd-67cf-8fff-5a2f739ccbe0 27 1fa49b41-e19b-15a4-aa14-2b1badf10b40 28 d0b4ffc9-3dbe-6820-a64a-bdf011f0e08b 29 ff64db43-99b2-5207-ba55-efa9c1df2bdc 30 b636c216-4535-8044-a47c-3e265565f9dc 31 57015075-86f3-530a-96c8-e81570fb3759 32 5f0f438e-279d-6b00-a14e-446901cb2540 33 48861ce5-67e9-1d78-8265-91b6d356d288 34 83af9427-1a0d-35bc-9a64-99ffaf1eb389 35 9d179f38-9978-378d-9570-7e14d8c8355a 36 0f4b9174-3a78-5ea7-94bd-08314830c090 37 48548d01-50fd-08d1-8e7d-e4e236fe5a64 38 0b56475d-ea19-6218-b917-710c76ac9ef9 39 1a68b6ac-2f4d-27cc-bcd3-0228a2ea50f6 40 f76a1f83-0ac7-03a4-8f77-78e361564b40 41 729c5849-06a1-3a94-bcc3-4c89aea08b80 42 78be1e39-4b92-802b-8fb8-d847af05478b 43 7002d8a9-f567-7636-8f4c-7231fb637f94 44 a24446ca-ac41-3467-9023-8d827f1ad50c 45 26b82743-90e3-5ece-9f2c-7843fe785107 46 03fe9469-5959-7024-8343-3f0937a547f6 47 adf4ae1e-da97-8807-8623-66e72c466775 48 7d224ace-b6f0-5565-92a0-bfc4325d879f 49 81a0184f-4446-2e2d-9b27-e52640f60211 50 5b04f1a5-451d-87bf-b161-8712c499c1bd 51 d97df2b7-a276-84d9-98d3-940e5a109655
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
613165865600617610215657761658561335062038735785288. Exactly this sequence comes out ofnew Random(134).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 187 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 51; the post has N = 51 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.