201209241308 10dlc3
explained decrypted filler
3DES(name+title) ECB, 54 GUIDs, seed 792
From the post to its content
As posted (encrypted)
8873E5A1C466AE83 E03B38D44855A0DC 7D5430F2502B3928 47E961041035C7E4 D34D9444DEF7D16F 1DFF7A94AACA3EA2 58F08541692F519F 9C588A9613B78AC5 4639E919ADD5B38C E7D1667249776D51 BE9D842FF05439D6 1A02F759F3CCEEF3 938C4CE1925D82C2 8019AB6CE93B8C7C 37097D9A26C52BB5 2BC1BB7221CFB12F A0F0BE1A0366D87F 7817C9E71368FB22 3B2E297D8F1FA8BC D33475606AACA9DA 7E1918381D7BE2B1 AB82C59CD0494B6A 1EC78925A0B57DFB C3117FEE6F7A1EB0 B15B794BF15E4817 843DB9EEA7BFD161 4A9B579A58934E70 FE7FBCB719DAF084 995B655D5427B6C1 A76F9756363FE110 6F259C57DAB43EFF BB2F4FADDAFD1807 BD96B144CE145CA4 49E750119ED7FC6E B7766C1BB384AD71 989CB906D4EDC359 B430CB09EADD7A83 F7E58B471F14C85B DE6052140BFD56DA 16C55D024A084163 B4F865F4694A5803 70CC40B1D5E06A47 0F989FC6524249BB A967B758E244BBB9 6285CCDFE6E9F05D CFF60A18F6BD8F14 4663B9ED0DEC4247 A2CCCA78F8DB2B3B 60E6F7376D2C7309 C426EDBD3683E76D ED5AC829F235B207 70BC31311B0F57D1 9FF993C56C08EE80 2F9D5B2CAF271A67 CA7EDC73235E413F 52FD4B5238FA31CC FDEC272426567793 15D4091B9744241A 3830CAC8239B8579 4C3F4B699F44B241 283EFD0E83575332 480E947FDC2E68B4 BD650CE9D3C1B6B8 41C1BEB6438172E4 E9A0052711E7EA18 926D9BF006689437 D1B403ACF31F5DD7 134E7145D930CD87 D19573A159F20CAA E01167702DAA6E40 81A8C242D0D733B9 C95CADFB63E0166F ACBAF39F0744668B 26A8A56C91DBA01E 4F48D2DEDE15638D 8BA32D711C434BCB 4F778289854CC0FD D047A8580A9B5DAB 13A05890C8C04EA0 F1836F7396F85CB8 30F91981EE3C0A13 8776EA0B6CC385BF BF033364FA9CE776 D0A5160BDE6AE9CD DAD755E94603020F BBF64CEC83E6AECF B9E9AFAC97FE7FAF 773B39C70EA267F0 1FCDFFF0F41A4EF7 776F2CE545010ECA 727EE1449DE3DBA1 855B0778DFAEE5F1 CC174329E6B76E76 3E816D6410C4CB03 8282C63E13E26EC6 C297E6ACE8CE7B6E 73C0D596E98903B2 41DBF48906B056F1 A31DC983F3A01CB8 DB23BD5F63DB4478 AC591E725CEB7982 91C85FAB500CFF47 4EC37BAFB4CC02D0 979C9CE02BF18215 16ACFAAF3BF88542 BB9A63E69D538BFC F71C43D783ED4FCD D53D84B43B15D272 29BCEEEBD9BD50DE C426D7D183C34AFC 0EAEC7E00AA8D10A 73AC26BACA213EF7 4DDA66BF3CF2DF41 ABAF9469B9A3D46E 3B017694E09D6F30 D30E6530120C0D93 4DF02C2A5DDDAFE1 D655E0B89E5E3337 11881C5A3D194224 0B3B0950B8033D0E 0701EF7A00996770 09C44D936CB8619A 39402C2267F5817E FE79A160E61028FB 1B249E53926539A6 CD68F940A3AACEC2 1C847259EA46C32B 9A26FF1A641EA3D7 C6DDB4EBAA83D3C8 90BDF85C1993A7EB EBCD6CD56186C78C 469947C136FB7CA8 1D55AA30E7ACF90F E8020CDAFF44C8E6 DBBF00888CA8A793 6FC4ACC49FC9D6F8 6E50AC2536E99B63 2BEA9E5774F62B6C 4F3BD69E3834E1A4 4A324EBFD6CAA1EC BD91C995D9F2738A 3ABEDA397DA7481B 2CE0CC2BAD4DB288 B0DD2A2BD47DDCAD 133B4434CF9643C9 250CF4DDA7A944C5 7FBC10346AF0E543 775B40D7A129CBDE 0CBA621A9A58DC30 D9E18124CDFA549B 1DB4E91F13E05D24 ADCABBB5D199F458 7E8A571783D29176 4FEBDA690AA66D43 427C637FB5EC3E8D 24CAA726CD1CB978 6D2793937BE34F10 0631195B5F89A184 61C2912A4A604317 E802A56DE91BDCE2 F92399EB4628A41F 578C1C4707437D7E 96AFB65C69664B11 7E489C8620F222A1 8E19E88CF0A0A690 A2C5CF958FC5E0A5 1B581452754C3F4C 6AB1DF1875308638 4F8B37BE4467A92A 3F1E202C0C4B2B01 094763830340687A 9BFC2B3D27556CCB AB8577E17BA70ED6 4F3BA9549145E102 E2717AC840BAC9FA 10DEA7CC094560E8 FE493F20B9778E81 46C8E4E0C5605698 41B0EC2E33E243E5 4E85EC3AA5C755F9 2921F93C58C7FF2F 195B9F28E69D2F3F 176CAAAF69D0C11F ABB022ACB60DA84B D95BE18DE3F422A1 29F3C454E42DC6C0 2634183C17878DBC D4FFECC326B7FE90 1F6A876383D156D7 67D03E86274DFD44 CCB8D35EAB350089 8E0F61DAFEFCB984 DDBEAC7C1B0C11B0 EA97115E26313C2D 1DA1FD981A7419F2 0F89F041BA65A659 00DC9C3A28839BB7 C2EE2A2B87E60CB1 56D4EB7BC36BCED1 53350F0AC339DC39 1EC269541707D376 2775523BF73B9B6D 1FB761B0B44F48E2 B807AA12F7CB35C8 218D005FA7DD7D47 CA3D80EA9911B0F0 FF53A6FF11359A7C 0F87FB7497171A09 34DBDC9A76BFA499 ACD0F277B6EDC88C 88BCB1D1DF54FF55 5511149CDC33B63D 64CBDEE0EC698C95 9C74ABF99F3749AA EE893C215E560A23 245F9E85790542D7 9417C670CD3568B2
- Read the ciphertext. Strip whitespace: 3,472 hex characters = 1,736 bytes = 217 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209241308(name+title). Key = MD5(password) =ec9aa437ea2646804f885d5b35203b56, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 54 GUIDs as hex (shown below).
Decrypted: GUID list
1 e2cf8b5e-bdad-42ec-9229-423858fd21d0 2 383c83b4-14c8-1093-bf40-cc53ad14743f 3 646093bf-1a35-3ff5-b5e3-9b24cc3ddb4b 4 6584e4c6-7131-5f10-bda8-e85bc592f257 5 1f69542f-8aee-7126-b52a-86064a0ba35c 6 16b7a6cf-87f8-67a9-b85b-4bb214c98db3 7 06e1b645-0d4e-643b-a412-c7072ca50b09 8 8d28e7d5-5441-6524-8d7e-b3524776fd91 9 80033468-1bff-825e-888f-3183f7297d3d 10 ba1c44d2-23fd-2585-bc2c-b85185f7dadd 11 03dafdd6-7fab-7e83-a3cf-4324979a41bb 12 22b5c1c0-4a8b-7e6e-b874-f2bc3a732499 13 9b6f10b8-bf63-0f6d-bd03-fc09ab1f2223 14 e9938ac3-e612-4235-8058-88ddef6a8d48 15 e8aecca0-60c9-38e1-a859-6a26911b1911 16 a3f34723-37d7-57b9-b064-ab914997589a 17 738556ed-a475-7c9b-b7fb-7480ac6aa8a7 18 4cb73004-d0e0-0a60-8981-8b8620fcf054 19 b247a94f-b6d2-1bb1-986a-3a93f94bc3d3 20 efcb8c7a-00c6-8145-8e5e-0ab181e9bd62 21 0b522ec2-ae23-0808-8fd7-5ceb70315da1 22 876229a3-9b35-10ab-bbd3-0b03c90704f3 23 4dfefb35-50d8-706e-9b43-ca33d657f070 24 6866d5d3-14e9-6bf2-8f26-5f21ab8732f3 25 c71a7af7-3fb8-260d-83f2-ff8e80fba4f5 26 e8febc38-daab-8393-bedf-ee31774d7891 27 c9956e05-60d9-7723-981c-79cec9f1605f 28 e0551655-08aa-3111-b732-25c88e733b81 29 1f2067ea-ed09-2699-b78e-e27d69895b54 30 fefbeedf-5bef-8abb-b77f-75a2d37d2b86 31 ec61e7ed-a180-5533-afc9-74a0dcc96540 32 2fac5187-7b79-01aa-ac79-b0b2706b6f48 33 18f09cf2-a6a5-7e1c-9666-e7ce91be9de7 34 6481c79e-a551-7689-ac4e-a327b11639a6 35 fce61961-0d26-17e2-85e2-db08eba5f3ce 36 2fc03f00-5965-0ba0-bd64-1e913b8ff8f2 37 5efe5047-092e-0e22-96d8-37408f557038 38 10571282-c7f6-1556-914f-3fb0bffaf1d6 39 e14e015c-423a-8159-8108-c15c6c96816a 40 d9b28191-abb2-5a82-a79e-ca215f9789c9 41 3a4c1495-c9df-4fd6-9e97-115be836e141 42 d48d1e92-ee49-64a7-99f4-da25852ecf2a 43 993e6265-c901-20d7-bb07-8cab8f3b7de7 44 2e402c33-6f37-89dc-b7d1-78f0a6a36654 45 a9dafa3b-a58e-4ca3-8b32-c4e2594ac386 46 5de7e97a-1d15-2344-a460-8957f88bdb8c 47 ad0651be-5f62-7ed1-ac48-d6afa93dcf29 48 e584bc77-530d-7de1-beb7-7d81118068a3 49 50264325-7647-4a0b-bcf2-6017c72c9bd7 50 f8caa84a-ae24-81a8-b65e-510202469238 51 a18789a9-e3bf-30a9-a3e3-26c999ca517c 52 d45c51d3-e8d0-693b-8b29-2caa5d6ec860 53 5f3cbcda-e258-130d-a663-abc7027195d6 54 6e6e1780-3241-7f1b-90aa-f504bc6c931d
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
413576668277043570180176287328507710018546284277483617. Exactly this sequence comes out ofnew Random(792).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 204 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 54; the post has N = 54 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.