201209241403 10eimm
explained decrypted filler
3DES(name+title) ECB, 55 GUIDs, seed 986
From the post to its content
As posted (encrypted)
62C5F921E5F6AFFC DC9D10E34F7A2A14 E12CFC10AB6789A9 D820943ED900105C AD4FA86B5D47FA4D 75FD1C16E3352FF5 253F695C1088B8E2 45337478F8B7E708 C9B5A8FC78D1F45C 7E8334987F9DBB61 C73B1FCCFEEAE8BB 531AD1700FE2D9ED 11029634C775A7ED D13BB8BD94002F49 115A87CA96700F6A B7A5B6CB9DF15475 8B7EA96C95BAD522 93048F25B2151E82 516EE1B146F91BBC C6C11DF0A089A198 35036A0D371C6D66 D4D914AA9B3A2B7C 4687944E70F7ED07 B0839758790B5A89 D1082E1FB1FB613A 3D12811D812DE8F2 F2D578A0AECD0277 E6C6F1CAED87FB21 DEB5B3686BE04D5E 262C704B490407B7 0B7EC7E66F46C7D2 D28763D54DCDD1B3 CAEDF9E9A3DE864B 1B608C9F419DEEBA B8BF10D6B5A5C424 99841EB22DADEF8C 30C3DF6F3AF76422 4451F086E963856C 0D80A7D36603C053 B727BDA5AC45E7CC FAB501C5A9116574 642D03DA5A01C36C 42CAC37714F6D496 BAC643164C6D569E BFB7163067F0468D 3CCCF4DE0BB09237 C51DA98EC4B9182B A2B2B2B507C7C8D5 A9C8AD6B5F5A4697 A25C3CC1C76E2C07 8AF77D65D984E7ED B5B12B081210DD0D 3ADE5CB54D57DD6E EFE161A2673870DC C6509F1A087D9B96 FAC881DE5C384739 DEEA2B013A726918 2074E766DE2FD082 C681FB4B4716995A 372A40D2648C2EDB 72093B8A6B0C1EAF 0ADEC12331BC4E18 E6C747FF606BD12C 753F051F143C9F28 136FA762C547E153 6A4A612BC39A9991 0B51EEE82DBC8F85 C863E83DC1BF0009 B02B14483F1A9EA6 778E6F280A88CBD2 3E8FB8FC6B0A7147 C1581AE63C758F62 010B1AB03D5BA9C6 50AF87F3AF7D1F26 8ACAE3F752A12B9D 0139A1644DBCD570 5BC45ED47CF8F91B 5F590DED904BA38B A8B67D2174C5B8A9 56A7B20642B71A71 8A5E2C55553F4E9B E290CC3187F322B8 2CBC3C2FB01891DD D3A4BF7E7A5239A5 B607BE0E815FE318 1EFBF6EAE7AC48AB 787F93B336C43311 B581FBDE1800B3F6 7430A22432609E0E 06B8418073E74C7F F5022CCF379003FC 4F9B430A7D9CA6AA 58063E9CD744AD49 9633047271E330AC A508BD5888FA9D36 194755657B513492 6D39D81D55AB54C5 3EC3C8E5E0FBB0CB 5B914EB880FAD0FC A64D60F1CAE5BB56 DD7A380DF4D72C63 D6EE26D14EE01616 A72E914444D9A95C 08EE1E1DE491E748 E46DAC986E724499 FF3A4E713CBF0B9E 275928731A7F55B2 957313CE8733677C 6CEE37738463A3D9 19489BEA1E16C8C3 6C77EF9458BA3038 46F8C37E080040C1 D391EEF8D31F84A5 F04EE84E073B6552 7376CEA36A47FB57 3DA8AA354FED88DC 4C5E7D333A1EDA24 4B6E84897F0A7E45 7C28E663ABBD28C6 8D1BAF868BF4610B 5D2970232D26F143 05C5088E0B6F0AB3 3182F3C93F5D70EF D371246DD92C43ED 4AB1B80BB1FADDA4 7AD9586516053599 ED2AC093D334552F 5EBA77C67FB7C0F8 D9875F0F66BA5514 7DD0320AEF4899AC 2B2F7776721BE698 FA2C52131EF45A78 00FE2F861C891550 10B99628A3F77F23 6EE1C98CA9B85D19 3918BC104896DE81 FB08C4E2A70A18F0 AFA2D3862C53F30E 3D72BF05F3F0B4F6 1BA1DD725B80C534 4F70ABB0069589A5 CD018384E9909288 CD93C518854CBE65 812E5F08D2AAD735 53266856FD5E1A10 0D2D725BD58721E1 255F2CE9A67E9D78 7249381F448A1757 B97BA5C164DEDA8C 776223874DBF30B4 FF565B919C006A02 2D6594F86321C0A2 735EA27A968D66C9 88C057819ACF9F85 DB0721E0FDE15907 F874BB4A62835BF7 E4135768210327DB 1773827E1B0C134E EB67DCD0E15707F3 1A33A840697FADB5 C5C22D0C85DA2F5E DA7D8E6DB3B857E2 665EBFC41C9F912F D4121D4A707CA557 001D3C91D4D90F70 4B5333C878DC0FEC B8D56A2897767D14 3777E56CF30AB718 10B2A7231577EC51 AD9F0FBA95B5C55E 696CC80C481558F7 BCEE28E712F568CA 9B10A6E6361352A8 E1483E5D82A9B84D 42656D3C5FD3C4F0 BF4B4E4F2A51FA1E 096AAFE40B7FEEF4 459D618CA9086478 AB9A19FD26319253 37BE2B9A69F6DEE6 07340D28AE558F6C 7C061DBF527514D3 9E3C17C9CB210C98 40EF41B55B2F99A1 2C18C4C8B0E85916 AE77F445870A0A1E 8609F4D75D85572C 6EDF5284F711324E A8D825FA00ABEB50 B55FFD82D0EF8B42 D08BD09ABA27A617 80F8508DC5AA5AB9 5DC2105E4CFF9FE4 47BA49BEEA44F2DC EF7B167984683F38 65BBEE3667FB5651 44CCAE11560D3416 788672043A790200 A0AAB6D47DEA73DC A37DBD36DD099164 7CD4C672D19997A7 0D1AF8CC56C6BB5B 4B9291FB8474ED4A 12EFC07AC453244D 1CF9926358EB24E2 46DCB0954E4F9F86 CB52CB27E7157EB2 D741F62F9424F73C BC9D3976DF5375A3 78523673B3D4E028 2E4C68E3AA989D8F CACE3D7ACDED3FAB 2E5583A1E8D55DB1 1117F3B4173E0E9F FE07D5C48D7849FD 8A66E09AD60C7610 DE0A6C88C30943D5 7897C8417C072A6E 7BD3C0DADCF48D42 2DBD58935EF51BC7 8C5110565DE7633A
- Read the ciphertext. Strip whitespace: 3,536 hex characters = 1,768 bytes = 221 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209241403(name+title). Key = MD5(password) =0d80f1834a67e99fa71629a8e317d9f1, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 55 GUIDs as hex (shown below).
Decrypted: GUID list
1 bd3d0070-d721-788a-9906-db088d1bddde 2 de5eb605-8f56-13fb-a80e-bfdd88a413f1 3 a3f8e46e-ca66-8f3e-bfe5-a4b6ac0551df 4 b9046306-24a3-0aaa-a1a5-05addd79d141 5 4b8df791-8cef-3c27-b0d1-410a1c640605 6 43d7072a-f431-1079-9fa5-9bbec5d1ad2b 7 3469d760-a2e6-663d-a830-f1b6032b2ae7 8 be357afb-91eb-0f8b-a9c7-54f3841815d2 9 5f343c5a-cb26-8f72-bba1-09feeb2d1d32 10 3cf3ded9-668c-72db-be33-7a8e1a1c8b1f 11 e27d8ab8-447f-610f-bc7c-981bf5f091ef 12 57d410ae-eb93-2e7e-a72a-d77bf17a1be6 13 1d16ca3c-8b69-4355-a512-3699dc285b57 14 faf07de6-5c7e-3ef1-aa69-0f430e8659b3 15 54a74116-49ee-139c-b73f-703660201b4a 16 b1d561a8-5bf8-7c59-8758-3fec725ef886 17 7700d9c1-ea38-3135-8c8d-4c4630c1a371 18 f52e0b80-4fe3-2166-9691-a1295d257f10 19 e2edaef8-3c91-3450-be08-90765bff2383 20 1c4d6bc2-77e5-0380-9a27-7e3ce7bc51dd 21 0d744801-9d47-7ea8-8efa-ae85f3da971f 22 c4eb9ae8-a978-6440-b419-9779d37ade9d 23 09d277e4-e53b-5f0b-be8d-4da4e4cda1ee 24 dbc78d19-0c56-4d4f-b9de-19a207b270b8 25 68203829-8c97-356f-8de0-1e2d1d25a189 26 9216dba3-1893-6125-9f9c-431866cf2305 27 75195907-71ca-513f-8c78-3906adc3b7a9 28 1e83bbe9-e82a-5a41-8ccf-7c8590a76f04 29 6313ee03-ce7b-8662-bdcd-d2f2b6f48bc1 30 e4428be7-d556-1b2e-8d76-505c6ce360a8 31 73f3513a-e084-12eb-8e7c-ba43a41e00ee 32 37ec3931-d8b9-1107-a787-b089bc385cce 33 027f4f37-d206-7d2b-9a03-d207f6811711 34 ef57d829-fcc6-6cc2-80b7-1de0d2809d7d 35 656196a0-bc89-86be-ae76-5df3ced42130 36 f25011e2-0c58-4e2b-90d3-fe3a05912e17 37 8b9cd783-d719-747a-b8bb-f64c9d828e61 38 af70bad7-c06d-36ec-b29e-018ecaf0b252 39 53804ab2-74cc-15f4-aca8-b39a667aecbc 40 8fa7331d-2476-770a-abd2-5fee00a28a75 41 d633ed15-f12e-4aa9-8fdb-26fd16ea8746 42 15131a1f-523b-55be-bb76-a7f753dc8189 43 e59384a9-7de2-263d-8e66-c763bee2f0c6 44 7bbb0d13-9091-770c-9078-cd80f0cae17a 45 669828cc-dfeb-6578-9e8d-b30ac8a5a592 46 535e5d46-fc56-0aae-8f34-5fb1ba420321 47 d1639273-0c6e-77db-a7da-0156999512e2 48 ffb6cdfb-dcb1-81d0-8072-52e8f28eeb4a 49 438e5fc4-8818-4486-9117-2066e1534db9 50 bbc467bd-7b03-4362-86a1-0f8b50cf37ca 51 d146a9f0-b352-8e6f-a4ef-56d76af92030 52 b041ad24-3d90-0fc8-b9a0-3c08b1a27b99 53 58589c57-309c-1d35-929e-9f88806c2f05 54 009bf9d3-1939-3d2a-9bc4-9d692eec0885 55 8c333e43-aab7-5d2e-b22c-675775128636
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
7180316087624317323076543655811176847317452760784480135. Exactly this sequence comes out ofnew Random(986).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 228 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 55; the post has N = 55 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.