201209241404 10eiom
explained decrypted filler
3DES(name+title) ECB, 24 GUIDs, seed 63
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 1,552 hex characters = 776 bytes = 97 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209241404(name+title). Key = MD5(password) =11399387811575895bc1f004482cae90, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 24 GUIDs as hex (shown below).
Decrypted: GUID list
1 ab58e717-9cfd-5d50-8fcb-35f4e12a500a 2 4aaf0765-828f-225e-b4af-7ca3445c791d 3 c0742171-93f4-7b5c-b391-5f7366a3e0f2 4 f59cb384-7601-0037-92eb-6bc9eccc3771 5 cc2d6a5f-3008-5706-9381-98d3d7d81301 6 b9457c9f-b0cb-514b-a218-1237e39fe30b 7 124e84e9-7621-1894-aef8-f5663b902cd4 8 846c2ca8-71b0-0d7c-bce7-b88b1bff9fea 9 f853cce7-bc98-643e-882f-f887b698b352 10 b5c7cb8c-fe99-4edd-8605-5e3ab23e1e58 11 854f98e5-7330-6766-a88d-e05e43e01062 12 fb9956aa-46b7-54a1-9927-7fa6207f43c3 13 2309e406-5047-8bed-b9e2-8ecb0deff02a 14 f221fdce-76c5-2488-b67f-9d8fe5981b6c 15 c3b0194e-8c43-04aa-a1c9-8780a48456a3 16 020f8144-b2fa-327d-af8c-31e599f5e085 17 9a7e379f-de87-39c8-8dce-0783cdf928c9 18 021b7688-79ca-0897-96ca-2b08f7716e4b 19 d1dbaf78-b611-31c8-a448-95c72c6c6ae1 20 91d03862-6f67-6fab-a1a8-b8ff5d5f84ed 21 07c0b945-62df-13f1-81f2-4e622fbe25cd 22 30232ced-07e4-2238-86a0-0acb97932ef9 23 d0bc5e35-5b37-5479-b8ec-ce6f5d99e537 24 5e6a2709-123b-0e13-a5ba-7123c68c5932
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
527055106465820330361250. Exactly this sequence comes out ofnew Random(63).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 229 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 24; the post has N = 24 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.