201209241408 10eiwx
explained decrypted filler
3DES(name+title) ECB, 55 GUIDs, seed 74
From the post to its content
As posted (encrypted)
B8415510D8A28866 7FFAEB600DF6BD53 6A66BD285723187B 19639B19EF3ED057 A6945147ED5515F6 395E27C5B09C6F69 6FC9344635BD797B E82BB49108712F1A 0D54B47E3B08836A 751259FDF78A92DD D2341EB5C9CA30F3 5D2F8CE97832EDB3 FE4E5C6B85DF4609 A67C5F7177CF7F73 D6CCC3A5F180E631 93775E11F9817F75 AF7E77BB48CDA76D 3EF10CAED91FEAFA FC0C74BFCEA7DB3F 509F7155A765FC04 62E1589F4EEB2551 5C849EB537471757 72D7361F77B47E4A 0791B2CFBF42AF7F 54888FB7CCD660B0 5B986C3FD636CD67 C0ECBD0C5AE0536F 6C5C09C25A19E126 DF4C5A690FC2F77B 701D9824A6322C85 C04F5125EDC02CC9 41EC206EAB626301 6AE670F9EF7B9FB6 848D14B6228741CB 96E54C9824B43D55 1206C340040A5A87 86B66C272589E256 58CFD31DED3BBD06 A2B84BD259B74A39 4F18EB210587CFDE D74B0925F73D7BE1 36A929301C9F2465 22375C0057F7E11C F5A7825513C90627 DCB019ABCF670DCF 930F0076EBE56CBA DB2B2BD14519B0DB A9225D1D68DA6A30 DB0E98F59F21DEDB EDF7F50A4E628D6B DD87A7C3859EBD8A 3186CC9833C4E898 A3D595DF484A7582 B9666D59127D39F2 15B72202EC6B085F 412C0D1C8F5B8D97 BDEE88E0C19925A6 92800EC622DFCF43 61458133978D651C 403F1BD51592DF6C C403A44AFF1B2E5B 8BB82B92366B83CA D6149F48904B8521 B6F6AE4AB112D3C8 ED32C5AB06EC6BC3 97A246E3E301838B AA4040166AC39575 A66D9135B1380BFC AE5F311B231FE651 8E2AFE0CCE348EE9 B51C921DE483BFA0 5D9B1DDC8671E344 4AC9BCE3CCB3C057 DB4C373A2C2A85AE 242C1B6B068EF0A4 B665F2F2722301D1 5991F88A1DB628B3 A3A4F16BE4994FA4 FBCB89D2B2279F08 A8D5DD0428067811 360567D051CFD808 1A7D9EBD4C0A007D 74957D48232C9C3A 73F0D91D0B21B160 9C10A789504AEC12 97AE0EC5D5C598C6 D3FB061E1E4A68A0 DFEF4BC1AFAFE219 950B6E489E6B53A5 137463AD2677B401 D85FE61FBC0EC18D D8F8E98BFBE25A81 28B3E82967D03DC3 19219F39AD01BE64 42F4198B4BD73E6C 8BF4603D3E7BA0F8 418D1901CC3676A8 B8A88465117ACF3E 0158C96879A406A2 4B5D7D0EDAAD5306 01096098D743939D F50C1BFFAFC5B475 4FE3C1A365937C0D BF63FCF8ABC9A5C5 3BFB9A8E7BDF8805 B8FC6C7251ACB80D 33FEBE28061D6370 99C6F69BCD135545 F66834523587F1AE 89DDB134ABBB521C 78B2AA02A8FDAB2E 9699E77C838F453C 0E241FA3815273BC 7DC6F58009575B1A 5C637D6762FAF8DF A7036F0A900FC73C C1B714FF83F2875B 7E9716E21817D23E 1148C72C1BAB8C2B 772E07953A117B79 FE5A0EF3B9C035E1 D6C45566F8E00D1B 00C66360D5E85907 7C793DFBE05B188F A726196401C7B8D8 6F0DC5401A4FB2A8 4D1CB552C946FDA3 004D3E7752754A59 8CC2FA428D8FC596 14B13BB6AA3CA681 E1E3DA4F529F7450 DA10495F3B6B4E6C 1FF4B4CEE5BB043D 8F688765B9DF2896 D83C4A6E6BCB3290 4FB4445A7582B237 231956189852CF91 9AAABD22FC1B5812 B1F92225DDA6D191 A77B9B79F1FD1037 81D947775B5540C3 00179543CF719A2D 4DBEA6AC76A0CA21 2F91886D5072EFF8 646A6EB005B0D305 8CE77E9965DC0134 931D996DAA36B31A 8DFE97BC6E15FA32 E578A953C518E306 C65700564B706643 48BD843FCF452B20 6556B3047C6F1059 4578E792D6DE35A5 E6E4BE4548C16E58 B3918AEB60E29D4E 7896EF94F1FEED77 E5481700885565A3 6FE26ABC3DC06114 9534EC714DA94898 717EF728869D37F6 71EFC19DD85A06AD 9C6FD1D5109D1F33 991EFE93588B2108 3A0D62C76048A133 B79D14B0C568970D 86F2048FB855CCBF B0D30A7B68B72F58 468ACBF55BF25EA0 11FE474D7306232F DB793555B979A089 BBFDE1E9968671F3 B389DE2806B79A36 7757912E42BD15D6 D1CB19A4E24F4800 342F7A12426AB7AD 42F601690B212758 6FB7F3DBC2315F0E 1666F2129CE9179F D0C66B6AE4E043A8 5C19A7F96F0BE2FF 261E109845DADFF9 3AE26AD3A667A6CA 1391225B07B58787 FE3B098C52C7CDE9 B60D655692D90740 43E1B8FC2907A036 67A23117A978642D 9D6675D4C14F9FA0 DE68157F8CE8120F F4585712295D37F2 E581F28F899BB1BC C50196AD54B91565 28EF30A04B6E1C6F C530CBF7C249DD9D 8289D6C8D4BE1011 7C3B98BD01040962 0C1789C093443BB2 15B3D510B763F1F6 4810D9E6E41763BA C6EF765CC6691E95 926FC06BC49B8EB6 38DA1A88BDF31AA3 6765F02CFF5344C9 CEFF7CA50195525F 7759BD184413676E 7A46255DC10130AD 458CDDC38924AD55 15667F4C10C36367 C48778F226372F80 9D04E0CB29598ABD 1103808D9A3317D0 BDDCA390F3463516 44A514A623FB661A 6C3456B7459A4A6B 6737D40B4160B72C 23EEC4A2D192B3BB B8DBE6F2BE2E82BB 506F1FD0C0C1C0A4 D518E2A9823BDB3B ACA5095C09509035 C3827085DB21B634
- Read the ciphertext. Strip whitespace: 3,536 hex characters = 1,768 bytes = 221 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209241408(name+title). Key = MD5(password) =9df479fdf22d0eba60c97d0cb1ee5d1d, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 55 GUIDs as hex (shown below).
Decrypted: GUID list
1 287ec5fa-810b-3843-8a91-dad1e64ae5ce 2 0766720b-a8f6-4c68-b570-aa9a4de53cb9 3 28466127-16b0-4cc7-b0bf-594cef2453c0 4 c45ff216-286a-34a1-8a92-878bf8f48f8e 5 88768f97-679c-563d-938a-b496a4346dee 6 f8f12e35-7688-233c-bbb9-1796fec134d0 7 8feaa5e6-ba8d-01e5-ba54-a5fcf2b2f3f6 8 1694c354-10f7-5c3b-a383-489eb3195a8f 9 0d31b0e7-c1e6-17d2-b9eb-1a232ea09e91 10 47e2b1d6-8045-5029-a73c-76ebf5ea1d88 11 5c95eca2-e93d-7b1a-830b-89c48ef3fd10 12 1be6fefb-c43d-23a6-a3da-edf732c5365d 13 f226866f-98c8-40fd-be02-70814feece9b 14 3be9a65d-627f-8a2c-b6ad-677445e4c9c3 15 7cfc1fb0-a133-7476-959b-3e239730e9e6 16 6d82a872-70cf-2b5c-b2b3-76a3ce20dd58 17 87604847-c5cd-860c-82a0-6f44b5522e04 18 553df286-567c-7171-a9fb-75419aaf7a07 19 8c855a81-e2d9-6eae-892a-a92c5e3bf066 20 8c63e252-eb7a-880b-9d27-51ddd17cb1c4 21 a1c2ae12-79e4-5eb7-b213-c0e5b2851f5d 22 ff42cc29-52cb-05e8-a335-57ab7d4909a5 23 0d30a01e-dcc8-429d-afa5-20926063e663 24 928c3071-0c57-73c3-819a-a79f0d3e9f4f 25 662c83f8-bfef-85b5-8d5a-c32098291dc0 26 59c5f1ae-1d03-10fe-8aaa-3958831a1591 27 487a7994-c8d5-5db1-ba25-532411244cce 28 61b9fd85-e03b-4e47-ac8e-5d58afb6bd2d 29 607e295c-e8a0-8d9e-87b8-9a621a5df126 30 b274394c-3445-6894-b644-35ca09728f4e 31 994eec2d-d703-4eb2-96ec-e6a5801145c2 32 c233f57c-f6f0-8bec-bf42-dc9810fa640b 33 0dd8eb12-5fce-0007-a390-ef3fac8f3e5e 34 e645d896-cbb7-71e1-be0a-57bea2b9f3f5 35 267dfe78-0687-418a-9041-711bc3e38aea 36 9c536d01-d875-81a8-9e51-ebbe004fc9f2 37 22046607-b741-2518-b4b8-30704006b630 38 7744cc0f-8d9a-78e2-b631-16586c46dedf 39 ed4d99c3-ed2c-0054-83ea-fe37d58d55e0 40 d98da7eb-df32-8915-8a00-761adeaed7e4 41 9a2936ae-993d-2a33-813c-9586fdedbcf4 42 246a1a14-4885-2568-a599-e415c3244e7c 43 497e16fc-e854-4189-a9fd-253b58300ea7 44 db7b720f-69a6-588d-bb69-55ef82c0bcbc 45 16652eaf-0a24-8f15-bbd1-876ad24d9b86 46 40e935b8-5aac-89b3-9617-d4dcff24390e 47 85fbaed7-07dc-4677-94bc-1d5dcd1a95b9 48 90acaa64-f8bf-55cc-9696-82dda8450105 49 6eaeb709-83b4-3e21-834a-584b6c34a352 50 733cd8af-149e-0629-b1a6-ab4fd352c48b 51 67c50131-ed53-019f-9ace-d4e1a0dc7c3e 52 7d492064-e1ca-0eac-b347-0bfbdbd47e44 53 4bfe10d3-803c-399e-8052-a298a7c2be51 54 a9d32eed-cea9-58eb-9a96-d4a98220120a 55 1897150a-bffa-0ccf-a8fd-fbdbcf2fd912
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
3443520515724872876850478154864807482708224588453000350. Exactly this sequence comes out ofnew Random(74).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 233 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 55; the post has N = 55 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.