201209241418 10ejin
explained decrypted filler
3DES(name+title) ECB, 48 GUIDs, seed 352
From the post to its content
As posted (encrypted)
1EE20155FA588BF4 B13AE2323F64C217 EB75C88559B738CB 8E8A3F577684D7B5 326ADC917C24159E 4353BB9C1E75E695 82129FCA83BD317D F8D75108146B429D AA176F25252DEA99 C8A696EFC971C60C BEE668833C538D75 415706C3BE16EC79 3FB1E38DEE948535 49F2CCA882CB6571 DDE841C7EFCB7853 C25FA7D23FAB0F99 57EA5CAB5EF61E61 78D1DB604C23A8F4 5BD4986749B19D40 F8837326964A3401 421B711652E9589A 9F451CE72398507C F5B187075EBB790F 73AC53E9BC412A14 ED6FAFD8EAEA6FCA 55CCCC66550346F6 BF4DB86B6A6E4251 825224B354A3D345 701A3DB2557C44BE 9CCED99677B2EA5F F51A196D70942203 C131FDA82E0AEC57 B241E4CC7E471D82 5419F51229CD6059 072BF6AC942B309E 099AA0B24AF3D8F6 1D9AE76ABDDBCED5 C756CFDCB06177BC B781B15580E46D01 2EA2FF633BF79FDB D8981DBCB0D91A7F 0290C3755F6E9627 4504F6D3D4549DD9 5ED982138804E1B9 9A705E9DC70CE609 1AC0491B1266A70C B7DA041C78C170D9 2EC7A2F379A48702 0DB1DA2FB932BFA8 FD48019056BDB734 07E8C38C584BA2C8 52EEDF3F6117DAA2 DE61B857A6044FB6 F6B1862E993B4415 047E3306BD17367E 8F62CFCC1B7AA283 0E2FD9AD3203EC8D 2770E866BC75F181 20140D96397BE077 4ADE132AF4476938 E5F14262059E5D47 13E144B00BE734BE 1287A0768945E8C1 F65D89566CEDCABB 1A4830D363C34934 3BAB9FAEEFE62785 1E171EB451424204 030B6F8224BB7E11 EC34FE234CAE4BF4 8B87B5457AA58212 4DCA53EDBC843C75 19F4319F3C283726 701A35354FC24367 78A872DAE0EC40CB 7D4A2376CFF0441C EAF6B828DC6ABC98 CD58A5AD5484DFBA 2DB4334BA8DDD00E 3DFA09FEFC0683AF 2C7CC3A46E356A53 8E5271FD0D03CF38 7B40F90E63484364 CB24A57ECBEA8688 00369C363D26C010 ED32CADB096133F2 09E6ACB0653B60F6 BCDB93B714EF3761 8B31B49BB17132FD FA24F4B38E70EE81 03E5D0E4E841EDB0 1AA30AA75C647492 6C122EDD3439C831 28691DDD4E526643 F995BEBBAA1E65E9 064315D74C040ECE 87FA3C92B8E0A86F 85141CDD6D06D274 52008407E1ED9034 B384CB7B46718AF4 EA6BADE74984F50D 9F759A5858DDD0D6 0B51A2EC3FA042A5 5913E60DCCDB65CE 7B3E72CB36814F3F 07480DCFE249301A BA0511B30423E02B 0687C737451FB2CF 1F42AF3495A15B0E F93FAFE4850F22D1 574E76F00A40F7B4 DF41F64684215364 3AD0F8755BCE1939 57E14D098E7FCEA5 46B930AFE542833A 3A4ADE2F6264A90C 202EC660CF7DAE13 C1CA74CEB4978148 17DBB54C4D90D9F6 789ACCD547E45BC2 3E10B321C5B4F9D6 46D6E31F87E70D74 44F37D51923EE9D3 D8CC0621B95A03AC A6A48458C6301EEB 6393AB02F562009E 98BFA4CB73F36AA6 F4E6039B6110577D 88AA942CAB123E03 505F168D0F6A83D2 557BD10495DF1CDC AA72000920BC26B6 A0F5C9955D28A61F EA445EFB3C9E301F 33B3D565C28F8CE8 AB9C87FA43B59C28 483424FABF969353 96F2AED19A8073AA 9511222C6F93A1C0 6458F2C6391FD243 B657C3E33BF07377 B117634069CB7D7F A8AC5CA2DB66A8A7 EB7475E6328C474E C7979AB48CB99CB6 D7FCD1B231DC9897 28F70476B25000DB 794A9DF23EBE47A0 D973E9469FF7668C 182A6E4909CFF560 04AB9B486856C636 15047E061BA1CB69 A484F50D1AC80D04 524FBEDAA2F7F2B0 F8BCCDDB674732D1 91FCEA425AA40AC2 7683ED96F8200EAF E1EA2A1DCEA53655 3DE0BBE67AA62807 17BAB4C4CD9D9429 71DB924A87E2FBF0 D5F66E07ABBF28C6 0D70B5A6BA3383D4 A49783132BCF58D0 A6A553FC6B73E49D 1876FA8BC750A019 5707876D883BAD9B 6E093BE54016764D 9AB8B3BA1456652D 1250A843BF089457 F8522E5DD0DE110A E513C531E68D0555 0DCF4ED7D704E68C BB7B8742016F4AD3 9B4FA47326748141 2C048514C5FC68BD B64560E10DDAB8C6 2D4DD0F7982C3540 A7574CACEF92EEB6 B82F0221E585091D 9D0053B5D8E61BD4 E98E93910A15B614 B60B650A52D8EB1B 2B6246BC964A2F32 EA2817B30827649E 092887197310C204 C660F3FA48BF6952 ED1B031C2E2327A2 25AC0AFFCAA01F22 32A9678D2B9A695F 50FE6094349A7613 EC331704ED3C9BC5 1A7F0AF6AEEA14C4 A90E90883430FA67
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209241418(name+title). Key = MD5(password) =15e8ffe4f519ac58cf9ef5976e994f84, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 e1f18f13-083e-50fa-8e13-94b0f135d3bc 2 ff390302-a7f6-0fcb-84a0-186fa344bf94 3 2d750bec-297a-75ce-b0dc-6b3b94c2190f 4 c97c16c3-be7e-644d-9653-1ae02c9df2c2 5 7452e19e-808b-1d8f-974d-c0334bd8ddbe 6 faff8317-02e9-1dc2-8ea3-301c1ea6a484 7 5f7b7f94-196b-51e6-a7d1-c19f49b36b5b 8 d48619cb-fa99-0df4-9c71-465c5305cb04 9 a21c4a15-f9e7-4881-a4b8-b8437cba09e4 10 809d67e9-e0d0-0dc1-a6dd-cb785e7f91ad 11 f7fd6162-dd18-5f93-8d7c-0f46e3ddb3f6 12 4070005a-e569-2d24-a552-640a6ddbbbe3 13 9ba522c4-3d56-57b4-8211-0a19bc6b1a56 14 bee7a473-8629-57e6-8301-6657fc0e3993 15 9e62d05e-faa9-3bdc-a760-957ceee0a642 16 c1c7f2de-223d-77ba-9d3c-f91776904479 17 81051239-8c15-797e-8ebd-a5e48ff04772 18 2ae239c0-fd55-2c4f-9f77-9c37504339eb 19 edfa2b01-39c0-166c-b517-33fea17225d9 20 e81e714d-8885-56f8-ac41-a96c91aa4482 21 30e69489-f910-582e-9325-8d76eaae3511 22 53fd46a4-0b5c-1b51-921e-b719bbdaa753 23 030b7ec0-92fb-4cd0-b846-9885c77c1d1b 24 138b2083-62a5-0aee-94df-2c5c8e9796ec 25 ce8c91c7-b247-1e8e-b2c9-6196b8078cf8 26 4086fb78-abb1-8c9a-b5a1-925b7526a59c 27 b6a62587-3d95-52b5-9982-d4551596ddb1 28 da047ce0-e766-73ed-b841-b69b219430b6 29 9883d98a-554c-65a8-bdf8-4c9fa8e01d76 30 c0d25b2f-11f3-5f70-b946-dbedcb5f167d 31 1cbae0f3-425f-153a-bed0-7ff08efa5bca 32 8b4dcd72-ecf9-1e73-b5d1-d0f2e52b8e1d 33 e9508c69-e83f-732a-b660-f76b612bc896 34 150f3c68-cf37-7fb3-88f8-cfe61fad6332 35 449d4ab7-2e08-4e47-83be-ab82df67cb9f 36 05b292f2-fee8-0152-9da3-60b331ad883b 37 73fd1750-ad0c-5ac1-9717-14d392b97f71 38 0e9207f8-8d08-2db8-898f-3e3f84bb4fd9 39 c7042270-dc17-5a79-9fe2-6708b66d35c5 40 0b058c6e-376d-79af-a118-4b509fb0fc42 41 621b0b00-c9cd-65ef-8732-20a6f07d5fb5 42 e839d312-adfd-4d33-97a3-a539bc21558c 43 3a2f263a-081f-449b-876f-8fb0dd3c6778 44 1d057041-5088-0b42-8d65-92b7cb6d178b 45 6e8a808e-939c-447c-b39e-b864c4140d6c 46 05308bce-ffdb-7c41-823e-6149d177c95c 47 afe5ac34-7eb6-0fef-8334-be512eee6ba1 48 5073d515-4302-88d2-a40e-3cf146152339
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
507611504052553772155140185765117740525764404708. Exactly this sequence comes out ofnew Random(352).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 243 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.