201209241428 10ek61
explained decrypted filler
3DES(name+title) ECB, 51 GUIDs, seed 888
From the post to its content
As posted (encrypted)
EE50A8CE568DFCA0 6FE9A548764CBA52 5279CE9EA952AA5A 913A1C9A1AB52B82 44AB337D63650AA3 39873B6BF8AC58A8 CD67CD30F747A6BD BEBC5AF919EBF2A0 7EB577B800B89860 01CF19645A5AE849 C2176FAEDF5347B5 B5D80CF220E8260E 175F0D717DB690E8 B5AA0E5BF43F8E85 BE7307B0A52E0E48 FD7F29514193F5BA AADE9DB93FB1EA4C 7E98B3573A73BEF3 40D1B94D7C89BF36 124DB4FA2C566179 468686255BD69B1F 7BFA1614E5D59BB6 2C1F0FF12281365E 50E75FAF7ABE5A4B 3EC7B65BAB83366A 3D8C659A8C334225 72ADE88F1AF5B5CD 68F7D180D97AE668 334E354E5A826DDC DC31281736D652C4 2BC625D015B52F3F 774713EFD4DA2142 4827D138EBA4B8CF 966A923EBEE08BD5 2A795243C98021F3 119C6C01A32FE8EE 83E91A1B4609837A 0878837D46CC18AF 584361371736B693 92A545A2647A5570 9477919115C5016C BDCD367174885C33 81893CB0AAEEF094 0F10E16ACE2A4769 8AD584D4B8FF7697 9382FACA5C32947C A6E1C3EB3796BFFF 4577C5F5506C8565 BBBD5C3739F8A61F 438D2B327C723E3D EB7B8FFF1F458476 D9DF262C92773097 8DEA16B4A797AC34 44268887C2984A62 AAD4391F782D427F E39DC6813586DD2E 9E61E33A840FDB77 DDFD9442C403ED30 AC3C425A823D9FB3 4EBF072F340CB619 D4529F2DAFBD6012 94E09C3A2958FFAC 3D790F4AD5C16E90 1BCD6AB106779EDE BB7E0281E3DD9065 FAABDB9F1BA23F69 853ADAFAB93C18CF 59EB43E582074F06 648BDF55C93B8CA9 F82A0A4FDDC1EE99 3FCB00ACF138CA0A D1D1CBBAA68E9C2A 317BCA423AFA2DE0 F1D4CE8680892C1D 84200C2A8673FD0C 1A1529D613CB4BD7 0347C1B9845B27E7 21B0385B15192F92 2110D3788963043B DF104AC475B72B45 840A502E8CE6E55C 68FFD707B36CF006 46676F7E53E1D65D D9486892514C7694 8DAA8B753ABFF00F 542D28E311152CC1 57A81E7A1394D767 62D0B0659E2230E8 5EB61E449972CAF2 EC8EB60ED2D4B11F 73A87BAC0A57D4EB 4861D50A5E85F06D 0AB282AA750A4335 85F8223C2968986A C6E87164993C9672 42A1038944625DBA DDB8F5764FC9445D 581ABAE7F4CD51AE BACF8816BA711E85 0D91D9134A3AD7E8 63417DEC88EE2D71 0A43AF99B8238BB3 97136D9F15908755 6E56D459E359ADA8 33A0F649C9438A07 48AB9717112EB4BD 424175C03587D871 63E91C132505CECB E5E701956A281C66 50C925465D502D82 5797F7368B0FFC85 8497668A75210EA4 846E8056E6C8AD6E CFD88045532B9687 12D3AE9CB07555DE CC2DB3535EEE7189 9147B1CFC8B5CE29 C9B77D5F30D29AA9 1EA4C99C979F9B63 C6D0384868A53265 3ECAD105C46DC251 1C87B9EB4BA90BC7 4AF58744C1DF4C84 CA0490FBE2172AEC 7777BBEFC4D1A60C E94D0515E91396D7 6165C1AFD21F6940 97A1EB657B536E29 7A60708A61D7BDB0 EE136915319B9985 25CD275D03ADC862 16BA8B6B0A94593B B16609491B854760 F6A3D0DDA0610B30 F7727D259DFF8C19 A3B810E348C214ED A8E285FB0B05209C 74C81922D71ED445 1976AA5F74DB17A3 68AFC700F00AE3EE 13D55840A26E9AB0 5568069DBDF57738 5F380316462100B5 954F550BFA705F97 D915956A2C582F3E A549341F9E3572B7 7922ED393CC43E96 616CE691574EAEBC CE7E09DBB69AB21C 3DD3ED55AFAE6F19 ECCA1BAC24188C41 FA9445BD33EC9247 B4D6041B22249888 394B14AFD64570C2 845145A8EC3AB493 8C46E602BDA0338E 6FBD3350E6902839 DA24674492E72BB9 0022B4E9FEE2BBA5 C7782C9397E26528 A0BDAEE8CFBE643D 4E40AC0B6EDA2065 20E92E91A4C06E61 E4D224570E8E0B75 65D31348A6B260EB A807A31F23D0457D 630DFE69858FD280 4E36E7A28B05B1DD 0096C5255F61F169 519E0734C5C99F62 BDE4277943FCF8B1 216CCC359439A1FF A46F8852448BF5F9 73437BB9797BF810 D975488EBA0A64BF D69D81E917BE7511 35AD8ABAF7C16055 14484B7F7F308658 26EECE29456D533B 11CFE500E82E1889 1D6187324D3567ED 8DAE48C927F7BC57 FD102E14ACC71CB0 094C979CC6AB2937 B7C04DC047742CC0 6D8E67C4B60E0A2C 9DA444CD478292D1 FAB4BB848FD3316A 11239C2CF26C4B9E 99F15099D296D8EA CF7742696E1E7587 E1A407901213B087 27257B0FC9DB6B19 99676474FE40C8D9 40145976CB9E6BD7 BEA6034F115C15A4 5F017DECA4226975 5786BE28960DD5F8 43214BD0694DB3C5 768E77014E80EF5A B7C48F7DD8B61B7D C4D89EE142658AAA A4F5897BB0EE6048 085FCB2AFEE93743 BC90C8B96E30376B
- Read the ciphertext. Strip whitespace: 3,280 hex characters = 1,640 bytes = 205 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209241428(name+title). Key = MD5(password) =3405ea61d3b0d95dd4e096665b8e564c, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 51 GUIDs as hex (shown below).
Decrypted: GUID list
1 734b0e3b-8303-5691-ac3f-b12be87ce2bd 2 aaa28c4e-e9aa-3e1e-85e0-ca5982d07c71 3 63f7c911-d917-448e-80b6-7f638edfadad 4 0f0d906b-238a-0126-8de9-c942ada25207 5 12dd277d-1527-1ce4-a489-203d80569ede 6 c270091d-ac1f-577d-a619-440ee2d24da2 7 f5549b87-b43b-7f54-b3b6-174b3377d9bb 8 e4a51011-cf7a-833e-9dde-16563c9a63ee 9 a189f17a-8fa9-7e5a-ba7b-2edcc2360047 10 8281afd6-0648-66c2-a692-914288f36a32 11 40ccab69-780f-49fb-a019-a7d2506924fa 12 44078a3d-7035-60fb-8c01-6c40d3b921b5 13 53bf9aad-e8af-0ad6-9851-68c25925cea5 14 3393354a-cc14-4762-a7c6-1fbf25cd932c 15 0074f844-2438-5cc5-83ec-62c937a4bdc9 16 69e69433-a952-5cf3-86d2-b01a9a15b9c5 17 6eb2fcba-02aa-1a9b-8a8a-523c0173665b 18 87222c48-6a61-46e9-89a8-b12ced7e06ca 19 83ef8bc5-ff1e-6e4c-87a7-436dca4f4521 20 a6390ee2-f37d-1a4b-8b91-0b9e417173b8 21 3eb4401a-e488-73b9-b915-a3b243bfc027 22 844eaf86-1f70-6129-a4f5-ca89f517cc8e 23 f89a0447-a891-04b4-a296-63e6dd94a204 24 5d5cc837-71f9-2746-891c-519fa6e1524c 25 110b9921-64eb-66e5-a0c5-90f43eb5f640 26 d1a50b16-a386-62e5-84d9-0faaee13d311 27 0cf57fa5-5593-385f-8eb4-7c8765805465 28 7a12472b-75fb-847b-b8ba-675888cc9940 29 b51a659c-7c85-7ecf-b2ba-f7049856ed74 30 404d52f7-0192-2f9f-9a88-ff0b14e339f5 31 2ea91d90-24c1-0342-bc91-b9fec82a96c8 32 29d6c570-655e-3d2e-be33-4ca918cc296a 33 01f65617-1283-396c-b0c4-bb4df6011808 34 84a937de-c035-2f75-b2cf-56d4dbdea95a 35 d4e74f28-6bff-6427-b174-84504447a024 36 5855286a-eb93-2db1-8431-2cbb9a403b3f 37 095e64cd-f2d2-59c8-8903-a27d876a29d2 38 6cc05d95-d19c-486e-8c75-1c158860645c 39 b433fa7c-eaec-3b8e-b073-bd3d6381984c 40 7e4ac488-aa07-1da6-8a4b-7b3ca4497df1 41 151fa689-94fc-1a9a-bb45-b2c3ff9ac9a3 42 6e738cc0-8323-3c0e-8494-80d4541458c7 43 3e7d1871-dce1-1e5f-995a-72df11867057 44 c68b0611-545d-619e-a476-b91d54cec477 45 634341b4-c186-004c-aef7-414e1d16ebdc 46 2b706fda-b052-752d-bc85-1091bee6915d 47 d99bea32-e997-4371-87b7-57b5e9e4337b 48 06989181-2170-304f-895c-40f8312046e0 49 57c79868-b847-8293-8176-7c19e3cae105 50 2d102bac-7002-5dab-bca0-1f1f161ba4c8 51 a782c955-ee00-52c8-8178-a537168adb25
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
534015787646045514617602663872033262543113160743855. Exactly this sequence comes out ofnew Random(888).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 253 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 51; the post has N = 51 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.