201209270959 10kvtl
explained decrypted filler
3DES(name+title) ECB, 45 GUIDs, seed 949
From the post to its content
As posted (encrypted)
60502E39241BB1DF 0F3CC0D4B1309A0A 2C654C6ED5C04D1C A3F3B4461CEABA06 9DD0AD7548C85B8B 27064D973F2E91AC 3889653D346D294E 104EBDCB9B61436B A40F5B5BCE4ED484 5DCCA72B7B0BA674 1B284FF57CB3708B 01BCD1C8A5AE3EA6 AE35FA9076CC7A19 9F05421835900F5B 1FD98CCB2B654BE8 25F8FFACDED5DBFC FB5E0E2C63CDE2B3 459CDA26E3784145 36133306501058F3 6489A1EA5F5D41AF FF6544C5BE13236D 9F9C45666AAD57AA DC0F94087012C565 8BEB0F09BACAA9AA 5F89DDC366640FE5 D679CC01C057A121 C4FEA73FBAAD23A2 EB2937E3E2CF35B6 4BEE711DF76F6613 9F35FED0346A2622 55604B0155752AFB A6C6E3A56FF68CCC B93D914953B893C4 3847A9A2FB660CF6 E4D814BCC5A65F3E 101ACB0A25421953 08450B90F389FFCF E8CEC8F6D251C4A1 0CB354A60C152284 8906ABE1F188C816 DB9FFF8268E99F73 42FECCA3CBA05CEC 2C8BD70ACDC15BEA A17093D7C8A59038 CDE5030BDE62B7AE CD811A5C58610696 ACB92077E16F8D76 9D80A65EF126FDAB A45E4BE933D7CB33 03AB358969851F6F E596DB0E8ED185E7 FEA58DA01F7F8AEA 39D9358A183171D0 ECDD08F1131BF37B 58885D94B6C5A9CC C11A0B32813ABCA7 1378B5960286D256 CAD37BF372EC1F29 A4C00810E13C4E5D 604F5DB4B6A8EF5D F7CD2722A2F2C9D6 B02E055136EF9F13 89818C8DC523346F DB48D7ADB28122B4 DE35D3120C46FB67 EDFDE0A9F9F04BD4 19532B86DEE98D46 CE99F0E482E75CB9 6457B90AEC00F9F4 23096DFC38A23381 FAD8287F25BCBB83 418B763876EC71D7 FABED50475A25655 38C914651DA5B9BC 040A023BD59455AF 220D2290039E9A7B AB71F51A3AEC143D 7F9499CCE26FF80C A6F6411B5BC3F827 BA25631EEF5B2E32 A328D1671076D4DF ACD31ED3C77C430D 1A46C911B401D533 8A5D0535349C9651 B833C5D30E923E4C A7BA53C210D4A322 8C4508E206B2BB26 5C6A9042C3D6BA73 B372512C68A93E65 9A990CE4E33A84B5 ED54F83AC9E28496 6659A5CE74F0988E 3C4606318A1D0D2A AD8DCB0513F639D2 F99F412D315E3D2D A477E08FF713D109 875C1DB3A7540D3A F304A445A088DA64 A1062B5218061B78 8A93F11FAF804B08 ECB98623B89E7560 6B6421516880033C 49D1960D6274A91C 7153B2EFBDEC455E 20E820116ABBA502 D7B25F1A3E9CB047 B1B62709562408A9 6486F905D5D47116 13B7DE1A6E1C2D02 BE596F990BF9ACC6 408B867DEC317018 B5C7EE6BBC7BB1DE 5BE4D265B6ECB1E8 85866598861FC09E 332E1DE7B695B224 BECF1F3C6BF9EFA7 9DF7439AE36070E8 07D05ACB5AFF8C05 5DDECBCBDADFD677 9B0AED8F79C408A4 B80794F498BC082B 95C655A27F3135DB BC61DFB342D1B237 D78AB1B5380E70CF B386A2A76E3FC5EB 0FF5996CDF38289C 1C3D3E5DD861EA23 924D29D2A65D0516 14307E7F1521ED78 042D096AC9201A02 197F129321E7A060 64CFBE2189F1A72B F7F0B2AFCB623C66 D9386052A58D50C8 5BA27496617B063F A3830945E6256748 6D3D8432D77BB363 DCA854D3566734D4 9046E720C26494CA 313117DE9815C937 0DCE2DAC926FB645 0D6FD576484FDB16 B86A0F51A6ECD20D 7B83E84FABBE8391 50B308B7BB3CF8D6 2B255650EE7F40B1 651033CF7147A30B 126599A05459A8C5 CE88A3ACF2E16AB7 53468A55797512C1 209B087CE40BB7D6 8EAC1FF990A3AB5A 94AAEC5AE0BA18EC 772B6359F74B3B4B 21DE5D94CACD8ADC 6959297FE7A072FB AFD3E5C017CE47F6 507C48307824F6C6 3EA0106F9D39D515 65CE07ECCC6864E2 C7A796D6C6A45E4E 9A556157375438FE 2C6350AB97719EBA 933783D7633482F9 FF0E465C7E94BF97 19BE8EB6F04F8F71 006A6A985B4904C7 D836C81D6B973001 9A36473549199DC7 BFA1668B87CCA345 044E311709CD0D30 A59A310F1275BF74 B4487A1072DFE343 5FC745D54AF2D021 9EAC2D68528783C8 F32E559955478B55 7D0A76E7A8396C30 89BD1DCB420C0819 1ED16F1A0F0B0BB1 6535693A7D26EA07 5AC8B896CA16ECFE
- Read the ciphertext. Strip whitespace: 2,896 hex characters = 1,448 bytes = 181 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209270959(name+title). Key = MD5(password) =875fef4fea53373f86d8bb2e22e7b873, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 45 GUIDs as hex (shown below).
Decrypted: GUID list
1 1194a0ba-6852-40ed-866e-176e7cc64dda 2 0697b465-76de-25e3-8c51-68c774b1dcf6 3 83bfd6b8-5d51-0e75-99d0-1a2a15acdedc 4 46744f1f-6af9-1358-bdd3-bf72d641abfc 5 f78437bd-af9b-546d-bce1-3a57beb96e13 6 9f07de4d-1f0b-7f36-a800-723b2ae85faf 7 a5324ab1-2480-1ff3-9705-cc28ecf28d22 8 efc3402b-b0d3-426c-871d-9e8634d2d1cc 9 8f04ea58-f275-332b-8c24-058dad9afa16 10 f8cd5844-691d-16f9-9ca0-36032dfeeb67 11 2070a35e-2fb3-456a-8913-017f3b98d543 12 3529f4bb-92a9-3b81-98ac-7b26645c4e3c 13 0d30a8d1-47cf-09cc-8d8a-d10220e5e6c7 14 c226ed7f-7252-1ca6-b059-579cd5b8a7a2 15 5f0a269a-08de-24f2-b51f-34d80936b8df 16 f2d52d74-e8ce-6912-9075-907266764281 17 b55c82e6-17df-7474-bce9-f18e4c0de9e6 18 bbd835f3-e76f-3760-b7da-0e1005d6f8cf 19 f6f2b12a-c55c-3cd5-ac93-9f1a99d50348 20 a8d26e89-2743-632c-b3e2-675605c03761 21 2ebe6220-6ecc-802a-834d-6842781d7d94 22 0836cb31-6ceb-63e2-bdb7-3c8b36b2e7e6 23 82b31f78-01f5-3a0c-b58f-7088295b973b 24 ecec8115-6383-59e4-9ad9-359b55164bc3 25 4fb846dd-fde3-6913-96bc-1700fe8397ab 26 3f22c194-8d76-8749-91ef-e436f7a27277 27 1393ff6e-39e4-70ba-bbb5-abb5fc5dcac4 28 db54349a-df80-6449-b2a0-b773dfedc9f2 29 48fd7839-3b6a-6694-b39a-77fe4d5b8baa 30 4f266c56-ef1c-3660-879c-7abef98b11ff 31 4bc4d95b-d882-48a7-a134-9ac0edc9c141 32 09447c30-6443-3a64-af19-6c515be2ca9a 33 5bf6f582-f90d-83ce-aceb-ca1fdb9966a0 34 88408c89-9e79-71d3-b80d-c97e9c688a58 35 c2778a90-b45b-0420-a77f-2c76f737dbb7 36 8337ba8a-4bd4-812b-ab4a-febfda204a50 37 671c2bb8-58d8-1efc-97dd-b76a5526320d 38 fec3e2e3-906e-17da-af36-029bf170ec2c 39 c4539239-6c72-743e-b384-eb4039e24fde 40 6f5e23ce-a235-76ea-850a-c57d2ff6b3ad 41 9d7d2d8d-f298-02c2-a8ae-f45cdd7a2d96 42 19ebf0d9-da1d-35bf-a770-4ef2479a5b38 43 eac407c0-b977-08ea-82f0-f6750831eb36 44 66045663-e850-5178-8a93-65072bb9fa99 45 dc411e26-f4d1-29e0-8d86-2d5590fe7445
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
420157143143012673368635687663438708117703052. Exactly this sequence comes out ofnew Random(949).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 265 of Run 34 (seed 83,105,000):
new Random(83105000), Next(8,64) per post. The RNG predicts N = 45; the post has N = 45 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.