201210021100 10thdg
explained decrypted filler
3DES(name+title) ECB, 52 GUIDs, seed 766
From the post to its content
As posted (encrypted)
092B002CB223800B 9B00CDC3C05CA6FA 8D63348762D9602C 176D247A36E82B9F 226ED5A2238B4CFD 10479953B37E6F3B F35BEE998998FA69 F457E5507467831C 2DA40E657373D0B0 E4826E74D92EC3A7 AEF2C9C0252F470F 930679DE7ED28C9D D4D21CF7AD490CEA 2E4E1A399F345716 D1541067A8A3D813 D1ACF46FBCD68997 2CB3FB0BC41DDD0E 2C830F354F96DD77 54E68EEB4288E212 2CE1359B755A2FE0 4B6AF1BE8546318A 136385AAAB3B195F 0F0309D19A0C824F 40A4249A72475A3B 255CFC13B4CBF812 AB1ABA1BED3F3555 299D6BBAA2A1DE28 17591A5A176C1922 96254C40FE4274A5 836549209157D20A B6A9BABD2D3B0ACB AF8ACDE45FE45D83 17330E76075B3036 DA84D5133B387733 7C27FD4E2399BE20 8B63E213D809DE45 FDABC41AF84A54B8 8AFBD489594248C4 C196EF25EDB878A3 15F966A7DD5A36DE EAAF06CBFE209677 0BA0AB3D7538357B 042B169E64907BF2 ED0722D034214BC8 2B17ED61A38D8721 313AED88AFBEA5DB FA3AD0540280C3F8 3C11F332A0834416 83754FEE1C10B8DE 8B94222FAA41FB1D C169F6D442FAF792 856AFE7DF48E1DEF 5E8D5B9632CF178A 070A09377E664D3D FC1FBB3684407F39 C777014B5FEA3A54 42C66C3CD30EDF05 C81116B7540E01D0 51B5B9BAA9568D58 845958580BD6D551 4DEFBBB6D8A7805F 7958976DD3EFFD99 B8CB08EC13ED6D2B C7D2B780F88950B2 8AE9910371294C1B DE09F7CB796584F9 3533C1AD0219A85A 8FFA28278F643A66 81EEA4A7E6D94E80 FB14344EC99E07A4 340226E6518644BD 9A0F5BB06083DD3F D56E3D7D1D1A5FCA 132214B86EB8A8BA 6DE231C3FEFD51FF 74ABABE76615FC4C 0736825BB0ACDFD6 9F15164626B26A1D C38471CB8767FC7C E67A9D2607134E55 D253C9DA5782A887 2E4CACDB3CB9376E 7804318E0E93EB5C 76DB0F72F681934A F8D73A3E1969AB7B F0D3245ECADD5C3B 9B8A88F60E949A74 A8425CFE573BAC98 2E026B76041A78F7 85C31EA106819F1D 9C1009166D073D46 5E0C37647B0FFCBF 6B789EA6D9B9F601 D8BFA6825BDB4CD5 7B28AAE306E84603 318C049E1A512BEC 80D7A4F9577CB2F5 587C1B4D59176F34 03B5A031BD221EBB B6E2CA51FBBD8A37 40C429D47543C25C A59AFC623AC61639 C3F8DCF6E0B8FDD1 7FFAF7F2FA4259A8 0F6FACD8A40E5F7D F3157AF7B3B3A56C 15F14FB4DE8902F0 2513AFE499FA903D 28E9A449DAB91761 3DA0ECF3886F4EB7 07E3148994353DDE CB3A0A0FADD7DE67 450F4B0D297640FC FB7424B7DFEDBFB0 AB028BCDA237E4A7 E4FE7CF7CEE88EAF F29C02328538BBAF 8AEC2BE0B6EDED76 D9A24C38520C9AB4 1106396E74AFF44E A6A10BBEEE055E3E 3AF548A8F6E7AAF5 A8365F668C449EAC 9B0B78163B669647 6BAA63D2A6EC0C9E F5591FFBED551298 C4B568E7CB97047D B377F191F37B3B68 B20ACC25885A4BA3 CBA54711CCF6B641 48C509CF5BD314B1 38676C1D6EB4F589 D516DFA58105EECF D19709A941616248 C2736C3EAEC79A44 2C89CD88698E26BA 21AE22D99DCCB570 13352825393C1AAB A3619EA23218F82F 01677C7449B6B49E 32ED9BD81557DCAE C1F586B1234766BF D6F290EAB2648591 BB6B96FC0658DC16 9B17164F716DCF53 D6797686CE7D7570 B86789CF77C779C2 F39EA49D620B2BAD 46694EFA1E4CDA56 E1B9E38315D4B0E6 2CFC53422F798679 DF62C333FA27CECF 2E3C132A1AD2E820 7ACAD40F7A7927A2 BC8F55406ADB739F 2B8CE1AD45780B45 62FD172F20309934 8C868843FBA64735 9A56B5B8069C53BB 72C8F56576683C5F 1392EECA943D839E B13ACF598E10435E D538ECAD34CB7543 54AFE1B4013F351F 565E33338D705634 3EB9A7C1E413BE32 F261FFE20E3C3AD6 6D7583D64CB5C0AD 271327AA377E74E6 E284EE6B54CD281D 65455BF3CD463897 1E66647CC568C577 7DFDA14E064D9933 97F20BE7B70A508A 7FC7B613E9F78F09 B76C31907AB9B0B6 7525B014034559C8 6CA10D7649E2DA5F 64B7E567F8275C3F 822BBD26DEB04991 0CACE1B13D03D7A1 F8F25D9C066FAF12 3177B2668B2FB8FA 44C16E2726FEB432 58CA3685153755F8 C4F3BBFB0282A505 64E4863072107EB6 26A5D50BF2C534EB 1FC43A0E3F6553E0 36FD3B8A2AB93D5D 515E480502797E96 85BC2377CD11E0A2 94B8DDA1AFCCC84B 8DE54763BB0563E7 D9E8022D5445BB56 24332A338C543327 EE25717206D781B2 EF6B546A8749A3CA 7CEBDD11134D9636 8A6BE23BA1F06D5D BCB7A6B0A5B35384 2961A0A584E8AE89 FCBF06034108E56C E45CCBCC79D1FDA6 6C32F6FF8A04717A 2E32B654483D220A 169C6581446FE98C 563517C107EDF661 753B9748E606E3D9
- Read the ciphertext. Strip whitespace: 3,344 hex characters = 1,672 bytes = 209 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210021100(name+title). Key = MD5(password) =d4e642de11a4ecb9adcf1fa0d6b62370, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 52 GUIDs as hex (shown below).
Decrypted: GUID list
1 d4921223-a9d1-85da-b97f-6cb202136b7c 2 1c2653ed-b5d7-584b-b42f-9ef7812c1bcf 3 d3be3123-a6bc-1d76-a9f9-5f7bb6fd6deb 4 00148792-0980-0b2b-98c4-9d0f2fb7d948 5 0edf84fc-ea31-0c57-99ad-25b03bac0031 6 eb52d8a0-bf3a-8897-8b73-8895795df40d 7 9868138e-e62f-1d02-a6c4-e11afa696046 8 fa8f19c0-72c7-637a-b318-d403ea3d9a45 9 6c63fafa-b9fb-6ec6-b175-7c4aab810a17 10 5a465a67-53d5-660c-b59c-4c9185cc0f97 11 a0408fcb-c829-5120-b8f8-a98691dee7aa 12 cb4c3dba-a12d-4ff6-91ae-d629147078f9 13 9faed4d6-bfc9-1ab7-85bb-05718ac16231 14 d169aa29-129d-8864-bd7c-68e8e0321d73 15 e0b78045-f381-1b81-9849-d4145c9bbaa1 16 c8bbb088-15a3-3721-9586-18dfae7757dc 17 15c7f9ba-d01d-7339-bbe6-3d0ed6593115 18 21b4db29-400a-874e-bee5-b231ab6b1d58 19 3c0399bb-f453-3b4a-a115-661350c47b63 20 cadf8dda-9e01-8d7d-b381-22ad41b7c65c 21 4c434820-1875-5ff9-827d-ff00170126cc 22 8cb9012b-7a5d-6491-88c6-93881c660b39 23 6594fd83-bf31-493b-adfe-daabe8e5b8ad 24 91472740-721d-506e-ae39-69676f6b9aba 25 cee9b4a1-1085-69a6-b2ca-66bf03f012bc 26 60ce7f75-10db-1a8b-9090-91127dcb548a 27 1dd38efd-f90f-4903-9674-377e42dabbe2 28 c1456121-600a-230b-8731-ac2994336684 29 a93cec21-1e71-1cba-a50c-4a6b730da35b 30 034ca7c5-73f6-8e3d-8013-726ac2b2c513 31 7e12042b-4b49-8edd-b2fe-834ca8df2f76 32 fb628fc7-ff8e-21d4-b427-7365e5828f54 33 25e8fd07-b3d7-251d-a36e-2c0a074570f5 34 f8fabf93-fcd1-1eae-b2c6-484f6bb20cd6 35 7bd09db9-71c0-17b8-b17f-b7f59ae7001f 36 e3f712c5-ea95-8e88-97cd-6f5208c68eb4 37 998abf76-0430-4059-84e8-efc71ba1e101 38 feb1810c-9bfb-3a59-8bde-60809314ce8f 39 4e32f12d-048b-440c-9c22-4797e801a5fa 40 95748429-a242-82fd-9d0b-f76f9d8f743c 41 24f23b60-a0d0-5707-8930-f1c6c167def3 42 dceed4a2-7293-4d75-a023-2e112c91d811 43 a4c22349-f77e-39d7-ac4d-4beee9d5a65d 44 2bde72e9-fb6a-8e44-806d-7290e02694b9 45 38dbbf59-7e49-62f0-9562-e825943bdbf1 46 c72657dc-41fd-38e2-8388-b6571e79a6d3 47 d68f70dd-2612-8ed3-9ed0-995f928591f8 48 706e32de-28ee-42ff-b434-2eecc51521b9 49 92200380-0174-81b6-977e-b19a18badaba 50 26b35206-54f0-4f20-b574-be6b8d69f9ae 51 e03d54f3-269c-3b3a-a399-3f9204d17411 52 ec40f6ae-17fe-8616-9682-2358e762c9e6
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
8510081666541813783856456142188221184348543863848438. Exactly this sequence comes out ofnew Random(766).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 21 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 52; the post has N = 52 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.