201210021420 10ttz8
explained decrypted filler
3DES(name+title) ECB, 54 GUIDs, seed 541
From the post to its content
As posted (encrypted)
E84DE9D68A3D2154 FCBD534D4C9B2A29 FB9C62046CBF78AD 632C8FA7C39C0E3A BD366A5D3227DD05 CD747CF07E234592 115234C498C37853 A494400B3BB0A5FC C5359F2E62A8E584 FA4C0A8BCC386FB5 706E0BE23EB41E95 DB2617039F8CE8E4 81F772226BEE46F1 17AE4046AC488AA5 B0E2762B75C29479 B10908ABCB724362 F18F7263AF754CDD 6ABF22DDE1282560 3564463717E99EE6 FCDDC78FD8E6078B 07C082F4CAD2AD84 71CAB26E7930359A 23079129ACD2AEC6 8E3587F01436D95E F7515DC1FF91B0E2 88CB9811627F70E7 3B03FE07921405AA 271FF76F550A4607 5A5D27A3E2814F9C FF91E002A1D9EA52 F6EC3B7268D3096C CDC411EA03C9F4C6 D92C015B073201DF 57E10A7397A14EB1 85ED9EFC32BD97E6 C41FA87D172A3F14 7E882F82C1241FC7 946AC7E03CB6DA86 BBD516EE87A5C7B0 D95AAB105ED5FDB1 09CB5EEEFB25F0C1 4EF734D415985E36 65AB9C1E958BB7A6 C42DE3AA3A54D85D 998C85E72BD4E9D9 C426F6F3F537C5A5 DA5A654D2B4AF3E1 B277F561A4CF84FA 2DCAE282B31C532A E49381ADBA18AAD7 3E31D82F875E9C72 03D5869E7AF63C79 3415E3D01C584D15 7041A4D9922442A8 BBE576E5C41770C2 348C310C67272E06 FDFEA9D86D0DC604 B271C6FE13E6C7F5 EBD8992909A98C85 D31F0F8FD308EE66 F2B41D6254DD29BE C00FFF51CE9AF08C CE14BA22C99FF5E1 AE374E5F38F45E50 279D4D970E12E207 24B730301D2D3C10 6F8F4A10B912EA1D 08CE7F310814C6B7 5295378843A2B8C2 889B881232C7B851 753722CCA2AF2D37 DD6106D9AE843790 AC9F08403F39EDCC 3EFA2A4083A359DD 4654876DE46E3702 3AE2B0C4A38F541B 7F8378346B42058F DB28AB1ED1347248 969EED7C8EAF3A04 776B9E235B4FF76C EC80259AF0426924 DBF1A52E812B3052 A10EF7E74190B23F 9357AA5871DD2151 69A787F817C2ACB5 847E6C7726855486 27883CB0E97E8896 C609BF52BD54428F AE03C5FAAC759232 7F98B173671276B1 67C5FFA8685A86B2 D852A79048A3C542 A75CB9BDD4FE9CBB 4D8CDD10F3313F3D BEDB64AE0D7535E8 E94951413CE15BC3 923C2A1352149980 AE83BBC42551D6E5 7A5C0212AD121F83 75F939FE29A97B38 2E0B187D14540862 3EA424EBCAC9601C B12CBBB3EEA10882 1A99B5B54A89BAC9 F6E35F3990C0F0E6 AB91E9C1C38C7FA2 A1FE6590308320BD 934739AEE033E0D9 555C0D88DDCC8FF8 6A587E37E27BBCA5 D9E4CAE09D815D3F 973C7AFD07CFCD88 E91C032867EE8FBC 8A1612DB709634FB 364310EC4A9F0076 65BA96DC657F152D E0437EFFF70CCEB6 AE9BB6DD5454755F EB38CC74E367A0AA 9CC20D8ABD102E85 C988FBAF1592CAF2 431D7E6224A6F04E 881FE6523BCEFA95 CEDD93660A1EE2C9 A0759325A230B411 5311711BA1CB8301 8321661E3B586C09 38771F1BA62A4C5E 61EAC4ABB0049544 E41E022D2B6B2099 4D337403D9CCC4AC AD8FE4F6D17176F8 3FCD72106FD6215C 277841E84486F63F 6F1D77C5CCB96C46 2DEA42A6A4042321 38148E7396A7E4A8 EFD8A23AFC7DDEAE F102AE8393EFEB7F A71504DB23ED8391 65C1509F422BB7C6 B68CD9ADCC0C87E9 B33D2DCEFD738554 074E67A5DB800443 96E1E5F04BA99826 BEEFDC01C555BF78 A99CD36F90868ED8 9868E3A936D3884C FF950247CF908622 048E4EB217F09242 6B72923373D93B27 826F3FBB9185CE63 BAB7D4920702BA26 65AC401170A8B4B3 5E7F7C6F805C7A69 E0810DDDAF69BB1E 9A4D1562CF1E7117 D84FDE7D0846A79F 57B564BC18DE4C6D 79790E5B3EE7905D B09ECC1C85E1FC34 053300C5728A64F7 DEC3F83397D6FDE6 756F74B9845704AA 879C7956EC341F3C 70523023CE2DF5CB 6840C78B4A845D59 B189B6B8C2B45576 1E82D89D277F773D 41FAADEA4DDD1F13 14317C08A785F50E 3F1933986141B40B 7DFB1BBD0A174EBE CCDF050DB6C8DF47 C62101AB63D7C73E FB52447E85FA1CA7 26C79B56E1C7DEB4 3B7DB4C5217FEF82 3D09BD088087A30D 541E225D1DBECDCD 81B2124C0EF18257 337A749506B8F7CA 5CEEEC952387331D 1B84867B9C61B7D5 1889A3720EAD0648 766828C1E0185004 B06C39780FAAF67A D7302CCC147F9DE1 4AA5F8505DBDC82E FF02CC3EF7DEE821 7B8321773E6E7CC4 5031C5DB79E8ABCF 9082FED9F537DB20 5180E2FCE3328DB8 691D03E0D6F5CA6E 4D84A2156E2DB24A 7FDC7825165ADECF 9EE5E242148EEFDA CA22C7C37F0D19C2 F5BD9927381D2CCD 156EA8ED50332304 4DF01A1096D9AA75 6385E5EBA3577C43 2552D7E7386E6DEC 52A486E0D94BD1FE 9AFCD1492D6F8F51 66F90DA3CA550CD1 8D55788985CC351F D83B1204EDD7B356 2663A09C3DA96D3A 0CD051605DDAC5A6 57C4749E91A46A39 80A7305FF1C81BA2 AB9987455B9810D5 2EFDEB833BF86FEF A11CB597F3C8E3D4 2BE5E9DC7979FD6E
- Read the ciphertext. Strip whitespace: 3,472 hex characters = 1,736 bytes = 217 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210021420(name+title). Key = MD5(password) =827980b4a4622a0fc76f4cb5f4716f6e, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 54 GUIDs as hex (shown below).
Decrypted: GUID list
1 c3e85b74-2175-345e-9399-173c4b5b6d0b 2 a7048503-953e-5e70-8b30-aef8df1e1d29 3 95c5c340-0fd1-8d0e-9a5a-1b2b9eef358a 4 39a5e2e0-a64c-071e-b01b-7b02c0cb3ede 5 8bb14c9c-1db9-418e-8037-611d1a797abb 6 fc523162-c28f-3b19-8645-5aee47f95991 7 76aadb3d-d2c4-29f9-bd50-e2933f2f1e4f 8 baaf8003-5b9e-7dac-8849-1e6f2053c515 9 39fdb8c8-71e6-8f3f-8609-5afb78c37ae9 10 10b10889-36c4-6a17-8330-f8a7a3e2aab2 11 e5e02fe3-9a74-72c8-825f-209b122b0263 12 8086713a-4299-763d-976c-57913e5bbe4d 13 dc6f9fde-107f-411a-b11f-7004356c9aa2 14 cb45912f-e7c8-8337-baf2-254d34404d33 15 89a4504c-6e0e-6cf4-aed7-1c4e4f4b73a9 16 27e664e7-a94f-8307-aff9-32fe14968011 17 2da60349-5d62-2648-a304-0d4caab0ecbe 18 d95a173a-0118-3854-98dd-90926159e19c 19 c6b82be8-75d3-23bb-a406-5a121c508bf2 20 1efe2312-742b-71a0-bddc-d86b627de1a6 21 f0c90cf2-61a3-6ccc-b7ea-6344cd9750f9 22 e94b704a-2e22-5b71-b951-63056c650a88 23 e66abf85-565e-35ec-9aa3-fb5ad45d078e 24 43376bd0-db0e-04f0-a91e-4ddac469fe74 25 e26505c4-270e-6f0d-8559-4825aee1d5e9 26 e5320eab-8949-44ee-9798-66d2d526b0f1 27 1ba9537c-e92e-03d0-8af4-d0b7cf0918d2 28 15ac4b44-025f-8740-829a-cc8c25799154 29 6432d49e-0b5e-822c-8731-b3441d980d51 30 87ba9b1e-5f6f-72f3-beb0-a230cac8918d 31 b3f6e806-ff81-80a8-ad44-b915ee9f70cf 32 d5680222-0bfb-8023-a463-f28fb46e8242 33 bed3966c-c929-70ac-b01b-23bf33a355e7 34 a30d2fbd-7b10-4935-8a02-cb9d6ed9ad15 35 1656363f-8f2d-4b94-853e-65b0f7960f81 36 9a88a201-595e-153a-8582-a64ec15fe131 37 31d7ae51-85df-152b-b3e8-cf98d4b01e47 38 3b46a129-e018-0daf-8e0c-2caef66f6828 39 8942f116-0d71-8b79-8011-35186b647174 40 dbed3fb9-cc42-1ae6-b42f-450d3c7e2b5b 41 aebeee92-f4f6-79f5-9cb6-7a6841c59b73 42 af829bb3-eb2d-0f4e-b1c6-b58001a2631a 43 e5885477-c084-559f-8f62-79ccdb03ffff 44 9bd1a3bc-b68f-4989-a0c0-63063b9db46c 45 bb545beb-cbad-1150-93ff-7483d34ae41c 46 ce9ec96c-2762-142e-897c-c546f230ed7d 47 a9a1e467-6909-32eb-8c34-5dbd9ae7c7c8 48 a38bf442-b370-898e-a19e-04ded6821720 49 1308bd53-eafe-83f4-9cb2-b6786e67f918 50 19e6ea40-77f5-68ea-a6fe-9359be1ee39d 51 04a2cf20-517f-2b05-af14-1590c268e8df 52 80de33b6-bb80-47c2-ac17-6f4317c444b8 53 ed9b0fe6-f089-71cd-b199-4fca40ae623d 54 bf8573e2-c3cb-6331-b68e-c8e3c866ded8
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
358043278677486823276530640887887441108170541138862476. Exactly this sequence comes out ofnew Random(541).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 31 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 54; the post has N = 54 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.