201210021500 10twpt
explained decrypted filler
3DES(name+title) ECB, 57 GUIDs, seed 941
From the post to its content
As posted (encrypted)
F6A5C1C351EB6456 DEFF1BFB996722BE EEF2A6715903B221 A8F9E1A9368BEA48 512894B867A676D1 3330B2550F9F102A BA1279BE8730749C 4EEDF4592A71E7E1 AED864E746F38C58 7D3E18607358B560 D11C33627F6F1EEB 2F21A85D8F94495E DC77EE7743E02257 916177EF470ABB50 CD13ACB4531BDB4F C744B4410FB7CF74 CDC36829FAAB4B9A 56C85DF5E0E7C313 AE56DEACC6E64823 0AB9BDAB9206B364 4D2A53FCC015515E 05CE8B09785ECB18 17C7D7A03BAC5AAD 687E5A8D576294F0 C831D2C4AA2FC4A8 EAD9CB0F78391B45 E2E7835289A6D0DE E612EACC0B8C80AA 543885305BDE64D7 218A51E00F5A9927 45B1C134E9B781EE F460BDF63CD41FFC F4041EF09B5AE01F 9A664C0402CBAB70 884AF1D1426F8194 944E8441E58B87E0 663F6951C9AFD64E A7444806AFFCBE3C CF3BDB543B42A2F7 A58EC44CF1065353 1E76E9F983F03097 5DE5F398626BE8B1 54EA0A4A19EEB79F 2DA6749690296A67 FA1BCBFA86094D55 834C54B29B9B539E FC91528EB58C5014 70A238939F68F360 53AA0DFFCD5B70B9 7EC8E6CA492D6FF4 5D6FD34F14786EE7 70B5991C03B26D00 5252C8E81F693966 C7DFA4685D312247 F9F3052A8624C847 567E988599B09ECB 343BCFFA81AF892F 9A3EF7DBB2AC26C4 8EF1322CADC12B2B AAF77D298A88C665 8FCA9B7675BDCA2D FE5B2930098ED42E 62F98DF43EC033A7 5C165097315BDD88 90D862D9DDF30283 13883DFE89081C3B 50D67FE0C58F8A70 84A7A0CF03CE4713 FC3CD8B47939247E E0F8B752C7026C7B 3787E0441F928135 82C6D05DB50988D3 6E7C9D6FE9C6FBFE BFA2BC9042F9AC5F 1F2C31F6900F9D47 BCD059DB070A08C0 2A8D5096EE6512F1 94B3B34292CCEB33 BD2DA2E06B4A5D65 B5F21635CC7B3390 41726A834CA1539C B1150E15E6434117 2DA2667AF979AC92 EDF7161A78FB9AE0 59A1C07A65F4E803 1A107D6F869ABE1D B3680C8223895B7E 68CC5CEE1B518FC7 4CC1719970C654FC C4C081C4533C1085 5C014848E16B6AB9 C43C2D669ECFE53E AE132268D3497D31 C573579EE8E4868B 2E7BC99AA8B2DE9F 55CED48DF4B3DBE1 659B6DCFD2011DCA 005FD6F04DCA9568 1A3CD4D4EA4B23A1 3DFE960C517BFE17 5E22B3B558A5CFF5 696596D72BBC27C3 7FD2EBD6B0017DA2 1F2AEA12446B89D0 AA811B220788B4A2 18E5D980EF592475 E501E1A1DB4C4350 AEB2BA96135B6BCF EA0883C79365C425 C4ED842F3A226B43 D1FD6DFCAFF8E3BC CE0C244A95D89524 F7C678B1B1EFDB59 4885D11225151847 0B71B0E850B25336 3AF8DF6E8DE0D732 97D75DF673F9FB75 F323C0D8D45DEEE6 F8E664B20B22DCBF 55928892DBCEF282 E6DC245AEF664F54 5CF6820AC0A3AF25 9CFC85C12663BB81 D5F2CF48951EC94C 7CA812221E6413B8 E230A22F45C3F33F 98676D2385B27CCB 449C71181BCED4A5 38169F6A41C541A6 008A133E35A507D9 5803E9391EDB2CBC 45854FB6E2E6F9EA 0D69B666B333295F 5AD3355920C0EC48 86AD628168581C05 5247CAE81EBF4F49 AD71CCBD6BF9475E 7F5C33A28F2A225B EAB5CF3D6A82033C 0DB61075CF92108F 74236FAC8D4CE17B 7990D91EBFB68FC5 36E1631347D3E0BE 83D5FE5CC9C8B684 E8FC8E956DD46F7C 407A89FB2308F77F D668D35A92DEB63E 3388952427743244 1513963E5FA008D4 1E3A81AC2B304214 C7E7B38B334D75A8 ADC3F4FE4A216C20 4E5ADF6BCF1B095E 4D14350FF6D142B0 3F638B52BB6758AA 928EBF720BB6B52E B51B55A34163BCC1 C30D2B389D9FDF2C 6589FC5969A68A3C 654279C1CED854AA A528BCD719C7CABB 3CA6910E24610D7F FEB3EBA7F7B4A7DC 3B4AB45009FC7542 8D11535E81DAFD68 6400BB8097CA1D97 3FD1DD17829374B1 BB461D4C1972735C F02B221918DA2C34 7BACCA0386638ADA 257DC9F6B8E1DF62 298ABCA0BF6FE2B9 0957ADD680FB8334 4BFF438C83A545F5 C0B0F56D6198E289 33CACA02055F5D4E BFFF968C055F4421 D4CD38B83A2AA844 DA796EF06BE9E6A3 0D3F31948D6F7572 792A5FE32DF73574 A78F94D4924E203D EFC55C1FA2A7CAA0 F50D730ACB8C17FA A41F03331A822E8D FF1C2AD1D60316AB B4B9FF11C6D08313 2BDA5766A9060BA4 1B3D228B6A41ADA9 C72022C3C7B77A36 32B1D356F7FB8196 8E05EF26AE1E753C D6E511B785FAA845 F064945905B136CF C5459C9C22167A81 6F0B9B4071D940CF 8C8A8844641D36C2 A2FA486DF6713974 C3FF8EB8283766AA 7B608868045A0FCF CCE84B583EC79C1D 00F2FF52C28A19BE 62C77ABB55583282 47550001FF9E7366 9926EEFB761E26B7 57A2BFBCFF76E588 26224B42F4927A1E 4A2576E337EA838A FFDDED7E1566DEBE BA8176266F8129A4 4CF63AE08F8C7D7A 426D979B923DEB18 AB18185CBC8901C3 918C13E3047A6E23 C952963280F300CD 6E5BA724027CC629 B395410EE0AF45BE 6B28E4532F1C9390 5257A58A7618BBCA E37FB6B70BB50324 3830B2FFBE9418E0 D70B4C9B41E17E02 329D0CA0DD3B67B8 2A606ADFBEA5095F F3C6849DEA3555AE 8AAEA2C77EF99148 C42652E0174572CE D8C87A0FD4F6FEB1 76345B8618260C0C
- Read the ciphertext. Strip whitespace: 3,664 hex characters = 1,832 bytes = 229 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210021500(name+title). Key = MD5(password) =a3f494d3533781a140d86d6e03773e24, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 57 GUIDs as hex (shown below).
Decrypted: GUID list
1 3a40eaea-71a9-29e4-99ee-28d4adfe5854 2 83325225-f49e-8975-b0cc-47ced31cfc32 3 31755814-0635-4cf1-ba9c-dc0b64e3b3d8 4 499bc04b-4e8e-3e8a-aa7f-473d1a60f76f 5 4477e21e-246e-0b96-92a9-7ab1f6d3bed4 6 fc4b6368-829f-8bf5-a9b1-eb788e4f675c 7 81ae2a9d-5c2a-4797-8dea-2f27bd25ff96 8 cec1adcb-325d-4b7a-9b40-00be53f8c2ef 9 a78e9a60-2e6e-3d50-b805-4f3b0808b8de 10 315f8923-66ce-2918-9604-b6170308883e 11 c7cc09dc-a5fb-4768-97cf-ce566d1450ee 12 e2d06d61-bb36-14d0-9143-2010c7a60e6e 13 aac7200a-b6fc-4fbc-8183-28947af5df77 14 01e76e82-3582-0d23-9fc6-b008578ce1c8 15 4749d30e-4a85-54c8-b1b9-0b86c369352f 16 95d26b73-1c5e-62b0-9c31-23e38c6d4454 17 70dd8fb6-7d47-30e8-8e11-267a67e6744f 18 93e1588a-e83e-307d-9822-8af577b58841 19 9d1fd397-6b9d-1bf5-a2d3-90196d256a6f 20 319e9fb6-d088-608c-ad07-50b19f070324 21 19d7d57d-171f-71a0-9fc2-20aafb001bf8 22 fa1fe5f5-630f-6603-adf3-2dde740eb667 23 640e2805-7c66-0e91-a0d3-31be0eefb8a1 24 3849cff6-f68c-690b-ad04-2cabe18261c9 25 6886e600-a3ef-89b1-bf4c-0734bcbfbb6f 26 ce59080f-91e3-6c98-8cde-daba3a57d5f6 27 48b85264-e736-8429-82fe-3a50e93d8a8e 28 33f64043-ac0d-6ec6-a96a-5473b90c5db1 29 e312f397-daaa-418a-8c7e-a116857d69bf 30 36a6439a-6f75-835b-86d3-a3ba22ba64e7 31 0cc07ed8-9fbf-5d62-8885-397f085a00b0 32 ba4b3b0c-f9a1-27a8-ae4c-81b9050ce4b9 33 321a67d5-d4e3-6baa-9235-30bc5e9e3c8e 34 e7db9d1a-63de-5101-9853-fa392c7256a2 35 3172863f-b2a5-19b0-9e00-126057f81644 36 1396f991-4430-4509-bcda-fd9437ee0b53 37 26aa72ec-c43a-497f-b7ac-0007904ffe38 38 cba08479-8295-6a37-910a-393e36fa1ba0 39 3ab8eb24-0983-4d8e-8c8e-ad724704886e 40 7e12d1b5-897e-21cd-9316-b77c1edccccd 41 973a59b7-dde0-806b-86b2-5821db274f40 42 a91e0daa-6f11-1724-8b4f-ad63fb882412 43 ad7f06d1-7e33-44b4-aba6-654124212cd1 44 59a4adbc-4071-60d8-b25d-5e2b324d4cf0 45 cb83632b-d86a-09a2-9c80-285110ebbb85 46 bb0a9743-6cca-4fd0-a0ec-a20bc5e606b5 47 5538afcc-b911-4f6a-928e-b7170d771316 48 14dad845-c7e5-1f9d-8e3f-5fe84e58946e 49 4f7da94d-c259-05dd-b3b4-258734a1cafd 50 1f1e808f-ab37-597c-a62c-26da82b8dfa9 51 abc09f18-5728-6116-b7da-a2ebb7f7bc41 52 86be737b-7631-76e0-92e9-4fd068116f0e 53 564d4b4b-d719-4b1c-bc16-4fa812ce719d 54 9e1bec09-f1f1-1ef8-9cb4-1b1f5bcfa133 55 794398b1-0499-5ab1-bf05-77257198440e 56 04336a9b-d8ea-5d86-8a25-08f4256d6af5 57 be53e502-cd45-875c-ac18-835cd2e24802
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
284308443241405633167606868648526514464281460441056741558. Exactly this sequence comes out ofnew Random(941).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 33 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 57; the post has N = 57 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.