201210021800 10u8zm
explained decrypted filler
3DES(name+title) ECB, 47 GUIDs, seed 767
From the post to its content
As posted (encrypted)
0E5E9DD5756DFDFE A4F9777F204F7C25 4EB925670D215896 BF69D95869BD2828 D2CCA9025B25E5CA DEBB5B80E5892C38 AAC2DEB0A5C7DF1A 060A79A92B02016A BAEB69603E11BA3D E311BF5EEAE34BF3 1D891D00EE9373FA 0A97CE6DB56A6805 AEBB0164D723A74F D88212EA7030C5BA 36182649D3015206 43A5B977CBD33CD6 EBA9C82C83CAB761 2CA762BB48F65F11 92F60FD923147AA3 58786A3B0BB9E200 7AEBD58E349007BC 2FA2949D29E366C7 B338711A7F5FAC2C B84D65F3FE872DB5 C8727B546DDA6EAC 9294B11879DAA447 C144647A3903B7D0 FCFF23928B2345B9 82B9BCB803114E10 F6E5ED76B1EFAAD2 4C6F4953CBD7A002 6129EB8A0C5E4C80 CEAC4867E304F59A 16C71E24B551AD9E 371D28A39AA9150E 2DEC37FCFE25FECE 918A4D260254E4AF A67091AF84584AED 1310EED4C417DC31 C1948E7E25FD0106 7D556056257EF78E 019266784B969A00 C6FED3F9A7102FE4 D4DA69C47F80EAA3 21B55C90B92237C0 507640AC383E9BFD 148DEC2E234611F0 BE68E37BDBB866E8 56DD0AB5ED2E2785 813C91352924FC7B 7BB9A138C049AEFF 05FAA5C5AB9DE852 D9BD644491F3060E 1C0AA2511621F61A CD9CFF8EF0546DFD 08964D37154999D4 6759566B37FD3FDB C358D77CB23D1657 1EC515BAE491A6D7 5288A7EF94BFC85A 0A02F870C000C294 4BE95D397F84E21E C9A6CF900CB79297 120C5C15F80EE79E BFA59C4BC8232E95 17C55297B2200846 76119BF94DF754B0 778892D21AB80E03 ACFBD39461D55927 A908542925EFBD57 15D16610DF1FE9C5 E42CA3359CAC0A4A C266B65E7A0E9243 0CFD84B286CAD8BF 2D80599909EAB4D0 1F0F7F9EB9057929 13873E68586ED422 EE781116791A2DA6 AC6256941FF72E25 E39B446EA2C8CDA8 C4FC6E7E39B54AFE 5D4BF977AFC87497 3468851043CCAE93 BA3DBD93AD6A28DB 37025E5802C6B40C 3291329F762627FB 3038BAA2EB5B8071 7C22E2C96A247184 2AB75ED146B5194E 06C0681E988DE10D 8D07DE4C3D18746D 0BAA0BB2A7F926E7 CE383CBED81BB055 DC85D64B70E566B7 44795D416DC6E188 72A3949537239497 9D9F907635F51F28 1E79B4FB59958D59 94F3E82ED52DA12F 68057722F4CC686E FDC5018181E31276 2DC18F2E2EB5EF07 673155F5E2C2885C 6A6163D407E52D32 8D1F0E7C1B0903F5 51057D216D98157E 7F5E55FB334D5F1D 1E722FE0F706EBAF 8D468D26ADDD5990 9BB33261AE44B612 D67C2E99F3CC66C9 2A36E3C996081E0E 48655F751BF6A4B1 C962E0EA587546D4 016D2F3A9718B3FA 2CCA7718F3169B55 0FD896F3F3FCD1E0 93226DBCE356429A 3108C6EDC277E71E F2E61F2D4E9DD10A 2A82A1AC86B98AB6 786C0B82FBBDFD37 6D9769FD7200405F 731280ADDF646249 02D6EF32DDA46E68 5AB58CC72DA94D8D DE4CEC247613F545 761396AD7A3AEB92 007289715A01B54D 88B145EE072A19FF CAB4E146F3DD7877 13CBB5552770CBD5 ABFEDC76556ED13A 668F8C2117F972AD EF66FCB7533B2440 59AEAFF1C809407A E6175A3EDEB62A70 54BE5A53BA1B5C0D B10576083794F7E4 3911AB4A749538DD C5B5F245F4F84FA4 823B66781CB8ADF9 1DFF97546143A117 E16B81A268BB50FE B7BB682DF89EC996 6DC86CA90EA41C7D 11E1C5D55EF85A21 9CBB3431723CF8D8 611D6822CEDCF041 E16561CB4A440C22 471C8DC1696D21C0 EBA2AE4F17DE5006 605DD759513BD7FD 3D22828710DD7DE7 7098BCEE7A7DCE8F 0FBD14578DB1030A 1B6D9BAD41721E1D 063F5E6A4A0E7B4C 3EB575CF1C0F5660 8C1FD5805C385E95 5D7CA647F170E341 491E1B5C4D934F58 B8BE077F531AF54D 2CD56198D68DBF0B 41B66D6C83DA2AE7 B277DCEE4C3622EA F5BFE1142A6B20DD A0525A8FC4C17525 68B2EAA9944D051E 721B8C3001CF248A 679B7A35BE46EE2B BC8E3FD683692738 8E790E548F01D5E0 14A599402F2EE998 4584B0E0C02CE2FB 258964B28F7FBBF4 77181ACDE900F77D FA73CEB92B3FCC93 AA3611B84204F6D5 AF471C90DAEE4C90 75C83CEA2BD51597 7818BD1A0F7858BD 5E013FD1400F365B 2347650F357B6A52 C8740C94CF236947 C708BBE69D81498C F59653466B8D335E 45E5206ADDE0D829 8F2F79BBB097141F
- Read the ciphertext. Strip whitespace: 3,024 hex characters = 1,512 bytes = 189 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210021800(name+title). Key = MD5(password) =886a1a91c6ecda39d0a10a852fa4ca17, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 47 GUIDs as hex (shown below).
Decrypted: GUID list
1 03772dfc-ed5a-3930-a657-20985135d0e9 2 347134e0-9201-7305-a507-7a01327b3fa8 3 1efa972e-c141-81fd-99de-81eb96f6a1ea 4 1d2b68b3-c130-243c-b694-834f4b72b824 5 b8893a3d-2f01-4d31-bd2f-5f9b88c38c8d 6 14dd26ab-bd2c-7908-8cb5-1acf60ee7c1a 7 74c28a2a-807a-5972-8a10-26a22f392453 8 b556faa9-c3c5-27a6-af88-2b036fc86353 9 2dda29b7-fef5-726b-a69b-264287403920 10 76fa4069-b2df-000c-bc20-82c0ecd8bebe 11 102a8585-946c-3f55-967c-eae30e5c2db1 12 47196485-c0ef-22c9-aae6-9730cdea25de 13 934c00a1-8475-8af0-9cd6-d4b4d61e469d 14 ce06bec1-e760-4eb3-9d57-254ead134a61 15 8c6857f8-8a3e-73f3-b98f-c35468a4dbd2 16 374e6b26-53ba-0994-937b-52899af39a3e 17 6cc30d92-cc13-2f0e-94fa-92b6a85cd1fd 18 75280bee-3050-401f-b165-c8d6a5c5d1b8 19 f1ef9280-6410-3d2b-b947-5e11e9a9744d 20 627608d6-1b2f-2655-9a86-84668b8b544d 21 03d83318-e4a9-6211-bb36-164126fffd3f 22 dd081660-971f-0a62-8a99-48b9bc686cae 23 a1dc5471-e69f-5650-a1ad-c11288dc4bbc 24 5ec5d7fb-ee1b-892f-8966-6da6d00c502b 25 17057a24-45df-72aa-8d88-1284502f2643 26 2576ac59-9835-7024-b439-48e6ccfb8ca8 27 f24ab923-fd71-31d1-adac-ac7d91ca2fbb 28 b81e5262-a557-8fb7-a13a-623d244eb1d3 29 b561a921-64b7-3080-ac8a-dc9bf4345326 30 62749cc8-4305-7187-a4d8-ca190688b9c0 31 aeaee1a0-1be3-315f-bdfd-4d718d358d56 32 0e3defa6-2778-43eb-8f6a-b3c4dcd31488 33 15a97c95-ea8a-6eb9-ac64-9a9986ffef52 34 a28764f9-33ba-1992-9767-b059ac7f56a7 35 3b842faa-9a0b-4334-9286-6d17cedc1c6d 36 143ba8c1-68ec-0ba3-b524-af47ed846c01 37 be9f35e5-a3c3-3d70-bf3b-784f45c474dc 38 f8eb2282-824b-0a16-9841-0e83a00f2382 39 33e01973-7dd0-6d2e-be2c-4ec54ab7c93f 40 51c69b2b-e4d2-4aa1-86f4-561d906891ed 41 41cb52d9-043d-2577-ab35-b1cf1a0b58ee 42 85c0c9d1-f563-7100-99d0-24afcad048a9 43 fa7d6a17-2a1c-86e2-83be-05d886f33b67 44 ca455dad-8049-0a36-a782-bb3686e73db7 45 c95d601e-523d-235a-82ca-80ebb182121d 46 0bc631a7-b8cb-2ca8-b83e-0d18ea2ff20f 47 23799c9e-877c-292f-b2d3-d2c9cb8fc15f
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
37824752703284702432605877383734614030642780222. Exactly this sequence comes out ofnew Random(767).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 42 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 47; the post has N = 47 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.