201210030120 10v0lr
explained decrypted filler
3DES(name+title) ECB, 35 GUIDs, seed 154
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210030120(name+title). Key = MD5(password) =a0699d187845b134ee2b65ced2389f0f, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).
Decrypted: GUID list
1 717a1501-ced9-173f-a269-2a80dd185a72 2 46adddd2-5c30-03d8-89ba-475681545ba0 3 59752efb-4c87-3511-86e7-72cdacd80034 4 57fda777-72f1-39ff-ae90-99aceb05fe3a 5 21ff5586-1338-667e-95f7-ba000cf7d81d 6 a9d4360a-e1b7-1636-a053-0aee2f8d15d6 7 f668a683-e38a-888b-8e68-f07550e20e76 8 e47dce89-a5e3-6384-bb9b-18930b3ba83f 9 48086706-e37e-03be-ab07-85a96ca6c1e3 10 d1c998f2-270b-0e52-89f8-3ceb97512776 11 8dee9f6e-36a0-62c0-a6c9-7e76712a107f 12 15bec6ac-df98-6028-8568-bd1a1af0dccf 13 2b07fc86-6918-4a58-b125-58a55ba019f0 14 691b393f-34e2-5fc6-a8af-f517e00905e2 15 33ad5b6d-a3b6-7439-afd7-0089ed2530b9 16 6db2a013-bd42-1305-9eb4-54b83ad1d45a 17 9151eecf-2edf-5892-a7af-6be9505c8d2c 18 e241d591-8417-4a07-95c5-02142e8c87dc 19 a11fbdac-a272-705b-9ac4-9ba84beb6af8 20 09eb1958-7080-85f1-b6fd-c7addd3d3a6b 21 1cc2db89-987e-28a5-b68c-b3298adea60d 22 818af179-d93f-5636-a2bc-93887af339fe 23 3ce4e8eb-449a-02ec-8704-2003204eb6b9 24 b87d2306-99ab-7094-8302-7ec645e06367 25 ec109005-f724-75a5-ad59-a14735fb8539 26 435dfa49-e6ef-52e8-8130-a194b4a84cb8 27 8487412f-3355-3c78-a08d-8cc6b556f0d3 28 f483261f-ae98-09cf-90ab-40c4455b169a 29 602a52dc-0ac1-0e45-a37b-c054880faf0d 30 f9b9c6c1-d2db-01c3-8415-bfcbf9e4b63b 31 a636c40c-dd9a-0463-b53f-ce64819ac0a3 32 8812f2ee-da8e-0299-b05d-9508a3ffad4e 33 f94f6d11-36f0-29a9-b799-18eb301de85c 34 2262bd64-17a3-7dff-a35c-267bbc99f0ac 35 32ff2199-cc9b-3cdb-b8d8-6b5dc5b1ba9e
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
10336186006645715478250775300000273. Exactly this sequence comes out ofnew Random(154).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 64 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.