201210030221 10v37m
explained decrypted filler
3DES(name+title) ECB, 59 GUIDs, seed 544
From the post to its content
As posted (encrypted)
713CE5937279A6CF F2FB1F9A04DB7A75 6440D91E0EEF32C5 23B5246101577518 D25D83FAFE61B4FF B868675011FF0474 80A139F36F00B6FF 51DBD4F2A0379854 7DEB67C33BDB826C C3B7443C76BCE764 F85C820AE0F401F1 C9E1F3586E7CE6C2 91D7649D4D15A0E2 F34BCDDBBBB8DB70 C8C0DD0A14806CD5 9AE37EB5C9E00F8C 71D2CAD28BD003EA 6DBFCC69195C7DC4 2759069320132B01 BBCA685C2162D51B 7D52DB11451EEF1C 5CD5A1172E4EF654 9A8FA3BDCE255100 B781616BC585D07E 2B3C126D270D47E9 0F84831D54F70D52 366A5DBEE8029DA0 9B572A3E31A3F5A3 27A4B0C66F4A2CE2 27CC595F3D703A2D 334E2EB442F05DDB CBFE88519D44F6A8 DE1CD201EDE93D2F DCB84FF66752CF58 2F98162F6797C33D 7F34839C9C7A47C0 69EA5E561C09E631 E2D088F6B873D264 D2F2E802E4687903 CBEA0A210E3A0D8D A552A4E184D365D9 72C853776249CFA8 53361C43EB9FCF1D 75F23F54E463AC50 EEF7DC9EFA642EA2 EBCE307D4BFF4C0E 1B0F762ED1DB50AA E486AEDF9C34A80A D83D4264B4554385 A1DBC5F0C589DA46 785B05ADD4815037 8613DC09EAD50034 9F5307450B3C49DA C77C6D7244D2F080 6FCAC5E00BFA7EF5 7268076B016E9258 969FC51DB47A0FCD 381C06587589EFDD BE5849ED461DF8B4 8963AA74B2A83BC4 A6879154F3B5AA28 03E774E23D18ADDA 6EF4E5663920BBF0 856F4C52A3BE057D 968E49F699F74950 9CE31920D4264555 F1574F2610E8782A E014EE90BB1F4155 31A3A161AE36DA7A F1529470BA0D381C 51202642D11769FA F8E7925CA1AE5C02 EFC09DD7891A0477 BA48E57D70AF0C9B 87779BC7125D2099 89A621EBEBB0D208 2B5BD0BBBCE80D3B A80466AB631AE9ED 9E757D7F98EA367C B4F177A4FB0175DF 5F4D945530F0AE00 C8A8C9471BE457D3 2B98BE2B6CB8C79F 9C0F16CE153B1BEF 13EC07B02898799A C67F2106E7453FA1 7D1131F13761ED04 E48B083294673EBD 5097646B68BAD540 C475919453F0AC98 8E0F7ED60B4299ED FD67EC118EDB5736 00BC765E3685E65D C5957FC047343C6A 78265E71F1269418 4CFCBD50AAF90B24 4B30DF2DBBA15901 1B84922E22FA2B7D 8D306E9FA8A4E41D 158A297DACDA1434 9A17563905460787 A4F795C8B454F926 75AC817420EAD0C4 EE491C82F0BEC36E 2CE3B48801B34E14 529D0080F767EDD2 A934681CD36ECEBC 39516C37DFEEAE16 607C86118F0CA93C 8B7532435DD2708E B7317E291C32FF2D AE136B9249B1EDAB 6DF1CD5BB7FE4FB1 6C12FF8DFA024CCE A00FD83A7E2D47F6 75B397A42B9A982B 1CBA31A6BC919531 DE21E37B728D5E87 86D0345198B1940A C69CF046CE03D790 5E7748D3452D235E 3BD867C451CE336A 8B810F2A2FB8B2D4 010E50A662B55BD4 57EE7DAF4F32ADEB 56BE5AC8DFC4A554 AC7D1A5BBDE34BE5 51EAEE883C8006B5 06DF6E7D172A60B6 9046E179095B2B7C 54E9449F39D5DA8A E9179B1C899B39D6 C636392BAEA365CC BFB23D7B8B1501D7 8D08B306C0F26D17 1346FF7A90EAB888 28C43BF923107C73 5D42269208232D5A C4FE486FF652C9DC A5F683AF9EE0720F FFD678CFA36A1E0B 47B01B74F6B03E1B 19AC770B6E16446D E39CCDA97F474BA5 EA849A1DC66C24AC 7B964038C0B89C98 132A46C839A48171 903188CA7A0A944D EF66704CA82AF2B4 0C4F9BD437226EBA 0FB6F7C3FDEAC845 110A9865F8DE6356 4A48A4A15746AF35 E56D2CD7E8847408 04252BF761B7269F 580AFECB0E1EC8B6 990E02B7F9D10E77 5DC79941B78AA762 83E2E953F850ADBC B0DD304A67149087 2F844B267F1B08E0 2D36B6F605F66FC1 D4FB21156F9A870C E8FAAEDC04EDE759 DA32DE9FA0B0C2FF 507D65EFCAF3A91A 58C8E02FA2D8F45F FAA20AB7CFA63443 BAF33B5E17C8D761 0E9B37D9DB1FCEE6 3C4EB7FA6CF2D22D C4EC4AC28ABE6FBF 325AA2CBF60567BE 4D0B41C54F7412F8 31958FD294E5566D A2F10DE8FA93E12C ED6C477CBFA27BE0 BE0C76E22F2BABA1 E6391A55F67F4C26 D5DA37EB8AEEE5C1 77FEB4E31C6475CB D57E196DD1C1FA62 168808492B44AEB0 8E40991E76FAC5F1 79E4D1823F8CF297 B152A67872B0EE7C CEF96C25D173D8DD E0CE1A504941F198 18C344EAD21D25B5 AC786B0748FCE807 1396D52A1FC18AFA 3C9078CE116CC92A 49432AAE1F7E18D5 A8BB26A159D94559 0F1BCDC2B4B2AE8D 12659264FC983D11 E01CCD9F16789F80 3D016EA0202BC89C 56A639FC5326B2F0 42A792042244AE12 CAEB9370B468A004 6DCF8980CD51DF6B A13D1671794CF3AD BCF6AA7FC35B1D17 CEDC32D69AB2D2D9 858E8288F16A79CC 02EE58674C640727 C12E8196CDD76AAE D92228F58D0EC73B B9706E2B7C474803 F1F4B97720527C45 BC3ECA94A9D9BD87 FDCFF9E8BC22C9EE 74DC4ADDB8B924E1 3918E666246E5B33 8F331912C52D9C59 43744A7D332BADC1 6C3AAD355F5F34DF C87D5ED31862ACAA 81B28621B795B71F 0911018160CC93AA 462F5D08977534D9 88BFE9DD594DFE2C 4AC15A927CDD2D6E 306A7369C5DBB9AF E489EFFED6146DB4 B2155295682ADBB6 158FA59BBC66601E B4E0376E287A3F1E 4E6AF8D6F477A85B F8F7E8A86E65F25C 1042A163EF4D201F 8E384B4DCA41BDB1 029F4F0B360F63B8 F2BC640D01BC9ED4 4AEF78342EB2B7C3 510B28DFE7340BE8
- Read the ciphertext. Strip whitespace: 3,792 hex characters = 1,896 bytes = 237 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210030221(name+title). Key = MD5(password) =98f9ff44ebe4a4318659adfe98f451da, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 59 GUIDs as hex (shown below).
Decrypted: GUID list
1 4932d6f1-0a51-8c2e-9f75-973d69f97316 2 8bab783a-03c5-39d8-a569-228180aba0e0 3 47591adc-e7e0-0bb0-8a91-a80f510dc67a 4 2a0d7d8f-7664-608d-aa6c-2ca64a299f16 5 c428731a-1c0d-7676-b659-9bed4c030634 6 fd36b2bc-d22d-8f49-a77b-cc94e17d1003 7 fd90a4e8-1804-5652-9d53-44343b6166a9 8 15aea1d9-7c9f-3c8b-8d90-e6c8180624c9 9 ee236475-d532-2a13-8120-1cf983a30b88 10 a787ed10-3788-77aa-bdf4-0d2a5cea6a6e 11 23b98177-7164-0476-8bfa-1371d68fda18 12 0ab75992-00d0-19c8-99d4-0a582a72ce92 13 afe54940-46ec-552c-9d39-a3c4277f31ac 14 a357f847-81d2-471c-bc2c-260e81928e1d 15 6c3ea497-8ae9-6811-9350-f22f70bbf53d 16 fbdeef9e-5740-6020-8918-8dd3a86738e7 17 1ae41d06-30f8-4bc0-9f6f-92d63b2e8e15 18 d7b49680-e2ad-28b6-b6f4-c833b8b7856c 19 c3ae7385-e552-3467-b6be-2a17d991317c 20 f87f88d9-f0d6-8567-a359-9744bd86b610 21 3ccb3942-defc-09c4-9153-e61a3ce18fa7 22 56db0375-3654-2599-9183-e0a653be47eb 23 6a4b879e-c469-81d2-bfd8-a1e02a8057d8 24 8f755f6d-5d06-0be9-b37f-04b7d191313c 25 77116409-5158-00d8-9074-540e6a298962 26 e76a809a-08ac-3efb-a7e8-4f08fc81222e 27 2db7d2fc-163e-5aff-812e-8a829350a6d0 28 482b1557-428e-6189-851a-a2c36c2342d3 29 7e04f234-6da0-72e1-af2e-34c30ab94192 30 d811c015-519c-1eff-b39b-9e89e7264225 31 b32827d9-6db2-035c-99e7-f0c572c28b41 32 73172cc7-208d-6a85-a82b-bc74218cae07 33 a0b92174-841c-0796-a887-d405a67be5b4 34 3afd96ed-66b2-5ba9-8755-d954d8a92f2f 35 c80c24be-4bfa-59b0-8259-b7bf7854612f 36 d6bdaf22-5639-3fea-b1f6-a21bfcc8339b 37 9086f439-6916-53bf-9c09-66a7007a4cb9 38 5267200b-4b9e-15b5-a394-04eb36d3cc68 39 67126653-aa43-4e62-a514-b150ea91648d 40 36edbbf8-1bbf-7afd-8f2b-aedea1e66f10 41 c9745461-63c6-1643-9dfa-95b892e1d9ae 42 0f5ea84f-1200-7e2c-be74-70c8f4ca4585 43 59647990-8639-3663-b0a9-12e68e0db477 44 418803f8-2a03-7202-9e4a-aacfc09ebb5e 45 dcca55e8-65fa-68aa-accf-f9535ae94da0 46 c1786708-548a-7d8c-b43d-30a9fafa92ad 47 a43dffab-8d1c-3413-a893-b92ed74978bf 48 1a7de736-21eb-86dc-b64f-f1303d9d6889 49 777bd276-ff28-29f4-be07-de8a17f6d291 50 40112512-6390-1b45-923e-3920739fe9de 51 7ea766a3-f86a-5d5b-a239-3ad1593a4976 52 ebd1ce46-d35f-8947-96e0-54c2746104f1 53 8aba0530-ff9b-8eaf-9462-d9ccd5efe063 54 491d0b74-88ce-2df6-8574-f32167a7291c 55 2870aa0f-c0e6-1403-b76e-0ad3cb250df9 56 a38acdd1-2009-5e1c-b294-69e16305b0bd 57 cd094707-a69d-4ea2-b1ae-705539263c83 58 0915db81-c23c-80e1-a64a-d43fbbdea829 59 e1a9d6b1-a1ca-5492-a108-4f54acfbffa8
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
83067853270154664238028003567106055351471737673821588215485. Exactly this sequence comes out ofnew Random(544).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 67 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 59; the post has N = 59 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.