201210031641 10w8ia
explained decrypted filler
3DES(name+title) ECB, 45 GUIDs, seed 952
From the post to its content
As posted (encrypted)
88F609A76F299E7F FF2634B0221E6AD7 7F8395ED09DF187B 0F4E0C6C8378F18A D40230991A0DC342 192600EBE2C14E1C 741AACF05A5FB36E 87F957D7DEF4D6FC BD693468B42089FE 4407533CFFA287A6 6C6D6C99A662CB25 E161F6B551F301BD D91A3308FF8F0A22 19B6043DC2617671 AA2DC0AA289B936B 86C70DA5EE83EB9D 739402C1CD9C7589 B645E5BCB66E8C22 8618FD362F7E1A0D EEDBD54EACC67F6E 2CCBD90C9B168CE4 0669130173E83794 B5B1F033323DD726 ACDCB52117BA42C6 18098E098E0F6186 BE33377AE68F6229 1167EA71C090EB2D 5B6E55520F6D889C 5862399698DF3186 A6F2B30EA0D168CD 8185E31A29AF34D2 42FDE1AD91CF145D 09B885D43E1872E8 8819D4722B2094A3 F35FCC12D94552CF 7C4908D79088419F 832DD5619C83546D 3FD1D0B6E46CF99C 82320C6F3DC83E97 BD3A55DD791ADB10 9F575F5A53FEF001 B5DAE2728C501DFE FCAC98777CC84097 B6770A43B1588A7C B98D758D7260B463 02E39E509DB861F2 07FFF262E7347882 15E05DCB9B17D72E E9E84C23B9E03343 9EFAA82642B9EA1A 204798E9D8BBD816 82BAC18435B4A72D AB8FFCB7412BF29D 4B4B4CD4A62F3667 25288A653A2ECACE 003542FFE699DB6C F5FEBDA78CF2A11D 7C513B917E04E4E1 C1B2E076E6FD2CB8 AB45AFAD1E8AE93E 96053EB9EA2DB63A 261583F10EB45300 9E9F006DC0EBF5B0 B0C89F1CF53BE624 3601CFC8E551F2D6 685E498D98E1C5A0 A59F7D1D9ED51B47 686970BC74F919C9 BBBD5E84E66A43F6 47DB87629E232A3B D17B8B9856B2AC7B 018BB132CA08436C 6E1BB3381D6B74A1 2C7B4A0A99855AE1 E33C97ADE82CFA3B 0813FD448E099091 D2843DD7FC39DB51 B37C1A5706E4D1A2 3E7F0F782B3EA402 5B25F999DB230807 99D3DD66789F0D2A F784E94C7D509BA5 673EB2CF81A1EC25 E108962E1AEF0E18 2114789C70BF8925 E41CC67C79A8B2D1 EDECBDB1ADB1F1C0 CBD2C29FCDEA2388 54C63C6A6411698C 48BE908922BFD9C1 0C68256C6B74DE71 4E0E76964900E7EF BB65AB0EBF589B56 AABD1F42FA8A6268 0F28C5DE39791755 5A43D52EAF91AFD8 87A168C67FBEC386 77622374679FA8BF 05C86F5B3F0B29C0 A965E82059208808 689AE1B742295215 2E312A9850515397 1A5FE05677113E64 0C8E7BC15AE4ADDB B3952CDA3FC025F8 0141BB534B06E2FB 2B9A6ED775B6548F 01D7DDA7AEEAC7D7 17A0A834E11EB356 08FFE73E57EC58F7 DE136D02F216B146 4122949CD911E50C 83A22E1853AA8EE7 35D2283CEEC92066 A70D483B1CC21C8B C05DBA1B3308CCA9 B9CF07E1008CA9BA AFA34E378A05F6D9 AE13A40BA656E586 971419385F9E7360 24965C1BF3BBD134 B487237371370343 686B2D99C8EA737C C8795C0ECC5F992A 5CCEB64AC789D83D F6F2358AE88469E4 12BD020DDFB1EB08 5B9630CD3D14A365 4213155BC4F718B9 89EA595BABE7032E EF2B42447E96A962 FD98AF978838C972 A82863B5FB44B705 C1643E34BDA7AA4B A12273D58D9DDA6F 0924FB3D50067D9C 52E99C0DF0740FD8 3F35B5C6865F50B3 BFAFAFC63A89A558 68BB29A5C85434DD 18B64F2AAEF94C43 76214F70DDB4D075 8CB319285E22EBAA 42A285636DAACADD 9BAA4E0527E2A1D5 B039A68425D3563E 035105B5138A389E EF9D53912C1DACAC 98F0770E0F746890 9CFF467D33842C40 36AE320BCB1216CE 78E2C2FA1E870C03 E95EB1FC43A71045 32BC26A54D119B12 05A88522CECB7576 E0F756C6410B843F D5B4CC786C0479B0 B8472A521A1B02A0 BD7D4D75F19A9509 1AE21DFCA6543181 CF47A4DEDC08C3B7 3025A47DBF530DFB AF930D4EF630A881 03906DF8B811998B 49FBD4F5D2DC2284 D400B9704CA0D3A4 68EFDB32721271DF 8F6D9405B2E10739 288CA395D2FF5200 7E3FDC82371B6A0C 080D25B3724E94CB 773932807AC1D96D 145645BFC79B2778 00F3E2AA01335559 302D3A2F26482066 2A23C3FD109E77A8 91B69740A4626655 ED1486BDB3697EA0 6B513B964781BB73 7DB53E1BAC13DDF1 998F60253BD13574
- Read the ciphertext. Strip whitespace: 2,896 hex characters = 1,448 bytes = 181 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210031641(name+title). Key = MD5(password) =0348c7b551c4ae2e5d2a9434570d051a, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 45 GUIDs as hex (shown below).
Decrypted: GUID list
1 0233d89e-5794-0f04-ac3a-104c2481762a 2 4826b68f-ba5b-1e53-8ac7-35bccbee2b52 3 03956ad0-9418-11ae-9eec-ffec61e5e36c 4 9d020226-ab74-6788-baac-3fc2ad9fa5e4 5 eafc68a3-2d65-04ed-826f-7636b1a749c1 6 afd7781f-0cf3-4a7b-80a3-c31626ac0435 7 63fdd278-f297-4726-88de-860b13eb8a50 8 578d8f7a-1412-0af2-a6ad-ddd9f961d5a2 9 bd58d573-7137-6482-9bf6-e6bdff1ba660 10 eaa3d101-4bc8-2d69-9311-f00609d22f0f 11 2f0fd57c-6f4d-5fc1-aecd-35cb3e3aa20f 12 349d1ca9-42e1-6a4c-964b-61685a2d7468 13 e758add4-3076-0b09-b5b5-fd2538f2fc58 14 de66b3af-5370-6d16-a545-eea3966610eb 15 3dc951ab-992c-3b05-ae8b-e30151d35479 16 7a7d7f65-b7e7-543c-9047-9a3072310da5 17 5b2abcb1-5cdd-0251-8dd5-4a8ef85544ca 18 5716bd42-a2c7-21af-addd-c968eaf9476f 19 fa70e8f0-233a-4e4a-aede-3b102131dddb 20 d2f683a5-d15f-87c4-bed3-220714ba44ff 21 402bd6ae-1ea9-2eff-bc93-5c3464d385ef 22 3f743582-6183-3162-8170-63e85ba1df3e 23 25143563-4a20-7d8e-9a3e-bcf0c0d83e1d 24 ad703269-42d4-5171-934b-4c560b929373 25 1b916130-fb67-0ab0-952a-d0a3a78ff7fc 26 c2c1b2cf-0d93-7c61-9f9f-e53ac34ba8ab 27 99cbab5a-3761-3626-87a9-91c9d7940e45 28 46421d02-52ba-4fde-ae97-06e7972aa4da 29 879b978c-58e1-4744-93f1-c101e45912b4 30 ba14bbc8-e95b-7307-b6e2-0f324784bd8f 31 f8a5f620-7bad-5982-9771-758322a17b96 32 a5eaf6b2-de12-1899-9d3f-907aa1951bb6 33 dab5b1b6-f699-1618-956c-1b8472a7e9e2 34 07ed629b-c707-70e9-b4c3-57bc4725527f 35 738bd471-cc93-0a00-a648-f378e1823745 36 e904b53a-380c-0886-b936-8d3fe72fab8f 37 fe5d7fee-a0d3-5482-8311-0ee2c8715c8f 38 c4f00c7a-48eb-1d12-9c17-bf94c7a26876 39 2680085e-5197-3d73-9c49-d0ee076cfbdd 40 9e0df3f5-bc56-45b5-88ad-ebf4a35197ad 41 f585e248-be00-39e2-b67e-51b7287040af 42 fe527c2a-0f63-1fa6-ae3f-7ffbbb36d282 43 7236a297-e727-7f96-85ec-1fb3da8b89ef 44 b0e3e070-dfea-01cd-8301-5139843a614f 45 dc1749ce-44a4-7973-b6b5-483628c8466e
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
011604406256063502482375073447511700513431707. Exactly this sequence comes out ofnew Random(952).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 110 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 45; the post has N = 45 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.