201210031941 10wkjw
explained decrypted filler
3DES(name+title) ECB, 51 GUIDs, seed 192
From the post to its content
As posted (encrypted)
AFA9243A1365F736 B287B7940809AA6D 746931181EA21281 DEF14F80D6BA06A7 5C312DB1517EF053 F782D023EFC5E8E2 79A5CC2CABA5D456 38863242D94963BE F8D420197AA3734C 757ECB56980A2D67 CDA37861C1C489DF 693ED73AB34C539B 7D8BFB064A01C654 1A8EE83EB90FD518 945716923D74E5C1 DFF0102C8F71E6A0 95D938322183E46D 6807DE4C8833D0EB 9E5BC7FA93381496 490B963251AC6A8D 5AECF18B7AB8DF82 4465165FC3589E6D 773D434720760B4A 24E11B44D4242A24 B5036325BA760409 17A55675FEFD6F43 4E180F0326868F3B 379A5D3A3E5B5B06 7263D46FA7A23969 8B2DBCE63ECCC9DE 3E7C865CACA4B8D5 7D688EB59783D664 1E5F2AD9E0CC6F49 4B7CE432709452B3 853C60373917F639 276E37CF8922CAE5 5D965C2618A7A114 B8F828324EFB78B5 F8470EBBEBE5E456 AAB7CF5960226192 954ABA5D7872B937 3920FE738C5AE9AF 1A8CDBDA9EDB067C F501D738B962C7F1 6D10809530C54B10 F70A427B5864C15D F483C1F547ED0A1C 860922BA6CFDCE49 ABA859F18B6AA480 F21F26B6903399CC 46AEF138FC3272DA 42AAC1306BE791A8 058ADF00C5A1B285 2118A8AB4A448E88 0F23D7617E5986DD C098ACCE88802CC6 A628398DFA5124AD 317CCA9EE4F8ED5C 1CEF8E0B66ACE437 2B1205BE71B22568 60D83E46FFA43B63 293002418CA44998 5F597628D38E5A01 DB1BB25677329235 F3C0D112EBC28493 BAC37E2EE8981DAF 6F9A06DB4C99115F 72C4F76B16CB61AE 346B96118E4F6E13 D599BDE7486A1350 C2F02649277B37AD 666EF26E90391235 D7A18224F855DFFB A49494A6A6098C37 458684BA53FDCAD8 04997626D22492DD 4F274EF98E2131D9 F17D231EB542304D 0868C9EE022D3467 5B417D72C4C4A79D 3469436F5EB9510B D036534570505233 891D2E78DD8CFC54 53152061A98D0691 C4B0A7BF495459AF CF9005621A4FE3C6 D7572F4F0E3998EF 6B9D921E249BB74A 999278E814FBF140 D708593D4BFF2E6D C3061264EECBB736 60CDA66EC9ADDBA2 5204F009F1D837C0 28DCF3C733C10107 9330891D12437362 E332F7E21BCE64F3 9C83B8696A0AFBC1 9B7C9122157959CD 9D36F9EE88C79308 A623E764811D1751 F5E00E1BBC4FA228 1F30EF957A96099C 5B731519E142BD66 9A499173EB93806C DBCC86D31A08CBB9 C485219E2C42FBFA 426D70BB15F963C5 A330C845F00DC619 F48332CDCB96B1A3 56D81E9C7292748D 7EC0F795410F6BB5 67041384909E6578 E9AD2EFF87E1CA5F DBC9B0FB884FCD22 440A78C742C12B8E 51FE0997C04BF9DA 8841ADBF02D2915E 40C6F293DB5A78B4 54161E273C6C650D 1D69F7B79D2F26C1 08FCE6A99F94A83B 081AB02A61B68B2B 0B1FA57E775945DD ACEA0E4A65694D1D 64F948027B1366DE FAB5C9896C5E6884 41E6FC450CDE9F62 7FA4A2A1D685EFB7 7EE2E3B0B137B4A3 2677CC2784D1E128 8999E35B3D9AA662 79757526ABC2F254 BBC718D230176458 FBCB99965265412E E59FC0254156ED2F 1C6612A5BFF43662 12507589FB4E1918 D0B7808EBD5D4A86 3CB10D08565B7353 D09F206BE236D1D0 881B04D02DDECF3D 7FD23FD837273706 8E7CE3143F80116E 7191699126E86D20 0D965790EF748CE4 A6003445B966BDF3 E08D3554F2E6FA57 B6D96C80B844AFCF 2B6B328ABF7849F8 6BEB57151C34C636 35704140591CFA6F B8335EDE18A3D1E2 71E7CCAE18836803 09D7E7D6D244760B 0AB7DCA8C0851A68 029F5B7952BC81D6 B6EC0E17F3DA3805 1A357337B48AFDCB 735BE01047ECB8FD 3F503BA15AB1596E 4F7866EE9D9C485F 7A1826FF0BD2E87E AF926BE38E0D48E2 3653B9984BEFE7A7 49F38E8FBADC29E8 90F4C20C2FF34021 47F2A5EC05D1FA62 E9F47FECCD44B482 82279FB1E2D7E592 A5175CE048DE9FF2 7FF26F556F3B842F 56135B1A9FAEB8B3 2B6E843D7BBBE6E7 04514459BFCB92D8 375A06DDB8514741 517F36799584EC65 37DA6BABC4D9773F 30C32998504BD117 7CEBD386AD2E47E4 2C2D74751BB66081 D807FFFD8DDA51FD 623EC48F2ADB6757 4B1A941352E754DE 2B837AF56430D8F2 54DC6D4C64698FEE E284BBADD71390A6 E9A27F5EEB733961 C2ED8B6A4252BD3E EBDBF69B704376F7 1B6A41CEB80F65CE 91BAAB929C3CBB96 3B45757D2E9471E2 63FD415C54B220D4 C850B957DD8E716F 71A819CDE74B5674 C668A35FBD2E490B C19D3608E294A143 62ADFE5B6DE32EA1 979A7665A140EFAC 976DF015DF1270CA E10DD3651FF7CC4D AF82C95C7366BE07 28F6A458978AB165 27DB43055198E655 40581784B46818B1
- Read the ciphertext. Strip whitespace: 3,280 hex characters = 1,640 bytes = 205 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210031941(name+title). Key = MD5(password) =dcc6b79e89b6dfb820cbdb616bb09e18, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 51 GUIDs as hex (shown below).
Decrypted: GUID list
1 fa44f4eb-adc4-01bc-ba2a-bf2ebee71538 2 b75c73e1-5263-1533-b6d9-f8bdddcf05ee 3 43e1ae3b-a25b-87aa-909a-f6de4bb666b1 4 fdbd92d9-8f44-4b22-806d-2c32a728b6af 5 16f76738-6050-85a0-895f-02e8f8785bc7 6 6be58f75-06d0-39c7-979d-a5a7302d046d 7 286c8415-a53e-8100-a521-9ed3e36bf0d8 8 aabfa810-3b83-62e1-ab1a-94c4d45224db 9 9c84f110-a850-65b7-a074-16a29fe15a17 10 37dc8b29-3348-04d8-8cad-bc84a7502e1d 11 a198ae8a-ee56-6d7e-8290-2a09352fad1f 12 31fbd6f8-7d9e-3b04-836d-440bfb9397e2 13 fb016665-1fc3-57c2-ab26-c3f460acc23a 14 5b827542-dd44-37ac-85ca-bf7acb8733fa 15 36da0cb2-2070-3f18-a3f9-ff90e3f4a9f3 16 39f440a4-69af-89ea-9016-bdb4b2077664 17 eee96752-7c97-5810-b8c8-03e63576a935 18 97bcfc6d-37f1-0b1c-973a-155b3f24283f 19 5a52a9d9-b1f2-7458-9119-a1d0438160d6 20 608aeecc-f9a2-5802-876d-2791218a0fc4 21 be24eb90-302b-20f5-b14f-6f4ff905471c 22 973a7043-6ccc-8998-ab6d-52eb083ad60a 23 63e82798-8e62-36fa-9ead-42c50a41ca2b 24 d93ee543-527c-0aa2-97f8-beae6f7b00eb 25 6d385646-7d86-49f6-b0db-71c3fc39ad94 26 aa5694bb-2dde-017e-bcec-804cc42b0a9c 27 713527a4-285f-0158-97a2-a062ec122824 28 45bb9c3c-a17b-57b7-b1d2-11b960d092d8 29 1e8b95f2-275f-50ca-bd1c-5baef56a760b 30 73b93e6e-366e-6222-b308-cacd0df0537f 31 f7dfa1f5-cd79-00b3-abf1-7e8b4b11c548 32 3c81e78e-0434-0124-9fa6-16f64b432834 33 7f6ff9e0-8c09-4488-963a-eaaa0f1432a7 34 c7c6762a-1c3e-7999-b771-845566a7330e 35 97f41cf0-32c4-6047-a289-d80517bc1c03 36 aeb6e29d-9b4c-04c9-a331-850b9d805dfd 37 5fd44ca0-e56a-0804-b604-27b013358f1e 38 6ccc0555-2562-24fc-b720-86371d85a9c7 39 f45438d2-6236-2a8d-aa23-cc54aca8007d 40 a12e17c3-3588-8437-b94d-5bd8942f3d04 41 532ef292-6768-8aa9-8b93-63cb8b90d847 42 8cec46b3-d39f-0947-b197-9a6e2ff3f079 43 981a89fe-e4e8-83a4-9d38-6a4c64c90928 44 e279abb2-997c-0cd1-98d4-73b77fa61e27 45 ee14fd78-ebf1-16ab-8a46-f1791ce9b472 46 5f15e6ce-dac6-7dff-9de8-169d626ee630 47 4be09a8f-6ad8-5fc8-b22a-117f72be4962 48 068747e6-d971-4f19-915d-a58d0c33903b 49 b91a2a00-ade7-8190-8fc0-e7b3523561e9 50 ac157fc3-f65a-5d2c-8203-09eec0d10851 51 913ba84a-3a8d-6a1a-8a83-e727203ca3ed
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
018483866063533850752830400556004760022880801754856. Exactly this sequence comes out ofnew Random(192).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 119 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 51; the post has N = 51 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.