201210032121 10wr71
explained decrypted filler
3DES(name+title) ECB, 33 GUIDs, seed 882
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210032121(name+title). Key = MD5(password) =19153ce741cab181218468f0f69120c8, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).
Decrypted: GUID list
1 61146318-6988-480e-b548-b60697535315 2 dc543607-fb19-5ee3-a424-6ec138cddec3 3 b5255084-6073-288f-9a95-c588c105b291 4 805e9dc6-269f-77c2-9d8e-5d4785898104 5 ce3698bb-f586-3ab5-a8bd-0adfcb37c219 6 5574dc64-e4b7-3416-ab57-0d3ac1e2ff0a 7 ecc91b78-18ae-09ef-bb95-bde9c0c86c42 8 5df44cda-69ab-8f88-9544-13059ce4a19b 9 5aa258ee-7d7f-056a-8a6c-f6c235eb5c1f 10 bf5fb8de-4326-4088-a27f-f45bc84e1d99 11 fda42eaf-ee83-0f79-94c2-30e852732f1f 12 6c5a1622-13fd-082b-b589-95e6cc45b821 13 91ec2e86-90b7-8106-9b90-aa070b1cca09 14 593ed490-c957-3c0b-976b-308490a5c712 15 18f3f40a-8820-30f3-ad7c-ab46b5bd4e5a 16 d998f1f3-d934-795b-94c6-8bcb42e03dcd 17 180665bc-f766-54ae-9577-9f7afafba596 18 0ae5c901-cbf4-77ee-b34a-a75dc619b043 19 6bc7ac89-7aa8-4a1b-bcbf-b9c6ccb1f076 20 08c24a93-7c45-7148-8c38-7487ace337bc 21 0fd393ca-28fc-041d-9a79-317ea8e56019 22 75dde12b-b50c-235d-8828-54920d56a61e 23 9d5cdf80-86c1-0bd8-88ad-f56745df1f91 24 5eafed5f-e3d0-1ab9-aaf4-d29cfc0cd7eb 25 bf326534-f12a-169a-8ac8-5058b3c9adaa 26 f248e272-7e1c-7337-a769-a20fc3be623d 27 5234ad02-7828-283b-9a0b-795d4d865aa0 28 220c8254-f44e-1ce6-9abb-98b210dba7e1 29 ae674a16-f981-1d4e-a67d-b3400154a0ec 30 8bde579d-7d38-307e-8ef9-7645f7ff15ec 31 79ea03b3-b4af-7373-8443-ce03cbfd6fed 32 9c7c2467-1ace-7af3-8d75-3deea11d69ec 33 930670fe-02fa-89ef-88af-a09c3fbd554f
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
452733080400833757470201172113778. Exactly this sequence comes out ofnew Random(882).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 124 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.