201210032241 10wx7l
explained decrypted filler
3DES(name+title) ECB, 49 GUIDs, seed 212
From the post to its content
As posted (encrypted)
1CAD0F741A81E382 4CED68817B613F38 3A4FAE416F6BEA5C 4646BAF5680725EC 7C1DC3833FB25543 0EC21F4108440490 E743A43A9F644936 2A3D44BB3474D777 DF86FF71AF97E528 1A481ADCAABB5077 6869F9C355840C21 BBA2159DF4107ABC 66E7C6BD1F700E35 27255C8E37776A0F C950EDE3A9871A10 9B48A6D07194C063 432D8B8BFA179919 BF12BF343DAD4ADC FC59836E14B98203 FAA60D784C4F6F15 0B0F7FF9475A7DFD D7D0C4B53941C5B0 9EBFC2A265E55027 EECD76805B7541BB 797A9208FE3F1C30 4AD016FBA0B13DE0 69CB1CF2A6A9D8A3 E3BF0FDF99B285EF 476854B14EF63E03 3B2007D206A2CC40 6E482B8D8D9962A6 B13993AC494F4605 1224DF952AC7C4ED F502B3F800E175AB ACAA03754FA966C0 37D781E66EDB52A2 9EE4FDC4BD3ADCC1 DCE0E00398FE393E 7A8B980E38DA741D DE43A4BCA5CEEAF1 DB55B2D899B4D12F 43868073B9526D99 4E9802FBB67C50B8 E05EEC36AD9AC78B FCC45992E311EA36 2B1FB1342093F112 6CD2E7DF3B72FACC 6059C7356C8CD355 BB698244C7A07E46 C329FEE9DFB72338 4D7F7BDA3948273F D4CF693ED60EBBD8 E3147BC798010C1A 583399E236932747 7F5B6FAF4D7B56CD 1CAF10F1F14E39FA 178680CEF430493A F3782B4A954E359E 683653BD78B3D8D7 CB1E1D1103D242BC F12DD77AC4245F8D CB88FD8FC7178F06 D438123C9AAAED68 359AB7F28D141C98 2B73648DBC1D38CE 3527BD7545EAC9E4 86B4E756F5999F79 1783DB2BCB534CD2 CED6A532D3D9552F AFA153F60D08C9AB 17D17DD43F926DA6 1CEC9ACD153DDC3E 18C5AE296637597C 905D56D7DC26EB34 C2C94A051E79982B 5A0F99FA36D71FC9 56D809E8A419CAE6 972FB36D5A9EC161 885DF520E98BED40 55233AA7D6685ECE 1D85DB02D5760F0C AC3D3DBF9ED3F572 2D9D2AE72800BEE2 8B546252CA8E58A0 1F5386D2EAAA31E2 E7F464B8CD7BD2C8 9E4A33D11994A824 E77510237FEC091B 3F14810A4B89C946 568509373C04156F FBFD70527051A186 595C27E235FA2778 B5C24EE998FC7115 4CE313E21926A5E6 7B8DB5F4D3DE6B8B 7E316CBCEAC9E354 33E19605464B55A5 CB83E1276F2F863E CDE0720820C720CE 9151329902B59DFC 1CDD69FBE052BFFD 06D2CF96E8C85423 85789DCA4EAFE8E0 CAD6934786B80E5E 20D52E9ACB426C70 F6210467BE0E575E 915BDCAC1F2D3A1C 16D92856D2594536 1BB6F0BBF63771AD 08CEF795E0A4AF43 FD9FAB919E7B9E0C 403F21343934C1AA E58038E7530D9EA1 F9D3C0F606BE73AC 59C1EEDFA8977320 59D76657DFFBAE61 24C0E39654B3CAB4 187270E3AF0C60C6 AF6CF358BF294B8F CBE53C5B9C3F2283 E6A1899D9883163F AEFD44A178C41046 B32DABE6FC49800F E6BB77EA906927E9 A125078F48A1C23A 417DAE33641C86FB 5C56DFB4ACAAC364 A391BBF2BDFFD32E FF832AC2263E96F3 6FD6A05A802FC0A3 6CEA995EC7024442 B2F6E0D5ADB2E51A BB5A7CB5EC9E0EE5 CE529D1EDE1367DD 36A9C07BD732722D 6E8904E06C9FB0A1 BCD01F3C6E70F47A 338EFA1CAC6AB2C9 474E234EA855CD92 033098DB1CECCDFE 860625A502A499A3 0B05598978E9A0B2 6B24F015EA237306 034D7F528C51AF35 0156F1D0A01A5326 82100293A4AEB552 01AC996984FC1A51 28AD1EB6674AB519 FB8E33B17543BA31 AD8D5112A6B57F36 DA2435A4EB8EA44B 060B2E766EB527FC 50B5649C509140A9 DA5B226AB89DF647 2576A7C51BE85CD6 58C8A5829058BC1C 18DB4691D4E82F5C 79500F62EBD30546 C9A6D1FC4AA35876 80B0F0E84EDF45FE BB04316A6B5F4E83 92C276E2974569C0 F489234DFAB4B823 71A85D32409131C8 0E9A7A6690E2AABB F61283EE6E8831D7 D3669BDE948790A1 24C859C38431A740 EB3C86C3EBE28978 CE1EB82972508BF7 7EDC7C491FA8DF2B 05FD6BE69C272C1B 1D3B253DFB1189D6 DFF3B3A13647740F 451F3954CA704630 7FE68BE268305B25 E9934F7E344B3A9D 05B443F211A36012 553E46EA12CA8DCA 1C39E5C98DBCBE36 E6A95D2C6371F419 85DC6F0699D732A5 A11D100FCAFE50DD 8CC527732EEE7FC3 2F1F4CEB02FDBD2E 57617D591C053DD7 6BC5ED1774D74610 ABC4B4C67D89EC62 6C8B2BA40C37810B A63EE2BE8FC22B8A 040DF0969F847A23 787358616C505663 2996DC9731FD9C11 0BA8F6F5E6242754 FC22B002DB5D5FD0 DB10A6FD34E7EF24 964EA6DD94A16C06
- Read the ciphertext. Strip whitespace: 3,152 hex characters = 1,576 bytes = 197 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210032241(name+title). Key = MD5(password) =e34fdabb7696a856c478a98649b44a5f, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 49 GUIDs as hex (shown below).
Decrypted: GUID list
1 c4fea8e7-bc0d-4856-a09d-a9f82a6d5b49 2 4851c9af-65e3-0d19-8dff-7691a0bf6f07 3 0730be8c-88bf-8988-8877-a1cb77051376 4 82e8ddde-fbb9-71f0-acac-77b0534bd22c 5 b2aaffe3-35d2-80bb-8a7c-ec2be52eb5af 6 4e2fcb24-60b7-7356-bf98-a606e556d4a5 7 5209aa64-5c65-876b-8091-921f5ae5c25f 8 3e863bfb-ec6c-7690-9270-9025571188fe 9 bd6a60c4-368b-10d8-80f2-0b20909308ca 10 e491bb22-6e85-46af-8d97-27cc4dffdef7 11 1daee357-1f39-45e1-92c9-d63f1d202170 12 7dbc74b1-e780-884c-9014-222d9880ff06 13 1369196b-1994-3431-824a-5a364708257a 14 5b2740ae-d85d-640f-93e2-b194acd0f7fd 15 af30411d-781d-3641-9706-e48a871f5612 16 611f6464-3226-3f6e-a51c-133aa3a2fa3b 17 0288b5db-0d72-8463-9af7-7267fce855dc 18 a1829cc3-5b29-381c-9808-8385b92ff22f 19 84abc63f-24c6-35d3-8cb3-a5733bef9c24 20 f0393391-6e74-3bc6-8cae-081d065fc317 21 ad499159-5be6-8920-b574-2d36c9490442 22 e2032f05-d5b1-72a5-86fb-e587a7b15069 23 84092988-43a2-7e42-9910-f20a5427ad38 24 95d07abe-35db-02de-998f-c6752e30a274 25 363caa6e-9ac0-4da7-8a69-16f998b2f40c 26 14afef55-1cd0-711b-84c5-c6bb5a250ee0 27 67e3ceb2-c15e-12ac-944b-2857d2d739e9 28 6d078e6a-41c1-039b-967d-92d27b8c481f 29 04b34a0c-6503-0ea0-bf93-392e4a1e3ce6 30 36023729-b398-724d-af9a-3c30df1aeabe 31 79a1ffee-f311-4a87-b76d-b61ffeb855f2 32 7125eddd-c096-237e-9b45-cf8ec354ceea 33 8b17649c-656c-4286-bdbd-75fa9778904b 34 5208a0cf-82b6-27d2-afeb-4816516343eb 35 ff331128-6622-6fd2-9f9a-2988eaaa5d88 36 14819211-eaaf-8aa3-bbc3-8edcec732c56 37 69ad60d2-4f23-5513-9782-80e7043b84c7 38 f650a82f-a7e1-70ff-853b-cc992143e565 39 9ebe8123-00fc-54bc-b5dd-11c5a17abda5 40 237be71e-043c-2eae-8027-394f2c7b5b5f 41 2b924959-7b45-2b18-bee8-480fc7d8e217 42 78ce6a71-319f-52fd-b752-8660a0345ca3 43 4d7d86ca-8c98-3bbb-a8c2-54e467bf03c3 44 ea6e7220-e879-2004-ba38-6221ecab08a1 45 286b1394-afcc-608e-bee2-a0aa4711737f 46 474eed14-0fab-434f-8498-ce9b18f2e318 47 7722dfc6-8e4b-4271-8b7f-589ba6aa3a95 48 d071b79a-bfe6-7458-af48-e334dfe0a5f7 49 83e0f935-cd1d-73f3-82b0-3fcd697c1ad5
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
4087878714483633833387704710074242685752253264477. Exactly this sequence comes out ofnew Random(212).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 128 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 49; the post has N = 49 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.