201210040722 10xijz
explained decrypted filler
3DES(name+title) ECB, 50 GUIDs, seed 480
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 3,216 hex characters = 1,608 bytes = 201 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210040722(name+title). Key = MD5(password) =ea3a42f61764956f838150649ac77896, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 50 GUIDs as hex (shown below).
Decrypted: GUID list
1 8806052a-341a-4ea1-a478-928339a32e92 2 6643fcf3-ff51-54b4-bf77-560621b1a866 3 66c9395f-c093-20fc-8d62-0efd34bcfd56 4 4c53fe0b-e0b9-00d4-aee8-90bbdf92f8f4 5 3f2e57dc-8945-8dcc-a290-5d75e7647be9 6 d1537531-4924-037b-9d4a-befd1861285b 7 85f9b39c-7bda-82de-ba8b-3e971cd64730 8 f00fd80c-c55e-2dcb-be46-c955cc843324 9 5af8f827-c1bc-30f8-85f7-89f8b792b45b 10 21fc8ce8-6846-2306-bc08-be7fe1750b7c 11 ce7ca565-e439-8f55-9c1a-1eea2f59f855 12 4079ede9-5fd1-122e-8e71-2d0b1c2931cb 13 8be930f8-2df3-55e3-a86b-f69867475bfc 14 d66dafae-80fe-135b-8460-968fa900770d 15 31f91fe2-1f7b-8803-a5ce-27ada725faff 16 bb997cbe-1f66-7023-9fbf-f379f9fbd78d 17 8157da0d-5333-54c9-ace5-20dd69718c27 18 4de5378f-aaa3-571e-8526-903ce5a62186 19 96467ef5-e7f1-6556-b3cd-cab12f373230 20 c2fa213b-c3f6-1782-b6dc-44f03536a1be 21 3a4ac47e-1c0e-513a-b0bb-882fee5eabca 22 682e6984-d60f-5b63-899d-05c34c261f29 23 0d5e92fa-cbdf-1c53-b05b-7aa89440f5b0 24 7a95272c-9d99-6089-bddf-34516f7426b9 25 7047a3c1-dc8a-61bc-b516-07484e8177c8 26 15a75ddb-14cf-2b15-8c87-e1f246b2fe56 27 87f475eb-144a-5589-b168-d7cacc394b80 28 1c1d877c-6223-0cd8-a36f-bcbd5f6f7a52 29 f196ad14-904a-1018-bbf4-16083b81b9f9 30 a3836320-71aa-5870-9b07-155afaa4e18f 31 f9702091-3ee6-38ec-9acf-930072ef61dc 32 09a78365-5cfd-7f6b-b03c-7d24ea5c08c1 33 ff84538d-6e46-2eb2-a497-ed47f699cff6 34 914e946d-24d9-05c0-9c2f-c12ed3fea4f2 35 3f8766d9-366b-22d8-8128-583aad92b0e7 36 ebeab3cb-56a2-5be8-8bb0-00f0cfa46aa5 37 6a4088e1-2ca0-5f29-9553-995aa0dc7d17 38 7670ca08-937f-453c-b686-dca00905ae78 39 b4680a33-a507-4664-9edf-ab41a35986c5 40 8af65327-a6e3-48e3-8b3f-6e30deb30b75 41 e45be56a-6efe-87e4-b0e6-689257a24f44 42 f208e5b7-4ebb-0cd3-8906-ca07eaa56816 43 dca62f0a-132d-6624-a819-d3d52d4b3046 44 ef1549b2-82bb-5185-b104-e3b500426c62 45 c1642767-09a1-8345-940d-ab153af9253a 46 e34b16cc-e9cb-40c5-8c89-86e187f9c1e3 47 ddde717b-3f3d-5e93-b182-be3d4bc2ca3e 48 07d19e6d-cf52-8064-a8c2-f4e9804018b8 49 222ae6b4-7025-0d5f-9be4-26d95793e261 50 b2e7e976-4390-5686-bd66-a725c81749ee
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
45208082328151875561551662501537202554448065845805. Exactly this sequence comes out ofnew Random(480).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 154 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 50; the post has N = 50 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.