201210041702 10ygbu
explained decrypted filler
3DES(name+title) ECB, 41 GUIDs, seed 458
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210041702(name+title). Key = MD5(password) =5b0f2728c9c54520143b4c3d7645f2c1, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).
Decrypted: GUID list
1 32cd4fa5-b6d0-811e-996f-3eb3f3fc8b2c 2 a831cba3-23a5-1d34-b00f-4823ad69e599 3 688c7fdd-8773-8703-be6f-64ea762a7e97 4 5e41e03e-d5f4-2be8-a92e-77f513ee0790 5 5374b9e8-fd9a-8f74-ac2d-b4e44049068a 6 3db860b0-d68d-7b8d-8f04-203e927ba64e 7 b752aba3-83d8-125b-93ce-c1ba94a22b95 8 96b4bdaa-2865-1671-94b2-d8ccbb82c1c5 9 0c212b3f-c20b-5184-a55a-b4897972f78f 10 6d896df5-76c2-1888-90fc-3d34dd6df9ea 11 cd1443cc-3e38-6c8c-b720-a1f9d01a9a9d 12 d635fd4d-ccf7-091c-bf84-57cd6271ddd1 13 bb3616e0-614a-4f68-aa7d-bc17651700c3 14 640ee33f-3cc6-6842-8b2c-b7100ca20792 15 598a42d1-5561-5c00-a615-ce24ccd0061e 16 d862c2ff-b88b-001a-8549-ab2b50866277 17 bb4dfed5-d4b6-3f38-a34d-ebd65159d6ed 18 b0a5623c-250e-827a-9055-da519153d37a 19 88b74622-132e-0dfc-a715-63596c47d91a 20 391d0272-fa92-51b4-a62d-418c496d128a 21 85aa83f8-974f-642d-be9f-2ecf2ace5628 22 03280d06-2e79-1b62-a1e2-ad222f722faa 23 dcdf6664-849d-33a0-8abf-7a8f93faaffc 24 5ea67a5f-d220-0d76-b5a2-d921d18800c8 25 6d719c5f-832b-5418-9dcc-f96b3abe550b 26 c9b3bbb9-7978-0b0a-9e7c-16e05aa73345 27 bc49ecab-53f7-6e01-89e8-24dcdda7f1b1 28 75d13d19-74c9-4442-9b06-537cf1bfe91a 29 4b7fbe76-22b0-0406-b1c9-8e798566ca45 30 44d56e84-52c7-84da-80eb-48f883ae8a1c 31 3c3aceb8-6c1b-20ab-9f12-a243efc141da 32 cc8b1367-b492-021c-b439-178c493a8ede 33 b5f015f9-3bd2-4080-af7f-262f3c672fca 34 d73c4034-d6a8-4971-82d4-c7935937be96 35 b7ec6f36-fc02-5b04-8fab-d953dde544dd 36 81bfc214-8322-5c63-b012-3e8a23506468 37 68eb5cb3-c33d-3a32-9228-dd476c6dde90 38 0c1494e0-3449-4f00-bdb9-7bf07a22970f 39 e5c6074b-a8ee-626a-a474-d1211e786a7c 40 cda63f04-0e33-0d75-a50e-790adbcea202 41 8d69749f-8389-0d12-b767-87fb1f39586c
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
81828711516046503805613050640820445534600. Exactly this sequence comes out ofnew Random(458).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 183 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.