201210051023 10zrm4
explained decrypted filler
3DES(name+title) ECB, 57 GUIDs, seed 838
From the post to its content
As posted (encrypted)
ADE82A93A75C5E5F 158A2347FC318E1B 1504BE5D0A3E249A 2B145AEEB6E67C46 09877FBC1BB46220 AE16A34735F85DC9 45CA3D3A235170E9 3FC0D2FE25823DD7 19D21FA4D021B052 2813565BFD533F1E 559234C2F7504648 B0B7C52AA2CD90E3 0C0A1DFB07354B43 B5F879EB0123A32A F7F600D85DC03FEE 5EF705E61A932AC5 8B9287804276DC39 0E7095C3B3D833BD D36F8E8D59F878E8 8E6C0D8396DE2183 530863D9662C1399 69A609B8DB33ED40 7E414F909F26BC41 D3319F1F390DB65E 77E7A5AF76660F71 52E32A453863B700 D722BF221C5C280C 1D32EF0809982658 447DA5140FF2A4D8 7A2118153B0CA979 662465CF1758F103 B88892553C77E819 6697D262970ADF7F 161E8F435462E4C6 B1380A645D3A1CA5 5BD45EA9FF7BE6D1 FE88AB67B36643FB AEAF7A03EB809D68 31B8BE0E053C2EF9 29B9B5E89353497E 6FCCAE19A7FFE90B 1BE19E974AD15205 510EA8BE8DCDA12C 1210283F4A70465E 305B28DC2BC94963 35FD125F77F02462 35B39C705F23D64A 04AFE32B93345D2D 47C1703B99BE3629 57E9826D98AF38C1 841A1416DB78834B D67E7403283FA6F2 BAE60A88B82A25AD A550036FA0B290E5 114E2F9A64F79BB4 2981EACED52F9D10 5C962799F7DE86DF 4CE6BC19298BA1BB 10FBFBC90AF0771C C5FEDE2E108C1AF6 172787F89C43A21A E9EC76DA0C940AE8 DD9964B09D9C43DA E0DBF849265C20C9 530ADE160313C1FA 7CF16A56F1D7D7C9 D09220A562306552 88D36F2475682384 3CD71DB558B98F76 6625ED28B8021699 8BF9F204AF92BFF6 7365A10434D8D630 BDE449032825C3D9 BEE91AE003F0E2F7 06ACDBF5BE84D499 E185CC1ECF163056 992F345ECD0725A8 76A0F162C6816FA7 18C214FA257125ED 1A8CC8002E3CB970 C40FB6C8D10F240B 633C079864F7C9DC 8CDEE88DDCB4FF76 D5BD79B5B2EBA14B 49C6C141066DDECA 8CA16DDFE1937E93 F276C6C53002D0F7 A6BFE0FD3A76BE64 63E67D0DE1E2F195 B3F56F38EDAB1CC2 659AFC860B4229F8 30BCD673B04AE033 5D54F18B6D4CD4C0 25EB8ECE43945D30 000B1F03B8F2C2D4 5E625FCC79846EF4 CD858BD1B6CF17DF D933F1DEB843D1B3 E58F7B42991F5974 4B5B82786977F631 0FCCBB76D9A0408F 18545A2FE9342F98 021C6A8E4C2062AC F82C1C6C837415DE 47EFD31B3ABF59B6 013B537EA2F3834A 1A04DF71D3BEF65E 1EEF3C9506F9148D 8426098757128955 B9E121132FA6D424 62698A9114037560 7D01903192C72F2F B80BF779176BAB6C 1654623C48A239AF 837481F383ADCCED 3E94421707C126FB AAB11CFD26A3744F 0DDA833BFA7D032A FF1CFA082AEA6DF0 1286BF748C5E10F5 21A445DD541AE276 5946E8672AE9579E 646EE7A1F96E35C6 1AA968AC8628908C C6125C825B50FEC7 8E82B6F471240D21 3FB6E42D0DA7E624 60A05BA5234849F2 3BB2FA6E3F6C8D11 603037665609D3A7 EDCD8207F04B8F91 036CEE9B1E9A66C0 0151135FA81EBF4A 34AC152BF9190DD4 3B8C6090E8D4C287 9EA4823CE0CB522A 5096AE29B5E51E72 2FE2C55672656616 2DEA5E6A11EC8538 7C83846BF4BAF03B 76143E76ADEA23FF EF8F39FD73CBF2F8 26CCA54CC699DB8B B1B11AE51560C074 95516BE9B1A65988 3D1F454ABAB7715F 9C0095541EE83027 D5EF23FFBA125293 4D788128E07EF2F6 13A596AB409B04BE C8485367F91AE0E3 C7FD037383399440 631022E8E4A8DA40 FBB84360082FF0AA E4A6AFCB3D975BB5 238C335CCBCD533B EDC49DF7A3F619E2 D43A2DF3ED4EEEE3 2AF147C9BE980CD0 FA520EB1D99EF6A6 8E4F94B5AB632791 7813B0661BAC3570 FB6F3348F3072C23 8E7005AC9A812281 760A573C89487028 B6980842E6936F51 EE3ACF4E9EEDE6E6 F4AADB9FDC20E406 2F2FCEC5CAC7B84A A2C3C44193B66058 E05C69B4B88710CE 57A7B8C2F304AAB4 7FBADBB0A4A71822 1D30563D5828BFA3 DFCD0A48A5A3F3E6 4243413DCEE0B54C 080B8AC39EB7F45F CD78334378F6096B FE1AED964150E675 6916A0DF352874EE 9B22F3C60CF4176D CA9B43309FF1D14C 0578B522DC9F227B 00399531BFB43141 6A1DC375D5089B6F 3AA60001F3BFFE76 C88826C41B950B8D C565428BDB56446E 0EA1CF386C7389B5 175D1A8566B8CEC7 5D1E5ABE96324483 80B4868E6C5C9EDF F4A2419135F6F9E8 DC8B135A00867D01 FE3042B231BD6492 B74C799B4E92C4DE DE14A6A5A9520088 EAA743B05A805244 BD43E4FE9DD9E4E6 64D882123A3F05CB 73E69E9CD8B05E03 AB7BF2E23434254E 1131B3D21B564324 FF0AF8A4ED9D68E4 B1180608B06BA1F1 2E7728FCB8C5B9C9 34113C2177EFEBE8 2CF32A34DB34C475 C71B638C00FBE1DF 2ADD827056A3F4F7 C17B32DF8EB9406F 5FC8EE7119F3BCE9 394F0746D2083573 E6ECFA3619F6D7D7 57DF3D448499FA3B 3D67F241203582B9 4FB2B07E23A5EE18 C8E995982692D633 DB806DCB68358770 0179DF8BB4CC71E0 0BDD5C6FE7191ADF 83EC3064FD5E88D2 11F848F1197C707A 1109C773E209D8AB 34A54FF35413F46F 47AC5FDC4414F0AC C7AE8B473942D4F9 637DF7DE8C5C82FC D8FDBB1D0826B936
- Read the ciphertext. Strip whitespace: 3,664 hex characters = 1,832 bytes = 229 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210051023(name+title). Key = MD5(password) =35eb88eed58273641f61ffa83a435be6, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 57 GUIDs as hex (shown below).
Decrypted: GUID list
1 f5432b46-a9af-4aae-b635-d1a0acb178fa 2 e7a778f4-0146-6033-a4d5-8fad21b49775 3 92dfde61-5ebb-4916-93fe-ab31649055c8 4 f9743f5b-babe-3f1e-9b57-b8349015ca3a 5 8b9fd290-cb3e-4cc3-856d-1f78ba4f22a2 6 d43a8b5e-ad92-7d92-bc02-059bf9c01198 7 72605641-f459-3821-9eae-b2b905290ffa 8 cce43e66-8c20-7731-bfd9-23645d65f183 9 9014a73c-820b-5451-8dba-bc8932cb0e6b 10 ad188bc7-261e-2643-b589-42a0ef10d33a 11 496b2452-b442-6fab-a484-cd27676250aa 12 13388576-2285-6ce1-9410-1cecb450e564 13 f27ca9d6-6021-69b5-bc08-667864617098 14 df6947c4-7441-30f5-a7df-42bb05d1e75a 15 66ff4fb2-8a54-5b38-b974-2e7a711ea612 16 4a92353c-2600-3227-b496-fdfc705c9b2d 17 d93916d6-b5ee-1ae7-9250-c9a629cb7217 18 7ed681ce-5728-49b8-8ae2-ad53daa32315 19 793215f0-d3a9-3fe7-a12f-2725e1eda5a6 20 90130360-cf7e-7a10-9b84-09d61d7912a9 21 68cab116-431f-1d55-861e-12aedd06486e 22 a1787d2a-4d19-36a8-818f-a40ffe65cd8a 23 e0bc0d54-550a-5a07-ab94-1dc5c422d890 24 92151835-bb09-709e-a6f1-2b21b33a4722 25 a02d6a0f-3639-7394-aa38-c8827f40cf7f 26 d9cefbf9-fd2e-4eeb-8d02-9e619c0795fb 27 1e745e1d-e1e1-3033-a398-94a3c3fc9766 28 4cd82fb7-db92-8550-8dfd-86e1c33ea115 29 9e802d7d-53cd-0c95-bc80-acbf5d0342d9 30 fe79f61e-363d-844a-847d-788aefeb38ae 31 5a29a263-0ea0-5473-a989-6a99830075a6 32 08972937-1a32-1e10-a438-45d54646ea16 33 055468e6-0c24-2dd6-ab66-5a3dddda022f 34 c6239ce7-46ce-8a07-aa31-de82f7831ee3 35 f5566fc4-e43a-2d51-a1a5-23f5f3dd6000 36 a914f91d-8e35-09b8-b49a-37af8a3ce90d 37 9f471daf-2ba1-16a3-b55c-fb498269270e 38 23e55a65-579a-4689-ac2b-8a7b5edd8772 39 c657d0b6-d29b-7b76-b0d8-285f92bd54c8 40 3c62e430-4533-6f2a-b5f1-59942437cd7e 41 edf494c6-2c64-7bf7-8ae0-2a0ee895c386 42 2b6218b6-2e5e-4669-9ff4-da2dc85476f6 43 b3cfa611-f4b1-5cc5-bc05-1e094c295246 44 527c0ca0-d3ef-0aad-ab49-5dc1f58c995d 45 0cb3f37c-ea32-6c1e-a63c-0d815315b693 46 f660e6b6-c0f1-6291-ad08-1a49ec349104 47 6201ccab-0550-3682-b995-ba16ebde8a39 48 f0c87f31-ec8e-54f2-9480-72a535e40c85 49 8f5ea503-5454-0a50-b51d-4659579bf3c8 50 0a87a50f-27d8-8bf3-9a0c-b5a53e36cb76 51 0f1f89dc-2632-6c1e-84fd-358d452101ef 52 dfa45d1c-dced-3a43-bb39-d4c35f469c33 53 2ba29c7e-7cb9-5b59-9cb2-d5f2f1c1da3b 54 2e4a548c-620d-1462-bd46-7791009adba2 55 8227de0b-aee5-83cd-825d-360d69316549 56 58841417-524f-0bc8-a56d-51576a54a920 57 158a3f6e-3236-07b5-8e10-9595e414f846
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
464347375266635314371357743808512820147674506635086351800. Exactly this sequence comes out ofnew Random(838).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 235 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 57; the post has N = 57 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.