201210051223 10zydg
explained decrypted filler
seed 782
From the post to its content
As posted (encrypted)
E016750DFA800613 26897C921C868CC0 0AE2F0D2EAE879EA 8B089F09BF80C6E1 8003EA43A5692AE2 1816C97882522E21 F34634D714AA9077 FA2D87D96B2A077F 3B373DA9307954EA A23157734014B354 486B4674534B6347 0F4F3A8C3A6B3E31 B42FD53094B4CC78 773FE9CABD4E1766 77E0481321F993AF 56F5F6DF1DE43C85 A7C97C734AA33C5D 2D48173FB9A40EEF EE00C916E1F8503A CC9BA829CB305CF3 6E480D0A5776A77E E194856F536E527A 17C26C9F3238BE97 4FE83556F605FB51 39D152BF87FB0BDE 0E6DE0B9C5D725AC DDF66E26214D9E3F 488CF8D867DA8B7F 434317CE6A41087E 9FD3F0C341D016D7 2A40D457A1DBFAAD 88351C0506A79319 FD970495BE54E181 AB5030C1EE352D04 AD7DE355F26408AE DBDC754FB8846B11 8F5AFE7EB2BF1E7A 829BE6FB847B71B8 482BCF196245DE3E C0E6839794022639 1CB597C9D10167BD AD4EDA64D82C67CB 23526E35445D1292 6ED11E9674FF0F30 868B9F630933D8D8 9FCEA08F43705AE0 4641E9CC604EC4F3 3F3552ACFC22C35D 166B15721C6D0AA8 9739074A3F1DF9C5 4DBD6D0754CBA038 092BEAAC2276AAC0 29212658F895A1D7 8789A7CEC4F813FB 9877117D8C65234B 924FB35FA69E7F1F 9044AD4C14DE5C65 08FE51E50D6E2D1C D8F970422A2DBDBC 09313B60CF9AA45A 79E9F18EDC929A80 B2C7E8CAC20A1D40 244C0F1808A96BFB 5A8CAAD56BF503B0 67414AC18C65406B 8A6DC5DDDC7BB2F6 D55372F763E72548 1672C8A7F3E27277 164501AD919402DA 82A7A83606E337FC AAEF764B7B09A1CC E1342952B1CE31A3 D82D206F81F9E0FF 72D9D99D0F7F60DE 43F35C478B9BE58F 296A943DE9D14F10 0E4E03653E8855E9 9F90F2C474E35B7F CB549B7D0D327CDC C891B92497779A9A 609692DF426DEE01 E3DFEB3E7EEC9507 DD22FB71659CD60C 7A80CDB32EE3ADA6 978EC2F40828EDB7 32ECE5875DE64537 2342AF715D38C536 13AE8EDAF4BC403A 63BFAFE999BB304D B9F8AEB9A014672F 9515BF6EC8623DBC 0198BB3BA91CD5FD C113A8AB24AE4591 6E486679714E6DDF 54EEB8B7F096CA1E 0BB3755DA8D83C37 2AF8EFAA3AF29756 9DF49D2A10D87DCA EAB5C6BD82795A7B 5D50FCE0E43759BA 51C91E2023EF37AD ECB209C7AB722680 CFFFF9D7A1DFF627 3B8C7BF2DCC928F3 CC025AD59DCF409B 8BC90C7D23E91524 C3E276FD2035A46B 819D22C3B5954BAD FDE6961C1DCB21D0 47BFBDF1251CE41F 4696A4DDB216049A 3351644E61EE8AB1 6BADEBE144FD7AB1 A922E78AAFC27957 7DE501991681B970 7DFDEF2F6CD9E837 8C0EA99C9AB29AA0 97D6B9DF215701EE D23E9A20CE64D593 F66596085065B51E 0425B3704D809E01 C21C43292F5A1712 B78CC617DF7B2E4D CF8B243268525E7F B10F63A7E22EBB90 3365CB079357FC27 B62A35B09805A520 A1F8AA91013BA479 B54A26165B3F8FB0 0E7A2CC2E1556D1F C1078240CEDF02F5 D7BDAB8D7FE8426C 275BCDB6BC3448B5 40F045D4D3C14CA2 67C00654C23898F4 C54C5D0E791A70B2 8338F034428C0690 8EE3A01F8FC9D04D 78268054C04CF94D D8F28EE1F207E069 391295AA1D209771 21525563A9763269 6AE95D7720BD941E E2644010110AB3EA C9B2E8122F463511 1E0C5A9BDBB2CF52 76B61B31729A75E0 B6424E24EEE8F105 FB24D29D502F11B3 8B727A0C179BC70C 165E777B598C38E8 4A8308F424CE90F6 FC22FCE0948CF5DF 4DE509803011A22F A6A8024758A88740 4C55421B25652EBC 9B61AA2DCAE1394B 09956FBB5D1E6A2B E0297E1F8CA85486 0EC63907F93CAEEA EB173B2C15F7DE8B A2EB6E1F585B7F94 9688514F2765A479 EAEF430D9503C5F0 FE75BBD11A8F41D5 606ECB4B7D264338 E63476CB904997DA 43A8AB49B8A4E1BD F395256A80FCD85E 5DB796CDFA44E0A1 F76E5DF59C424F24 29ABA9A811785FEF 3EFEC4CAE044C6C7 5F1FE4887473CE66 6BE50162D8A91459 FE0403C6ED3BE08A BE125B50440CEE95 A2DA5A2B460B6D53 E8EDD2DC0599EBDB DABAE8FBAC780520 3DCA53A9D9D0CBB2 59816A4B59A2DFCE FDAE0B284AE1118A 5E475D17DB910535 8968A9EF9078C6D0 08358F8CB7DA765C 8A07021715CCC465 8B1B309805925C98 C6BD0C644E35C449
- Read the ciphertext. Strip whitespace: 3,024 hex characters = 1,512 bytes = 189 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210051223(name+title). Key = MD5(password) =1768f42b550700dcd244441f7286c929, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 47 GUIDs as hex (shown below).
Decrypted: GUID list
1 40a69843-9102-28c5-8d46-464d6569377c 2 0764b8eb-a442-24f9-b600-63b675da8f10 3 4be57083-162b-34e9-9a71-3988957eecd9 4 62847320-7fb4-4e8c-b345-aa2fe48a33a5 5 c8cfe49f-f1c9-2fe3-9c5a-52206c27a5be 6 cd558599-6df6-8132-be62-1447ef2fd425 7 4cefbdb9-de4f-246c-a74f-d69419681f73 8 4013578d-405b-66d7-9758-34d61adf135d 9 921e9177-fb9b-6be1-89b6-1b82b2d294ec 10 b650588b-b0b5-5554-8d37-41a499f8cafd 11 1651c376-0434-348d-8b48-cbf187ac88e5 12 c803fdd2-5303-816b-9180-c64fc1de536c 13 186b01ae-7b1d-116b-9dd4-5bc2c79e89be 14 1b61d091-a4d9-2ee7-9923-2605876b4a8a 15 553c2ded-2f70-3b67-8d56-71d0c77745f4 16 000ab20e-4263-390b-b2ec-c433539e1c3a 17 4d9a765a-bd3c-5849-b843-68cf96305c3e 18 2b7c80be-d83a-779e-98a4-b1f350a870ad 19 4856b65b-2f96-7c80-a827-8294c80c0975 20 b41e1908-3aba-085c-8b4a-d166393bf38c 21 14fc910d-d0f6-66cf-b9f0-f3eff2d03da7 22 838da968-cfda-6d97-b4d1-6275fa884987 23 43463ded-f701-1487-a8a4-c8f448d3567e 24 27b9a670-696d-1d71-bae6-3ff477558b23 25 a1f3e062-94c0-3cfe-ade6-669eaeeb1be2 26 76409151-5772-4712-97f7-c8638c280188 27 9613f8b1-1222-29ea-9718-e651c5d0aa66 28 b2ac236f-b65e-1eb8-bac8-1be66a62467b 29 20f67e2e-a781-4c89-b98d-e3fd2884a08b 30 97a7e794-ed06-7f52-9ce3-abf17abad847 31 0708f7f8-d322-70d4-8154-7949d674676e 32 66c85a4b-a30d-3d13-8ea6-fa02ec53d1b1 33 337e2ec2-9885-618b-ae3f-5389f5bf947e 34 abf35c52-ed30-5c3b-b896-ada8a6da1860 35 780a16e0-425c-6592-b5eb-c54d70dc9468 36 43943b70-95bb-50be-a666-63e2b4f56f8c 37 6598f0ef-21dd-7867-b746-62528c6d42dc 38 f252e07a-2296-2329-a808-14164487c455 39 b39ffb1a-e60a-2a39-8e3b-d11174474f05 40 a03f5155-7af7-83ff-a43e-40213a605a69 41 97295177-79fd-7186-8b64-5e87c3b743d1 42 85fe0c96-88fb-8d7f-81ba-645f3b6d52f1 43 a072db39-296a-457e-a149-bde44687e5e0 44 640211cc-545b-6582-8ba5-f803ca92407a 45 e61b6794-1c95-1edb-ac55-b055c8ea7e18 46 82d6b252-056d-4d85-93aa-a60d2b661b57 47 be5205a7-9176-3fa4-aedb-247708c3760a
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
22342826653812335770661134214773656572287846143. Exactly this sequence comes out ofnew Random(782).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 241 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 47; the post has N = 47 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.