201210051623 110d9w
explained decrypted filler
seed 297
From the post to its content
As posted (encrypted)
71DA1F38CEFB1FE4 4AC6D147CC88018E CBFEB4D5B8303105 65415658C565A34C D47DBFB6D42105EB FBF3AE330ADCFE30 88F46FAAA75CC4ED B588C8D08915860D 49A0D0B67E9BB63B AC03456599BB728C AB5F0115284AB143 9C2CF2C88753B5EF 9C887D35BF7F739B D5A051141129CB97 8444D67884B87573 885D7101A1029A44 01C5BBB26754FF1C A2BC7A690D34CC25 0D0E371D62ADA5DC 8B5C120D6613CBCA 121C5485621F9133 DC671680B278BF18 0A6C82DDC3636C31 68CC0B3F56D89D64 0FAD31113EA4864D ED863D4F5E177FEA 6F90129C08EA5056 C6B681E7CD855BDC A8317B7F8FCE8BC0 B75E6318736B6694 FB039ABCA34CD507 39A1C21B7BA5263D AA6689612F8D8388 D779AE41FFE876CF 42DA65EBA7F0934E 63739C074077723F 1D92BB8E0A8CB8B2 6F1605945318788C AE1EEB479EF33C59 321627709A1A3F31 81567D70E6D504CC 270723EF85F34F62 C616417805B3CC56 9B1FEB0AA2ACBFD8 24AD0F20A5DF58A5 D87C196C5D39AFD1 7290517F070FE2FB 09D93A0B6A7FCEA7 22E8D75934AF104A 3214D874C66A011B 1A56928D6C5C4299 21F6164641D21110 6D3C971A0E9220B8 FEAFF0389E7F7BB3 186B1D6FB261FA4D A2D6C34B9EFBCFED 444A14C4758603AD 1F3BC0A41280AC93 11002D45A7AA9D3B EACD3BDC3DE8B537 9C476970B12FEC77 89984B4A9FE66570 CC3049C40D5503F7 2C2BFE3A46718F05 E10B651917F0CEC0 784F84A98544ED6D B3FF2F867E5931A7 5B35ED8499DCDD06 2FF10176D3BF7F54 6D52655E0FED4EF8 5BB48A83C94A8446 D75FD5A758D7C06E 92D882C16EF714E6 2D161438B2C27673 394EC4C100E12320 680DA44617EDD9B2 C5D49CB13D3F5C0E 7E755EEA7C8D8829 F1970043F90CED05 D0920D9D53C517FF 3EEC0DA72CE1E3CC FA25AA09B26C2DA1 8E09C9C987CA31E1 20F4009A01D916C0 ADDD38720D9FAC95 FC9345F027F95C2F AE15BFB1D35AA63A 623DA27FFFC7BB6A 59F3CB986D4B6271 9F88B145E308D5C4 DC4555193B383823 7283EA687FC9FBAC 0224ABDD43C844BF 2677D64DC44BCDFB 7DFA96BC148FF52B DF13D327904DD132 4F5825E48388EEBE D8E367AAB3D89F94 4C36AB8E68165A6C E7F3E8E8A7510926 52F1746D62B17435 147D3AB9AD4E6FB0 3C65EEFF3D6338E2 B71353E75A79642F F3A56A0BD09CAB86 355049D15595A891 16FA5AA4D6954D28 7A529063E7E5C322 055F8E414672D4C4 B7E95B746C00C634 219BFFF627F560B8 61D0B2ED3AE336AA DD512719CBA90F23 794FEF6E52F84EBE C07CDC3536F429AA 9AF5B7CCFC47DCA1 288AF1E653696064 9CC37F2E71173E88 84A34FD7FD78FF0E E81C0A7D80774C19 764258B32B8EF519 D7B02DBE7E18BFB9 BA8FB273EBEC6904 282C6D9752D64E31 2D06364F0496A20E 1FEF62BDB26096C7 B44B4FEC5079395C D9435CBF959B0FC7 D44351A054605186 19945ADC07AE03B6 0EB1BD1A93A04783 707FD256392E01C5 CAC4604B5A7B6ABF 6B90546DA40F729B 5793B60172F3C6B6 5757CCD68CBE450E 062F3064B6DFEA6C 3E6D8DFC85B4AAA7 58F1989F10FECB34 4A765B5D669E93A8 4236541003344A86 EE2AF408250EBED1 416D9BB4E330DBF7 2D65D46913B65863 B37986442A0D9498 39F8BC4006C7FF91 0DFA1637035EE820 3979E256B7AD1CF9 7FE87C0632EE72B2 0D7D15A612845361 20C07FEA4A4EA6FF 675621F8643B24C2 29967C36BA5F9470 D3881EACA7A49C25 EE0F7E9B4E0BFBA2 678BDE17E5683B87 C55EA95F93200381 8F85BFF5D365EFBE 65599463230E10A2 75DBD0EF51547008 061CE5933E135548 4AE33404B13B11A4 333D78C393D561B7 63900381C300EBD8 D4D21370D7B24285 F3D96148F2DF034D 1D6B2882CD995DDC 97CC4DD70F013FDD 134A26FF2149F0FB 2AF03B87247AB558 C314174DE4252400 664D916EF288E7BA C1C2EB49CD2AE00F 41CB67CB6D008454 D59369963C29F3C5 C8BDA5816137E917 1E3FDF69E8E1776E 1F8100FD48ABAC42 5F7F22BA8B9FEFEE C25E2D211F3FAB5F 73CA764D8E596401 9B68CC435F11EEF9 E84624D461C62F8D 4BC272266E268204 3CE3F5B84FA9D9B3 8A7E6E2B7DBE07CF A591260E13B1A3A9 44A1AA5A9BF5C565 58C87235A8CCC8A6 160457FCB8841D9A A9F41454A7ACCC0F 4A2AFD602FB60093 3CA3433C77980A0A
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210051623(name+title). Key = MD5(password) =f8b9b234b19a0bf78beedde5ba6c7b76, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 100fb7ef-9313-72f7-be61-25565ec0400a 2 c39f585f-aa90-82a5-8bbb-f69a8d01a13e 3 381abbd8-cdf9-3793-87c4-3da39c77758b 4 28e4cbdd-afe9-8ac7-9a2c-7fce7d65b37c 5 de6b952d-546f-2aa5-b231-fcea59a713c0 6 b2e11c98-6406-0349-b4f0-8f129223644f 7 4a67a9ee-1272-87ea-8716-19973c715fe1 8 d5314fdd-d7b6-3dd3-85a1-4b3e3c779e88 9 579c59e9-a82f-6a58-b425-f870c849d050 10 cd420ff7-20cf-76b2-8b09-d444791f8bcd 11 7fe08c0d-91aa-0247-ba11-d389cc425ff0 12 e098e881-978e-3cde-bb7c-306ca4f0c558 13 39465d7f-d2da-7ecc-83a5-0e6fbca3c3b9 14 be3224d0-6307-866d-abf0-5a5ce735c5e2 15 a811bf47-3ece-7c80-b1ce-a1b3a77046e5 16 217d0f19-fea1-4be3-9382-f90c783ff7f1 17 349545d8-c3bd-67e3-9a17-07fa09e7b971 18 8613d17d-d216-1e84-92b6-d526fd239a2f 19 814482fb-34b3-67d0-be54-0ec2d13bd8ee 20 efa1afae-3d1a-2efd-9144-b2134e5a61fa 21 4e5937d9-69b5-23dc-a3d3-c0ee3bd104b5 22 30b0d99b-2a31-6e57-a90d-61c39b3d927a 23 4e4ff13b-158e-1497-a78c-68d738f651c7 24 2487dc30-3600-701a-bd82-e7a3d2e858ed 25 b5acd90b-0bd7-78c7-a915-27dc2182eabf 26 cfa8320e-3696-4684-858c-5ac225b667fb 27 c57d1b3f-aa97-22c6-95c6-9ae0ec9633ad 28 341dd520-90d8-67d9-8cad-f17ead300210 29 d68a4938-8c9a-577a-a45e-f745277a9ccf 30 d5676240-7c02-23b3-b321-004de77cca70 31 3b541b08-79fa-7ae0-9b47-804372c85850 32 f04295cc-dcdc-60a0-82d7-65c2f2478698 33 6b8ab275-f2ed-6cac-8ca7-d889813b9487 34 c34aaab0-843a-33ff-99b6-61ad7fdfed9e 35 26e89b00-8a34-3b8d-aca9-e27cd9088db7 36 28a31365-53dd-5cb0-94a9-6988e1fe7919 37 bee8bd75-c113-0fa0-9293-9c2cbe2e7c7b 38 2af4c33e-21ee-7385-baa7-64551c0962ea 39 34f3eb8b-de72-1520-9309-b9233cbaa009 40 9336339b-413b-5993-957d-46ce288ff321 41 2623af89-237a-45a6-9be5-454f662cf51e 42 3419ccf1-9cb0-2479-b626-931a05d83cfa 43 1f5f2233-14de-0613-a0cb-98e9b89abdbb 44 9f54864f-9f5a-71ac-a050-c07d26c07dbf 45 14eb6e9e-a705-41cb-bb82-d3bcbbe232ab 46 3d770e00-bf2e-309d-bba9-0d9caf110e70 47 6997124b-d4cb-3db1-bb60-a90b68952e53 48 ec817e30-a330-0dc2-afd5-f7fae9966645
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
783820836703787461622617742652766335071542074330. Exactly this sequence comes out ofnew Random(297).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 253 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.