201210061004 111i2l
explained decrypted filler
3DES(name+title) ECB, 57 GUIDs, seed 258
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 3,664 hex characters = 1,832 bytes = 229 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210061004(name+title). Key = MD5(password) =da476079d4387218d34e1fbdc7821031, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 57 GUIDs as hex (shown below).
Decrypted: GUID list
1 323b4a87-4ba6-4b3e-b56e-fbc710243c0d 2 87859e8e-9c43-4326-b137-08e8845ff67c 3 f8bacae9-2aee-0789-aeaf-4f2b5ec4c8ad 4 1885b673-22dc-5def-8143-40ca39a44087 5 997115b1-bf43-6348-a8fe-edc42238178a 6 477ea4ce-7cae-0ff4-a224-3b4fdb36e3ad 7 0b5ff734-b6ac-4b86-a202-a18b5723eb4f 8 d4f8c816-a13b-74be-a5c6-ce686d3a7bd4 9 4f06cc3e-7581-88b1-a632-9ee432a3dc54 10 b94d2694-d406-3b77-a0e2-5774c643b377 11 a6c7b08f-dd91-3e44-af40-8ae6618dc4c5 12 037434f6-44dd-884a-b431-e8018acde77c 13 ad988c39-f203-8b7d-9ad7-f33646b52b34 14 eea31768-20b4-6b16-b017-3706ace94369 15 9844cad1-32a7-580d-b047-92b084f77825 16 019285cb-f365-1058-b24d-bdfa08900ad2 17 b3d6a509-dd4e-234d-a6f0-4f9e4de871a2 18 cf55e62b-ce2e-8167-86cd-b0261304b646 19 84f006d8-9a16-55df-a09b-665ff04b2adb 20 f06bf127-92d5-1ae7-9274-d8ba17bd92dc 21 c468d35e-6992-08b0-8942-1b80529ccda9 22 e12c008a-d8e0-1fcb-88f0-3a5341833ee6 23 d6cb15b2-1562-53ef-b142-2305d664f34b 24 660257d2-1b2b-1033-8752-84ca810a9084 25 8d6a6ef0-bb4f-817e-9ddc-0d7588cc8a63 26 da926329-0840-4a97-9412-42608ce5eb49 27 8ddc18c5-2ebb-66d3-b47e-8462d9dbc501 28 716f8a8a-b385-4f31-8979-c84814d5c9e8 29 45665758-4858-7258-a957-916e243898b6 30 27928630-6958-7fc5-87bc-190b3c039aa6 31 68a6ec30-c602-36d3-a87d-3ec85309b253 32 498933e7-7ee1-3e27-8fe2-118122e602e4 33 dcc0e84d-e8a4-015e-9a4d-cc790a4bb375 34 ca84d7c5-e9d1-4f36-b815-4d04c5eb23f4 35 f73dc6f2-62d0-664a-8cac-7c15617963d3 36 da54c6fb-72ec-8ac4-8598-0241ee0743d8 37 845c7fb9-57ee-64c1-a2ee-b84ae14c94bc 38 a7e2a306-cc7e-1c60-8031-9d29487f1409 39 83e1ec9c-d40e-4642-b8ed-8d9dfd57996c 40 ac9579cb-2f9e-487d-b0da-9657a4292d82 41 d75a2ab3-dceb-5bc6-9d20-272a64ef2c3e 42 9ed223be-7d3f-3633-8b4a-bbd6e9349bb9 43 bbbbdaa3-4515-6ced-9db9-d661edef83c6 44 c40b4761-2084-4851-a307-60eb4928e729 45 ad518d14-5039-860b-b562-fdd1b514de8d 46 c5bb868e-5b0d-8a39-b02a-d438b285688a 47 58410dec-06c4-155c-bbb2-bd904790f3cb 48 cd7738a7-d64c-4f39-8ae3-1eff75a1944d 49 881d4adf-67b0-3097-885e-c86a208b3782 50 ae32427d-412f-2bb0-bb05-2e6c7cf085cd 51 66139ed6-3958-3052-a6a9-17aaacca56b5 52 7d996b1f-d278-8faf-9e65-52ae07c64b3b 53 d4c9689d-3a2a-1431-bf27-d6e5fcbc98f0 54 c90cef6a-935f-0eca-9664-493e019c04a1 55 7f2c3f85-025c-74fd-9148-79ff9fe6b3ea 56 2566cc21-4778-35c7-9e02-dcf5832150bc 57 72bc92a6-b9c9-8fa3-97ea-c3ff9af5ff1e
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
440560478338865128510151846477330468614453648814323810738. Exactly this sequence comes out ofnew Random(258).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 306 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 57; the post has N = 57 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.