201210061224 111oa3
explained decrypted filler
3DES(name+title) ECB, 55 GUIDs, seed 949
From the post to its content
As posted (encrypted)
CBED9D14F15B19FC 5DF06B6FDF3793EA 3C383C6B65AA3044 1C9FB165F4C0D63C ECD90DD33D952DF8 84BEA2236F4B21D7 85F9FD1974A1BFC7 A8ACB89A3CACCD17 BE94DFF7E70AEA7D BFE5A6144C24BEF4 ABD384C6E3A40115 49DD9317D1CA9B30 4AC47D40BDAC2B25 E856B6FE0A540234 C9A9178CC833E006 3A4CE3294C6DE10D 4687E4C32ADF73B8 4C4816EE92FA1348 AF9B7CE83EA59287 5507BA1BC0280CE7 8E439C8E870B0681 5837BD780D134E6B 07C0B495E75A54C2 3E728FF77862247F 3ED59177228F4101 56DAE440D1254FA6 AFA3924E4FF73685 220AA09B1C20D4F0 8AA8375B360E7B61 FE157EDB856575A1 89844D3E764E2101 B2E75440167A6614 EBC195CA2FD61461 359B05747A47ED24 33E1229F4BACD2DE 58FBDF027FAECD93 961E8F3B31D64681 C7D6C5EC5A345388 111AEECC29932B01 6D888429FB2123E2 9BFD7398884D04B9 7E9780C16B589E03 E7D4A62DA9281817 D0CA66084612B9F3 03E0892B115EAA7D 1BB7D86C8D9D1396 A9D4A65552BF7562 9ECB9F02B7EC6F10 03712DD5B0E3D693 C7B0C0193880C74B 708C4483D48866C5 C7F54A07B8843A28 637E014EA90A4CE7 60CBD74B473F8E54 1EC365BBFD8AEB47 B62A624E5F97AEAB C57DED161D3E966B 5A853A4A2EAB0B6D 98C6384E87EA9E52 EAE8FF15371440C1 6959F393DA8D7826 54F9C2C549EF2AA2 384B02CF210BEC9C ADB1BD1884C82C01 CDDEDDE6982180FB E6B9F71695D7FE1C C10C9D1BFD8D7FBF DD667EC195C86163 89C6D0EED717CA8C 80630500074C805D 7BDD1F014AD87490 BFE98832F10BDE04 CB6166F0D2B24A29 83D5821B4B96352E 4FB670BC6281C92A 582CD598880C83B7 EA96E1570570BB02 38F8B6F5A008275B 29907598AB0E074C 01CAFAE0C69E4704 936FC5E1DA70D4E7 25C73AE85F83C65A A2E05CABF0D922AF 2C976310D05F3660 3479EEEA9737F3CB 81BA24AD8E208878 0E391E5B6F3E5D49 20F2955A026A7177 16F167856DED5837 393F9EA02F65B53E 81A4641E13F52611 B0762C60F23CA433 F633534275810029 8745A2BC2094BAB5 5611EA3467644DE1 8F5B3BC809DC4D81 11CC8B926AE58A3B 74E43F0EE0B901A4 650C9ABB282DCCB6 346DAE3179E42A77 7EF6186D6199BCFA 8A6DFD3A408515F3 047F7C40076735C8 0518AD1AA216CFA2 A471014979362C39 DBCC8330387CFFE6 B4EBD32B5966437B 3074892234942EA6 81B6556F60BDC00E C371610197F6B85A ABE583E82A71C5AE A6A4508C26E91C34 223906E955F7F6B9 BEBB88B707AB08AD 82A04FEED272F5CB C33D446878FE2BD8 8EB0DB2DB8FBE178 32815EEB7286645F FAC552E60BB20C5E D5EF557FFD8AEBAB 8FA4B95B4FA67468 954C197D9836E1FE 84364384FFDDE1FB 522DF7181B017E25 531C4954D722A2AD 6E94851B4136D8DB 5E704BCDEA368A6C B89692EE7A178C28 B0EB92BB873FE5A2 49229063688B6293 60ED9C3EF6658119 F308F55CADCF877C 80911AFE2074D971 5DA6D68F0F8F45BF B9DB7069305180DB 02DD79522DE7BC58 B1FE538A6E9CB740 7618DBA2B5758A58 67576F0DB64FE89D D77E439CB145E7EB AA02FBE6E9B33D4E 1CC94BB81372484B 03A3448B63217B2A FB610F5306ED3D08 A027858C0DB48CC3 14894CE8E7F1EEFB A4B69E39D1B43BC2 0206A9FAA2F10183 01C8C649358E03CF 4EAE5C092CB40F9E 9658CD569A65C636 AF46EB3227DF2D3D BBA2C483E1CF5536 21833992DB26E80B E7096EA69E57809D B0BAE62A2B85AF78 3B0A6ACBCD6F176E A7235407333A4857 53095B9FC9A2BC3C 350D9CF1EAB2043C C6A3C1BA9036164A 6289D166C10B11C8 1E8DA0EA9785387B 65AC4F1417B2C1FB CA6B613CFDA23875 0A85C504C6E3B0C2 FF8AECA97331D3B4 5DBB10FFC1D62095 50DCEDC59A08A408 9A361C8D8EA72EE0 43CB13600B708BE0 2B1C74D13DB6634E 466CB0C75CD5685D 712B304DF44EFDB2 1658D822F32915ED A93A2DD01252EE77 5F2B05E0431A9EB6 81DDFE4EDC235943 894E3282CF6C57C4 D81705229ABFD594 9FA2EB149AAA2AD6 3320268D52466239 380D75EAAF4B945F ED6A098B94408EC4 75BFDE9C17A9127D EA2FABE45D9111BA 948BB8668255A8DF B4E54C674844CEFE 7A3BA753D772E6DA 8F4633FC2D9960B2 CD1C6D784DFAE134 CC9E41BAEFB9F1B8 FFEB70B424AB3074 78ECAB9C84E38163 F004779C53F8CE3D A4C178093FEADE34 014698877E3A1A4E E66E189C7ADCFEE6 8D0A21E24B5BEE59 6DED7ABB550E5126 C33C22279466E2B5 0B010F9F456102BD 69A3C37372A24E1E 28A1D1F8AB877EF3 F921BAED564D946C 97E06D54BD321F18 087290D4D46292C8 AB2ABA39EB61DF97 D088328FAF0876A5 B222E8E3398B6092 09C7753B37ACE9E6 2903AA923A55266A EE734008B788A8EC 2F7D90E4C3192433 29ED9842E4A7DCB8 F1E2F229B167EC86 E07200DD519C46BC ADABB9AACB84E9E3 AAED3C6ED722D9BA 7BB11FA7DD6161C7 22D2A1CAD60C4761
- Read the ciphertext. Strip whitespace: 3,536 hex characters = 1,768 bytes = 221 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210061224(name+title). Key = MD5(password) =7e18d5e61ecf6449b93513aa783401ee, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 55 GUIDs as hex (shown below).
Decrypted: GUID list
1 9d08206b-9702-49be-a69c-2e11865a90e5 2 4421dfbd-4453-239a-a1c5-66f3e62defed 3 1a88eda9-123b-062a-bd75-f890725f3621 4 ded8508c-6535-1dbc-8c47-d00851cce4a6 5 6b1c49e5-c71d-52d9-b0c7-481a2559434d 6 d0a06b3c-5c57-7ae9-8869-a8248c62548b 7 235b0e69-2038-16e9-88ed-089f92bcc4d2 8 08608499-65f5-4d51-a763-60a12327f3af 9 340a9946-6152-3bac-b10f-fe474d4f8893 10 0b0ee198-d57d-1ce3-8aae-8422e963e9b0 11 3aa46d69-3834-4062-9182-d61fa6487bc8 12 b7a1b2df-086f-3f12-a372-a9ac80d435df 13 738b4f15-4614-07e7-8c0f-1cdc031f778c 14 00923c7a-f8f9-1031-92ae-2224b43153dc 15 218cc313-3440-27f0-a0d1-5699d3be18a8 16 37fec243-6545-6c50-9b58-1654f317c11c 17 b608dd3d-fd51-7a99-97f4-85404e293e92 18 b00859a7-7c0f-38ff-b308-d1396bfd18f8 19 b1e083f2-8054-36e5-ad89-236c6616e1ab 20 7801cd20-8a66-620f-b35c-b80b635be1ef 21 17db6457-b44b-86ba-b758-78cfd5c6dac2 22 e418f3a6-7a8a-60cd-9f70-1a0532a901ed 23 6b7fe743-c3f3-37b8-ad6f-26ed20f36f6e 24 b45d0d8f-c00d-5872-a8c5-8a38cd1d4882 25 af587258-3a8a-6cc6-9fd2-c2da36a22df3 26 a1295786-4845-838f-9e38-9e1cfec984db 27 96bee04b-03b4-7154-ae62-d5c4d40ea224 28 71327981-fd35-6128-bb38-bf456dd0995e 29 4d6fa045-ce13-6f16-9d6f-b46d59dd7e35 30 7fe726ac-e2cc-3ec0-bcae-59c8a110bd94 31 3f8b66d3-e370-46bc-8c4f-eb2994923acf 32 df550451-1d47-31a8-8871-f38ed1795d83 33 7d5d3dc3-4952-8299-a98e-07c47c5fc2b7 34 895a3016-4a39-7740-af6d-7cdeeadd1371 35 d235ed90-046a-01c4-9897-2f2486025155 36 fffd2c38-6f0e-8a59-af13-9987750df03b 37 42a5986d-b458-1ac3-ac2d-5430ded30472 38 08cb1da4-c74f-151a-8306-c7598f05935b 39 b0ae3b07-f7fa-7f24-b10c-cde7b5740dd1 40 80a20a06-b34d-7af5-a833-c2c2ab6457a4 41 2e40c055-8f5b-0afe-a464-b8a95265e9a3 42 35e62dfc-9aa0-3a5d-a284-2e24884d12fe 43 4e5e1e4a-cc74-083e-a6ed-c753f455bc16 44 3b60eb1d-2be2-57d7-92d3-79da270454bd 45 7009f96a-6c4b-2ad5-b125-c46833fdcfa9 46 e48231fd-fbc6-4fe3-a612-bd89febeb8cf 47 2a5597bd-0d80-1b89-81e6-aae71fa58225 48 50b0c49d-1470-2526-bbbe-7483fb0df068 49 30d00082-123a-7d3f-ba9d-da7754477722 50 5d13c7f4-36f9-57c1-b11e-c35801dcf430 51 15edb68e-1279-51e4-b27d-026bee827eb6 52 ba0309be-b0d8-359e-8637-f8b87812117a 53 3d4d928e-1562-22ac-97c2-de48e85df083 54 e789c3eb-a45f-757b-8745-d4e50a21a823 55 51a941af-2688-1329-9705-7bab6460704d
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
4201571431430126733686356876634387081177030524127553271. Exactly this sequence comes out ofnew Random(949).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 313 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 55; the post has N = 55 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.