201210061444 111vrh
explained decrypted filler
3DES(name+title) ECB, 59 GUIDs, seed 813
From the post to its content
As posted (encrypted)
35D1B3214CC5BD7C 1AA7E2D56290BAFE 82A8811C25042F5E B0BE0D156AB36E5B 39A5CF3C53DF409A 2A3F2E9429D5F076 2F6F5F6C7689C141 61FD0A3C3DDA6C7A 4C2FA8114AE6D987 4AE3D5BC34645B70 436300A78A5FC71F 98489ED22111AC6F 80C67AAE34820B49 B56D5AF309E52B63 29B86CD186D10445 E9A37F70F80CE588 B4AB2E03B66A871E 8C0D7272B320AF7F 8FD8FA9514AC9451 28D23F1A1C16F0F3 54E6973A193C5934 88B6361A8BB9C719 19E8B63F3F74695E 4439407297F34F4D 0183C17B9615B72B EB667F33BF436E9F E872E5160D744260 29CE07194456DC9C 501270FD995C37B9 B44419CBF6088102 1F517937492595FB 776AEA5027B1A13F DE10E03FA034C881 A64F7B1EE4AAA50A FB2741931E46B20A 571656E6CD7AA8AD FE5D641EF0C6E7E2 DAC2C479150F6C15 5FA633EDE254C5C9 2D801EC2C918D866 209F8BF4CBAE6196 CFD519D5D9B0B4D1 A9D28F1E9A7B569B BA6722A5FFC94478 E87A772EF0E98350 195F4590D64F26F5 0501161A2AB1CB1B 33B06CDDDB245814 730E9F5D3A7A15AB BF937F65A0B95C13 596D5A5980F1E94C A7BE15D229F23942 0EEE07BA52EFFD62 3B9481FFF9B64F2C 987EB628F08A8151 D051D0F13CFE2DC5 69CB903130F4E01B 8C3A29E5A93664D0 50B50646C1B9ECA0 2C3C03FED093C4FD 4D40E17642265FB0 79E2C185110A8203 EFB738331C3CC31F 77C72FA0BCAE52CB 60CF1EE157BB93AE 32C527592D10A639 F198DAB8DC064220 4ACD6AFF15A25DF9 DD99A44794100104 35432FC5AC155DAB 85FA469091E21687 B1ACDD54B79E2CC8 B694C42AA487208A 7633D22761062AC3 08F3C753475D1E86 E8800468530F9B71 D11CF4DC61A143BA F6C67F5DA1703BA1 B1FC017CC390CD49 DA73AB25AE01E83E 6B4530AC55AEB89E B87F4033D5522F6D 864B3AAE36EB946B F0265F56351C6632 1A54E61E7F121D59 0E751796DFAC7578 860956287C4FEEAE BED190DF92010A45 58B99CBEB163FB02 944BABC91B996D85 14601A3235BE47ED 75FEA3F9B2FC84ED C4BCB1D5DBB27545 7722337D54309DA2 4977E28AF7D75EFC 836B648F7EF9DBA7 CB3737FCBA3F0766 F6CAF2AEF1B9929A 5F784D8261657090 0F5A2110DAFC103B 1E3BB888A497DC6B DC357DF5534B37E4 0C69760CB81D5E72 3C44C813CD40E1C3 6ACBDD06167728A0 291CA59AAC352D2C 75549BD8E3D0DD5A AAF8BC166D45AB01 805F76B830953B3E 8F3DFC73D042EC68 E789A12688ECC14D 49F6D09DE91409B0 F7354D75C3253077 8AA95E66A6AF5D29 D0238EC4AF201C97 390F53D37FD761E5 0E43EA712953324A 2DC6DE8E6D095187 C273358C14517148 6C338864452BB2E2 714F945E31BDF1E4 FA83B671A81D2B4A 4705853E4B32A684 C3A332B8C2ECAF9A FF7CCFB0BB0551E4 99142F1E5E5A9E7D ECE5FC3957ECF1ED 60486962A3CAC8F0 40FADD07B2ECFA90 502D23827FF1D464 E2C91394E0A84ADC 52BCB25476393281 4C9BA64B6C249CF7 D1155AB2BAAE3992 343CC3135D70FD42 81C13BB91B0D87A2 1CE766056A991027 2E46F8C0821979F9 396318538739A49F 55E331B4C76A7CC0 6F1BABB96482A101 C3F43F74E69BCEA0 BCA8838FD3D890FC 427FD799495CCC94 36F65B9E0939FF58 44F53B00F2D5EEE6 981E5AB4A789551F FC0FA2EB983FA417 2691192171F81AF2 D813416027D10F1F A3F031E89CDF75B8 BF4DB998D7595A99 75C2B60873E7EC96 36A0EE567040E0F5 61A30AA92DD8F3A9 D9773ED4EFD375C5 AD5CE267860D5B45 D6323ECE1B54214F E99D7F18604E128B 9649CB64B0B8A614 989E2432BCE2D34D AB32CED860C361C7 AFABE5F64BD91F55 6031F83F15BB1B54 419EC560E07FB560 5B3638AF28C6E896 1948A27DADB09B63 68B0395554035666 21263DD003540373 9C08BC2AC9F5D0C7 256CE88A6FAED4ED EB7B0D85AFE848AF EA72E0C1C49EF4F1 7758DE185DD5AD68 0CD2ADC8DA57519E B3A59BB03FB23CD8 28E1DE58B61EFB54 E93FB48ED8AF45C6 4E26F552263DA1B5 D861BC65EED8620F 657B1BBE6DFF9803 909411113E95107C 716BC8047CF43BB6 DE4840B00BE7E019 03DFE21AB49AB112 6B59B59BB14F07F2 EFC78BC7CE665609 ED66DF3E076F31E3 A5F1FBA5AA7890CD EBA651AF1BADB09D 1E71E77128338F51 44AEF8E014B799C7 1E827E67F5882B29 3DFE22E77A6DEF68 1F53A290E45AE92D DD48AE19A7BFDC64 B7B64C073805D3B4 58EA1D0A904519C0 E1F718569F12F6B9 54F4660D2F4F4456 9682BF8BC695F4E5 77B63FBB674146E6 5F2D6B7752B0372E 9F787E3931273AFD 70971811B9FFCAB6 009FA1513B67DC7E E04748B2DB88E486 C5CB8FD2CACD48F7 F859FDB2225F6D95 98A37B7F8FB21BE4 CC7BCBD2D1DE565C 7234ABE141256C4C 821BD00D33FAFA78 6892816D3E3A7A7B 520B32559D6541A2 7803A7B62C2E5CAC CECB2ACB5941D3F7 BFCA204C17BF8743 7291A971FB83790B FBF3178EEC98EAB2 EA5469EF6F75A504 D90A82E3155F2FB7 D29EC8E5C1978AE2 1E26A1A18EF0900F 7D7DEA587A379169 4456DC7D3A566F3E 644D95EF2BF3A154 DBD6D4A39FC8DC85 6DAFFA34700E8765 E6A4A575E2382D80 7488A5D3E6E8D668 1699B71F89BB9325 6A84A5379A9C09B9 AD7D0484C2EF5C7D 22F929BCFA1FC9A3 7401A08ACFCA872C 56D02CF820E3339D
- Read the ciphertext. Strip whitespace: 3,792 hex characters = 1,896 bytes = 237 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210061444(name+title). Key = MD5(password) =f6a5f4394b1f07ef32562864fe5c0872, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 59 GUIDs as hex (shown below).
Decrypted: GUID list
1 a76c8f36-d241-4bc7-bda9-79f231ef3d5e 2 518cdd74-bc91-30fa-bc3d-d573401d1b21 3 be623599-34f6-0e72-88de-2bb972e9c9d6 4 433aea22-ef27-022f-9fa0-0e1c6859ada8 5 1bf012ff-da75-2657-a749-704a358ca216 6 f20ea9e5-6db6-06f9-be14-b50d765f1c08 7 df5c3d5c-107f-188a-b989-1334b840bcd2 8 087104c5-63bb-2811-8334-b350ac9b02aa 9 2e7e8ddd-d81c-5a39-a6aa-ea92a197fc6c 10 9316db23-16bc-07f9-b207-4466aa54badd 11 381882cd-ddc1-2591-92b8-9b7842e4ceb1 12 3addfe41-66db-1c92-92f4-000b9c488101 13 77aa7a28-75ac-450a-96de-3cf6965001bf 14 916ca9ea-2130-3b6c-98c0-f34134c6b460 15 c19f64f6-f23b-09c9-8b97-1074726ec46a 16 d9b35d75-5bc6-6864-b69a-02e08c96aa8e 17 0af91b0e-fd0e-5afe-88b8-d46d9db377ca 18 71ca60bb-2a8b-0dbf-9222-57ee7286fb90 19 11ed7edc-f4f9-690c-bd49-c1ae42819480 20 10d2daeb-9c10-15ac-8f6b-f704aacef33f 21 681aa184-b01c-75cf-928e-e1f73aad796d 22 adb742c9-783e-2a43-b295-6163ce734c49 23 992cdd00-0d0d-32ad-be1d-8a11e6b521d9 24 d4e54757-68d1-058a-8c9b-bf173a6a4bd9 25 5ee5ad54-3f57-3028-b1dd-5b8bd68aee3c 26 4bede192-16dd-33b9-bf4f-0c3c4d389d20 27 963af901-76c0-86e3-84e5-98e45538c394 28 42186048-b449-3817-a7a8-cf7915a33922 29 1abf2b99-38b1-06da-b990-cccb60ff0f25 30 33b85c4a-ce64-730b-8ed4-0749336d9043 31 57561858-bdf0-2c43-9dc2-aa9fb561e9e9 32 c559dff9-7159-500c-8f53-4b9daa8ee4d5 33 e6bdb04d-6357-26d1-97dd-969a85c903db 34 6257fe79-a481-38ea-ac10-43ef9a30e550 35 1cfcdad4-b585-4cdb-a522-4e467d28ac68 36 41d4aad9-9e9d-8e19-a8e3-2d7ff0aa8569 37 f943ff75-7c6e-4baf-8eaf-ccef54d457dc 38 856d23e4-239e-3527-8534-d8703b2f2ec3 39 53511313-0e63-5523-a80f-3ff6b0d444f2 40 82b93d42-95a9-554d-bf0e-bb5023553a34 41 d66874ae-4af5-5945-a2ab-f072c8616ce0 42 d2b60395-acfd-53da-9c35-94977831e7d4 43 1fd6e097-b6a3-28f8-97dd-27e859108611 44 bb1c500d-f318-22eb-8a82-8d0b1abdfbed 45 0361c379-1b3d-43cc-aca2-209a25e5320d 46 69873a0d-9e59-6b6c-b44a-6dd405696028 47 cca5ef25-4745-8e9d-8be4-ffdd1932f841 48 7f75a9c6-b524-1f9f-9f9b-4ae0fc2f6f89 49 d3d07c7a-a079-5f0c-ba7a-6bb8118e8f9c 50 94b80db3-96f8-6910-9a53-ff7a0a0be57d 51 5f936891-ed43-7f00-a633-6c4493cfa72d 52 dd6e7a61-0aa3-1b4f-9130-2e2c3096858b 53 1b053969-cda0-4459-81e4-d14136f8fbfb 54 806f05c1-7740-1ee8-8aab-2d88252465c6 55 f439fc93-445c-8a4d-8d4f-1de0376fdec9 56 d26e7143-13e5-1ea3-b0c2-3b184705c455 57 3db61687-f007-8be8-9e25-0b5de91782a5 58 8756e5a4-759e-8c3d-a802-77174be58dd8 59 d4037d43-2ea7-64de-9996-84cd44e7936c
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
43002012502143065061723033830725234843555522468156714181886. Exactly this sequence comes out ofnew Random(813).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 320 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 59; the post has N = 59 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.