201210061604 112040
explained decrypted filler
3DES(name+title) ECB, 44 GUIDs, seed 683
From the post to its content
As posted (encrypted)
D88703E843FED68E 3CCA05E6AD844A85 D1100D8F316B8A5B A1DB8D1172DC41D9 51DF9B070112EAED FC33A7E0A00E143E E96754DDEB09C4AF 314233EAAA70386B E85DCFA39EE1D0F7 696DC11EF0D04433 5AE21A0000EF8164 396415B3171F3BF5 173631ED2999A85A 61452E69056D25EC 533640B30C5D6635 1F192B166DFB4EBE A97D1276AABAE2A0 9AF4264291633353 0C5F5A5D5F061944 D82991C82BD6AE59 A018E7CE61C6E7F7 60F388F6207B1D54 2D1FF6832E7E1078 B13166077FF45878 C4FDE8D912450D5E 530C769D01B34FFE 798062C0223E94D0 E5A63E1F27A445FB B42632F274B501C6 4973BD31FF970988 5E7A796C18C7996B ECCA0E98E1287E72 68B4965252D13E3B 1B789BA3D5637604 8A77F25794328870 1BCFD080358BBF48 0833534460B8CCB2 B487E27B17684A19 A72EF7CA72731114 8BA07C72F044CBE0 4AC8309E561D41DA 6BC5F7187654648E 3030DA55ECEF78B3 AD822A65849F9D50 D4B1B51B4027E2AD 492076666CC2E7DE 4710D170E6FCA7A1 7F9F3D38E2D595F2 A807D8A267320992 BFB449907874206C 7D190D137EB747E7 8F3C948AB887F656 29A5470893238A94 74E2A61793D11657 76718DB6A35D110F 2A4F69BC75A24D2B EA15BC5E506A2B9B A882BBB0B5E37653 9AE2F803191962E1 616DD4CD2F40C778 243FC44626EEA862 6939BC2F68292F3E 419AD56754E76184 81E2CCB20DE54217 372EFEA1C97E456A 7F40F22E2A535793 467CC381FBD1A79A F92E1A8130635DBF 82CBB9325DF44F8F B76A8E5B7A7BE2DF F4C7CF4DB495630B A97EA638D4292C88 D3DDDBF5CC847F53 91FBF4E9ECBBB0D8 902F21C1DD424AA3 DE9E66308F7FD555 8C88CC0FCE7E6072 CC670D809E3B915B F38E7F604CB3C2BF B7C765DEDED567A3 CC7259D7C0B2F4B8 E3732981867ADFA9 033A5B59B6B550A0 E625220FB85F2DDD 3B4C2EF6636490AA 9AD7DBBBD9B9B840 982425A6526CCF63 3D237D57F6084621 D03B94D4BE6794F8 DB78BE7CDC5CD87F AE976502E109BCDB 5E09224DADB0C216 E1B7B0484FB6C323 F64D93116BE41160 3F137572A729EF9B E381652DBA74B56F 410BFCFFCC044BFD 0BE3C43129C1A6FF 45F57D09D81F7F3D EAAA06969ABD09F6 C1501646D920CB88 89031FDFA1E1E938 1845D6A7BA85BF10 1FF3B7665933377F 2088B690C4147889 4479B826752DFC9C 5C15A4799953BA57 636153416EC456CA 35E2D1FDF97AA2D2 8EEB03D3477932EC 8F40D2D2DC0CCB46 BD6FDAF474EFBA5D 9E4A32349F059EBE 67387B205FEE4A9F 672E48DA68EBB847 841F8C032E7FBEB6 806E8AE210A3B502 0F887CB68DA4C570 178DFCEA3D1835AD 69CD4033FBD73E49 941EA5604BA57C2A 70C446A3E1FDF904 75EB43E2F1D927F2 ADA9C7388E2E9EF4 BFC1E32FE277BFD1 28FFF472B0AA7D36 4C55BB6E35DC619A 7C2D8796811AFB4E 12F070A6D03FA857 3DCFA3266FBBDB00 0A9FB878D10D1559 C3D430581B3269B3 9594AFF40C6E0E23 61E280349D2A4515 E72DE15889C67F8E AB413EF51E05130F E39A9C6DCB4899E0 5E519F38C6128E92 4B885934AD840D7F 25502E016F46546C 3EA70E8F1DA3F77D 829EFE8B3B6D8393 0C48B0D13C6214F1 B539156B0DBE1222 117CACE4D502A5DF F421D745A5CAA518 5B67A1BD2919353E B488402295439A2C A87119A827906B89 0AF4002A97156EA6 C7616EE25CE30D35 0E8F8B25F5018949 11E3BC070304DB14 76BAA5A86D4FE71B 8E878558D863301B AC1D135A879C38AC 1E96FF5C85FBA503 B33D2C718090D1A9 ECE28EFE1E1D76BB 47632E2EC554F87B B25A4971ACD5342D D1D78DF6F613FB34 6DC7EAEA7994FF6E 01F9838835DEF8D8 D2ED476E0FFA0585 19135EFD98270823 F7208BA789388DDE AF14D7BBFE06BA1B B4BBA2AB9934F942 5CDE59663C064EEA C02688078F87D616 72ADB1EE6DD7152D C1360B597B09CF5A 108B61048B4B026B 401716585BCE06FD 8F88CEE20E2FECBB A1112E099FE70168
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210061604(name+title). Key = MD5(password) =a27114b25ce5a65cb5df95e939309c5d, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 806e86b7-1d71-46b7-bda5-0dcaa3fc3e1c 2 858fc3f3-64e3-200b-98eb-676626ae5700 3 4614aeaa-f7cc-1991-8962-b2bfbfa54db2 4 8ad09705-a081-3b98-b5e9-492172a78044 5 d3537ecc-a53a-5c6a-8c2b-0e80ef054cbb 6 1f5fe583-f977-36ae-ab15-14933a396706 7 1ab0aff6-eb27-8772-841f-c96cc398be4d 8 c7e91af6-9c6f-0f35-809d-e7bd4aee9fde 9 eef7e1fe-85d5-40ff-ad75-d51bea5fc30c 10 589c02f2-df08-1125-aabe-ec21bfdb0409 11 80f11186-7220-4636-8e72-9a2f26d6f89f 12 478efd02-0a34-6cae-a504-ab0726fb6e8c 13 60163acb-7d8f-1d88-be9f-54f360be00c7 14 307d12db-1539-7bf4-8a4c-63c6a95d6e88 15 c83a5a35-9c22-0713-8fd0-3b79e8132b81 16 dffdec2d-1fd8-5184-ad2b-7a554fc1e191 17 bc0ce70a-6527-8771-943f-5bd53e14e0b9 18 f2b396bf-0bab-46ee-8d55-8bd2b66893ce 19 c2f76ff4-0a53-1450-b142-961e9cfd377c 20 2da307e1-d18b-6e5c-b465-5498778c9558 21 73500088-d2b5-5fb6-9a71-e00cb7e3af1f 22 a88aeb48-e00e-3aae-af95-7fcca0e782e6 23 9dd4345c-a2b1-3bec-9fb7-a35029cdd8ef 24 3eaedb43-b041-5066-a3cc-17fb30a35683 25 f9ab7cb6-5e6a-5610-9043-89034cbe6025 26 c15754c4-b48d-79e2-a7b8-d32b044a099c 27 2551f9ab-124f-1659-8909-20f4cfe69b4f 28 cd55ad88-cf4a-7889-a8c8-45d7a6ca8629 29 e8ed1f9f-d923-14c5-910c-b9d5ff0e8557 30 d1b80693-ecd6-1652-9052-921e9c2363b9 31 7b5e1c2e-0b5b-3ede-a078-1e3eaa59e9d7 32 e97fbcec-b650-3249-a46f-cfda1b162ff8 33 94291e9e-3eea-80ef-a16d-1ab056dd3b42 34 a781c2c6-d632-1424-8319-ce00d12f981e 35 1a912402-ab11-140c-a8bf-52130b42766f 36 b33708ac-c93a-3ae9-b77f-29d1218a63f4 37 be683d05-26d9-7aa0-b35d-ed61a8e46638 38 a3ab2a7b-787c-7552-aa0d-ddd4fb102ff2 39 9d45a190-a9b1-2e3b-aab8-76cc0c64c8af 40 5bc631e9-469d-67db-a31b-f4dfe6abe530 41 ed7c49b7-d973-7364-b406-f07c72d0b850 42 3b4babcb-ed9f-4781-b63f-bd0d466bf869 43 f93fc864-7518-8da1-93a5-4caf097056e4 44 cbc92242-8f17-51d2-95d9-0612ff0bf7f0
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
42135380414617058416533557171133811377267485. Exactly this sequence comes out ofnew Random(683).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 324 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.