201210061644 11229s
explained decrypted filler
3DES(name+title) ECB, 55 GUIDs, seed 655
From the post to its content
As posted (encrypted)
EE1917E55A4B02D4 E08592B2E84E901C 6A195BFBF4D62E72 64BFDCEAEBD8F215 4B1852FB135E1E3F F82FDDD94A600B27 F8160C6D52F19917 1E98A62806BC2A9C 474B379C9BA2C01F BDD8BDF9A9E6D82E 62C10EECD10B6CB5 FD28FEB716E6F056 9DACD949AE30D9C0 D1F78440211036A3 0927493A08897AF5 6ACEFE7FFFFB4008 F888385D72A03E66 0B764557BE87A391 587D37EF85215474 936B89C258A90B46 7206C7630A0F3B7F 0FA2DB9D27CA1F3F A3FCE7CC9A6D3526 54824419CD535FFE B4D7AE997559BF86 262B5CBD266DB73D A51CF16976648C2A 0511C87AAA318398 805070C406504119 724F83F086646956 354C288939724CD6 61CBE519B01C2C5A 34B91055101CEC35 56C8B2551CCFA7F5 0C5C4CACC68B9228 F3A734B24021652C D23CDD5581048078 D541D0A5F9AB7F47 4E89442DBD625DA5 1A04421039AC0105 EF40689F31113CC5 7D2635A9E85A6865 1D923F267563E315 9B6B1A60AA356DAE 06D2C3B31E0C0903 06D46F368FB1160A 789E18A6FDDECF03 3CFB35D43D3164B6 B447C73E16A872B8 40FDA65C46825F62 2B82EC529A8544FE 7C9527D5A922E8C3 79688ABCF6E0EDE6 01E26ADE5C8B43FB FDEEB01647960C43 5829F35BA00F4963 206DB1407E7B78F5 BFA665AED86D399B 633F02534A616554 65387BF4E9A0F20D AC873127342E8055 53CF8B2316AE83A8 C1242EC074B875D0 0079675BCF703B44 81ABDA9F3A98AB9B 34743C11C30F7015 B6E8A6A673E2D35D F921EE8D10D2F7BF 630AC7AE463445F1 D1D682DD8DD0F433 120DB82D674446AD 8FFCA73922439869 6621C81307E87390 F78874C64186EC21 5CF788FAD468DBA1 F38EF9D11E83710B 9F067E0DC9663382 65239FF6CDA29B86 8AA9A617E9421EFC C524ECF69777D8EF 0CE3AB530BA87F36 949917935AA2B694 0D4DB5915F83457D CC9F52F454DAD21E 5CC7224F597130AB 3DA9B9D251F0FB10 FCDE02ECF4C61273 081E13EC5FFBBE64 4D5A8970F73BC18C B9F9BE93E86C707F 43A3B52C5BAB871C F0DBEB6C7125DA3A BB7F2059BCDE295D 6D9950EB8D2B404C C891A59AE5A643A5 8FE5A6CA76974097 A5C265F88655E8AB CAA9E03E3F2FB0B3 0C309D4A3E578DD9 42DBA336955A9845 88860FE33CA66062 34FCD225F392A15F 9A88A0224DE8EF77 FC4979EA32556CB8 99EB1E38E120C805 615F01D962F693F9 F8AF1C7AF6F15D6E 0348151ECD2428E8 DE4908D6333591B0 1E39580F09FEDBDA BB37816038911179 C2022B97D97CB840 0015A4B1BBBA9DE8 8EC036B0012B92FA F72755F7B36F5542 885CC5D57B1D4133 B38AD2489CD37855 4CDF7B3F7155E63F FB2A78C1C75114E1 A56A072232116468 6161FC948421EA6F ECF9947838C8120E 38D69316B70B4C89 9C2E3EB94DB663F4 36D025FDE27DA7D0 6A2A2467B9FAB2A7 275FFE66114B3AEE 3B7C6E8003D73F97 9C54F480F4124E17 992C867E53AA0CFD 8C88E39181D35033 0A6AB43131A3C801 4AAA9240CEFF33B6 82D891E62BDA5BC8 8A612B519323BD36 C3D846C033F86E9B B467D21E18D56604 DC4893A882CD486C EEDFE925238494F8 EEDB3C97C7465284 0F48301CA42738D6 9C70A31948F36875 385301F6ADA31B90 4A030C04918980D5 D1F61D1B9A777FD5 140FC69C9C053710 A1205902C94FD029 FA35583B90D6212F 121B225705D9896C F0F447B0E34B9497 693C3ED58B81A4B8 491C20CD3005B5BC 7437FAA041B91043 11D30C0BB01F215B 03F703F151C0EA90 0EACD56A7A670AB3 4C9C367DA76D5D7B 2AF901F26C287C73 E383B9762DAC5A40 3BFE6031430280CF 26344818FA8295E9 4DAFFA74428F469A BACD9787CAFF6D0E 5785B94EA11542B9 458DB913B897DCB0 7A9443572DE7B03C C29773F62F00A232 B95CF952661007D1 7B2EDF3F49C7EC56 F3598A3191EE7408 7B0CA5C84F1C6C55 21FEC3BA74FC1530 896B1BE55F43A2BF 90F959165BE65D0C D53F4C524DACCA09 2EFF20EE2D0A7F79 1F7EABBA20C0A880 4ED7F2EC98C36B33 82B7A39AAFFA6C72 7E19A69FE9D6E1ED 12B19348BBAEE8B0 0B14765928C62388 D03B572CC70DA659 D1437FDB5D03A099 734A6A2F0B1D8DC2 3A33442DD8628362 6DB33F8B9FCFE0F2 0D9A4BEEBBEB9ECD A5D2228710426425 7B315575415E1508 82F9E1E753CE12B3 82F83223EEFB1F55 D7A257982E0F9FBF D455C8C994287533 9E97F1D128A331F5 C6C93DDE4E7E4789 7FCE93CAC1EF861C 76490862781DA168 47A2E3DAA8F6B620 EA2F9ED49EBF0C83 F18496A458CC6D49 77D6B0235C71B1A9 8790B902704E1300 3FEA344B61862C5A 30B162FA584100EE F4D7A1319AF03878 D97A528B2B4429A5 FB1C3AB5638B6AEF 2143510D015B0B81 96B9D9E01D6525ED B82B4D3B2F08F735 2855A62F8670AEC5 E4637FC10FA7C71B 396A066CA6F7BB60 BFC1F119388B688A 15ECFCB1AFDC00BE FAD02A9763BDF3F7 0D1D59DAA469BF8A 19B52786C1931067 81A4BE8F8B202DF4 78B779A61848C643
- Read the ciphertext. Strip whitespace: 3,536 hex characters = 1,768 bytes = 221 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210061644(name+title). Key = MD5(password) =f1352a8bdf154f51cc81552ce3c19d6a, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 55 GUIDs as hex (shown below).
Decrypted: GUID list
1 5c84bb3f-7e11-8337-ad96-dc6ecb55eaf6 2 a99eaaa6-3d44-00d8-8ce4-47eae46c52b1 3 fb25af31-fe6e-5480-9dda-c440afc846be 4 6c00d003-a0d9-3285-b328-22d0711228be 5 81b54d77-45a0-8551-be24-0a178e921ba5 6 ff8260d8-8931-87d6-8545-39f7bea39b04 7 b32a71c0-ff90-3e62-9388-a191da7c38ee 8 a56a70b5-9f6f-0b0b-8bdd-ae140f4e7623 9 12f05e09-b194-0ff4-9ff3-2bd56d36d47a 10 366c46ff-71a4-7bbe-9023-46df13c7f28e 11 aac15683-cbb2-7302-8a1c-02b004c7cf0c 12 73a6a478-9546-7220-a2ba-529edf88eaea 13 5f2627f2-b81a-86ca-b3ba-cc5ce2fdb71a 14 d5158c4e-6879-28fc-be69-901134dd14b8 15 c2d48b46-0083-4925-9a2c-b683e8afccb9 16 2b5a7149-3565-027e-8366-61409af271f4 17 d0da1006-c9e4-107d-8a61-c0969541467c 18 21e6deae-5fd1-0051-a4b3-1e67d4d69ad8 19 24a4a965-6a86-3e4f-9034-105d2bb0b47f 20 d2688818-8a07-8077-b9c1-9925f0a3387f 21 2c745a45-b4fe-7263-860f-a78286c0920d 22 974146c6-7f7a-44a1-ac28-4850f36f8cd1 23 8fcf1517-1e9c-6993-b6c3-6c625a21dd87 24 8be8afa8-05ac-737b-93de-c5f2dacf9794 25 2c9a2569-6a1c-8365-a392-d017a1a5a6a6 26 d5b8c56a-6262-7b88-b957-8d0c5e8fa83a 27 1b2d1e09-f1a8-02e3-958d-b7496ceae9f8 28 cdc29ed4-86fe-4fc0-bbed-285a97463757 29 59abb0d7-bda6-4773-9cf2-cad8c81462ea 30 01c97450-8a59-58a3-9d3d-2a8dcd1c706d 31 2742a258-5e77-811d-9792-489fb110f685 32 692804b9-1795-8ba7-8305-4d5a6cc4deeb 33 e7d51341-8ffe-6f15-8259-4881787e7520 34 8ba81c2f-f3b4-384e-b0c9-eac39b7f22d4 35 3f42dc61-369b-3816-b125-9616d542cb56 36 a6cfaa7c-1eb0-10b4-9404-fe17136b5e6d 37 00d7dca8-f146-51e7-98d1-88910b35422f 38 8ce6edca-d946-6752-82d0-594b5202e765 39 2d0ef780-135a-49a5-a597-0447d23b603c 40 8a4266e1-fe27-7d30-a66e-46a25230dc9d 41 fee7b841-9b41-3dd7-9d5d-671f76b98ff1 42 34e62932-9696-6752-935f-a5b248281eb8 43 c776a407-7e62-78b9-9dfd-b528c73e7882 44 d3b51a93-cfc5-3b08-b2d5-94427a3b1b95 45 5493e7c8-1e2c-2a54-8c49-30f83e60c37f 46 014c38e6-eb9a-5896-8ee4-d8b31b7396ec 47 6e33adc2-50ed-128f-97e1-02a9255a627d 48 acea2240-c30f-6ec7-91de-2422d43d9484 49 95e9f8d1-ea08-13c3-bed9-af73cdee24ce 50 38a46aab-7d22-7a85-b4dd-7ad5b4e20dde 51 ea29d1da-9062-4c79-895f-e05139feda4b 52 3a26854a-e6a2-801f-88a7-2f369f4fffe5 53 9c99c57f-3194-5e86-95a8-19d714b407e0 54 6dc52dc7-7961-82cd-b1e3-b237547aa362 55 e3e7b385-2f41-3cfd-92e2-08f1f64e86c8
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
8053883007778240103874678704458863315647367325161748583. Exactly this sequence comes out ofnew Random(655).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 326 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 55; the post has N = 55 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.