201210061924 112awf
explained decrypted filler
3DES(name+title) ECB, 50 GUIDs, seed 108
From the post to its content
As posted (encrypted)
4D2183474E3E5DAF 43948647A2F37A84 4228F8CE5767DCDA 30A9F644AA2C2C81 1394DDBEC15DE196 9F1049AF4318A2F2 9B58AFF7B84CA50C DAB55596DC8B8774 6F603759B3DC4AC9 A442040DF1929826 554C57EA3F8E9814 30A8C06D794A3173 2E809E9C0CFE8ABB 736D6B295D01C484 488622A0963F91D1 E5FA5F20D67596BA 18DEFD2188F30099 AF76D039A8E129FC 3C8D248F4DB7257E 0FDA9682D737D67C 5EF62C7BB96CFD18 C5FD3E8E1043927A 0C49AC33BD8D1901 257A0A33ABAB0F92 9F91576F67C43216 D7F9BA2F75D04487 50FF6B0755045106 1A0C3146E80F9DA9 0FF2E623190301EE F8468FAEFCC14FCE A8C1E8FE91E2F209 FE29A53FA59B28E3 D34FF2BDB2E24F03 1B569EA7D9E87304 C0C8B079F1A961DF 124A05F9B8F16698 DE34652259F48EA6 EB46EB825C0660BF 8637E2D99AD9F4CE 4333C8431EB52C1E 85F9A896687907F1 2CF29ED802A12EB4 867F4519072262D1 87CF92D164064C72 44902589E095A3D6 241AFC80122D8BD8 275EF3069E31595C ACBA46B99BCC9802 0F45222B4A9F5577 B6D536ACB38888F3 BC382AC4D30D34BA 6F910B975468616E 09FB2CFBC5C1E325 03C85D1963952619 D4F3E14168D3C4D4 901F93241F4344C4 33C522FFF4C6AB6B 5B9433B9028C6367 82C63E9D2FE67180 7898E216E7266C50 2D4CDEA27EE4F302 CCBB6A64F46F544A 5473F05CC13C42E0 E47B33652EE20E66 64B62173D20AB11D 04261A2CFD1E93B2 3635B23C6A416820 771AF874708ABF7B 140E86427907105B 691CB08ED85D58DB 655D69227D3DF2E6 9EAAA7FF0E770379 BE162DF3C27178C9 1EC1B4B23E7EFFED CEBBFBCE55721ABA E453C7C9376071B3 E679A13D6D399AF1 EE51610C9FF4645C AB0A36B1CB534C4B 15266709B76A5C1F D14570EFB746943D 562185BB1447B1FB FDD911E8A5B02A5C 2343CC5CFAFA8165 0963B47333ECDABE 6CCCDDA3937485C1 285CDFD7CA96C5B5 67994CDF1778DB3B 0766E095F860A0C9 3D2B9BCA79A5DB96 DCC41E03288CDEF5 DAFB639DC3D1DA13 6E44F202839C2950 4C5C97062DC00703 50506B7E03F7F44E BA120D1FCD97D86B 6B15DD7D5D30E934 8D329D5817989050 02FD9550AEDF5B24 DD3520DB4315E395 3AFFF1D55DBFDABD D521B84E580229CB BBA36DB37BEDA310 E205C206C5F6D58A D34CBA580544150E 3A8E772C95316355 67BC806DBF093BA9 ADE6B824E208DD21 92A6A1BC28E35310 8E581E0175175E8B 2B2CB78CBA762A60 7307489B08A28769 BBAF3004297B82C0 0AE599BB17F4C868 4649590A262FFB63 3D44905D9EF4995E 5AAF4A895B5923CC 454200A8B0481ADF 1F6A0EC25B2B72B9 D719F6214BB41083 4ADC144CC72C58F5 7D6B227F542CC63F 4D20B9EF6CF58593 FA51C526BF39786B EBC0E7F043D08024 1E31ED41509BEB79 434DF8A70F7BF85C 2EB9B47DCAC222A5 8978061C38F69878 C527A6B8E7A519EB ED5D1EF3029A1B08 3622304BF6B52FB1 414C315D920117A2 D0C13A42F0966FE6 987ADE894540989E 090C9E05A317DCD8 147EE14180E24958 7FFDDB63448BEB55 D52FDADB22CFE83D 175869FCA7F57649 616B873F5AFBDC73 A5B248E3714BB1A0 74847B200161248A B984DDCBE78A1CC9 9ADAE01A9AD48BC3 8064F66246B6934A F54A27BE2A4C7F19 3FC51C1CDD0C2228 8997E7FB0592E8CB 5513371F5CE05371 76BD1EC81BA02B52 6C5082EB4C481670 B3D4D422DE040A10 F808B91B3ECDB360 78758587CA3C0509 BD732E59F1D036C1 F94D4A42FACC545A CCBD76E89E1CA2C2 166CC8B6FAB195FD A672AAFF80EF12B3 43707281448DB984 06E48672D95772A0 259083B405261100 31E4D5656910B072 93422E7DA10C7312 5DBD543B2D6A937D 6451399632331A7B 03B63CBC6691F51A 75728022D2727BFA 7D9263520C8FE7F3 4A81E6D1BA0BFD84 54CB4C737B411641 79EF052B34298EE7 1914FF9AB0058489 CFEE2CC2CED8E7BC C912E20A9E6D6E7A CB8C8FBA03274F64 F4EA7F94065CE0E2 6397BC44E5DC567B 6E35F8B56C61317B 423518DF10CDED03 B074AACF34B9BBBC 5F8A9F642AF9E3A5 346C820A096B797E D4C4CDAEC247EBD9 11F14EC874C47CF1 1AA17B03EE789D5E 7FD8A14AF397C717 02626EA69B863592 668CB67065F1822B 54532196A17D3E3B D70339720DFE22EA CF12C1FF5C3AB945 21F8FB7515B5DDC0 4609F62E15BF264A 3E0D6A1602E40089 D56EBD676BCF61F2 FDF4DCDCC7EA6630 4C6B4404ED59F984 F216D7B6F23A5ADE C82283124A549884
- Read the ciphertext. Strip whitespace: 3,216 hex characters = 1,608 bytes = 201 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210061924(name+title). Key = MD5(password) =866cb3ff2fc91d8e0afcbf17ba69630a, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 50 GUIDs as hex (shown below).
Decrypted: GUID list
1 61f3f28e-bdbc-1857-b22c-eb06b90920bb 2 63e0c6c9-fe8b-4807-aee5-248e04ca63e6 3 533379ba-b1a2-2037-b84e-9a4fa7b93d3d 4 0aa4ca07-df33-5fb3-afe3-a19c52923bde 5 ce50d565-280e-8c77-98a4-eba46c53a5b2 6 2005c2b6-fc86-8925-b72a-c11fb53732fb 7 1b2d4809-3201-26f0-abee-4017c46fe570 8 e954ecd1-282a-544b-b92a-ed122b49c405 9 6fa7843b-3b30-39e9-8b77-405fbae1ac44 10 8b274bcd-2e06-0e51-ae0c-f07a1b690b52 11 16b71596-b5ff-7c55-b2d3-a569fc219cf6 12 58f16d52-82b1-7f78-80a6-4e3540209f7f 13 b48c9ce8-ee7e-761b-bcb6-665eeaa0e75e 14 3a4d8538-23af-522c-be39-6265c4eef219 15 6df3b8df-42ca-5361-8c56-3766c6a4d915 16 90c4e680-f384-4797-9b9c-7052a3713e2f 17 da552aba-084e-252a-bfa5-3604340a220b 18 34d19c8f-a647-89c1-b136-b0d078676217 19 92ae7ce7-c3c2-585c-b2da-39d68255fcdf 20 e6f10ebc-7f8e-1510-a2dd-536b8df0c95c 21 a156a6ac-b689-1a1a-b740-34075886fd25 22 2d83cf9f-7618-3a93-892e-54ff2ee2a36c 23 e5e9abed-5b88-26df-a2af-935158c0ad40 24 dccf6f25-0d5d-6f85-9c4c-0d966d5d046a 25 430999cb-87d8-249c-a6bb-3a2669ff325e 26 20e9d381-b288-86de-bbe0-f06b0d7dbbb0 27 af897e26-d6ff-7569-9933-85a1c5009b9d 28 6b444810-39a4-5663-9f0d-f91c9823acca 29 86965a98-2e02-360f-9ebd-5f70d3cdb0ef 30 4f228325-ff1c-0867-b643-b2d6debde61c 31 4f686d3f-e970-09dd-9709-6fd3651b4b2f 32 f4e200e6-f415-8148-88f2-52332fdbe20b 33 c04353f9-6848-6d3d-a55d-29ead8a87505 34 c91cff9c-7692-636f-a2e6-4565ac62fb2a 35 0204fd0a-0731-3297-b28f-1a937224850b 36 4085cfd6-cca6-34a6-a5ad-6a80dcc514f4 37 e9144b6d-dbe2-4be3-8839-2c2e40dec0ce 38 7c940db1-8058-81de-b320-7bfa47b9f106 39 456911ed-b538-7fa5-b1a9-c4ec549e9db6 40 0ec856eb-c909-2c30-a18d-7844c00870de 41 e0b108d2-e4f5-3db0-86b5-30d005062909 42 a90b92ab-6b78-69a7-bf74-18a833affbf7 43 73b1ee93-77da-89de-869c-e6775f1f8a38 44 bc8c4ff2-a162-4a8d-898c-fc4997e6c907 45 5b1f2872-b438-775d-b61b-6530f7b929ff 46 e6a12db8-c773-87e2-801b-874020dd0693 47 e6ba6a1a-17b8-0b72-bba9-0327500f8441 48 8bcc32d2-2024-12d3-9e35-192ba614b23f 49 48a35404-9f25-620c-9926-383a750f9ad8 50 dd6d85da-2873-4222-911f-59b3095f11fb
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
14258825307775542851132628753008663348723684780164. Exactly this sequence comes out ofnew Random(108).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 334 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 50; the post has N = 50 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.