201210071425 113hnb
explained decrypted filler
seed 66
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210071425(name+title). Key = MD5(password) =f39e216905773da7a9f4b94d693e5476, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 7da7cb09-2fad-1d40-a757-5fdf4497940d 2 11c68f93-b399-14c0-9690-229c51f4b8fb 3 e71a586f-b175-8c36-9830-9024e5730e2b 4 2d55a8b0-9454-5e80-a256-ae1ec7940193 5 13e92490-80f7-0f3b-8744-64adee602aae 6 1a73234b-f74d-2273-a5fc-73f10e658797 7 54d1a0c0-4297-40e4-a40e-07b186fb06b4 8 65c620fb-386e-4349-aeab-d72beb23840c 9 1659f91a-48de-17f5-8458-71ab1e69f763 10 da76e96f-bcb1-55a2-ac08-89b76d609caa 11 fff42a6a-3adf-8f58-9284-88349fb0a75f 12 65f83eac-35bf-8b91-8a61-09e63dfcdb9b 13 eda6a4f6-71c8-03dd-9c4e-588dfe7258fb 14 930721e4-6477-7ac5-a20b-c1f2ca66d34a 15 036bad7c-26d1-19ca-8d0c-a771026dd058 16 cb74089c-073c-2caa-9ed8-599db43c3371 17 8b340923-1c22-56f6-9f87-3d3059c87741 18 bcc1e5b7-11ce-8a94-8e85-f78b18214eac 19 32231725-e0a9-4b54-a785-90e221b1287a 20 3c8716f8-f967-72af-9cf9-bae2c9b96303 21 b1823f45-a405-5f4e-82a1-ff2659c5116b 22 41598f70-81a5-0513-9512-19c50c3ce33d 23 5c24451a-4b12-11d8-895d-122828c8c463 24 c143618e-c13e-044c-9035-b019767ffd53 25 114aab8d-bcfb-17d7-9991-b2ea8ce86ed6 26 669b75cb-e61d-8ba6-90dd-b2258716c538 27 c3246231-a1b0-6da0-8dd1-3d3abee60e7e 28 627eeb5f-8b67-5d41-8a9b-75085f18848a 29 9173cfd9-8899-623f-9711-65951ee0b25c 30 1e75b5a7-bb23-29c7-bccd-c2611dd2a285 31 c4ed15f3-6f7c-4508-9523-20be6fdf74e2 32 23c211cb-edb1-777f-a9d5-47966bd330f5 33 6dceea47-5096-723a-88e7-70c99efb50a2 34 00712ddf-6e80-5065-98b5-9f799b62b416 35 90cea323-35f9-6a08-9d87-f1b736964600 36 335a6622-f6de-5f03-a781-97c2b5f76c5d 37 6c1cc758-5a22-680d-b1f4-b86035516ab5 38 d45a4ab0-8b3a-34ce-ba38-b2638cc92936 39 07ebc07d-0714-5d70-96e5-b2ed650a0197 40 8f87fda0-28e8-3c90-8dab-4a560c068671 41 ba08ab67-7532-1951-8255-760db6e9da0c 42 7c5c92bd-bde8-0d97-ac39-1f1011500ac0 43 425875b7-074b-7ddf-ad54-5f1ba0f7793f 44 1e21a9db-98a0-6099-9e39-80496d23c578 45 73a40721-f9e2-6e16-b231-0435dc2f4ec6 46 3e293175-a735-881d-a59c-45190cac0c64 47 fa11ff89-ed33-7b9c-8801-f9698fe890b7 48 ff134714-105f-4217-885f-dbaef88ab500
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
118502441588071258475010186562477565635310766874. Exactly this sequence comes out ofnew Random(66).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 391 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.