201210071525 113l0x
explained decrypted filler
3DES(name+title) ECB, 50 GUIDs, seed 123
From the post to its content
As posted (encrypted)
9653CC8ACC852B3B 138F267AC73562CE E88218BBDF65A67D AC18BC7AFA64F258 8F1B7F3FB4C6893A E1E314282EF426EA 12B9C20607C05EDB B9E5BB3DFDC480BB AA8173002D215FB8 6B97117F9842CA9C 71FCC807B80AF05C 80448C361F71A3C1 8E5144A719794CFD 242A9D8A35C5A12C F4E4AAB52A63CD7B 51CA82D3711C30DE 3806BC45B4C02533 0D73FDAA29C4903F FFB7B410077CD357 1E5EC533C6D4D31C 20B055137B93C8E1 9ECA9AFC831D7850 FDBCFDAEEF62874A 6A8F0770FB87B169 7DFBED83E1D0E094 7E7184B0FECC6C84 BE85DD73BB4E5C6E A73EC18E735C81E2 5884731044993B87 21D1F061E8080B3A 4CE780832FE591F2 AACF4BF96A069407 6CB802E8709B6083 CBD145910721CAA9 8787501D027D3D98 34EE416688EC2EB6 10A157FAB9D00ECD BD5F5049F9C6BF62 4B039046F6821D33 1E6481C5EFD8599E 5772650F826B7B83 CC054DA0A77C627C D3FA42C05B700ECC A346C942B6296556 342E931ADC93B4FA 8B412A5D01B314EE 70928FA1E91D0A4F 4A79F2B201B95054 ED0130C05076ABCB 5FFB1734A28A6E1B 06A4F64B0B2FABCB 4C056B4A5FAA96F7 A08E44E0568E17CE 803A016A0B7A6392 14E14833734AD42B DD1A328768312E43 53AB1A53150910E4 E06351B0C460E675 D64EEFA0BF81E7F1 C25F1F190433EA31 26FF61FBE0E7E507 60868B75DF72BBFA 572891EF5489CEB0 B06526BEC80BD384 D2A3A3D47DC87781 C2707DAC42594153 CCBD502D91767AAC 89C770AA9385C60F D5B4C008255E0DFA C8C4FED2B2C2140C 41A98B8913FD8BC1 C76983E771102A59 37D52AAD86877359 4259A63E18B46B09 784AC241304661A8 73C14201FC0EFC19 BAE852B68CF43EE7 46000EFC490F4C71 76129A1380178F0C 37D52E6B33A2F493 EADBBFA2AB2F457F 3548A802968DC1FB E95EFAD43303EE84 6F6C66D428EFDE97 B1C880C1D3E4A4C4 2874C62AADAAA61F 96C5DE8B79BF0023 DA50E9B69355BEB5 E825C0AB8B2ED4B6 C0BEA74CBAEE2E52 BD3669B20796417B 9205D55606160AF9 EF05709EFF9410A0 3CB93350AECD5EE7 3330D09639AD9697 C46808BF13C6E53F C09344C1F1E7E958 FB81642A03251981 099FA7EAE08FBABA B70D23C4C93AF0B8 4914DB6959BB13E9 F734EF6A2B5B440D F04C9FDA482FA4A2 FBE3016838924A01 830CCE31DF74FF15 39732B9777A33578 9037D0902369E842 8A142A2B821109D9 1CB35D3F071A8FE5 ABF1B51B69688CF8 6574DAF38D912217 8A14EAC13C2509F7 A90912E7FCA27AA8 2AD0EA75F7EC2068 2B1317EEE600EAB4 A929BE1AFA83939D E0A379C4822BE9E7 8156305E77C4B3A2 B832AC621D0BB655 ECA5D656F925E6D0 245468D740F7BA51 5F332F08637E0638 376675AB393B9626 DCF3905B52E246A9 F4D70DD8D394C804 959A7076D8CEEAF7 4537C866219E2B7D 53226A752E6D59A8 AB930EEF729F5FFA C078092B8E35D862 C9942422C4B66F9C 51ECE37A4FD7AD5B 2AE3C95BD009C17D 2A6FF9EFCFCEA872 968C3BD08500A3C1 6A53179A1BA763E4 9EDC98004469D2BE DA5D3DFA29E42C3B 81B0BCA8EEEF48B4 B4A0542333114ED3 90D8ED1D8104717B E173BEA7DDD55971 CE69ED6697C4B8EF E9F4D27423BCD017 1DBA754628142661 7F7E35E5D142D4FF F38F6EC83AE985B3 56FB52CCB82A9904 FDF9BCCF4532BEC6 BFE7B9905965FEA9 1C68EFE3733AA3B3 C62D09D5847343CC 7001336972F9612E C26C9B87DD46F69C 38E2452F885BED63 FDD54ECB55033345 27311A8291C4C816 47A31C30C7DCF65D 0FB5B4AF8BE8D803 761D1EDB2C91A78C 9B4C020581410B64 7EE5FC5E851D1B37 3F23AB3674F6C1B8 DBA3F65A0D5ED998 9BC17189A2E66278 2A0C7CADED5972FA 4EA9CBEA67E3D134 E1F8CB90EEFD1FDE 807A3A1F47357CC3 CE35C0CDBE12EA94 698BF7C3BC292195 352AC7080032892F 98575470F341DB16 D69FE5C176B62138 A9EE0D9EB50DB505 8F849F889AE4D433 79E2614FE0E7A411 6E8E9D87D5DA5FA0 1BE0610E3B24A78B 9CF81ACEDC6E692E 078E7550F938E983 67C10AE08369FAE4 D6F8879C0367A6E2 FBA6543D1C3AF477 8390334875565ECE F8CE9E6272D4BB6C 720DBF10BDCF08C2 32FC92B1A8845392 552F1D97CF9D7686 CD70F08CC193D5B8 D26A31DD5F8B9058 C42C16E0BFEA8432 CA7F46A22FB47630 F361B84AA40ED638 AE32A3A4D4FCD595 2F4ADCB9C444E4B1 973E3C4BCA3C844B AD36F403CF595049 BDDB2FDBD1839041 D64ACF86F8A59711 A5647323D78EABCB
- Read the ciphertext. Strip whitespace: 3,216 hex characters = 1,608 bytes = 201 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210071525(name+title). Key = MD5(password) =3a17460a422f513bc762c39bfb520168, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 50 GUIDs as hex (shown below).
Decrypted: GUID list
1 baa4ea30-960a-8708-8ea1-16ccc97e7b77 2 49dfe610-3de3-88ab-80f9-4c620852c46c 3 29ff3767-3324-6c85-b822-5c7ce8107787 4 b21deb8d-7d9f-7ba2-be4a-02b1ab095d64 5 dd655125-7905-6f49-a16f-75b412573f2b 6 a01d836e-785e-039f-bc41-9afd57fbe6d8 7 647aa5b4-932e-04ff-8ec4-d2fd0945df53 8 c2577c05-62f1-193f-80db-06194f9ae893 9 beeceb9a-8a14-1848-9661-dea7be24d49b 10 ea15bd56-b291-56ff-ba48-660447ce06a2 11 e2e1786a-7b07-8964-9c28-4fa8f77b185d 12 f0c100af-65cb-44b3-bbf1-8a34a62f3022 13 767bb5f9-c910-1c02-bd45-7065ce477648 14 f1fb13c5-0c04-4e82-8a25-658526cf53ee 15 33d5fe85-77d1-0166-b85e-2c41485905d5 16 69bc84f5-fe7b-7ce9-a5bd-cc1f0dbec4c5 17 dcef47b4-08cd-590c-b606-de4184e753db 18 bb14b955-19f5-2437-9463-8275b1a3f486 19 7b5354a3-decd-01d6-8ac9-637bc1287625 20 31a608fc-840f-8419-a68f-3b2920c2f058 21 56b98056-4079-13c4-a447-6480ec31e0ad 22 c54af261-2bff-0ecc-a3aa-3f709ed06352 23 8b26a011-645a-779e-a16c-7df434db749b 24 a74bface-aed3-0b26-9f4f-c7bb6a8d8547 25 ec3f3920-ce9b-6368-be9c-7f5292a2161d 26 321fc98b-a009-55be-b42f-dc2cf773db6f 27 bad3e281-7bea-66e2-aac0-1333f4201637 28 f49a591a-d18c-8756-a3c1-c6be608cc9a8 29 ff987e2b-38d5-450d-854f-7c338aacc2d0 30 0abe576c-a146-16e3-a5da-74fd95183e4e 31 4b98ca95-396e-50db-ae07-a483e75e392c 32 f40b2b9b-1456-72bb-817d-37f3f8a31adb 33 268a178f-a14d-69d7-9e99-6b0f59b68f67 34 5d6f5a2a-f0ef-07cb-b737-62b6636d9c34 35 94e81c03-915c-5cf1-b175-22e66f5c04dd 36 92140272-06a6-0497-88e3-90f6af5ad502 37 2b1991dd-dfdf-8779-b2cc-df2fa03a37e8 38 dd3e9027-cbc3-1268-a211-07d32ab47b45 39 19461e91-7983-39ea-9ed9-f67439e37472 40 cf203673-dd7e-789c-a1e1-f3b504011e30 41 6ce297ed-3bd8-8999-bb6c-e84ef3df158f 42 6c600215-dfe3-7059-8d39-25f71a4a934c 43 a68e35e7-e79c-4bbf-8b49-de5575c9d665 44 8a11c52c-e6ea-13a9-b172-2ad96820818c 45 16318674-ea0f-60ec-a98c-9b64f12f5388 46 e2793076-97aa-13f7-947c-2fee097f0aca 47 cb41788b-587a-1171-afdc-8ebb3bc8e686 48 85a401b5-227c-3886-8d41-d7356ce99ac4 49 14bd1d97-0368-18c5-af4f-a12b4ad79c10 50 468bdaff-cd43-4bb9-ba3a-0bf0b79518a5
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
88676001158414075208107065684157605081378741611314. Exactly this sequence comes out ofnew Random(123).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 394 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 50; the post has N = 50 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.