201210071945 113zn0
explained decrypted filler
3DES(name+title) ECB, 35 GUIDs, seed 579
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210071945(name+title). Key = MD5(password) =2427a5d89f4e0fb2a52bdf71535adc06, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).
Decrypted: GUID list
1 84dfe68f-1190-1b90-8fef-77d54562673f 2 cc434e82-6e9a-6ac6-8eb1-99bc3bbbd808 3 6411e041-b91c-4280-8833-fd627bf16978 4 4636e942-1ee9-1db3-8b24-8bff7a08b600 5 cc7eabdb-2dce-5675-a6e2-03ce918b6fda 6 fbb2b8b4-2096-482b-aa22-c3f6bfd544e6 7 4d67f730-240d-249b-814f-4014cfa31b9e 8 70a08484-9b6d-83eb-9704-a1ff2b0d0b5e 9 5e4aea69-b76c-5df8-80eb-3a35429aaec3 10 6ecc0299-35df-74bd-b0c9-de0c77246fa6 11 1038ae1a-646b-774e-9b06-c276c6741322 12 e99c5eac-cd0b-4cf0-9c87-2465aa35faf6 13 13641031-146d-6014-8611-ab78c2767898 14 8a004752-245c-6c13-88d7-dfdff41e2261 15 5c3576a5-17c5-2d9b-b7e1-37d37fe35076 16 a37156b9-79f6-5de2-9278-34673b7cf8f6 17 44f4b704-aee3-28cc-9fd3-ace3ecb33f6a 18 8ccab24c-eab6-8054-8200-ca5f96d851fe 19 abdcc446-1c4a-3479-a88e-d6bcfe26e3ae 20 c7b558a0-cc1b-4628-897b-25acc58c11e4 21 419875b4-f1c5-6837-b818-df989b6f4750 22 4bb52626-32c1-84d3-b546-2ed6ba7ba567 23 a477f8fe-4c7f-7b29-908a-52ef69e3139a 24 f5e0e568-9fe8-288f-b803-15705bb29c0d 25 2247216a-1215-4a41-a7eb-02bdfed4cc1e 26 4791203f-d459-82e1-b1f7-b856768c6664 27 0ba5d5de-3923-6efa-ae9c-059aac1bfe08 28 d79c35da-1565-3d2d-9e60-e69781cc39a4 29 5bcad222-c5a4-4d06-aa5a-90bd282ed4b8 30 0dac8840-f447-32c4-9cd0-e160f4739f6c 31 a7882977-13b5-8435-91a0-2e0b897b8877 32 ad6d1d4b-cf6d-8c11-a46c-9eae35fd6892 33 19fb94eb-3b11-1873-900c-a04529bfb198 34 459c0505-97cb-4e58-a925-e2c5e8cc2ef7 35 3ae2c2fa-4ae5-7ad5-8789-0b8034ef5b3d
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
16415428577466252834687248634388147. Exactly this sequence comes out ofnew Random(579).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 407 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.