201210080125 114i6f
explained decrypted filler
seed 557
From the post to its content
As posted (encrypted)
738E2603D8E3EA42 C5705EFCFB5AA15C 8CE7DA626C02258D 48D715B087A00B95 16249CDDC66AC4EB DEA5495A9FBD2522 9AADBB4CC8F10454 1ED8169AF9EBD22B 4334D950D0482FA3 36E880FCDC435353 E7E8030042449909 965BF52039423655 FAC9492D0DE8A9B1 2D81245B6B48593D 50434BFC66FB897F D267DADF8D4849C0 6E79F01D6F4F2BF8 B157F4D9D95BD4B2 45BE1BEEAD7F460A 41D80835445D147A 89CB7574B8D3109A 9FFE53EBC122FDB1 22CF9D055FCD24B0 7C1BB8B9C96FDE1D 445116879A857AAB 7315C5A56E1283F7 079C15780A36DB4B 6A7CEE5247158774 22508566962372A5 30E99581E1CA7BA6 87753DB148C8F6BE 5DDC18C5BA19AFAF C700D954125B5013 052C86A6CC736B77 123D4B0F1B99CDEC D9BC914D552BC865 DD8CBAF96E22B08C 77B5AA49BD13E47A 3CEB2A8B5DB542DC D3DE0507A7826F6D D02D1720A86AA61D B9D6A50BE9E3704C DD04C75B2723CA3B 732C05C6B8B4CF99 3D56E3932BDF5599 1FD265E7512FFD8A F01E3293D7520578 0EB9E2E10D5598A9 B6DE8C5CCA9CE56D 79EBF4E9FE9D5328 37AE9BDC6E4E1C5A B8CE2336887B9E3F D5D302497E10CA93 7B49F613CFA271E1 436086FBF1BC5BED B7FA7851FC19FDF3 86CFE50121810F87 837081B83B7C2B98 B04381C4946DF0D7 ED2442C7EDFAE1DD 00476171B69D2B4B DAACB9679BDC4FA0 C171F255F1259C89 BB7F0D37F97D2F78 FB1F8D56B7D459BF 4F39B5AFD81B2D70 54BFB0D8B327C2A9 BD7A56195296B287 601CA76876884F0A B1930EEC0B7B74F1 DAC59345FA8C538C 68829E2ACB38EBCC 5E3E0A2FE192FBE9 2A72FAE110051880 FE949C6685B4CFBD 8F20F252A3B1AD96 6E346DD787CE0976 21750C5908EA5084 9C606151861016F6 B894571584F493FB 2540F8B7B15F0FBE E21F692E7C474612 813FBDBD032EBEA7 510DCA486E4363BF 0EF0DC30F8245973 52B0B27BF2A777E5 A0CF3518807A2644 7B2B32F8F9072D79 A651FD35AECB4826 9E4B0D014F5CAC37 B8FED782960A281A 4CC1B33CF84E0846 DDB6507C96EACE02 7E6E968A69A1DA2C 570FDB3CAB6C18F2 A706FA7F40ED0CC6 E20EE5081D66A8FB 89853C2EF5CA7CA3 21762CB71CA03857 B13E703F90462A51 E40603BB2B09DD74 6455E6CF989D44F0 DA7019396D08D82D 81FF52A331CB3F0E DA93C8FFE7D9A12D 295FEA786967CAF4 840F7C26200ED584 8FE70312B4EB07AF 313378FB03712B28 4558F2067CD55FCF AACB042FE65ABF6D B3A5D5985B8BA193 DD0E1DFA81D5D1F0 B28E6E1A67BBC9E5 41835E98C658BE53 8FF7FCCE6DC13920 86BB46B01F9255F8 7DF81B723E7716F2 3E8CE53D2EC83235 D38ABA0EC0A94A3E 87D862E5708EA3BE 417103174608CF41 F5C9FCCDD39D0381 7B7299FBA808AC47 79E899FD99D4D9D7 13FC47D152CFB485 ADBF54565870022B 2D8BE5A0F0383823 26003B1F9D55E158 224E91191B35C6D2 9B82FBA4218BFC8F 020A0A6B52326F56 1BD61309D5A8C643 ADE86B48CCABABDF 5F5F2349F2A9C465 6C9406A3679C5962 E52121BC9CDD0BB7 28172CB54E4ADEBF AA44A35BDF0D9D33 06C38AD6C652B56D 18BD8B5FB0CDEE7A FB941DD95FECC2DE 0265EC53C7D3E73C 67611324270CF638 9F1E9727B2B87D06 DA63D09BCEAFD5C5 7D2E3D4AB01B3B72 9A1FF13146178609 6BF0C44899947A52 B08BA07E8B3C8786 6290000B5721B25B F0DAAC80081C439A 0892CCC6FFAAD81B B5B69D7497A414D3 38F5DD7129A576FB AF6A1A0208B22ED1 44532E82E72E7734 9E2B6EB0C0A923BD FF3362854478D193 EE3D3F2D7A509038 245F87EC28D3FF94 4A17379FB4323EBA 9388D29F4AB4DCD9 2C82043803816B9C 49815EF500EB96BE 7D6A1563A34FD6F7 2EFE1B0BB34878DB B80F96B45950ED1A 4D1BA8E305CF1D79 DE7E079619603173 1C90F337BAA3AF9E 14AF5F35B5C840DD E116C2FE5FCDA45E 3EE14BD12E4CE822 FE182F2A49D43A3C 8C49A2EB8348383E 29F567E3A744D32D
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210080125(name+title). Key = MD5(password) =947dde3d88bf4259a8d24d470e763351, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 e0db68cf-43c4-691b-bc68-426a851c80f4 2 771b45ac-b930-2fc5-aecd-8d0e4866660c 3 9f8d808e-f242-0491-96de-2812c9dd9309 4 2196e06d-0098-4e39-9f82-0d63580f8380 5 88b5351a-abf3-6697-aaa3-00e580f372e0 6 8554e258-c4d9-2a48-8220-c00a9387922c 7 96916ef8-7468-4e95-a974-f63b1f567982 8 ae3ff8fd-0d93-7bc9-9ebc-ea833f5f1f6b 9 120f679d-dd92-729e-b488-eb88f1acbe21 10 881c9c9e-aec6-6434-8a52-45222691e937 11 f304f977-7ac6-5500-9768-5574f0b3791d 12 2831d298-c06d-25b4-8f9a-254e7eff0b33 13 e8f4e27e-0ef5-428d-9f28-e5a069bc6b54 14 1ceaf157-5279-2d8e-a852-59717eb3de90 15 b83e55d7-d8a2-7ea4-b570-e7675c0e4310 16 68f4dffa-778c-76d0-a652-796545584191 17 1fe5baea-d8a5-0a23-9b33-6745e60d49cb 18 0040c79f-02a4-36a3-9d0d-16569c9c4150 19 10a53348-df98-66bf-bf41-efaf97dc8f19 20 8ff05f8e-bafe-82e4-b119-57d3be20b769 21 930e44fe-20ae-7fc3-9195-fb668610b68e 22 6d29c8f5-2f82-4203-9ada-781abe96373b 23 8b9063b5-7dd1-169c-a972-1a6ecb3c46e2 24 dac3bc80-090d-51c9-b97a-b2a2924b07cd 25 f88b69dd-ed16-2cbf-af01-4f45b6827f17 26 8b15129e-612c-7610-8b89-c2c73f84e340 27 31efe303-a697-7639-95ca-180f2fbf2d84 28 0cdb3ea0-b48c-7444-be6b-817faa6c2458 29 9ac77b08-deea-3fed-9ef0-7ece50824cf5 30 ee11c3f6-ece6-5b4e-92f5-2d7b825d40d9 31 b8ccea9c-34e6-71b7-8bf9-5951eab8b1a0 32 9875d0e2-f875-1a56-87aa-5bbf9bb6c71b 33 7da96e02-b18e-20d2-923f-dfb5f233d5af 34 90a73582-3b9d-8a62-99bb-7652ce500c1e 35 85424867-fdae-1e73-a117-bf2b7d27339f 36 ec826fb4-0def-83b8-9463-969f9dc79bd8 37 508fee84-ef0e-3258-8a6e-7e90a7d65c52 38 853384b3-3077-8e55-8b42-fa5a4b381f99 39 7e19be95-00c1-6f9d-b6c4-7006b54cb339 40 b4a9d880-a061-234f-b3db-ea163b42f371 41 69a450df-0142-14f1-9085-64201e3a7546 42 62538e8c-918b-4dec-aec3-91ee954f8989 43 84d0cd36-cbc1-7bcf-9624-e9a45785e679 44 65f1e4f2-2567-2d2a-8eda-b0956b4945cc
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
62046247765242770368741527773571281838621472. Exactly this sequence comes out ofnew Random(557).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 424 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.