201210080345 114ndy
explained decrypted filler
3DES(name+title) ECB, 39 GUIDs, seed 701
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210080345(name+title). Key = MD5(password) =abc4740fc072de6ff21c462274358a0b, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).
Decrypted: GUID list
1 e6f285c6-7628-8242-845d-1368df519dca 2 7fad90a4-6891-4b08-9faa-85b227012b72 3 aff2cd63-6ab8-63b4-809b-f76be268b740 4 482fb667-a717-1b39-92ab-f5b5e91dd544 5 4255c86c-9535-6270-8a60-50faa3a9b66a 6 df13102f-7355-175a-a3a8-2c92ca7a0f38 7 4313f4fa-8e02-84ad-a29f-c7fc979b03ef 8 925e227d-ce62-1785-ac24-5e45034627e0 9 38e5a3b7-94ec-6109-bd12-4f8109172163 10 b6d80deb-02d9-6156-8d4c-2c44a6a5a322 11 50852cdf-2b34-684a-bff5-7f5181b0b142 12 8dff5b5f-de09-64b6-b8de-5a0d2efed7ff 13 d8aa92d4-295f-4549-8bd9-88ddc12ceff1 14 f05f568b-5b99-19eb-b161-1aaa7838de78 15 784b59fd-46ce-5bf5-89af-8b036887bbd4 16 074591b4-40a0-7531-accc-20d5dd5dfed6 17 9079f37d-e59e-452a-a38f-d6344789773f 18 067e2634-79a3-5170-ab12-700c94166510 19 62aa3b2e-8411-579e-95e1-c5a3a722b19a 20 3b08effd-eb6d-6914-b04a-758bd21a6333 21 1ab4de6e-4cbe-8684-8180-210e55146801 22 2f6812dc-a9fd-7e15-b036-51c606dc9035 23 8c2a365d-91ed-4266-8ac7-6c940e3e0429 24 a09dff6d-f430-8be1-9c21-b16213545328 25 74d07496-0e07-35fc-840c-1267c601edca 26 0cddb7bd-d40c-3eee-ab1c-d46cadf19122 27 eec4559f-3276-5b23-b0ce-7e540902bbe7 28 ec5f5099-349e-0b9b-988c-e24c747d6818 29 191bd1ef-c9ce-1f4c-889e-1bda4d53b37e 30 30cb5025-16eb-58ca-b643-be00565dc2c4 31 21e626b2-8800-8860-b58f-9e317b33940b 32 5f44622c-1a28-02d0-a979-a931ef5500cd 33 8f5a4536-da81-1edf-84e6-59d967338802 34 b9039ac3-95d1-56e4-a68e-7990e3d2e54d 35 59f24a5d-0d44-3b72-812d-e2c72243f2ef 36 4f89b154-3f94-1d89-965d-08bcebea7b08 37 bd99f022-777d-6ff8-bdad-fb7b6fe81afb 38 5176d19e-316b-1189-9a35-d123010f8eca 39 7acaacbd-5fec-3fbb-8c56-dc00e7b5de92
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
846161816666415745568748335015801531613. Exactly this sequence comes out ofnew Random(701).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 431 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.