201210080926 114wx6
explained decrypted filler
3DES(name+title) ECB, 44 GUIDs, seed 778
From the post to its content
As posted (encrypted)
FF8FEFB9EBF131E6 C12432D6C96AC2E0 B0691F0F8B24F13E 0AC392F4D392C22F 20413CCE01FD526D 91DBB9634D12FB65 49A81C43A9248E91 338ABC5EA0EC3100 175629CA308C69B3 86862C1DEBEB8203 2E145D972570AF82 9B142944665091B4 81AE2A38428D752B 875671B5079AE602 FD744FB8D8CF1EFE 71D7CF13DC16FA61 73E905D56A67B79F D27F9AACD10DF254 060DE563154B67FE DDD0781857446B27 4B46DD53CBD2E470 70412CC307CABA5E 86F86F19A85FF5F1 7B27A15678B732A3 A9C0C69BDBB35A51 98F315523C001545 7E3C3EF4D983DAC7 D2533AF5B807AAC7 27DD8B524B7AD3E6 69C837F397B425E3 EE6B0FFD893E9645 DC0059E24DEE9B30 6730117B41760D89 CC7F62A440E6438C DD7F126F8108C127 03435E95D3EF5568 56E991B72FC496C2 0B141CD57FEECA0B 502DF26851A4F5BE 56D2372A4A08F0CE 6342AE9C26D92853 51EFDB51B082A3A4 65C39F14AB940B37 6D3F95A25819EEF8 6E93B593EC23D5BC 46D981EAC7240561 2684EC6545FEAFB1 03D4AD94E0A924BD BA279AEEFDA271E0 592C398B63C2DF3D 09EBFA94A45E0CD7 565AF79975694085 A0F08F693006403C FCFDDE0391309A69 45E25938DF9DB9A4 EC0826DC18AB852D F521A51AE294B05F 9E5587BEEC60D6E1 984AB6075DA35AF1 8A8F94AD155162FC 4F95244A89A2C7CC 5E7D8ECDCB2A3857 14A0BC4E0B38D3CC 845EB563B395863D 1810FB497C412664 FF5C6C827C2D89F1 9391CF6D169B062C EC4CE2364885B2FA D703DB7BE4AB1226 10DB0E65AC954AFF EB70D44553877CD3 234896D7A58F3837 553AD62BBA45B440 6DB97F2AA6C06E69 90F32A1DBB69B73B C7D6CEF78A210AFA 4447E1A52C584649 F4C95841F9A680FA 2BE4834376FA94A7 670B8EEC3EAE5CA2 AFD5E0790F9C2A2B A57CBE0EBA3B7D86 2C69E729E337DBB2 040F2DF5FAB62D51 FAB7E4CBA5AB6198 160E55A5659F269D 8F5F4E6986DE3DC6 88A14185B0EC16ED 2F5360230757425A 5ACAFA524CDB515F 26EBC1E5B87C2BC4 67D2A2A80F5B3ECA 88CBD9AC52AB01A8 26C05D8C494F6604 6D305EBB4BF89B67 EF4EB544859F4149 9F87ABE17E7FE545 A3CD351E1B4051EB 7976BC5F4CE5594F C84C0A2BCBF5EE75 0349D355C30B09D3 528C520C1843101D CC1D22C384B2D720 70F2AD7BDAAD87C8 ACC794AB66A2302B 7B4E718B3F14A630 E1985E3306DEC14B A027DC2A333774CC 4FF9D1372FF79AC4 6163028340794122 E592158550CB55EB 066EBBD84B2CF722 D02CEF50050F6595 399FE143C8656B6E E6552834B6DFB573 3C1AD3EA38C2C0F2 957B238AF3404EA6 4D8092498AFC13C7 79F7B00168800D3D 7EDF714F7097FE7B DAD971368CDA8A65 C10F8F3D017AA832 D7292B1ECD7F102B FD7F90D3A2B14020 94B7567C17A88732 FD2405C3352434A4 3C1F1FC476C94B7F 93AD5B9CE4F822EF BDDA41A49B7C1EB9 14D668620186D5C7 1B92AD514B7D9373 522CF636806AD54A 5D4B30F4CE58C52C FA59A12DB26094AA FA6F198F358D3B12 EC16879F920F6742 4DB9D17F33C42631 67C2E64A8ED7D8CB B63520404B1F1CE7 FF55AF0E45C0314F 4AF41D31A96CDD27 25FA7499744EFD4D 65B86779026086E4 541DC94461159BB3 EDB705199ACE8E9B F52465B7553D0FE1 9E0FFE2AA59EC430 B7E81F3989BB744F 684EC03767F804DE 6C434343A9956BF6 5A14E7A5EB5200C7 7E565A235349007B ED89D9629456B7F3 03F4512015A32595 402E074CA63E0190 4993AA586813AB1E E6C7B00AA8D92857 D4ABDD60A5D7C9B4 70317BDA29458D05 F3FE15F58F26F43D FAB5C9F863FAFE33 153A9E63ED7AD669 E22E3C45700AFAB2 6A8F5CCE1C587512 290B923C760A00C1 8C67ECDBC44FDFD6 464168B54C5BDFBF 7CB3346ED425B1EE 7639050CC6A55232 3F30463B128E32D9 FFCAE2D39625FE05 BFB454219769A3A3 2D8A418700C815C4 87E719DAA0382008 79F17A11D5A03CB7 6553F7861FF99F14 78E28CDE5915CC1B
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210080926(name+title). Key = MD5(password) =ef43e13fbf16c9ed809a538c0c9e43ab, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 84b8a4ad-4d7d-1fc6-873d-fbcc35f2c777 2 6cd7a561-5ba3-0715-b4ae-d999629669d8 3 7d727c88-77de-554f-87b5-104040ebe719 4 8a491622-4c11-5653-b57c-5568561315ba 5 de59524e-bf43-47c5-ba08-3a6e6cffa26d 6 d1257753-3ac3-4db5-bc9f-fa724dcd74c6 7 aa29915a-9318-4e40-8566-eab669029450 8 557f0d8b-0bca-6d7a-97fc-90e44bab744a 9 53862f40-1732-2178-a2d6-d32e939a2fb3 10 fa28a0cd-f545-1a8f-b75e-d83db924a41c 11 453038a7-f6bd-49a9-a532-68a945d433b5 12 9ce144a0-765b-7769-975b-b0cb29ca4e73 13 ea7c6bb5-b9f6-49ae-b304-3cdd562764ee 14 9af10ea0-21f3-24d7-a65e-23d30f7ccc99 15 46e18606-e50f-538a-b1ee-b5e4554289d9 16 efd81435-90f6-81e2-9802-205fb4ba31d6 17 3902f7b3-087d-8066-a15e-3a977237bc2f 18 ea3fbf72-2160-3100-868c-7f180f279f5d 19 989753d8-7698-6c02-9e82-ac402475c412 20 ac8a2acb-1c02-5ab8-9fa3-8d433e94bffc 21 3c68c91f-e01b-188d-b4dc-9ac7af581682 22 a3891f25-1fd7-6ddb-8c04-e7497ee8a024 23 def40bb0-8ba7-45bb-866c-960fd121b397 24 85cb0316-8c06-7c79-86da-823b358d8f6d 25 ad808668-48f3-8c01-a765-44dc88133a33 26 73934e41-65be-8972-9ce9-e5668b0e2622 27 f1aa416f-3514-7b3f-b93a-06157aa1ed9c 28 8cd4615c-cfb5-63f8-916b-274c4eff4c30 29 a2dd975b-4fc0-3838-ae28-2cceebdeccc4 30 9b1a50c1-b8e0-58c1-98c0-15d294a2540a 31 6170ec7a-79a3-3822-8af5-79556501f2a1 32 f0f02d3a-6ec6-3c10-bad3-e12063040336 33 028d8205-2efd-12d6-b775-a8236ccfe7ca 34 683043a4-9b99-46bb-bf66-b0dad0b22b29 35 2cd48c5a-bcd6-293b-926c-ffad679eabee 36 a1069be6-1632-40b9-8541-ba8c78ba686b 37 e3829a0f-d5a0-4f0e-a7a2-4a577c253361 38 5581f126-6641-5109-86a1-5082b1f01494 39 76e40ab5-87be-56fb-8249-66e53cef3d87 40 ebc29a88-8000-6ccb-9eef-11bcfd240228 41 05003e59-e1e2-646f-9797-c0fdee21736c 42 ed28bc08-b8d7-7b61-a19f-e1b2263a919a 43 e83a0223-a1b2-234d-932a-1f2b39cb0c7a 44 6b64be21-90de-2e80-bf77-58ddcb679a4d
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
10554446214742588365164788763533142445566722. Exactly this sequence comes out ofnew Random(778).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 448 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.