201210081006 114yp6
explained decrypted filler
3DES(name+title) ECB, 42 GUIDs, seed 536
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 2,704 hex characters = 1,352 bytes = 169 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210081006(name+title). Key = MD5(password) =703012846b6ba9a2c05ca3ff4491cd89, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 42 GUIDs as hex (shown below).
Decrypted: GUID list
1 62386b75-f57c-6897-abc7-620ad49ce030 2 b714b4de-0cb6-0ef4-842f-b652108439f7 3 0df73005-a45a-3acd-a55a-755719bd7938 4 84264819-9cf2-867f-a19b-b19ca8f12685 5 af15fe93-3440-1a8e-8344-f88cc23a9d89 6 7c871ca0-0f1d-8fb1-a6a8-c4e26a17ab3d 7 9aa5b50f-3590-0532-9390-5afe6e5aaef0 8 63d89290-66e3-3c63-9d34-ef61af71f07d 9 f7be22b9-3809-271f-9908-f804590f308a 10 08d6ead9-2fa5-87c2-989d-65f979a0c499 11 7e483a39-6823-1c0c-b28b-9cfe04152268 12 c89c2aae-f855-824f-a1b2-1b2642fc4800 13 8ca64dfc-3889-03a3-9989-1e20422fe6cc 14 dce3e438-2e60-2faf-a99b-70fbf3e4403f 15 06993d66-4f76-166e-ab18-a818bb6a6aea 16 32055756-8f11-63f5-9d4a-9af1ac07bd98 17 ef6322b5-2cdd-11a7-9587-6ceace5b56e7 18 019b2250-3e02-22fb-9389-2e8028e74f75 19 e18a3142-e74e-1f21-965e-c2e2efbc10cb 20 7071eaea-f9da-71f4-8cb7-b367b5d8820e 21 6816d875-8d5c-0c47-b1aa-1c607ba2e4bd 22 8e18692f-b8a7-347e-8837-073f4202aa8c 23 e3e1b34c-c37b-5f3e-97f7-8c43f989bb3a 24 2fa48c69-4540-2033-873f-32ea6bb7849d 25 e155d5db-ab2f-2ae9-9267-4fbfe95097de 26 f843404a-9fa5-28e6-8d2c-5772d53c1db1 27 7457a225-97df-646d-8a4c-2e42fdeaa495 28 060b634e-0c7e-7de1-a63e-f91fdc92fafc 29 536ecd46-c567-5841-afdd-65deafae0053 30 074d5576-98cf-6c3d-b99a-b936e6671fbc 31 f43eae7e-7dbf-056a-b9f2-6a54e24cc1c2 32 f1574b9b-b6cf-576f-bbf3-db45304ce67b 33 c710cc92-f6e0-754e-9ba6-718f1cc68626 34 e2227e27-37c3-30fa-b633-6b9b2fab8d53 35 20366b73-d8d5-78ab-83e9-60443fc4e6d2 36 657746e3-11bb-8275-b642-eb226d7826a7 37 829f4f72-a156-0794-8a27-f5492341cc56 38 ca7fd62c-6eb7-5119-bcb9-6eb1a37d313f 39 8a7717bf-7790-115c-9684-a4d432aa8ee2 40 cd8cad24-0d14-2195-ac32-af211dda9d66 41 2e28e538-6e0d-89d8-993e-716000c6704f 42 d93c80e4-27d1-5fe3-b0c9-4ea547126d0b
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
603818032818021612170352226756057378051285. Exactly this sequence comes out ofnew Random(536).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 450 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 42; the post has N = 42 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.