201210081746 115rne
explained decrypted filler
3DES(name+title) ECB, 56 GUIDs, seed 176
From the post to its content
As posted (encrypted)
092B6011D845DC55 56AE0E42DF779338 6045E2172D593C1C FB9CCCD0DAAC48B3 0E37B1200BBF4FB0 BDD9313167049F35 CE130A2A08A2B3A1 54F5C3695BF6528F A8CC12A6796E6DAA 825220A3E6AC87DF A1B8F64C940A41A8 2D6FBDEF218FAE32 2A9C156BEC331C09 0D7908AA0F4CFA50 9ECF9BDA39C9EFFA 1872B60E2CDBC070 8C3D394DD749ED16 327842BBA76223C6 B1313EDCF07A3EDC A53455643FFD6BD6 18BB1BFBE773BFD3 A6D9F042317307AC 2ECBEAC67F843C72 AF050CA72358427C 6349CBE77F808A5E F952F94A55EAFB04 6FDF15A901E78605 B1E0B037C1B74B64 4112E94BA46A01A6 CEA98B2BD59A9D46 A3798CAF232513E4 34FA53CB0FE162BC 965F56198EE8522A 0466059D4EC1809E E4853961224ADE0E 6A9B26C26713E86A 9FED49777297788A F231F33741AA98DD CB17ACC2995DCE79 0D21CEB419682298 27C59D6620930821 EADCE3CA7D1A135F 014B3A81AEAA3061 BB13622018648377 9236F5C20043E767 E031AA8AC118C83E 1EB15393CD32ED78 11A1941BCD73C7B4 D05366CD80AF72D1 9E6F11F49F539D39 76C6D181BEFEDAE9 1DFB4CEDCD7F39F7 69C3D66016C58A30 8A0E77E0E7A8C694 5FF0D7AA61CF484A AF6A2DFD70A9D00B 65CE4F32A2D84560 0AF0DE43D39057B1 C4B84CCE316AE88F 5DF20E0386A176F8 C56C6DE45E3972D9 CCCC936BDFAA015D 6EE86A6F1AD1CE67 617DF0994913C7BD 7E146762BD5864EA 2E4C3E0A3D003AE4 A4BC21C01C339249 7DF9AE40A4AFD051 91FFDAFD0D009F5E 7BD41E053E99B47F 3D71EBB813D7FE87 1374DA73322871B1 2BB5A2199259898F B6E91CE66A3A0161 114528446AA963E9 9306548018BF816C 153267B99155019C 1250FED9460E7E04 FD15159088C0CF44 8CBFD1AE72D00A34 BD05631312703DF1 A0A14480BFD55F2C 408D79856A0B07A1 2B7910855B26C43F 0E0C15BEE3D8169D 0E3B13425444BC60 E73B492BDACA0711 25B61BF810DEFDF3 B0CB95BE6765679B E49363C9E858FFFE E27DC2A0450283C5 90707154825AD8DF 1E39E6E28AA969F5 52B770A9F99A9134 A8B1517EBC897D7D 100756A6273957CB CDA1D617FD343F8D 310ABBF3595B0FF7 8DC2659F95B7E2E3 734244D592D2B82E FF7B20FAA068ED2A 07700675A6AA0B88 D304FDF5E2F8F68F 2F396E5A1D898FF2 758B386CA474923F 79FB5AFE54E50AA2 C9D36379E38811D7 D4C8B717B5F80405 A5318B297C6916A9 847E88D840111280 29FCBE289046C628 85D88B4CD648E2B7 E26C5947E9BBDFDD 842CEFFDF7690E9E 95191C99157DF30E 3A3D04135C5BAE40 5A26499778277170 2D8391DFA0A1B0F0 864FC3D5E1F2A29F 216C74E04F6C0D93 CE0C981DCE3B57B0 46F8EF056032381C 456BF419CCC7DDC7 CD920E1E26717223 6C023AA30AEF7BFB 82EFFE57D0EB1A92 72E709C00A0D886B 1562EE0CE3191173 7FB418CA326C7252 AF42ABCBB2506A1D C1157AB200D025D1 6B453BDED186FE5B 903545792AB1BBD8 5BF16FBCB0207270 61D8BAC2CE25CAC0 F65B91DB89E01D06 667A5EAED1A98880 4E5036DFBB2A8EF9 79B28FDCBFF22FE8 B61BDC5DCC33DA10 D7589A16151DA620 BC3252A0A602081D F8838857C99912AF E4F1EB2EBADBE0A5 30933952195C2D93 B8AA954A25DD69E0 F22A211090076CB6 EBA70EE124EE0B84 A6C2CBB6E44CCC85 3A5096DDC2EFE33B 4C50BEC1D2CE25B0 7696CA0B3F820A46 97DF29A4FA1A1643 2B845A6F7F5D63E1 2C5341D66EB44871 7DC2E5E5EFD50262 76F32BF8C6244F1B 486B9AC800DEC3CF 122D1E335635D6D9 139EF5146CE1291F B2178C6EF5CFB23D 83DB60ADCAFC8AE0 270303E1333AFB10 5458FB4A65574015 A856FF0551C5983F 4BBF92B24CDAA548 A6E68FE96B7094F9 453593FA63764E3C 8C89BB7D1F67C01F 6363AB870E700788 2A44AD8AD4A6BCC3 84731EC6D83EDEC5 7C9AB86E0C4A9E32 8611E1961A4BC501 497843CB3FB85007 297E603FFA15D0C1 41774A61E9BA5294 3759CA1C61880F6D B590A35F3F116421 F370258CE3D28D47 3B395287D7EDC57C 02B675F963BD6DDB A31DFCC067E570BD 68F8EAF0BA39C1F5 722C3930545538E7 9D659DD3E21122BF A68F7E07BC5A1228 E9BBC2DE4FF554A7 76CC2A0A039FF817 68FB7C267604358B 17FAB554612BE14A C6D307068A4DD1DA 409CFA7A2BA9A6A2 9349AB9DB3DF1515 96732C0813519365 46C160A11B92F3DA AAA5285092067DF2 4CBCAC3B2E8B1190 6660D70C5713E872 C4D8AA7098BAD98D B761E7D9FDA657E5 0B3054A3F3A00F80 8D34448C5221870A 92503E8836D7BAAC C3FE6E688B24553D 5BF6E2F59C252BD7 DD7A199BA416FA00 13EFE9B5062B19AE A08FE7F39FE19E5D 6B07B9430684ACA6 F9C6E65F756947CB B01FFB6154B5765B 78ADB019502A2EDD 2F897256EE64F6AF 7177D1AF7A796161 11C0F9318D260BF1 FC8D3B97C965D0E2 9684CB3364DB8EBB F1AC1D3C98437E85 8B3CEA7B2D41BEA0 8789B45E657322CB 522086B488D88FB0 D20163DE0C665474 FB73C817C63C08F0 6686090675AE9AFF
- Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210081746(name+title). Key = MD5(password) =ed47c28b72b3c01f6f58e6a1878cfb31, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).
Decrypted: GUID list
1 f02fc483-6700-6d86-9d64-0bc11cedc96b 2 d04c282a-ce98-4b24-b45c-41bd0e87b5c4 3 c47e7bcc-9ebb-7961-893f-edc2b2cb8dc2 4 10e1ed60-d6c5-199d-bc2b-9e1bc387bc88 5 84bdf433-cdf6-6415-b00d-08ac9118485c 6 2177160b-2869-37f9-8670-714bea41ec65 7 4fadc1b6-8b16-6bf6-a703-ef8e533ca054 8 3b747f37-4044-6052-87f0-7e72465aca57 9 3eb2c3b9-0ca4-6f12-b5e0-ca8ee24a27e5 10 0dbc64e9-58dd-1894-890a-6e8367a75107 11 6a5403f8-831a-87b4-9a9d-ee05b58a3400 12 d7ee624f-a59e-7439-9fb0-4df8f132186e 13 96bcab2b-253d-5a76-95b8-cfb60f4b625c 14 89b2f730-fd1a-0276-a67a-bb3b50e83f7f 15 2db09d35-4865-14b1-a9b3-3f778ff445d5 16 3849541f-b053-8aa3-92d9-10d4c490225c 17 583a12f6-bcf2-7a60-b28d-7f2561284db6 18 141aae08-37b5-1e9a-921a-fb83f240679b 19 1c67c241-2b19-3057-957a-c755e1ace206 20 b69d15fc-e553-4d3e-bb25-ebfdbf895449 21 6d61ab49-7487-1474-8f23-c6204d794909 22 d76f143f-a441-03cc-9f9e-6f57aefd7d5c 23 465e19f1-ba14-6345-959f-7214470a52c2 24 12148267-5575-4c10-aaa9-648e3cfeda25 25 e2524560-4a64-8acb-b84b-9d2659301852 26 b2f7836a-af35-6f2f-bb22-ba86e65c92d8 27 52ba90f4-68d5-2a69-b6e9-24faef842a97 28 30cd97a4-8bb9-6bb8-b11b-09a59e7374f4 29 a787b6de-d4d1-1876-a821-ca01137e22be 30 892bd085-561d-724d-843b-e9f3f65ead0c 31 d88c9645-ea7a-1cc6-bfba-b20a26092cca 32 59a12bd8-67d1-7aef-af68-ad7f5c843684 33 2bc96983-02e3-0e7f-8f90-f158e6239606 34 d97379ca-1b7d-3b7a-893b-fff64d75eba8 35 0e7c5a3a-a46d-0391-80cd-e7d221acc0e9 36 5840b5a9-b946-3f6d-8562-b8c2ccafcaef 37 4dd158d4-6f9c-726f-b8e7-33ba5373fdfb 38 24d166b6-6131-2c01-b491-398339ec5d63 39 5ffbc98b-4a91-4652-8afa-45963eec4133 40 7a82ec8b-7694-830e-a607-12a2124b8de9 41 d015f688-a321-5ba5-9545-ce23a28316d8 42 f5c71d71-299d-5e51-97ca-fceb7d9a67cc 43 c6c220d7-836b-7955-a5c8-e2ae8dbf2c24 44 b9516e74-62fa-1274-922b-14d4bea5140c 45 8f4e95cc-95da-6eaf-87b2-d14b31040bac 46 6eac1a93-3154-7f4d-8ba1-2695eb86756d 47 f8fe0c07-6bc0-1169-9093-447ed4cf5696 48 f9f29df5-516f-1154-9ab5-92b8d8a2c5b6 49 fdfd7971-d1ac-3d4c-ae56-d40e16bea4ca 50 5b949eb1-d526-489a-b515-0f7dcc2a48ee 51 86138f9c-759f-70a2-93c6-486fcb8ad82f 52 85fea011-42d6-0dda-a2ea-5ed7c8c753dd 53 73c2a07f-56f3-488c-9a35-7733480d434f 54 a2b3793d-12df-3543-bd26-1b80785f112d 55 6a0e4e15-2f23-3bc2-9a7d-c603a4262463 56 9d5ef74e-a0de-5bde-b642-40d41e11b699
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
64716366618750187134106486261717030372485571671134704335. Exactly this sequence comes out ofnew Random(176).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 473 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.