201210081826 115uge
explained decrypted filler
3DES(name+title) ECB, 40 GUIDs, seed 80
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210081826(name+title). Key = MD5(password) =5c9feb715fde98559bc196d39e95b323, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).
Decrypted: GUID list
1 ec8522bc-73d4-48c3-ba65-1277c875fc4a 2 ff55f710-0ac2-219e-9b9c-95160217c720 3 c54225e0-c32c-6a98-b006-3af5af49a28d 4 9a95eacc-f01c-5d19-8dd6-fc9a7c1340d9 5 6b9688af-f31e-2bf0-ac47-ebea170ab4ad 6 25b7fb60-0e2b-4fa0-91ab-cae940c771f3 7 8731362f-d43a-6c09-9109-9752566c49c9 8 cf715501-f836-521c-9263-90193137974f 9 4e758214-6bf1-7941-ba4f-d9444a8abbbc 10 2a5869c3-b918-622d-aa39-d3c2283f9e05 11 681c0f7d-d53b-2277-8526-5ec9d42be7e5 12 f9d75510-b653-81ee-8f86-97a8a4c456d6 13 0585d8ea-f268-519e-a003-697fd7fb0e05 14 d8546630-9a32-0fc7-83f4-0ca25b99c9d8 15 5bde4060-4eae-805d-9798-ebc152d592ac 16 df62d513-5b12-8aa6-bea1-d891f671c4a1 17 e5ec9360-f84b-47bc-9c52-4936788cc9fe 18 455a2dce-0e1c-5762-9bcf-a7720b0eab6d 19 5d6a5a4f-2f47-7270-b2d6-c578ab50c9d0 20 c413ae7c-5f72-2183-b483-35a8298348dc 21 2c71094c-87e5-433b-b9a8-9c7e64ea9247 22 d6062560-5efc-4901-b0ed-71e4b34ac0f5 23 ea2159f6-0a54-4c03-ba83-dc6364a9895e 24 17318624-355d-8ac5-8feb-f1a0ef64deac 25 cb7efbfa-6855-465c-a4fd-ef966905de5c 26 cdb57dd8-2eb0-80cb-b265-d37985bb25d6 27 24cec586-5d40-6208-a6bd-65b076c142a2 28 3d217c50-44f0-21e4-9a63-c577bb6f3d00 29 208cf93c-0acf-576a-985f-6e101009b992 30 d823324e-b918-4b54-9359-322f0ac72c39 31 cae8b45f-bb50-6bea-a6c1-944743ba3db7 32 e6a9ff03-3197-4399-83bb-d55a15976876 33 a1e694da-51ea-4cfd-a7c7-d28d8c394065 34 b39b5fbf-d328-88c1-9020-d4e792e38a38 35 fbb43d0c-6dc8-5adf-b3f6-7b634ecc3ca4 36 0b8f17a6-f969-2894-bc71-05eddbf334a6 37 bd3c9286-64ef-21e8-8b2e-3162071c8471 38 5d15b5f2-afb2-88ee-b633-53c121b43347 39 43da4a9b-f1aa-0c5f-baa2-909d11d71844 40 daf72d10-e519-3141-a3ee-3e393fadc2dc
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
4265246576285088457244484862546448522803. Exactly this sequence comes out ofnew Random(80).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 475 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.