201210110100 1199c7
explained decrypted filler
seed 643
From the post to its content
As posted (encrypted)
A986AA3228634C53 F087443F22B9A8A0 581315F3C76D743C 1516E514E7407B92 F282738BA9AAECAA 84C4F686B6D79FC5 9FD0BD57FFC1D896 FCB84905DA37F05E 2C7B6FC10C65AD3B F954DCB72A933018 64C796BECFA711F1 ED14F0F453194AC3 740705F72DC5518E 47A5CD2B6FB2AC44 7D271ACA51E7FF1E B38B28057BA3224F 0B6CF217866E1B3C B4183C2B003CAA4F 2EFF7402778C6E9C D52AD83BEBE3BD1E 87B5BAC4F657FC12 D622DE3179D2B6CE 90981F373D35F2BD 8F224CA96D2916DD 57BD0B4EBD5A68FE EDB8E5C94D580991 1AFB0A636FFE3E71 C7DBB8AD2A56E942 6984A470138BA0E2 C7D197CC67AE72E8 CA02E7AF9703C24E 6020A6C0A52CCFB6 1DA32EFC5928A9FE E70930B593BC65C0 F5512D8416623908 5656713A56157BD5 75246B7C033FFE49 5A7135BA9874925C CDF8744BD704A18E D96F93DC5CF2B064 1330AD47108BEFF9 27F3121CCE624626 542297181F107797 6D296D270518B321 E60F0C9AED5BF8D0 1048BBD5F7FC9136 076C00AC3684D8E4 41C768E1FA529227 AFC7DC67DF201FDC BC105F7BE700DB48 D37170BEA14C70F5 A5B8E52A758B61BC 9D799ED88493A617 309A425B1D783A80 BC236F0AAF24E54F EA4201758F6D3422 BAD17081E96C1ED5 B017CFE26AF32364 BED1A20C263E587C 0431164063065A01 B9E54AB5C258AB52 F8FC0DD808AD005B 8E90F7B2470F2550 F007AB1F29B90422 B9911859A5C886FA 3641DEBA1066CA1D 6E77387ADC9FD20C E8C52C45CE5EF4C5 12B9E554D0C7765E 8D0FC9A123B9263D 537386196E498689 368BFDD89AF70032 E2A6935340366A46 0D0B699069989D97 289E6C81996E238A 1B9A845988176B47 093A99D1EA5C2E35 8180B37A4A545663 90E62AE757E24451 ACD400F66F48AF4E 3E0E886AD8F2E60D 45D460F241F9CFA9 9931F758F4F95984 3BB452C23692E661 E1086205F431614C 41985258FA91E5FA 416F5955A5A7A841 EACD827FA1C7D4CE 90C696E496CB0DB6 61E788DB764E0612 4DF3484F7B0FA7CA 6764A4E834E51F76 EBC8D21ACD6E95AC C1F9AA4C162935A4 E3978867DB4D7B33 FB6D1B5362FF6278 18A7287A204496D0 2BFB315AF7B44127 454B9D84D71F093B 0E80AE443D1FF8A7 9A65B25D30661E38 CA2B37E43D081A28 B4147817E3DEC502 578E2A1E9C5CF7D3 B2FE196D8805A9E1 092F9A8E0881A212 84FB08F5B4A2809B 8D028ACFB0D6307D 297B332B68081B1E AFFFFD105392DF90 15C731826B7296AA C4156ACA9269630A 6E9EBB54C11485EE 3C0E9501CBE476B2 142714C1FA8C648A 1D3694FDF4223EA0 5F45934A5CA7C41E 7F7098B6B602F534 86181E6A1CE94574 711148A53FCDD628 18E3D3E7BB7CC6EF 6CBBD34CAFE865AE EE8C20031231F522 9E08B7964D058961 24FB1E147675B8D6 6016948E119D5091 02D34C98150B1E6D 475781CD93EE6279 077DAA42D24BFE0A 13DEE4B1471BFFBD A957B2DA2C162A1E 563173592BEFEA0D A02EBE1C51F51893 3D9E4DEC78CEC825 A5FA0EEEEE7ECE30 19015BE90734B499 69C11E9290CDDCE2 D44052ED8A68D4B9 CB20985275E6AB57 56CB81398B18DAFF C533A0D1582624E4 2A9B1DABEF9C6C36 221AE659C94C6458 61FB45E4CA2A786B D110051C9AE898BE AFEE5F0615C8AEF6 E3D37DD6F15A4808 55656E414A7226A1 37D3290E9E23F4FB BFF97B0CC9E1D086 8964FDC75567F921 4EBEEF374C91C526 29A1EA734328547E 9490467D9C3A040B A802A8454991CEBD A041351FB4A68AB6 ECF4ADFE621D2F51 122DD71837440BA8 73CB525FAEFA7E47 154211F2B79CD90B 830579DFFEA507DB 754BC5141C9D35E5 F0A5AD6C83C8B944 DB48633CDCBFC2E1 4C5C3D75704F3DA9 64B5D90F2BD5224C ABCF6E92C4302ABA 2CFE93066BED6EA5 DC0AB73C73FD5A6B 8EA3D37E7300B14A 66BBA27D4D97FAEE DEA994DA8B168DEC 3F2908A87AEB4E8C 3D234D165B177E8B DF0969740142CD0A B0A6ED4170625CA7 DC5FA47FF99953A4 E99D9749F252D279 026CD1CDEA9008DF A396DB53B4534325 9F111285DC83BCA0
- Read the ciphertext. Strip whitespace: 2,896 hex characters = 1,448 bytes = 181 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210110100(name+title). Key = MD5(password) =fa1ab2d6fcb749545a034ccf9e3fef42, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 45 GUIDs as hex (shown below).
Decrypted: GUID list
1 dbf9d815-8267-5e69-b5b3-1d9a04f6cb52 2 6e418f3b-a9d3-4432-9580-0d2120bc876c 3 a1ef58d1-2cf0-1bcf-99a9-4c96d99af997 4 460b61e4-8618-73f8-923d-d32303be01b9 5 6e8352c9-9659-4e49-95ee-94e96c74bf7d 6 87e79458-0dad-4767-b33d-fc100e7eae17 7 56cdde78-b831-01ed-a97c-9ceea7aa4c38 8 36971c47-9d26-09b1-bb36-e42d172489ff 9 4bb2892c-6b65-4000-ae2b-f3bd2b1a6684 10 b6c8a607-d795-3c6e-b966-4c55ca705798 11 678fd14f-33f6-096d-894a-351d2d110008 12 5a98fb8e-1b02-4df0-a81a-dce358d8a5f7 13 72eca523-c7b5-546d-a2fb-1cc3e441dd26 14 799b9bc9-0c0f-84e2-a58d-811eb01aa1e6 15 4471f76e-b635-09bd-a132-204408d72a15 16 e912b9e0-f3fd-54a7-b3fa-bc3bdd889704 17 c15863fe-0653-1317-8b71-206b40b153e6 18 f5439c15-3981-5ce3-9b85-7fe9142da22f 19 3985979d-ccd1-03ea-b61a-fbceb89c0f0c 20 7cbeb19f-0a08-2cdb-99ea-3d45bc304c3c 21 9b51e32b-732b-2c21-a32f-cab006519a3f 22 c8c006d5-5833-515d-b273-9d08a027d4ee 23 13f3176e-0ed4-5dcc-ab7e-8e125a023c03 24 8bac8737-01d6-53ca-8756-e8b77489cf5e 25 443d47e4-4397-6c7a-9eb0-d48987217aef 26 a15a1c51-c89f-0d9f-8210-0614478c7519 27 d245a774-e0df-6e2a-b688-876f3e69c0d2 28 1f03ff6b-af80-02d7-a3c6-f93f84090894 29 9a5874bb-50c2-1f48-9e2a-4ab10163ef84 30 c8254e60-ca63-885d-94f7-fd1c94e8942a 31 b4805ff6-da92-50f4-8f24-3b09f943c5fe 32 066454ac-582d-746a-b381-f313fc7df87b 33 5ea533d3-de45-7cb9-b847-627d0d6bc65c 34 1cd25acd-3e47-0adf-821c-bcd71a944b70 35 546dc1c2-70f8-165e-983e-af516d5dc683 36 ce81c531-4696-5689-a261-a9fe2b0092b7 37 95950679-2d22-5909-8581-fd1c464ab440 38 18953d71-e8de-5e0f-a9b5-ec7f6383a7d8 39 f3c55ede-3fc7-4d56-8cfb-a0550692e4da 40 afc5446f-2b5e-0ba8-aa7f-a3b2ce210819 41 12125d68-d2b5-1aa5-a8d9-3b394acea06c 42 363d2696-05cd-3568-b514-972600cc1cae 43 a266bc0c-ed39-049e-b40e-5b4fe1d57d53 44 29470ce1-e858-085d-91a4-29ef8d6daafa 45 a19cac78-cbaa-887e-83bd-cca396b097f9
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
541744004304580515022555606018577015554013008. Exactly this sequence comes out ofnew Random(643).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 530 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 45; the post has N = 45 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.