201210110300 119h9f
explained decrypted filler
seed 314
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210110300(name+title). Key = MD5(password) =67102d7c5e008cd2979c89dfab387a7d, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).
Decrypted: GUID list
1 d05b9afc-2bd9-6dde-91d9-49968e6a4e92 2 9c29401e-f6e2-83a9-a67f-aea8af4e5e5e 3 701e087f-2d75-201c-86ba-a56f1e677ed6 4 c95f2d0e-53a8-58d7-b467-ceb0805c8de4 5 3f16907d-78c3-8c42-a460-9fd82b40543c 6 ad4aab18-3fd4-8c18-9cd0-22fafa0e9cfc 7 ebb787f8-d07f-5b1d-b21a-3a0aee47bd10 8 80441333-aca2-89eb-aa32-09401ef3ec6b 9 5012125f-c563-7384-8078-2023b9f840e7 10 86df90bb-9c3c-0114-8624-ad27ed2e2099 11 ba021b58-b42e-5353-99ea-4ec9cef7463b 12 a4a01eb8-5f67-53c7-9e37-e1fc02c5842c 13 cdd3a45b-894f-4e73-a43e-50a462c47e4a 14 48d36186-0560-717a-a81e-902af89aa551 15 3c517129-ed92-6e4c-84df-1fdd25980bb8 16 8a02cc2e-c858-1e1a-b86b-fa22cdcad931 17 1ddee6ff-4dda-7f39-a02c-9a99772539d4 18 e9aa9d8c-0ba1-6d8e-b2e7-940a7c9571bd 19 ee655e59-de71-1c83-908b-c97cc592a047 20 a74b612d-d948-8226-a582-8d908bbd56e3 21 06236838-d900-4bdf-b1ee-498b6dce7d90 22 ee40799b-27d0-7d22-a721-13714f91da8b 23 353894ef-93e4-0046-95ea-7423e35697ba 24 213d40c1-af27-64f4-8871-73e3e7c0b11a 25 c6071496-6446-40cf-9810-ae3217550928 26 d3dafd6b-8378-4282-a0b5-e0091ffde6b5 27 afa7ac97-5de8-87fb-8dab-cb02c849812c 28 41888e1a-2f39-2236-bc8a-21c41b573089 29 0a01faed-da40-228f-b0eb-cb9c287e21a5 30 7ef46b72-7b96-8a7f-a29f-c22c4a83ed44 31 0f137ed1-9b23-0a4a-968a-4dd0c2fe5bf5 32 59e32268-ff75-196e-a5bb-c639f332535d 33 0c539f73-e8b1-524e-8ff6-178a5882e3df 34 a1fdb8b7-b4e1-72af-91eb-3cc4e7800cbe 35 02be5c48-d0a2-2dd3-9946-62220fecb49b 36 965ea43e-c70b-3eb1-a54c-a94e772a2846 37 cf404ed0-f820-172e-97be-306589519186 38 1648f565-7ae9-30be-a78c-13976b0df672 39 2fd6f960-bb6c-1a22-a9f9-7b92fabd5e6d 40 d52f6297-46f5-2b7b-bbfe-f4fb2f95db30 41 004beb7d-e9ee-5616-90ed-ae8eae0b3fbd
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
68258858705547617618470644822801572313125. Exactly this sequence comes out ofnew Random(314).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 532 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.