201210131700 11fhmr
explained decrypted filler
seed 140
From the post to its content
As posted (encrypted)
6157DCE432E61FBB 108CA58DE5786F7C 551885B0974F371D 0359B30F91EBCAD5 0D3DA943DE74B929 3EADBF773A9F03D2 1401055EF8CC8FE5 E238094C3726F141 66F24286CB6FADD2 9D367069EF6E9D22 9913B84FEABEBC39 BCF127A7C33C19A1 587A0D5EA44BE2BF E35C72EA78BB869F A297938E69972B23 B6B67BC5636C9195 3782422F5F5E40A7 44988C3601FF652A 8D1FE62BD3AD165E C3F5E4323F7B4C1E E2295C51D48474B3 47BE35C1F0FAB68E 32F848A8BE86AD99 F20D751B43D91D46 03B13E4F737F1C87 792A193C5DB7324F 2B481F953BF88591 16695E8C90124BAB 7C7F0AECDB891719 AB54528A7036B4F7 9F045486740FC353 9F3FDD6073347679 502F8DBD7E91E8E2 F51D4BB9AC1E74F2 B7B77ABC2A6C708D 162B6C00A2A266CB CEACE497E33DF365 1BD1FEF06EF4306F 28A809951DF1106F 3325B176B7DD8A05 7D1509E644DD9CDC AB639BC3322FDE31 3AAE8E1808CC67D5 B01A8584301431B8 4CD3EA34C6A492DE FE60D92EE97820B7 2769153F849B1980 7312B03A45526A3D 63B363D122E8C6B1 34EB1AA042B44FFD 2AC3DE2ABC987347 B544377B993B90B1 82AEB39FFC904801 94D276670526C58C 1ED78789B906D10F A75567C9E145B10C A4A6C14482A158E1 0F54F32F23658448 67D489B7C10D3029 08D80382FD762E87 0F6D0F490696EAF5 86B926775F309BAB CF2CCC88EDB4CAF0 563402897EC037E5 9BE49C6C3D20E2E3 7E7953B6CD080B42 07B06302BABE6AA6 7F8507627B3AD8EE 0284FBD947E02F4C D7AB442576E12889 BDA2BF9B39BE7835 98DDD6857227B58E 5038CC9467B67C1A 4D732F5C3A56A8AD 0B3A954564071D07 026E35CC947504B0 310DBD7B5CB6D85F 7E4740C56DEFA8BE 9D297E1BCC02AA5C CDBEF8CF5A517E8F 35080C2D9891B618 A9A9B846392C6853 64932A1EB388EB4B AC1F871132449C0E 047DB473299ACF78 0FBC93932360B09F 86977BDC7453C0CA A25EB8444AAA9F81 4BA6E074058DDC52 1027FEDA33A774F6 B8D0BCAC4B5DFDCA F451F92AEDAA6016 C9866465369D44DC E0DBE7D6D1D0FFBD 3DC2A341AE0623E9 1DB2E5F37CEF6A7E 8E8E76D6A0CA5E41 D022BEDF7382EF2E 9DF1F1B870917DF0 F15578FD532444F3 2771334DE4737EBE 22F6BE1BAFD4AD55 3C7C360B0DC48E2F 32453856CD4F4AFC 5C105C77ACF4BC0B 8B5A69F9359E39F8 5E6F6280920B590F DD963E43D033A9BC E6B53384FEE53671 13AF638B331567F4 9D279624EA0888B5 9ABDC28316EEB6E8 46AC14758FB7C0D7 F07517194680BF88 01DED44508D7EFAE 721B9B9C866690A2 5E7BFB895E253F23 152D59B6E3E2D137 E9684B65007B947F 4608F6344AAA4DE4 80850DE212BF71E9 9E69B55E1E46DD5D 8A38C188FCCE889D 71E7E489B0D89EFE 69A3EFED03153C16 BE5268623C9E9460 9363B04A18A677C4 FF9A2CA697B6AC18 662CFC2CD64E0C53 AA6CB255AFB6FB4C B82DE35B020946B9 8CA2B85C7E53C68B E52D95FF45EB1A34 EFE3C3425BA70AB5 595222B6E9FC0830 F6FA6D5CEE41888A CBDA7633519CAE08 D4D1040F1ADEEA3A E53C069B1D9930E1 789588AF4C73699B BAC91031DFB4B6C9 3E53598EE5B127E5 3DAC8D055A99AF81 3B708E5C8699C08B 12B5C64F9CC54281 1F6CFA67B661652F DCC1DE895380C318 385CA797BED7D070 987F51AA52D00315 2819B9206C547D3C C4272BC98AD3F30A 988C21845CA397F7 270F3C6D6714E990 A258B90C5E1A7EAC A09DE80F885A2BB9 EB228679A62AE48B A945B9C8D59B5D78 7FDB30139A0AA7BA 3CC3F8E045742022 370D76A173AF334B 530081EB32089620 40C34042DB90EF40 426CFB898C019632 5C4E2B65A183EAF9 0B90858A563ACD13 A5570A2B185D653F ADDD52178EB96C0C DCE223CBF6BA0B44 B9B17D1A46361BAA ED1AA5A39257F757 BBC69367CBF6D36E 90070FB59931D8AB 84EC9693AC356F47 F272A1FF34871068 442DA865D4E9AD21 BE8F665EABF13725 5BA9893A5F6B21B7 3CF0DB2A88311D5F 957FE7584E1DAF4B CEEFE3DA8A18DB1C E3B398DAAD3CC22A
- Read the ciphertext. Strip whitespace: 2,896 hex characters = 1,448 bytes = 181 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210131700(name+title). Key = MD5(password) =13c0b79f57b0195bb2451204e733f0f8, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 45 GUIDs as hex (shown below).
Decrypted: GUID list
1 f30daa27-fabb-7d0b-b094-d7e5fe390366 2 0843c25b-cca6-8eb8-91ff-fff891bb5ae9 3 e448f511-49bc-5114-9413-2960997cdae7 4 638eea0b-edc4-304a-ae95-66f8a923c91a 5 28cac36d-8afa-31d4-b883-07e08ba1b35f 6 de11b854-5828-883b-b928-8f61eeaee3f1 7 8815eb04-4926-5260-9df5-94e8ba7ab235 8 c5e969a4-1209-609e-8735-98d511a9b3f0 9 5ff54a7f-8318-2f36-b982-44b53414f562 10 0c33028f-47f3-8960-b990-cf2e4077b2e6 11 99cb2a36-1932-31f0-bf1f-5b48b0b583d6 12 ef550695-bf0f-609f-8cd1-05f232167982 13 7842d4db-9ac8-751d-825e-3211bc42b879 14 a8a2e0bb-56af-2e85-a3fc-ee1f840d9cb9 15 6f3a26d9-0ac6-8851-8e4b-f684d0e9b172 16 9308e63d-9a38-4241-a544-9f377396d17a 17 fe8bb263-7b5d-612d-a468-4e7ec1e2a243 18 0ce76cc1-5624-7be0-8033-8d751d4d3013 19 d4f6989d-f928-43d0-9e95-3c6ee49abd40 20 158446ac-a2f6-4f1f-9ec0-20cc7a998dbc 21 4d6fe533-bccc-313a-97b7-0117c05de612 22 bf70964c-e9e3-1256-b441-13c05c95b566 23 29ac2c05-7a06-58f2-b1ba-42a81a0b703d 24 3254b27e-8821-8a8b-b451-4cc3ab26ec86 25 e77bada9-ddb4-38bc-80c9-a6210bff0985 26 c097927b-386d-542c-a14e-3e84e298d947 27 fec2f749-0f92-24e1-82fc-3d1063fda9fe 28 ec3fa561-25e4-3fa6-b85e-24de5948f5bc 29 91d5e0f6-5742-1169-b711-9d5fbed43a55 30 b1b2aad6-bb64-7b54-8b82-0d346253e06d 31 5377f3dd-a336-7f84-af3a-d7079635d3da 32 3f9b7059-8f4c-2899-ab97-81a742c7c433 33 8521cd41-7fa0-5174-9e11-18685a11bc35 34 cab40277-3f64-4da2-9a05-8afffdda1fc9 35 41959c29-3684-4f71-8e12-ff39bf3f68a4 36 3976235b-281a-7faf-9000-28410584b3bf 37 bea2e03d-cbb8-838a-afbd-b38388a2344f 38 353fa49f-c410-770c-93be-9801f43e5d4c 39 389683d4-c8e6-2b0f-9973-0df47d573ad5 40 eb743e7a-37ae-46c8-9480-dfbe6626becd 41 6490f661-bb27-81b6-a719-87bdd05deb0f 42 21cf945a-64d7-5f3e-b6e1-912da6df78fd 43 9ea49f70-9d3c-1c6c-aca8-39b5504f12a4 44 22b4a797-2496-19bf-b526-4a9fb94fbf4a 45 f3762fc9-4d52-678d-8e8b-a2df561ec219
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
785338562836728467443158352317725447872485116. Exactly this sequence comes out ofnew Random(140).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 18 of Run 36 (seed 335,015):
new Random(335015), Next(8,64) per post. The RNG predicts N = 45; the post has N = 45 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-10 20:54–00:54). - Conclusion. Filler. The content is fully explained by the two RNGs.