201210252351 123v06
explained decrypted filler
3DES(name+title) ECB, 52 GUIDs, seed 287
From the post to its content
As posted (encrypted)
636336DCE688424C DC962735A3EF852B 1392924C7DC615F7 EEFB4A646B2F2609 5CBBF891865FF835 373A9871B69B95F8 2702953C2FED3CF2 BE169A5BA1711932 58CA62BCAFCB7C3E 9B9F1D5A2E0D1EB6 F81FC01E0DB6B468 3019E3ED1546C8BE 7C26DD6E8A7DA15C B43F6CBD71D3A4EE 36488A52D562A589 94FC71E8C8C84CE2 F3D1307AC51A72E6 DFB23563CA2F62D7 E3CC5A505C6034F0 658ADF9116D9D2A3 3BDC048E49268C92 EEE8A70559D89815 2EE9DF8FB7D9120A E2BE0C84C8728207 4A573304DEA57857 1B6CCC604263FBB6 832301F5BEC9BC60 87C4B0C277E9E4FA A0840EF76032BAF1 FAF2C47944C8D1CB 00E4A8E8BA531018 23F987E8D9E694FE 637A8F92371DBC63 918BA30E98C0D45C 4BFF923E310EDB62 C803155773485C3E 92EFC23E3B8289C0 1C6BD412C9B76AC2 9FF5FDD8EBEDE973 25D4B504BBF99E7E 6F1A1980E792AADB 0D900391EBD12396 9B69904DE53E8960 3E906E5085CA46A2 7C7E82BE353EE346 4D47E1DB8A79BC86 E9D8A398729F3A45 6A15B35E956058ED 52230CF207277A9F 74C63B11C71155BE FC88BA1E11A8B067 B8B04A927D6696A9 C6FDC58E6EBD5174 C983B628395613F5 DF60516C439255F6 E8F5DA0AF6471EEE F43B513C8EC1CDCC 3DACCC492688EE4E EC4C19CAF6E5F561 3EBBCA7A0EC7ED0A 8055B17DB4F01FA0 AE6854CF1BB076D6 40CA775D7679F67F 076A6CC85912E289 28C19C1F4CBFF163 E826ED5CD7D9735B 866D79A5866FFD4B 10FD122F1292CD71 B3C83F4E351FA711 4FF49B893DF79F23 8B0672D49C097DAF 2694C711712C8EE0 1611665DAF78FCBD 1604A472A96E76BB E087D1495B2EA069 9FA879EBC4C5469E D4D353E03477720F 4BBF5042FC340FBF D103912E99BD8456 E6CC121C2655ADB9 3F649E123CD26FB1 0D1F5D86D219B8B6 6273D4DFF30DE8F3 9BA350D0EF178CE2 7D318A9BD44254B1 4ABC52A37F819F0E D4E86F1E5BD06617 C46596E006C5D775 6FC38944ABDD90B4 9E28E2AD4AD11E65 10FD94BF40BA3673 ADA26505D3BCB253 7DB52FB5E20D76E9 12A942B23BB72A29 4E9039DA8629B51C C144E9DF6BA0F2D8 AED64E9657147E3D AB57CC2B574BFCFD CDB2AED64D78CBE8 479325F33051D933 18EF74E5833ABED5 AACA365784AB98B9 EE572FD4B835F3CD BCF42B67738B2E3C 5C74F9561C1F6478 105595FF2E4F08C4 535E37909A59C063 BAB1B5D7CB907289 EAE804DD2CE782AC 914DB5C533E96966 4F3254C670C26568 3335407A7FA17D94 21D50DE380FC24CF 6D97077E0E7D1CFF F89BB5149EA36E3D B0A698285CA2BC8D D4CBAB25002CB7F0 1111B5ECE4BB45FB 5B53DD5B5CD91C1A 2130C92BBA940E83 5A40CC39FE0904C0 40FF9F099D84D5C8 B10FE7B4E5859BDC B2B27F24CF854571 CE22EE89176266A9 B8FE269354B73033 A5CA1190B7CBDFF9 EF3B8B0DAD4193EC D75652DF03AFBEFE C05C88A6BA4BD72A 19271F39B22CEF5C BEC9C080E44F0DC9 EFC88D56BF0D99F3 22A1C39982214CE3 292188B5D891B592 DFC34BAE02B1765E 187734E5D385A906 0329ECC641C4772A FCA0693ECC97AA9C 9EF5EFB0557CB1F5 52464D37BBA34529 3941DD8BC59B66D3 203304F9F076EDAB 7B6A89154D7E43D3 13A25720938CF815 20EA273C6E03524F DB41F4AA37E1FE5B 5ACA030DB7DF0382 6AD4062DFFAA407E 34C34E5634CAE778 0BEF758B4F2626E5 5ABA16C8D60F78E8 0821D219D4CC117E A5025BA9509A6759 85F2C97818F0FAC9 FAE3D8A21A3003C6 705F3DB5EEC223BA 605E019F5EF5A8A0 C740275E76089C57 3A859BF8AA9A72EB C08D2A6EDE45CC49 E23723A0DFA1158D F0CFECC0B8C6C77C 2844159F993336FF 2BD1F90AE19A94BF B27A0BAC8430CEF8 D7D94E3CAFCE0FFD 01212F87407E145D 7564C998BFF42B16 0B45C7BE3AFD6217 578D900165E16B77 6E4739A37966CC2A AE8788BD70C53542 874E2D999B91F43E E3FC5B889FEE7980 68082CE30FA6E1F5 39A2CE7BA2A09F5A D111AF2EE55C9D5F B01BFD7ADE6CC753 2875AA56EDAC7B8F 3008FD6149EB0A26 311C199EB3F6F9F4 E7AC8FE4BBFFB9EB 7C088DFC7E159F97 DF6326F2D326CF9B 47478F57AD79067C 14F600DAD2005D30 9D888866E448020C E0D11979F30C3986 70E4529B34325974 8035727BC19466C0 CB56BD068845AE1C 784246B8FF7A9F87 63E79BAD73F29EE5 7BC76CB2E73215A7 C1EB758A7CA659A0 A5F36FFCDFBD83EC B87E48BFA03FE62E 974D69A4B7231CB0 BCF7B9255A99EAEE 225F122D9DBF69EA 67ADC8A3C320614A 24766F22B7BAA093 FCEA1B583A31EB78 08DFC04B8CE2A6AA 98974AAA4B6451C3 F963A7368E1F03DB E5B76F7940047E64 ED0BC55134CD32C7
- Read the ciphertext. Strip whitespace: 3,344 hex characters = 1,672 bytes = 209 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210252351(name+title). Key = MD5(password) =c97b1e0998fd7eb322b327a9eaf67ad5, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 52 GUIDs as hex (shown below).
Decrypted: GUID list
1 fc0aef5d-0182-5ebe-9d85-32d4b47987b3 2 6e957dd7-1a97-0cef-90eb-cb4c1d430df5 3 f09477d6-7e32-3dac-83be-bcd3f564c468 4 cee5d974-2fa0-7058-b635-da7a1e9df466 5 6c04d6df-2784-7ea6-9190-bf11a409c3d1 6 3a4f6c95-64d5-3c56-98e0-d856bc3eef82 7 3a0c55a2-9395-4c92-9c76-bee0c499e39f 8 b01597d7-9616-3cb5-9bd8-b5199a8fa8e3 9 772cee7f-dab3-44a9-ae6c-f1dc0c2736c2 10 e9bb4824-479c-0d3e-ba73-55c4ec4db79d 11 189f9734-fa75-6cb3-8754-919ec18be4bb 12 728cd3b9-aa8e-4ac5-a8c1-8da430ec3d21 13 20c1edec-8814-831f-87b7-4928b7f7ba2a 14 ede848f8-3f9b-7625-bd4f-cdad323fb83f 15 c8021ffe-b240-7962-a012-ffc99b3ac9af 16 3c60877e-51db-2f9b-a9c0-e7c634c495d6 17 ec84fcc6-8234-41fb-949a-f3ba7bde4c9b 18 5b8b0231-aa1f-8bf4-9ff8-ee072472bce6 19 ee3f056d-ce5c-42e4-9161-18c797c87dbe 20 2639176e-d903-3546-be9f-9327a8174728 21 b627387f-e0b6-8a9d-852c-ff7457a9175a 22 cd886d90-ad84-2b1e-988a-0a89b8e46c02 23 ba18a02a-a71f-456b-88c8-8c3b359c00d5 24 26075716-8c99-2e70-a152-d870f751287d 25 24cf88b6-ab89-79fc-b971-9d732cef08fc 26 8724024e-16dd-1688-bab5-26f9fd621b54 27 ae9dbabe-cf5e-65ce-8670-78bf502d5e62 28 77f606c7-c8d0-4bcf-97e6-0b73fac0004a 29 681461a9-5b51-7d57-beac-60de71dbc487 30 fdbb3abf-ba0e-1285-a480-963858888dfd 31 3a986229-6d50-166e-9198-64854609f861 32 71de2a91-5380-0de6-bf2b-a10e7da8f9af 33 63c54a59-c8de-6a0c-b9e7-7c5aa8c6dbd8 34 5f982852-0937-15ef-a43e-19c7d95cec70 35 f2a08260-36f3-7543-b13b-9c5ebaff9e8e 36 0ed3ebe8-6b73-1a82-9797-0c73b4de2fed 37 38ff3c7b-8086-6bfb-aedc-84f1478691a7 38 d6d39352-656d-8d4b-94ed-3c6f36c0a876 39 f16aa9d2-c5b1-4e3f-84c7-539ecb1d914a 40 b416ce1e-d65c-848d-beb6-6940a1f07671 41 bc78e7f3-e98a-7297-addc-2039853db5b5 42 71d427bd-41db-4547-bb1d-aa436216e022 43 bba3b73d-312d-2fc9-ad19-0a71730e463c 44 aab01a05-c2d6-6347-ba7d-d1863a6d9f63 45 9c97d083-2bfc-236b-b085-88722576f8f6 46 9a56081b-000b-41a9-91c6-3beff458b7c1 47 c6448629-3ec5-8096-ae36-7970d3107e00 48 b3ec9dbd-f6c4-80c0-88c6-769adeaa7b5a 49 638807b4-e807-1825-9ebb-3fe82581afe5 50 d1acc73c-8157-1003-9fef-52d4688ce01b 51 a70201d7-10b9-69ab-9e2c-0dd597c2e2b7 52 ed757580-2552-00e8-a092-9629c5db68f1
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
5037734340648772484382427164711061716848742624881160. Exactly this sequence comes out ofnew Random(287).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 9 of Run 38 (seed 1,045,884,937):
new Random(1045884937), Next(8,64) per post. The RNG predicts N = 52; the post has N = 52 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51). - Conclusion. Filler. The content is fully explained by the two RNGs.