201210260023 123wqh
explained decrypted filler
3DES(name+title) ECB, 58 GUIDs, seed 575
From the post to its content
As posted (encrypted)
F72899313C65D6D1 1FC1A71534F207DE DC01916EF515D80F 96A69C3909ADCE62 FE7056AF9A5563E5 4C8CD580057C442B 833F4378B5846762 14EB6BA12445927D D6033B9A6252A638 56AC9C9C34A3C6ED B5ED0D3C5342ECC5 F085284F1C55AA02 2D125C8040ECC87C FC1E619497184087 04593FC6CC14982D 1BAE4087AEC78EDB 973C2CFBB570E93B 5AB6A0FA19A83E59 9D6E3F5F13747716 FF1CC537ED4022F0 0525B58B391E63FC 1B8DDF2405A54C7B 39CAA6571CBD96AF 03772883774A5A10 E4211478D97813AC 98F29A6B3A74C9EB F34885C942C6E76E 6DA576E7B05AA84C 4F0EDD5FE9DF9E80 F8E7578CBDE50497 3DE989C1D8662A4F 4C83D493919367CB 1141113544B6FBA0 DBB9EB4A601F5FA1 EB6A80B2B47BA4AC F62DF4B03CF5EC61 89606F607EE79317 7D64B00A802F43F7 AD8190D4B1124738 04AF1DABFE83F41B F75A7EDEA614E311 100BD11446ECC165 75EF3C16F98207F1 FEE0FC2A619C1511 8ED8A80EA76FC633 9B152BEB2FD60E6C EF315326490F4719 5A2B9D4D0E988E56 7198045939F1EA95 6FCF9EFA72423846 EC024C2E7BC28F65 9AB326EA2EB7B289 1C8F091A4E3F5EDD 73F00DCF7D43A2CA CB3BD224B84A9CE3 CF6690FA84E6298B 3CC3F7CD818EE42D 55A361CE339127EC 02CCABFE2C4C95F3 0CC735F363840F6C 27C83867FE343E28 8801E82374DDE1AB 72FEFB191394C0DC C536139C6F698444 E564BBE691877372 398712ADD99B5260 865B09F5AC1A0549 07F0BDB6B3DB1EF6 9E7D2BBE7683B5E9 7F2CC06599DCC826 63131EB42AEE5AF7 0889147C31E93ED9 7C8961715000DD5D 41F96A8A587D8B51 A25A8D0993E3A429 45DF020388D3780A C5616FF5F4DE9B10 733FC5CE6FED080E 2E895BEF2501F0B5 8D8607FCE2C4CA68 FB5996729BB383FE B61806B078BBEC55 10C1FF80924AB796 4E3C484D6E0DC1E4 1DF402E213ADC96E BB4B38B86C4ADEEE 47E0A6A4C7BC12C9 8BFE2F5E06BC7DE7 5A6BB609C69E8D6D E4B0828CA991727B C2BC5DEE42B00BC6 7C5A703E1950D6A5 8D44B5C23476D53E 6E33BE6032F16DED F9CD6A4FB085867E C3D623AC3E8D9020 9E74AE9F95E372E1 E4E6CE7D49C820EE 9E49A3A01E264119 CA6AB850789D3F35 A9F9D2D6C00C5FEF 94F319C32AE86772 B724B8ABF959CE33 A14FD74C5B8F8E35 1F27A06FB7F8D52D B91C2C72F9B05CF1 F11391CD6348A720 FF8C8A8A41463C61 4CCA654F70E1E642 0747EE7D5515B03E 6E253A80A2F4E96C 4E0AD8D664C99A1C BE635421F590BFD8 518AD01CDA869F31 495A7E2A8005CE9F 334F32D8E2A75535 79EEFF24AF578374 605845BDEB2AB721 C9F3E5A43F3B5BA2 D21C64F0BB8D6317 506D92897C439D47 FEA746FC3070B65A 1109C4AFA135CD34 E03C53FEB728C27A 0CD7273B270A20CD A0D4BC32D61E4643 5CA2A4961B20BD11 793687F4C1310DCD 9F147312F4EB4786 31A70C0FCAA036C5 E320198835AD424B 003AE46848970688 3786B0DF55DA91D4 2CF3580C8F855915 2964B20E4EA338A3 3A5EBB92417A65F2 BA7057966422BF0D 4EA33460E795C148 5A1C90BAE2921FA1 BE3DD3205FDDCF46 72C1E8FA0BE15B0A FF5AD34F6E2FEBFF 91CFEC0D9F90B177 C4CCFE681A421E76 8495D960BF1A899A 1FBB56C1307250EA BB112F26596EC43B 4604174FC4FBBBC0 0F7EA76575A01CF5 60A282DB1065E110 D2CAA60A508DC63F 38ED75AF61AFB26D E7CACB3FDF4F751B ED84666BCAFFC265 511334A70F138A46 1CBEC2837BFBE7A0 F3219A5BE54CD75D D2B169A1F5F9E94A 651E3D7B45948EBC 87DCFD5D01431C24 FC1E3002C9B51A84 438FE2D16E7D8BC9 5787E972756D0C32 DC2CDEF69109519E 58D283598839B5D7 51764E3095DD5338 176C853B05872324 7496EE8EE33E3557 1E8F258C7C2089F4 F866FA7E4921D41A 787C1F4AC63F93DA B7513031AD64CF91 44651A4F5660C590 278817281578F53F 6C6F5F174B133424 1D7DAAB36D08E04F 7902C059A959214F 3F515EF2B0ECE831 E1F34836BCB633B7 138B8D6C856A04C0 2BB24BBC28857176 3DD7D7F237BC8E34 C0EF6D3C43AD95B8 25582D00537E4020 2ECA069572B7296F 3ADA635D188C285D 7885E7967B9C0E86 CBB661BF12F1D707 1BB0FB6829762B58 6B30B36FE4A96905 60AD3E3A18E93342 AAF5285E7D197500 F6FF899A1A60C508 4C89D86FCE715FA4 EACC91B5F0600ADE E02CC29F541975C7 0A50998E9ED76F00 113ABB5A44C3DC91 9A5B2F767B79E398 70987E2740144D60 45AE89B128F1CFE8 923F25DB2B7F6D27 22A89A3F0C957170 731471639DD52C95 B0CCABF2617F4F60 B3B1C0CE7257A2D7 B589E8497BBE1F27 EE028BDDA7D85CA8 C641C45492A8B25E 9520B49B24015468 9766C37D5D6CCAB5 5843E7A7A90FE21F 3B8BAD5349F7979C 63C3370A72EA39CA 0F0BC9E975F68E33 7BACD07D88DE6A33 88E946CA220DBD23 2D00B155FFF8FB92 83D04B8F3F050687 173B2EDB46224FBF 52585823825F2870 36DD9646833CFCDF C868ED8AC5428569 527BF2405EFC837E 6849ED1E1A8D02AF 66C40AF405A65A06 A12BEDACC0F54F99 A101E244DF7E6ABF FE3527E66AB60A9C 46C85B560255F452 9AED8D980EBB8A0C CD9B646E2481B859 9601F6FE256E4AFB
- Read the ciphertext. Strip whitespace: 3,728 hex characters = 1,864 bytes = 233 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210260023(name+title). Key = MD5(password) =f6abb8a297cc8e69b4f4abc0a4b79b4d, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 58 GUIDs as hex (shown below).
Decrypted: GUID list
1 f67b3d42-4fcd-1415-9fbf-33fac7a674a7 2 e20d9481-b3c3-4597-a55f-fb6d926c17cd 3 73567500-29b0-60c3-afc5-ba557354fe1d 4 fad8eec0-bd5c-2a5c-b86f-c944eeb565f9 5 f585d898-1464-7a88-affd-2cd4e98ccf20 6 ebd87195-9ef0-0f65-a37a-afb18745887f 7 86449128-ba5b-4250-848b-8e1c7f103e4e 8 58db0453-66a9-89c4-a721-75842a2ec947 9 6cb9fbd7-81ff-145f-908c-863eecf28d26 10 542fdb43-31c6-2090-bde1-9072664a9b86 11 84fd07aa-48aa-8d41-a125-1140a76fe8f1 12 95fb78c6-650f-3ef9-835c-a3a674be3e11 13 881ce21e-d3ca-8683-83e0-c8968c30e98d 14 bde44567-2e1c-5011-9733-db883b11fbb7 15 7a674594-45cf-409a-9a78-155525767617 16 98ae9d1d-cfe4-1851-9d50-ded0daeef52f 17 88ed4401-39db-5cd6-b470-1d720bdc05e8 18 4eca0951-135c-4a53-9d8c-b2d90e26817a 19 f9afdbbf-70a7-2aab-b7c8-707c109f08cf 20 3a6f797d-729a-8433-b5d1-24f74b4b4102 21 d90d6965-d762-1b8a-9b94-1b80bfd0066e 22 704f42ea-32d7-8fbb-8a0c-4473f6043040 23 2023c565-524f-1164-a841-afc348b2d6ea 24 62ad9db3-6bf7-85aa-9245-03ffe03fb222 25 1ce84e43-1b98-0124-8a8f-0461192d769f 26 c99b1aaf-9670-3731-b0f3-4bd6cbe73de9 27 e2b100df-7730-26ee-a39a-de0778e72027 28 53b7cedb-0d65-8fa3-842c-a9233d62ff87 29 38748912-0f61-3db1-af70-85dfdf5721b0 30 442a79b3-0c13-1c17-ac09-e4ec81adbb46 31 907a79ac-6a44-44f2-8eaa-4b8f903866ca 32 fda818e5-7525-883a-990d-bcd5b90d56bb 33 f5499e70-3daa-410b-bdc4-95112369cdd2 34 3a755219-104e-3424-b0e3-0ca0886bca34 35 9489e72b-174c-3021-9186-5c66ae75f1f3 36 e08150ce-968c-6b84-9f18-8a78c4b8b248 37 7e979d96-5eca-203a-9ad5-860eaa6eb7c4 38 d1eba40a-ec95-2324-84f2-39371d515d9b 39 a11a546d-6663-7c48-b0c0-2f49e650c5b3 40 f99c1f16-c8f4-3809-9393-91bc9a3154c3 41 bc34139e-b11a-88d5-93a4-2f99fd435b91 42 11666d0f-f523-406d-9fde-b725aead038a 43 f3b7486a-ad90-0031-8e6f-9b641de893b7 44 1c23c6b7-c64c-3913-a010-bd4a578c59ea 45 a3817192-6a53-03da-9f98-446e07f93a0e 46 686e3c07-b322-14ff-b1a1-347c52ddede1 47 2ebcc0e5-4313-80b7-ad27-767ecb8ecf6b 48 5ac1b017-ff27-4662-a3dc-5147f15c0ed3 49 3288834b-5c54-25e9-b110-5c73e5c2a1f6 50 7108901d-5a32-143e-8964-f8a00f9aafb6 51 bcfe5668-a866-1eb0-80b8-f7bfef884eef 52 e135a37a-2ce6-79d0-9a30-46dcc445ba9e 53 7498706f-0f9f-4a50-90bd-80ee7048bdb8 54 2256f97f-2a82-5cd3-90ba-d9eb39dff708 55 dd55e224-4eee-2e9c-b95e-ba557ebf6b2d 56 91e06142-6dce-17f2-b59c-1e548b764d4a 57 520311ef-b3da-327e-aca4-0ee4fe07852c 58 a5b5b89c-b1d4-7d93-bdfe-1f881592ef41
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
1462704812838541542818180328314843362273840301842117452137. Exactly this sequence comes out ofnew Random(575).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 25 of Run 38 (seed 1,045,884,937):
new Random(1045884937), Next(8,64) per post. The RNG predicts N = 58; the post has N = 58 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51). - Conclusion. Filler. The content is fully explained by the two RNGs.