201210260055 123yd6
explained decrypted filler
3DES(name+title) ECB, 41 GUIDs, seed 41
From the post to its content
As posted (encrypted)
1FC4FF01F336FF15 B9B1C3BF5CDE8929 AFC19A660D73D9BC CFEB54BBDF66315E CC1EC95E24CEFB29 00EE1E79DD84024E 577B00B31C8DBF3F E4B7F7CFA6FFCA88 D208419DD7EAFDA8 233F5D042B1D6CEC C08D946864952D43 72D4E74D04BEC4E8 296DC9F2540F2DBE 35DE67BB417AB79D 26BCD5C67B4A0F23 593E3612A9B11A32 700E552C5C24900F AD52E44B8CDF0C44 1E48F089C31F5D6A A80CB88D33995F8E B81FB2C4AC19EB87 6BFF821296647A73 A3D317FBAC7BB79D 6C66ED05E4DB00F6 77F681E462E372FF 26128735C0FB35D3 F9115B36051777E7 8D6ADE009464A8FD 6034636400ACB049 C63C04F58FA04975 49EB294453FDA168 11336A8827DB585B D227B737C3BD8075 4E0AF207AD97DB80 95A8D488A24E3AAD 0856CE7494CD139D 5DD9981F506296F6 097BBB7C13A99352 4F2B34230321A801 C8E43EECFC49786C 49C509DA22FF48DE C43907542DD4C0BA FA7653710AED6A94 02B72E7B3671E76E F014087C199B764D D17249B1EB0BA869 826EA1DA159A71E0 057B91C920E9A644 27EA70CF050830FE 630864B35E2560A6 07353EC24B9ECEB8 D80524CAF70016C3 DF8B525394B03FD1 64D9B84CDB746E59 9AFAA99ADADD49DF 8F7EFBE98D5B1A9D 43990629643B3CCD EB529D0B2B1B40B3 CEB0DD14A50FBCDC EAE259FFA87E21ED F18098B06F8A3756 67CAEE2CA133C4E5 C3A655EF3FEACE98 CC9F55BC153D579D A57FB8FB7A8077CF 5F89AE9132B15FEF 535F8E1AFDADFE81 CA416655665749CC 1DF3EAEDBE5E5D1C 12D5F448A91B495E F013A0B7002D21BD 317DC9935EFB3C16 1410324163E19400 D883A7892AEDBC53 EF37B2837BC921CC D38A40048FD4A831 A203735B1600628A 9A0E848CE3697459 FA94EAC88008A1AE C96B7D368914A488 6039E072039D0C3A 6D5060AE77B9281A 967F3DF98DAA8606 DD6BAADE445A4821 094996F70726426D A497024CB65E7D7A A1A39E86DE8DA413 40AC6874D506F8E8 607B1208F0C4C3ED 246B149847A9F340 3CBDC47938A17A82 E359DFAF3CF919AC 5EBC78E594546721 8362CC195E453386 12EDA417C2F278B8 15397E2BFCD52B92 DBAD5DE41E8FC798 95B63F854C5ADF16 DA7A9370AC6684F7 1C25A8EC4BB4B348 5B7E391FCDC98EB2 0B28D276CE3B60C3 566670173DE6304C 18787EF89A946C52 C18721590666260A DA90A2441DC751ED 90F9DE3D72457650 0BDE00AFB304715A 9FA1C40F636D8AF4 ACE31DFD6FE05659 166B7801709E33ED 5309EEA151DB6A6C 9B8D595825066F7F 03AC2E44B014DFE5 2759DE1E4BA28E5E E1B91B592FCD2801 EB4C81C33507688A 03FD39EA5EED4B9B 0F1C88640F99709F 9E4C9A55A2D85FC1 C88BD1FAA7084C2C 8AF114210BFCCA84 4A2610AD7C3F8AE9 84EBBB7C5432B49A 6EC7BE4EA4357587 B1DF146FD9AFFE25 C79FD1BF29D29BA4 B333E0ED4FAE2672 59E1729744DFA8C4 174793DF7942CC72 549F1CAE9B1F3AEC 6B422A948E450FA8 D206B9BA748E55ED B14EA5F4674A8660 84D364611DA9E513 14EE047EEFAA0EF6 6D50B7B5F14DC991 587EA464FED1D2D8 9C2DCED2ACC64129 51CB3910607C94C3 39EC4F0F4FD491E9 01D8C43409082093 BD9677120F26DF1D D9FF1749F9FAB21E 91520B53A44CD63C 7D71EE775024E7EB 915B8B75DE5FB6F1 5D76C47808752263 1A85C955FE592102 1F51EEE0B7D98ECB D80576206990EC33 4E63227EF80499C4 5E6DE0248D7BC7C2 FB5533BAE7EB0C7C 53D85139AD7BC12A E2DC580B1F11F27D 772921196F59D062 A8DAFCD00C3B7647 089AB22D6D383E11 1FFE69E0F62A3E43 CDEA9F46745144CC A5112D12B99273DC A846A30A63EBECB2 593717BC9AC705EA 0C740E4BDDFA1580
- Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210260055(name+title). Key = MD5(password) =90d52ca31847ac1e775211d4146d3af5, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).
Decrypted: GUID list
1 5f3ec677-660d-1d2c-8405-c0efb6644304 2 ca2a5d24-54cf-794b-9f84-9decbfe7fe57 3 e6ad0216-6dc2-39b9-afb9-0da3705bcf33 4 e68c6ace-8e2f-2c4a-87bc-e1beb7a82e91 5 0abbddad-0cd0-6271-89a9-07d8a79704e5 6 ad726184-f4db-3e79-8a3d-a17fafef29c9 7 abbc5301-faaa-2223-8af2-64e324fb10f5 8 7b3329a3-c5cc-0ce5-94f9-466e850c676e 9 c0cc1c54-d656-059e-9a69-8bb92632bb21 10 0b6efecd-b859-324a-b40c-603fbc32c65e 11 021f642d-b039-463c-aa1d-61bbb5d1faa6 12 a063f853-0d18-40f9-84a4-241651bce234 13 71da2961-ef27-737e-99fb-19ab9c2789ba 14 8ddb4126-15d4-726a-9314-79b017a10b3c 15 9f3f2fa7-93f3-629a-829d-58886c4428ce 16 d5e47fce-b08c-52e6-8d4c-7d161ca9c96d 17 28f5cd6b-258c-020b-aa9e-838302493e92 18 47688a1e-1b7d-3373-ac93-6f8d2792ab8a 19 76768a84-c629-7a3f-90df-08be667393fd 20 62dd87d1-1871-1a09-82b5-cc1c1f091c2f 21 3c544550-3a3a-2c96-aff6-3effcd782955 22 ddd3b22a-4a4e-8175-a7ad-8fd69c8abbe4 23 f758713f-5dbd-8b9a-8ee0-5bc3d333e022 24 b7928d8a-1a0f-3d60-8b30-524b68fb64b4 25 8f7a93de-52e0-60db-a13f-b860690b388b 26 56149cc2-7fa4-801f-b9fb-2f559c7f7546 27 1f505f69-da18-1582-a3aa-556c99d8bb9b 28 06c40b52-71b5-0283-9d94-8c62bc46968d 29 e0cebc90-4a47-75de-85e9-3dde121ad3ed 30 7a5cf509-0aab-0e47-b2c8-553e71de9625 31 a87b571f-b2f2-2bc1-91f0-e5e7a6519100 32 1ce64901-37b2-2a64-922f-8ffcb0bb0263 33 271ef952-fb07-799e-ae00-7eb412e21fe3 34 8c01e41d-8c61-0704-8e64-2da87350cdeb 35 fb1b98ca-f0ea-8aa6-beed-aec993eeb5bd 36 5f4d4dec-3001-4633-8c3c-dcfe9f134fa4 37 8148d9e2-d044-8949-bbf4-1c3b04b63e2d 38 69bba54b-9a52-2af2-a90d-441cf87f03c0 39 ec03c6ed-e838-388a-9c0d-65fac0d74c6d 40 9d319dcc-08f1-2034-9da0-c51f6793c30b 41 2bb8759b-2f0f-8ea5-a2bf-b517a12e7910
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
17326320034477650371288368107022708482328. Exactly this sequence comes out ofnew Random(41).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 41 of Run 38 (seed 1,045,884,937):
new Random(1045884937), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51). - Conclusion. Filler. The content is fully explained by the two RNGs.