201210260125 123zr5
explained decrypted filler
3DES(name+title) ECB, 41 GUIDs, seed 272
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210260125(name+title). Key = MD5(password) =64dd45530f2bf86222331962237b39ee, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).
Decrypted: GUID list
1 f10346b0-6649-7f9d-8262-662c95c0b4c9 2 5e41526b-62db-567c-91cf-382d08063023 3 15de5146-de18-8cbe-8405-21c5d878e6af 4 c539eded-55dd-56ae-bde7-ffb08c0c1f77 5 59d13d97-efa1-033a-8aa7-940c60cf580b 6 dd04ea42-db34-2328-9105-5d2b484dd840 7 c95816b1-958b-6acd-8c14-239a769347c0 8 62bac48d-5f41-8d6f-856e-6af703f5112f 9 8f4cd968-d472-5bbe-9625-4469165e7e32 10 20df968d-dc97-589d-a752-32c64402fde5 11 9a5a42e5-2020-6170-8b56-52409af777cf 12 466d3b6b-14ac-73e1-a89c-7c76929f9d14 13 26b8a5fb-4043-5def-b167-735de7351dd2 14 27322819-f5c1-8d8d-a45f-a5721ddbc221 15 a4eda37c-dbb8-31d5-beb9-1485eb3ca54a 16 2df0b991-d0df-8490-9184-dcc9671c2e62 17 dbc11c9b-2cb8-1c30-b3d8-f079d62b4247 18 1b07e93d-a7df-5bc6-9b3c-7b6accbb3052 19 377ccbe6-5c79-0142-9380-132168cb4c9e 20 6c6a8292-a19e-5646-ae42-3a0272ecc410 21 f83a4cb1-4bcf-8e85-9c34-1ecdbeaded7e 22 361706ec-1ed9-5787-8c98-de5f2ae2a2d7 23 da82c7ac-9eba-8746-8de7-2aaad8dfce79 24 1300b314-6508-05be-b5f8-d87aef3440a8 25 750e504b-32fe-3aca-8aa5-257f474eaf78 26 e2e3e885-0a10-495f-9fd7-4106740be5c6 27 fba48364-092c-7c08-9bd3-3d94cf9cf530 28 158e8fd5-7c3a-18f6-9038-d5253f7f0636 29 05286525-d7da-6fbd-926b-4aac430fac65 30 b444904b-419c-13c3-a697-a4ac23d78039 31 44f45662-fef1-5d00-ace2-0683b6b4ce51 32 46542ac5-d919-08e4-924f-c45240c6c879 33 b9f71986-5431-65f0-8998-c52cd3e0e7a9 34 117ecfbe-d15e-79cc-af88-97b89e7782d6 35 819d0693-c8c1-549e-a1c0-1dab592c5000 36 3a9cf33a-02b2-493c-927a-5f68f8549a09 37 0d70ed3a-ab68-3727-bd1a-0fbea209f077 38 801d7d6b-a821-6e6d-af2f-a3176f7264d4 39 8e94892d-31b5-8745-9c10-3ac0a4d1884d 40 c0a91be6-7dcb-3741-aaef-435e49d6052e 41 cac3ec18-e1df-20f8-9338-7a642219b90b
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
75850268556758381505858034716150675436832. Exactly this sequence comes out ofnew Random(272).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 56 of Run 38 (seed 1,045,884,937):
new Random(1045884937), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51). - Conclusion. Filler. The content is fully explained by the two RNGs.