201211031459 12kpmj
explained decrypted filler
seed 994
From the post to its content
As posted (encrypted)
024ED6EA8C993EB3 40F9E5134B2AEA47 EC6C7719A53D3666 25188D90ED26A3A7 2AD0424C58B4F79C 968E3D0C5E0AEB80 C519F66E9DFDCA1F 0E14AC9119BD87CF 78CBF9C0077F4D46 9EF4C1477CF070C1 DCCA728587917BA6 92C8AC66991CC57B AB94368E5EC12B07 1FBED1A251735494 5D0BDD01CADFA8DF C25EE722590A1A60 F273ACC3EE1AEAA7 CEF07B9EB60504C8 9F093CB8678F8301 D59746C1025E1167 33387C30E67E39E4 6367535E83ED4624 33B2B76FB326AAA7 1A9E6D43C3F0AA64 F9C6F1F94B9EC978 BACA8D3EBB499942 3775C8EF2F56C6D9 8A0722EFE63DA8AA 7E935CD9A5C36635 1059F614334A81D0 35AE567F8A8A8BDF FB66D13C95860D38 D8C3855D1CD8B53A 81F4B7230648A4AC 7A8754C974623E78 D89CC41F1EA13350 CDE35158EBF135C6 2159B5E35C6C0445 E34AA0B809A5C1C9 172F6860E66E88DE 487605E51F8055EB C5E415ED81A6948A 8CA3E511DCEE0B76 BEBB94C0D9D434E9 67BA4D192D62F07C 913468084A2B09BA 4D3AAB97279D78B9 F8AD85F5F7F57D9A 172F48A5BC28A920 659A805E10E75760 0F78DEF473489635 0916DF17EE3FDA4D 10C4BA4DA528444D BC1A9E020C478CBC 836A30E798DF5FC9 7E9092E5EAB448BD 238AE4544C35CB09 C52C873484CFE99F F32A54701FF5C598 A68BD094270A4367 4CD7C52AB6244081 94A4329A11C0B729 B13CA8D05BDE4673 2FDB5148E17F6C85 AE4A9AC0979E5BBB 2F975A544DA11624 F1C6BF15A7B66047 BDE73FDF3A30B411 2D548552C05B3127 554D0CD483D36FAA C4BA68AD2C9926B3 B8BB7DFCC6788446 7549714D1D462A4E 12E46D1CD2D0A97F 8E962735C86699E3 C8158B77168E97D9 C9AE4D9FA80E85DF 9C739A637701F7CE C52A1E3C3DFA9F67 4E48C44B460012C7 F7B21EFE28CAF097 6075DFDDD5137BDD 0119328649832AE6 F9C805E8A4D054E7 C60B36C8118BE63D 8B55C09CFE3ED181 C3E72D4DD44B4A89 755259A207B2EFDB B18693F554E0BF29 31B13BD13C067348 C574D43110E820BE DB8D8D9324108A6D 717FC7D60BCF3420 17E87AEA9E74F125 0ECCA3AEB13FAD7E 8735D5C819484669 37EF760FF36F3ABC 97DCA9043B4F00FD 049601F6AB6C1520 729A45F781471E74 8F4A41CFDB954510 F7014E2171B1EFD9 2AFC5540A5A6DF7A 16F1C087DD8A4037 B828AAD914B81D84 62ABE7B44C853D49 39B253AF59F18E74 1A791D083EC92467 301793C576F2C88B B753ECCA9751C2BD 69A1355E253837E5 02EB168CB7BC87B9 841827F4B3F704DF D9DB0641786D8D3B 3D23658A38E4C2A0 FC604A3D65DA2FE8 D930C9FEB8BE9ECE B134C2CED7723F28 D5F557C152A4DC7C 15C0E2F18DFBEF0C F02003730815F0A6 C380E4DEB23BA43D 914C6EA03C8D657B 45FE28C549067AB8 0707161514553416 09D3689AAB72C41A 3E8FA683C498A2D8 D797F2CDCD624DC1 829CDBA3F2C46A65 F3DA835E816702D7 D09530E98D7A1EF2 281B8E444F2568FC CFD0B4049314EDF7 8D251F981116C1E1 137C9C6B2824FCDC CD8ED16138786F7F 629DD0528A6F974A 87B96E38A8134940 83DA05CF098C0FFA 2C4FB8CD40CAEB26 D1E1A23F06BFC9FF FE4755F14175BA62 750F1110F1137DF4 DEFB097A08937B7A 17C895287671569D 7B92260F4DB8367E B2F9ACC295F9FDE4 81AA247F69F9B4E0 E94706D48221577E 4B290767DD49909E B3726F49FC9612AE 15668F8FEC971C9B 2790A3933BCA687E C482036096968617 F4F127067916BEA6 7974593AAC2FC4A8 2A9FAD47411CDBFB FF041B0EA3A8E25D 7A2EF154791B3AA4 42B352F02C5E7533 D352A3849479A87F A7D6D8FFC66E0FCC 5B3BE8FCEC25E682 CF71C308A065F847 3C14B6AF502B60FD E32D87187B59139B F8B8F52830FA09A7 446CE187A873B9AD 8DA76B5768DBBE2B 18273864B7869BD8 84CDAE2A30EE334B 503031FB77D16447 E72EA9322FB699A6 0C5B4C475BD370FE ECCFBBBFDC382127 551C77BC64C32E45 173F9B5B2A0DB341 0078A221C609356E 4BF589A5AE94B73F E6491ECA6A302A9E E0A60FE0D050C818 0BA131FB9BFC6527 6F39D65AEDE4E882 A0A617D6F6CE319F 838AEA368A611693 328192E7B47AA1B8 77D0C8243DA511DB 3255977BE8A9E561 3C34A6E7693E3BA2 74C0B17473240B74 38BE5AE7EA108372 20A1A4DAF598E25F 7318ED2D42DDEA98 888909B6B2C9BFF6 A76D54092DA35FD1 F62947AC7A4FFDE5 1126C3E3D262CFB2 03C0608FB035CA06 462BB183E25304E5 A32913E233F467B5 E26D1F664A39B6E8
- Read the ciphertext. Strip whitespace: 3,216 hex characters = 1,608 bytes = 201 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201211031459(name+title). Key = MD5(password) =5bb0851f2f244b57a7b273673d0ba3ed, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 50 GUIDs as hex (shown below).
Decrypted: GUID list
1 8499eaa4-8111-0034-a1b8-5e1d6d276497 2 f77cefde-e0d2-44a3-a9f8-05e8503c02fd 3 444f31ce-74e4-5242-9f29-08fa9c588c1c 4 9125fa2f-0b63-61c3-ab4c-8a58a83d3fce 5 f19bceea-63f5-859c-a9b3-6018589f63f9 6 8c73e675-7d46-1b35-b785-be4ff95b5da9 7 15d1ce5f-44fa-26e2-a90b-e274fb876717 8 c7bfaa2c-eb5f-19d8-a764-638a2f1f27c8 9 15cf66c0-d41a-8e3e-aacb-aec658727766 10 07a6bcbd-c6d2-7413-b00f-2760133e366b 11 9b69aeaa-0342-5b8f-9b79-a058c9fbb026 12 b76f3c7c-a2c6-493b-90e3-a362ad183e7a 13 af4c23a7-8159-8cfd-b05f-62904183d1a4 14 07d885c3-fd89-5472-9371-3c0bf9f18e21 15 0a6960c7-f24d-607e-ba3f-0ab722df4402 16 2c16cc37-bdf6-76b0-943b-14b4509d8d8e 17 e41cc924-4caf-6c37-8c59-325f2b3e3038 18 f6b1d19b-5361-2505-8700-920fcc704edd 19 3fe21356-f4fd-5023-95c9-3aea23ec2601 20 5000af7b-e05b-1d6b-8f97-1181703fc99c 21 3087bc63-c926-8084-8aed-20200e63e292 22 c6e63400-65f3-6a81-9812-7b1de5de5a81 23 3418daf4-6c1f-88b0-942a-e0b6c5060772 24 b7173136-09bf-2f0e-9523-aae5e63bce98 25 6089a1f3-84d1-12d6-ba74-5022b3702662 26 0bd2efd9-3f52-7e85-b938-243dd7362fbc 27 2c2d07ab-ae73-43fd-9114-3ad29d80b3b1 28 ca186bfb-02d0-57eb-a3aa-1b7a909cb3cf 29 b4056127-7fbb-00c7-805e-ffd42633a61c 30 b27ebf8b-a09e-57b6-9139-e3b52f9f5ee4 31 90bb8da8-15f7-146d-b319-8dcf4752682b 32 7d83734f-c3af-2a48-9c87-bba1b6454217 33 97bbf1eb-4bc0-0c2d-bea2-adf74f6ea32d 34 90df07ca-9399-8685-bb94-dce28f7ec89b 35 6da2ec2f-5dcd-62c2-bb64-4291b28c8b00 36 2d558dc2-adc1-7eed-b229-22372dcc57b9 37 9617d66a-e1cd-3d8e-ad24-4ced7934645b 38 a9ae9338-6572-7911-837c-0a3aa7968bec 39 4459355d-3d62-5339-9ebd-fc2c901a752d 40 de1ec9e5-9fee-309c-94ea-da2f2c6e491f 41 8a247803-a3fa-5703-9de6-3c543c203ba3 42 2a9b0e62-5a32-77b9-962a-38854ab704bf 43 58b05b2e-a0f7-7e64-8f3a-84bfe08ed565 44 698670c8-31d0-6eaa-bd56-c36249009a03 45 cf0825cb-c32f-8cbb-8d22-d9ab45f455b8 46 7ca9638e-8fa2-12fb-bd22-391c4319408d 47 feacc5b7-0b58-4bd7-874e-55b948b2d044 48 bd7c7089-bb58-007d-90b5-f5794baecd8e 49 cd018121-55fe-26bb-bac1-58306d1171f2 50 4e642f61-b8fb-5266-b327-e25f4ab9baec
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
04568121875485676251868217450512086737535776814025. Exactly this sequence comes out ofnew Random(994).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 72 of Run 38 (seed 1,045,884,937):
new Random(1045884937), Next(8,64) per post. The RNG predicts N = 50; the post has N = 50 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51). - Conclusion. Filler. The content is fully explained by the two RNGs.