201211061359 12qs47
explained decrypted filler
seed 54
From the post to its content
As posted (encrypted)
28D1E42E66732EC7 0DDAD045134D33D7 8D29A7A0B3170A22 95C67E7957E3FA7B FE9892F80E278E69 95ADF937FD2C89F4 F77E1BEC156067CC A26804D8C64B6DE6 B9292E6F967E9AAD 794733363A95C22A F22C50A88598F655 2C1BA1140961C987 39D02D72ED840815 B32A08A8CBC4CEE5 02EB3C53019ACF03 A8DFCD75DF45E34B 3492C5612E77DA7F 7887900F9A08AF4C D67CC1A07CAD82F8 A52435FC3A228733 876D1AB9CE90B984 2017D184ADEF5252 6536078A08EB4C0F 3F396457D06EC807 16D03C43F16C1E4B DE3897757E52450C 03D20201467F6B2B 7F417A42F065B0FD BEFBB7E3CF3B1FA2 C40487606A78E978 725E2133D8A64963 3D89D1B3AE59D272 758ED3C3CAF7C4EE 37F30580229C3923 C39553C35C0BA8FD 096ED7367F9F0FDA 57915E7B00969B7D 7FED1F5B5B3D42FA 1538145D4F15B5E8 8BE4EBEB2FFF9154 B31363647AC653C5 0D765704DFE1E45D 9A930E5027B76438 19DD0FFC878BAE00 CB0C9DC9F28282E3 D2366F81824E9CCB 4CAE424E9A9008DF BC5E578B70C5A505 67E903BAE5DE2E85 55BEDF874E9A43D9 F26904B3CF57E76D 02ECEA8CBB5008A9 C230B07273AF97B7 E5B9E55576806FD7 85F308D82CAA37FC AB83C4682F30BB04 CA02E2D4DD77DB0C 258E334CE030AF8E 46A41BAB8BBDA66F 4E8B7A26D1F70B7A 3BD6C549BC4FD1D6 4DBED2EF24245B0A 4C3FEEBA696642C4 61D0430E8BE1C081 1534989E7B197140 0B632C1164BCA7A8 D49264B59C3F1A09 CFBB7AC243FEFAC7 AB358DA245671782 7BE309DE53242B40 0A89549183131402 5111AD1B236711B0 9BDF8FA475D4165A 5AD35E30A919A9A2 B084ABFDE57A6770 6342FD87B3BEB501 D0433677D98C0C0E 557ACC0C72A64E82 0E3383F96499D70E 07A11CC0DED374B7 20EE35CEBF8E147E B3BE2F116B1D9ABC 715F90FA398113D4 D58C54BBC1D012B7 2DC400025E0D74F1 D09BF0C951C6C568 0A6856EC499559FE AC2C2EE1993CE5DF 09BD1741F134F4BD 7BB66E871554B8A9 7288761069938AEF 4119E9C37F0F7394 2534BC315D93D5C2 51761C6C69FE1743 DF6F4BD871E0D6B1 F405C9944CB1F5E6 BD722B678FF310C3 EA88E2F76484486A E7831A24F24B4A47 E9BFFBBFEF8378B0 D76702F2137F6AE8 1A8BA260B2FAC8FE FEB9D7B9D72A09A0 58D22CBF971C740B 5815DC56F0C1D5B8 2A486DBC4669EA22 7A51D7DDEEA9886A 3973D9D338B6E4AB D7CFF8F80455887A EE238E840D599616 CA2C8263F06EF65D D236FACC4628B616 E59E4D1C1BEC357E 985D679EC2676C97 966913E338ECFB53 885232BCDB09C718 88594265730861FD CED71120A5563AD4 B633783B0535A70E 6A7F05E4E1478DD7 938EB85B64063553 DB9B2D92CB0C558C 01EAD8EC0BB8DD2E BDC18AEA3EC3605C BC72DF1494AE43D7 7FE8A81A308F4ED2 42C7B79A43E3E08B DF81791216051B9D EC11A0D08F7873C3 CE155C2F380C81A6 B4D77C64B27C5E54 96C73789230C7B37 40E47BBFA73B8E99 1D7A067C5FC41357 97A4387171FE6943 2CBE7378E80B80F2 ED06BEA76D8AF444 745D4ECE26C12D8F 55E43189430775F6 F641978DE05A8546 AB0485FFD2617266 865C6B0306406D38 AB0B1FE4A1F6EA30 6FE5B3FD9A19C209 5F0CE6BBBCC5A108 2762FEDDDC1F6401 A33012FF558FC82F 193957A9B0B95E53 351B9403E0F22335 B89D734AEBCF8151 554819C88FFCD497 F9B350D7698856C4 A7AB245A1987130F 8D767DA23BFC4DF9 649FAA0505895AD8 26BD5B18BF751383 3E400D71B215D2B8 05FC7A8C33A6C214 688F406815BCC44C A2BC02D0B7DF0F75 403002951DC63B84 864E04A6F7FFF2A4 F288EBB8D5BDE3BE D16B2C62E514C18D 10C1AEA6DA101517 88B710003B9E07A6 11EEC2F025E1059F 4992D806BD1C15D2 48084F00C713EE69 097D6433BE0971D9 223B80B3BC3196C1 F38BDF3579AF7EB6 68336D36DF6847D7 9CA7E5369A27C344 C691B6F3A53CA5FB BF2679AB6B1FC060 B37E350AD7D78FEC 75BCFF19C9BB8D62 FD3187E1EFE767D6 0E7029D1011723F9 D6FCC2250545B95F 8E395459F0E97FC2 CB13698C6F6F1573 0BC54E5902130C66 38D54BD7FDDA1BFA 28F63393CFAEB83A A55C02866636C827 DD79718BD211F7D0 52AAD23D48986D3B
- Read the ciphertext. Strip whitespace: 3,024 hex characters = 1,512 bytes = 189 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201211061359(name+title). Key = MD5(password) =e5150b25ec5ee55052fd4820bc3546b6, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 47 GUIDs as hex (shown below).
Decrypted: GUID list
1 37fcb238-1d97-85a2-9269-5baad084e3b0 2 b07eaea9-48e2-5cb2-9662-f3054884d95a 3 2ad5eeac-d0f0-414b-9517-7037cdd7ac9c 4 0f9fab26-3453-0d30-a9d0-eec394c1489e 5 536f72e0-725c-5c0e-9d24-c5e8d06381ec 6 85843a9c-634a-63a8-b6ff-2375d4cc1035 7 79843c21-e37d-02d5-b0c5-4a265f85f687 8 7024e590-9615-43ac-ade3-4fcb302974ec 9 6dca8837-c9e5-5681-81f8-ee223c7be179 10 ea32c98e-7e6f-1aa3-982f-ba07be9ac05a 11 2e633b14-96a3-0b19-a245-8cd63ca28aa7 12 bd4141f6-bb53-5673-998b-a5156fcb7563 13 0ed5ea60-f42a-6ed7-98cf-54deb40b5dd5 14 24a54dd4-f6d0-58d6-b9d3-0245fd3f69d6 15 ae40c17a-f43b-75a3-8b93-b1b1061afa27 16 b6d313a6-9ef8-6447-8a89-c73f16d8f19c 17 8195e016-c597-5767-bab8-b6aeaa4cde43 18 ddd6c9cb-53e5-417b-a000-ce6e844a72ba 19 c15e947f-240f-1993-96b9-38879016ba9b 20 2f21af20-9959-2754-b6c1-0f2b04fa2d92 21 c5634171-f180-89cb-b897-9c6a3646d665 22 4aaf0be8-259a-0290-8fe1-f8261c1e8132 23 e9ce6722-8218-1a1b-997a-4d0f3bc7e1ea 24 8d7451ff-be13-8013-b8c0-d32a1d46f624 25 915e2f5c-7d24-8287-a573-990b35f9d26a 26 1e322168-759c-216e-adb1-5caebcda2328 27 7c7d3e14-9ed7-3361-9eb8-cc27911dd377 28 26ecfe16-3615-1b5a-8802-a36687e7a837 29 7c5bf31e-f76c-4f3b-9c9b-99e33910466d 30 1ba43dfc-4cb6-5047-b56e-e4b34f4f6246 31 4c68948a-860b-174a-8c0e-567bd9bc458b 32 cdfdbc80-77b1-6e2c-b299-7c3178b9b4d3 33 5a2826a5-7086-083e-8580-7a21f8acdc02 34 7df9616b-7ac2-3b47-a68a-7a64689adbac 35 fc9c10c6-b34a-45fb-95ef-1a4846fd75c5 36 e46bdf11-bfee-09d9-b6a8-ff23014d4e82 37 bd83f4eb-6b76-696b-a662-7c528d4cfd85 38 63914a17-0647-1ffd-a664-42e3e3dbf432 39 3864c29a-3820-54ae-9ac8-32c2874791e5 40 e5f2d63c-9fd8-5f3f-aa9c-5e1e43931e7c 41 922c8d30-4690-8b43-83fd-5f9221713caf 42 a4d469a6-a730-6c54-abf0-f77336d10f9a 43 0efb8adc-517c-020d-a30c-795caa5a0abc 44 c290f62b-85ef-3448-9568-ed04129764e8 45 6c3adc1c-8837-31a4-b5e0-e9bf571502d1 46 67b0cda7-9239-35a9-bfbc-8602cf57b127 47 78f16ec9-fc88-605c-a94f-b9c1ef212026
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
85405604510565765412801882314516034061558603336. Exactly this sequence comes out ofnew Random(54).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 75 of Run 38 (seed 1,045,884,937):
new Random(1045884937), Next(8,64) per post. The RNG predicts N = 47; the post has N = 47 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51). - Conclusion. Filler. The content is fully explained by the two RNGs.