201212281700 15ldbg
explained decrypted filler
seed 320
From the post to its content
As posted (encrypted)
5AEBC9FD7C1835DD 6CF72F12A71BE1CD 99F9CA3A03C91EB4 769A4F1F083FA1E9 3227307187961186 9A4EA508E9C53D9C BC445755021C3A56 405829C60D76B66C E23B5DC38AA1F9D4 89140F052B336C5B 5734ED1DF44FFDBC C2B68052B770209B FC7D206592CC893E ED4558370C9585D2 CEEBDABD1BC3D3A4 B7079576905BF35C 8AE887E24F3560E2 49691E5446C715E4 C204E8BBA11E624B 270BA216EBC0366F E39E1BA3FB1DC525 63173680297D2DCA 0F8D24102C80D6F1 63492D8430ABA4A6 602CA78C1F64AA91 352AD54680032A58 AB9CA149BD35C183 FADD99ABEAB93ED8 F4A9DC92F864EF06 A7580FE6BC8DC536 3756989AAF2D8A35 760F82492923F88E 8A97AD2FF46C471B C440A9CF780F2732 66B0DA6E62565B97 EF376269453A46A8 AD23B337420565DC 1DD53BBA88308ECA 42BC169FB3976C78 EEC56E025566E476 EA9881B827225081 95E25E14D6E72818 A69E21AEBF5BF132 A31DC831803CFF76 B01F0D2D62F1B2AB E7C67CAED2C38897 C13ED7DA69369135 C6D574F9AB2E9480 105BAC8CAA74C9F1 A0115EBEA3A3438D 495C058B5C671324 10B92C97DD5DEE26 E02FA054ED416D15 CBFAC095FCEC7A53 A3180B2963354D3E 4E68DDF9254C0392 7F31DA864A88DC54 9944F0DDC17202C5 70F0BD436A15E430 3EE438438A48F086 072C3A9F5990C2B4 4B6117DB06BC1F73 B6E7E0261D3097E2 3E1BB62009A1B05B 36585B62A8523594 7849AB219093C88D CE8D596F478BF221 0926DC4D89BD555A 8A7EF53C3812DD02 FBF67576513C6C90 35388909D8B5D94D 6EA7698F50735F13 A9CC7D2454563B2B 6C01B473786BE60D A31EF82353146980 CF25F8080DD82A3E 03CD80BE113C9061 A25AF670837F567C D88AC822B0182BCF 67CA4D30D942CC6E 7AEE1BA564048498 679A6CBE4E30CB12 5760D0C2E7771FE6 5A0ACBB2189D9665 A23450EE241D77E9 DCCE44BA5B106605 91AAB252C6079D58 68849E2DDCE88910 EA3E949FFC37A9D4 238159F97AACE701 528484E99686C4AD B0C7BBCDE8F6C4A4 953CC3EEDBC293A1 B32A119A11AAD4DF 09343447CDC8A8BE 8B89252F27EB9560 89D12B5AC38DEAE5 B3E6FD131ADD2051 231F6E6C82AB316B 49028D3980AB1766 16528ADF1F7B2A23 8D5EFE62BD58FAEE 6183C713793A576B 8ECDF90115417F67 816D1788C081642D FFB572B34D9E407A DEB6B36B9F88932A EDD5D304B1199BCA F0FEDDCC7BFE3B8B 189CD544C3DDA18F C82FD53F35D79489 038DE385F95AD6B7 639EA684803C0BE9 25E53D84A92DD412 6D8D5359499F4B10 333C8AA9A3E6DB60 AB10FE621ECB50B5 1EBA8D732E3D4224 F58DE8A5CC06455C 96908E6A184073CA 27969E10C7B20A34 F8FC3785A11F3FCC 41BCCAA612701F61 8BBC1EED82677847 88D16001DA4BB6D4 610C397360A4B40E 033D1990DDAAFA74 9F54BD2E57355433 5D11114B84305139 279AC4C72C218E7D B399837CA8328EA3 5EE147273D79FC58 A63D87E65DF302FE 6A7609A6D2358D4C B225CAC28031C98F ACC3AF05358EDA85 C0189E7DF0AD9884 2E101BE9BD9767D9 CFACBA69EA34D4F9 4A1F3EF1002DE26E FC030DD86D7991B2 06D62E9B01E4D48A E7E1924BE8B2FFFF C73ADA8ED126D911 1E7C89E2189302DA 5544EC93321F94D8 1971F3143DC3462E D2CF92F53FAA1889 715BBD13372C36BD 47F8DD59E61E0F68 EDB3F035DF015F92 27C8DBF7542679F1 96E9E2D0DCBF8518 4755F84EA6AC0907 609901BA0E7F5976 702B2C7128D3F956 495532A833CC8112 D831BD0F6778B141 4CE2A9C6FFBEABC5 AE45EBAF2E4D7C5B 7CD45FDF8678634F E1B084638F8615FE 37E6449A1F0C99A6 E3D9A86F10BB9CCF 14E922298CC61F8A 9F32FD1D3FB0E9C9 1C96C872027C9FED E03BF5A20EE00B0D 918BFBBABBD4A209 FB43379D9E33571B 5C8B6DBBBA7267F2 B9918EFBA0230C93 C07ACE5D0A45ACEE E21EB6B3389C3ACF D27E90684D3F50E0 7E96AF60211F37D5 A4E0915DE6461A7E 08DDE1F1D1564732 7CA6072F93800BEA 8B7F68DF67E161B9 2C6170B6E465D6D1 D8211AF72F794B1C E8F2BCD9AE1CA9AF 19B769639C86A4CB 94C8D0E922079C41 DB1C0FF9BD5F6917 042E60A1D3FDAFCD BB3DC0384CD61895 F927B1D41EA8FA45 D0AE3666583F32A6 6BA7C35554BA1F06 9BF5AE8A3A070AA7 173177766D19028E 5712C7A0406AE622 E51082950DFFDD0B 5E57A395661DE470 2700D15777B948C9 F653C6D7AD01D833 F6E54B4C5DC9A418 8E7B5850D20B96B1 28C7BC402DC0E351 A80ADFF0D39190C1 D9F95D483D3EEFBE 8A3E10FBFF8171C0 CB1C6B9E4F687472 D685BA7ABC2940D7 9ED1F9C5695EAE3B 5E026B7A6244AB31 1E010B680E31BB81 F2EEA4E511B1C4E3 1E1A071EC7F66CE8 0AD6C89107C62D99 8263EFCD6BDC9F88 A2EEA84D356F1D08 CC97AF2116EE601B 97771EE264E1E9CA 71C9D0217F3E804D 0755B7B67D31A21D 11DD14B799425BFF A4C4E46ACB66EE85 E7D082DC891860CD FE14B7C301EF4C44 E08739BC4DCCA0F8 D28BD6737D2DE95C 254FD51E4F7904E1 A2617C1A6D99FC4C 8531284BDD87CE88 38BF8316C252B72D 69DB17D81CD4AEEE E73753FFD6B23ED5 4FB1380CC03A94C2 EC26683763759DE1 55BFF70338DAE69D 94283CBFC75B792B 38A3368B6F05A9F8 D4C3BC0EF5234A99 F578B326A5DB1448 A3ABA7135DE2C7B3 02951F5BAB73E5F6 04492C0B8606DB6D 9D179ED38C092CCE B02EC95C614733DC 667DF99198EB1F46 6BB9568553F7C727 264F94F3AA791E4C 69D922283BC01B0F 104FF01051D37425 1AA1A682B6836004 36B87D91909762B1 4B64E1FA9340B98D 37786B1E0391C90F 4B43861F3DA4083B 03367FBD65013BDD 2ADAB2898BA42FD9 115E3263DCEF6FD1 1E05E8523F1C3FAF E7C5DEDB826F6437
- Read the ciphertext. Strip whitespace: 4,112 hex characters = 2,056 bytes = 257 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201212281700(name+title). Key = MD5(password) =942989e53aaa367f5ba4483768a741ff, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 64 GUIDs as hex (shown below).
Decrypted: GUID list
1 b11396e2-8c08-801d-8d3c-f7b2dfd59a7c 2 f1eecc22-98f1-6f9f-8659-e7f0a2a27764 3 4c4b71ff-5a32-3201-b311-409e75e1dc7c 4 9ff0faf6-dad1-7745-885f-99bc81db1101 5 36a794b7-c6f8-627d-95fd-ca164ff176e7 6 d5adc30d-7895-11cd-97a6-0f4566ff7290 7 a1d549ba-79a5-2322-94d0-121c0e61fe7b 8 a8163a5a-40c9-86a4-a1db-cdbb29ab68e8 9 3d07f7a7-86c8-5d7b-959f-460a09de3a1f 10 ab41b4bd-5a70-25d2-825f-bcaf3d4afae8 11 812ca37a-d52f-0203-bd93-25ac9d0c73a6 12 b8778c35-54e4-2077-92f1-5f7c90813b8a 13 37e3efc3-99ce-519a-96f2-eedfaa4e9bac 14 1e5acf81-4580-8070-9d91-a9ca51fe42e3 15 fada9267-d9c0-8272-b853-6b969b552664 16 a5d1bf51-7336-7378-96a1-3afb4cee56ac 17 bb9f5fad-c8d1-37ea-8b98-9d88e59f058a 18 6d22ac60-11f2-3690-9596-1bed49eb221b 19 41d7278e-5f18-31fe-b743-f0418d1c4362 20 06832432-1b0e-1064-bf58-00a6f710ea55 21 a241767e-4e1b-3a8a-88aa-3e7484862e76 22 76441798-4415-333f-8ca7-c259fbfe95de 23 3ca3af01-f396-0752-90cf-f0703732dab8 24 716c4dff-3894-7b67-a5fb-2128b90b4b35 25 09214654-e546-02ee-b5e6-b9f5b9690d30 26 0e5aad86-8c3b-399d-9c27-5690e8d8d1b1 27 9a1f2280-a054-0d46-a7e2-39da01b977ab 28 af7eea9e-e3bc-808f-8207-7d93aeabe72d 29 af889f4f-ae65-8f91-8cb5-b89b3925e1e7 30 a919c84b-2515-76ac-88ca-d31fd526e895 31 8b6406a0-e0e7-240a-976c-3ccfab27d597 32 c6557d9a-b909-6264-bfee-b0587b0b9f9e 33 f0f5cbe2-046d-8ff1-b482-868eccb92889 34 d3dbab56-824a-03d0-86ed-3546b89b6941 35 49b71310-f4f7-3625-a78e-4c7402ee17e3 36 8178545b-bddd-5b9a-9f95-c2fd90510389 37 a5c722b7-1602-0b39-8f37-2162a6f434c4 38 ca012a21-2c16-4366-b52d-5c559d0174cb 39 82669f51-2567-1e5b-8a62-90a4ae11b2a5 40 6cd4fe2a-60b5-5ec9-9cd4-e3f61e7808a7 41 b945bfb8-e4f5-1475-97c3-9e9acd7a306c 42 f9d35ded-1fc4-5735-ba0d-e48d126fcf3d 43 b4ce9eba-2191-1297-8942-90b1faf8ec63 44 75f0bc2f-8146-47f6-bedb-36ff8632e57b 45 f5824b5d-2916-516f-bb01-0d3ffdd149da 46 0ec6df01-6ae3-5c8a-bcce-db38d5fc9ea1 47 9f56b347-ac6d-108b-983f-734b00b35a3b 48 76c7a1fb-44ab-49fb-800a-87a09f5e1283 49 1b4650cd-2a60-3f5a-b309-961c22fd00a6 50 cf96b6d0-8fce-4af6-85a8-bb193ab17a40 51 e58a654a-7305-5f42-90c7-66c34652439d 52 9821897c-e6c7-8d4d-90ab-92ee41153043 53 75bfb27f-45e5-14e0-8cf5-f143c2a30bf1 54 9ff2128e-685e-6ccb-b541-dd41126c72bd 55 261acfe2-2cd9-25e6-bbd0-aa1ef89412eb 56 367a2ae8-999b-4757-b074-935b187d5ba5 57 8b5658ab-ad51-5bd1-a409-6e8983886b3c 58 a4e380aa-ea9f-568d-935e-7516a42087b1 59 57413dc5-47cf-78c3-b985-fcf28f1b1e4d 60 784f678b-1ebd-3d39-ac37-0350b6946341 61 a2ba7f63-c255-1c2e-b5e3-529219bf23b2 62 ef5ff28b-c14d-2d05-b368-b8bf53caa7e1 63 ac700a68-e972-038b-ac22-508650f98d1d 64 8a120517-5a1a-6a21-9334-1ab034e95287
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
8637612852025887333133070308872680350415151455143458162455731206. Exactly this sequence comes out ofnew Random(320).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. Part of Fixed N=64 (Dec 2012 - Jan 2013): an app start that posted N = 64 every time.
- Conclusion. Filler. The content is fully explained by the two RNGs.