201212312317 15rosk
explained decrypted filler
seed 443
From the post to its content
As posted (encrypted)
2B196642D699E736 B088E934D771F255 0E3F800DE11C8539 936B4DC0F92D940A D68BBF16E71C7A5E 45C81F71501E5042 2175E1B900761B7C AC19A6B479476640 ABEA271E830459B8 1BF56E09E4F2DAF4 0DA67AA9F64E40F7 FCC8B601978D1B44 C750C8C11DE2F567 1B06454E77E6C5B2 8A804915D32A117A A1D87601EF385370 4B64801228B939DD AB099E2C01384D8E 46A3A4F774774146 0D8CD3CF825E1005 3253DA4CC15926A8 AB82EAD17EF5E0FB AFCA98B883D585A6 6DE20B9B06D9A0CB 1E99B95F218C53DC 4AC536B3081BCD41 DC15E195F4425D07 79FB8A9BB91BEE4D EA747BE8C6FB4B6C 5C06358C8103589E 3580781FCFC61C44 3D144BD99220482E 46A97CBE57EAB3A5 54D6B8D8411AC1F0 B6D56DCC524249D0 EE0324ABD0630F22 4FC5FE4AAC890231 B6F0AD9C5911E661 03B86D5211B915EC 5CEB4C286D74611F EF2685E8B5DA5CF6 6D03F8EE2A54B67C DBDA710233C7CEC4 525B1E1DD15D96B2 DF910C239A56103E 005C7923E7F13496 DF9504BB9C44E4E0 C26CBB9091F2B954 1D6F920EECDEA1F7 FD94ABC72A2822A6 314157E34BB6C819 B0923598953CAFA4 B2CF46EF0DA84BE3 44448B2C14666D3B 969BE75812C70615 DB8A1722750B11D6 420B39CE89AD7721 283FD5B2FD4FC089 EAF5F67C30512EED E240DF1A5ABB8525 0B0DAC044C17D3B6 8EF8766186BB342B 6C94140A78330D10 DB4C62CB37BF77EB A8C9D58892AD3C2A 2B8358C7CC54D38B 1951660926D67EA7 649EF6223DDAD263 81AFD27B2C24CC75 7907C715DBB4087B 5807646FD65CFEA1 050DE1B239448208 C7AABD9BD930CE43 2CF00ADAE88A37BF FD5CEBEBB472A628 235A4D07A5206170 E90ADFF9FF91F03B 53A8F9965069D628 B29C7052C274E625 34DDD2C599FD374F 07FA3C1E79C35B0D 55942F3492815DEC 2B0463CFA1540C7C 7102EEF108E9A486 5EA1D081369406F8 DC21D10757716DAF 135E5E89B95A5102 EF313EFDC0495EFB 8F438D84D038275D 0ED571C6AE6D4F76 F382DDE0537DDACF F08F0B788653250A A26D46F5D8C5BD9C 2B858FC4D50F121C 3529AD459F294EDE B8A94822CF03DF1A 1F2C07BEC60FC208 3BD8414775A9F4F6 97A9A7810ECB011E 5B5D27EF5AF548B7 DED0CEF4D5AA74A4 442AD4F85554E8DC BC6192C598323B39 B59E9EA7F26559F4 8B23FE2B5F63BFF1 8DCE2AF8535F397F BE8E3B203393E966 91F9B7DE96E335F7 FD6620F883C94949 E88B0E411B3C8A04 97203063A3B3FAF3 5891F0ED1D7CC1F5 368F79FDAABBE63C A8625E858463F160 5196EB01FD0B73A7 055E61BE19EF0ADB 2FD3C8B757135D02 EB98E2F25BFACC16 2DECC7FAC3C37560 F680EA96CBF23550 5D3BB905A82305B1 59ECAB4B9EB2F374 24B7503CE3F196E1 4434186F16819F91 92DE26DB627FC96D 057745235B9B4BAD 862633786A51B54E 548285EF060BD709 2EA4500E372CD0E6 D495B99B43674D3C E83E073DDB9E7D97 8640AE0436578D5E C37A4B6D2AD0A71E 4BDBF5A6405ABA43 A7970CB600C1D3FA 799E8F370F36A686 5152556F5235F9F6 54DE2D5025B8FD90 B1C08F828680E243 9E8D296BA60F2BAD 5B0DA307D2219113 99B0DF023DE5A81A 03061DB6D5CDCD1B BE08A4D2CFAC176C D077DAD30EE2C7F3 1E68A6EA8D6C8A39 A4F701C4FBAD7FC4 A2FF5470777C5C06 759E92FB4B56E9F6 13225C19373E1E5E 178BE78ABBA67EE1 346FAB16E85009BC 04E76F61152A033E 0A6F17D22964D3EC B0547C049D1253E2 CFFE7A59BFA56946 7A1C87C2C88820F0 CA6D9EFBCE1D2652 265FA25752F86BE4 83065153D342488B 3DFFC9CEF6D2F783 1F224C3CD64800DE 2C4E87F6A3A99BFF F5D2AA6760F51FA8 E9E677781E81106A 7A8DB7FE30405F54 650867A360F43E2B D803ACA073980902 3903D72F4C18A40B 39985F7A166A228B DA08452A8C2FDDEE 9C261C6438E4DB54 1A0990FED0ECF3BA 208141A008DBE9C4 DBEFC1DE5D002EA4 86EEDC9D5BE9C0B4 4C6575695C49407A F765B34105DDE213 56DA5B18B675F295 3B3955311039856E 660FF276801955DA 420A8C4A91D6165F 0998B736A64B263A 34A6668490D1B9AB AC6125FAEDA4849B 32F6C675825FE0DF 5F3E99597BBF5489 5B40268BEBBDB685 F6B34440DD384F91 185D23FF6A6C0111 6FFC7BCA59CED1DC 9D8B6BC713AFDB12 3A50B756BB62B718 49634F8F4C5E5975 75B116AABDE7945F 0A56E14B6E47E1E0 E4BF14EBDE04C2C7 52584626439C05F4 2DB7FD0C78396700 F71349C096A55380 B95315A8C15EB3D0 9E1D982B8CD16DA6 F63A23746FFAE2D6 CA66DD2A4C57AC34 5A374E33AECF14CB FC9A33587CE5E2DA 3AEA11CC5C4ADEFC 390CC34BF4001AC2 ECBA29CF7C1B7BD9 8DECD54DBE23C775 2086F6EEDCE77405 70550061CFC10F4B 7305A6602BECDD95 03D97AB735FA11D4 D8E631DE390105CD 1063207BC6F3D34B 94F67F7A55344C34 2A8B7D5382463905 04BF37B4CEA816C8 2081B01EB0408F10 F25F9DC8E04408CD EE332D704E8A6FEE AF95C8FEA0812F43 84F4D7AAC1B2F911 325B0C1110A73537 63E388B89361140E 9DBCC741315ACFC5 0896A8A8F3CCF0C2 87FB123FCDC12EAD 6114330A8E01B178 4D83DD7776F17A8F 741913620D7EADE4 85266364D74F0694 6BE2F493CF15A45A F21AF36AB99A56CA D1827B781E761398 E188AF46F084ACCB 5141C3BD62FC6058 DED92BCCB05B1CA9 94F8E67DF7E69B4C CD4C397E89A2938A 5F44E4272FE48E9F 802B02F11AEC3B5D 2B23141942FC1912 C10B17468D31776F 64743F42FA819203 D08C2FFBA9315A2B B5D98C0D53D50899 2101551AA6FAE0A4 1FA7A2ABF15B81FC E693577EBD248DE6 EC9EE508EF8708F5 FF110ACEE13A45DD 797CE8D6DBDA53D0 96148E5E1FB50518 9C192F03BF457F22 86DEC7C458A05CB8
- Read the ciphertext. Strip whitespace: 4,112 hex characters = 2,056 bytes = 257 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201212312317(name+title). Key = MD5(password) =0acb3f2fe9aa5be1e7c1cee996b21123, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 64 GUIDs as hex (shown below).
Decrypted: GUID list
1 d32c1370-0ca2-1f5c-ad71-dcd3e43de3ba 2 90a9f2e6-4f86-7877-a31a-f6a633a4d300 3 5b792da3-308c-3455-bf05-1384e3f512ea 4 7423ecd1-3167-180b-ad13-8a46da26ef5c 5 058d2498-a74d-178b-9642-1afcdf5cd0f1 6 2fa18182-a9be-66a0-9ac7-44b6a9c00204 7 b252941e-499e-33a0-88cb-3eb5c29ccd6b 8 1cc44f87-f5ff-627f-8994-4f87af4667f9 9 c37fad2d-fdb7-7006-9175-eb91a53f3a42 10 4f06ead4-6672-50e2-a777-9dec356ab641 11 ae7b9e06-5184-5eb3-a81b-75a229622e9c 12 3e25040e-e967-2087-8c64-fc4a2fa48645 13 cc505f88-2ecb-1161-ae14-d12ce7e83d0a 14 130e95b8-dfb0-8277-9665-588c18045e4c 15 88a19cba-3eba-0476-9345-6ae450601ba5 16 c4a06366-d0a0-6538-b7fe-212e6060d7e3 17 9535ec84-ab9b-032e-8a03-a8529f172a70 18 bce2c11d-b381-5296-9fb0-13242ed91edb 19 c23d7f79-0880-6fae-8db7-d8e3d8476c34 20 cde01790-60a2-71a0-8749-e521dfb98d6b 21 eb3044d3-b71f-6b00-bc66-360066306bfa 22 6e3117eb-2588-4e4f-9ce9-9244d7fc0b1d 23 2fe06833-3d8f-75c1-b48f-65ab62404118 24 38a2db3e-3aa8-77b6-af1d-494b4aec0879 25 fc237898-4c29-17f8-81b5-519ebe94af16 26 bc49f253-d3e0-4afb-897f-ab4ac753806f 27 a480de2e-164b-7986-8a70-06215deb61fe 28 bc73c9e5-27ef-1460-aacc-a9157d2f9e7a 29 31cdf983-9a1e-852d-9375-37a8c2b8a32e 30 641730ba-63c1-709b-a652-103921740cc0 31 51a7f8fb-36f0-6c2a-94f9-941e99b643f8 32 ddd54f48-202a-1442-8b6e-ee4fbcf076da 33 4b1591d6-2ce2-35bb-95d1-653dfaf68333 34 f0c44d69-079b-0924-a936-1be93d65dd50 35 7cbc6231-1729-25c9-9246-7bad80d2d1a4 36 4155b105-157d-8ad9-910a-b52f2d0cb6bb 37 2bac4915-1f24-8285-ba89-029ea3e3af2e 38 75218bac-dac5-2468-97de-16a2c500b651 39 4bae57ad-0b7c-1a52-8f22-628808e84339 40 9c0c5c0f-8994-48d2-87e2-b42ff86ece59 41 f9627cb3-2e07-57fd-94dd-92a1cbb10298 42 a3dc6b6e-7280-7c5d-a408-5a381363c048 43 74b51053-26dd-5d36-aa15-67de0159ef55 44 ad6631a1-bcac-30fa-a9dc-5694ee927178 45 8387ba7c-3476-413f-9793-f52baec92c43 46 2acf1c7b-c39b-8ab7-828a-5ba417b39513 47 6b534468-70d2-0ccd-b206-a5ad3b258a0f 48 54d44128-821a-3f12-afbf-1c7866fdf433 49 5d335fd8-8bd8-30a0-9d43-162b1ed8a67f 50 3d45c0c2-548d-6a75-a30f-1ed39d06c920 51 76b6f174-50d0-79c0-b6b9-7c4681591dcd 52 c11cf2c8-e997-3256-a7c6-55394340115c 53 f234ccc8-12fe-5007-acbe-caf9549eebf9 54 a930f685-e2b2-623b-ae01-933e4638985b 55 093b27a6-7548-8aa9-ba5b-4b8bab3e4daa 56 98c98323-2470-525c-91dd-755a13912846 57 eb027fee-31e8-8016-a185-990907ee9d18 58 2c490968-d5ed-56cb-b3bc-f1e2e1fcec68 59 3d3222b5-4f1a-8c98-aef9-4cdedc52e0b2 60 a81e7b0a-ac32-674c-a798-4f702688af2c 61 69f273dd-8f57-70d1-9c47-a00323592e20 62 1ef5d586-4194-18a2-b4d3-9581f4cf1765 63 c1d079c9-d930-7b3f-b0b0-eea377cba910 64 ff7a7674-cd21-85ee-84f9-0d9027ee2495
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
1731163675521806056764771471876130288214575348033673568585867178. Exactly this sequence comes out ofnew Random(443).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. Part of Fixed N=64 (Dec 2012 - Jan 2013): an app start that posted N = 64 every time.
- Conclusion. Filler. The content is fully explained by the two RNGs.