201302011659 17p2ga
explained decrypted filler
seed 862
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 3,344 hex characters = 1,672 bytes = 209 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201302011659(name+title). Key = MD5(password) =7e0825d6d9706d66e864f61c0c3c58c2, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 52 GUIDs as hex (shown below).
Decrypted: GUID list
1 e7fd6fa0-c83d-051c-ba39-5381bbb98357 2 52a98576-cc32-6203-8061-01b4ffab4b9b 3 67712d58-01fc-2461-a449-a12446251be5 4 5cd7b338-ac9b-47b9-92b8-14082697a77e 5 5a3f4f09-2244-378d-bb55-112a2d4bc383 6 3fa02fc9-d1da-7750-8e0f-74fb385e1f83 7 a37211fa-09de-157e-a882-1f9168a63a4e 8 edf1ed30-ae79-82b6-9d0d-7fe0fd00c523 9 e4f457c1-90f8-5617-89d7-a683b22a70cd 10 c9bfe4dd-866d-12ec-a24a-b231cf68074f 11 5d1b0dc5-0144-36c5-ab73-fcd250214b35 12 6b08e8b5-4a0f-3c6c-b9b5-0e66fca8fde7 13 2ee4b764-c204-1d01-b797-b11e5271d2b7 14 e8c61581-6ed9-8c93-82a0-2d34d507991c 15 8937c248-06cf-3718-8ed3-a44ba53eb0cb 16 d511237f-8959-3d1c-9bb6-a5faaecb675d 17 9316c4e5-5a01-1a6f-9640-002e72e7b856 18 dbb48f29-6777-368d-b78d-1d30153da2df 19 257f2bd9-0435-0d41-ad6a-ed05ff51c874 20 98af79b2-1ac2-0218-a933-1c5b3331ee0d 21 a56f2e03-08af-3f98-ae08-044aba0cf007 22 4dbee016-320a-2fd4-abf3-6815c71d4f8f 23 82b91dad-d1c6-615e-9e3d-bf6cdf9d5739 24 a1d489c7-7530-1df3-9a7a-a9346fc7041a 25 f45f8686-5282-1dca-9d05-a4f827f79bca 26 4c35641a-a243-8850-aca7-50bca9d8577b 27 cd908ea8-63a2-0a21-9181-11fb4231c18f 28 43c4288c-e764-7ab1-9923-efb370c43602 29 9260b324-bbfc-52c4-95a2-098f42e96927 30 cf3839fc-9f1d-26fd-8062-b778bfe6acc1 31 7e548781-0234-3c34-a4b4-d7fe22669527 32 9e5f4b8c-9a5d-485a-a958-4f62a15a1689 33 19c6e674-1436-8c2a-a09c-c340547a3559 34 64ca4ba4-b693-5713-beca-f9dbed59d905 35 b654b0b5-5ffc-50d8-8abe-10ffac87ec65 36 7488a045-6357-1373-81d5-c771e10231e1 37 6a809d94-a820-02d1-9f97-59900e492a7e 38 8b356efa-fa24-7391-bc95-5a5eb066777e 39 66b4e5b4-16ae-8863-8474-fce3dec5a1d2 40 be34a5f7-35b0-3939-bd66-4f940e1dea03 41 9d733b5c-ce06-231a-bdc4-c2e5285c86ae 42 d947300e-d62a-17aa-a8b6-ca26f82f03b7 43 ee6d7296-efcc-2726-be62-b19b95c8b434 44 5dd62ce4-82bd-75bc-84d3-d5efafb9d4fc 45 6723a087-2921-3aab-854c-e25fcedacbf0 46 41e093ca-a4e3-844b-a8ad-cef71845f402 47 b1f26dee-08b9-5497-9eac-13edf1d9ffaf 48 65c1fc57-a614-8f94-8eff-de8be8c9c9e3 49 24aefe48-3c3a-34d3-8d09-ff7e8416a3d6 50 896e1d90-55d0-18fd-84b4-a3748c3dd365 51 192cb152-4ebd-5a8e-9923-b50fa0f06be7 52 3be70e58-ed36-2fbe-82fa-68f46cecf1d6
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
0624371851331833130032611807523485510783212738583152. Exactly this sequence comes out ofnew Random(862).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 11 of Run 40 (seed 1,069,639,703):
new Random(1069639703), 4·Next(8,16) per post. The RNG predicts N = 52; the post has N = 52 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-01-09 05:52–05:52). - Conclusion. Filler. The content is fully explained by the two RNGs.