201302112159 18cpxe
explained decrypted filler
seed 745
From the post to its content
As posted (encrypted)
E0E0940D0E4A5570 FD12FADC889B4DC1 B01E5BCC1A19D3BB 96CC07677DC043B5 35170E3EE7E74FF5 DDF55B70265FF292 34C20BFBBCE16C06 3085E61B8C6A1D84 8DC469B878B4661F ED3C8C5D64F31260 053ECCC477837BF3 72E95E2054AC820F 5430FBC6A68FE4B2 A7B5784764B1659F 1F934C3DF4C54E24 CDD88E7900540C33 9C01B66057F7A706 C6D05792EF0BF153 997D80676B718186 41CAB1AB7DF71B1C 128C25097232BEFC 120296440988462D 992C89C8461D07B1 73879B5E125CF6DF 644D139AAC614601 0A794093E36FA039 6E5A5BEF1618566E 6EF11B68B07B670A 62B67650BE61D726 32CBA6F44D55B3DA FA90C004BAE5C791 E889DC2A044E39DC 42C70C6BC76996E3 2FBA8D7BCACFD5E6 0004FD83481F4DDE 0486FEE29F995DDD 9401FF48D56F8BA3 EACF76BDB51E1154 A68DB6CEA7FA3C7F B7131740C76333E4 AEC072BA5B459F2D A79F1512DED0CE39 51D41B15513FC64C A8546F763648E210 8F671EDD3D37A4CE 3E62A0084668E2DD 4259628E3D5BE682 F1072646D9761669 51D7061CC9743858 B28CACB04617693D C6C7A829266016ED E5382184B4AEC999 E2B2B06DB5376019 F6C77E1F4D6FB98F 6FD2F1359AAA8348 F23D67D8189FEF09 77892757F6667124 2E5BF4455B33A33C E672718F9DA19B3D 12187FD429F21E5C 2039674DFF83376A 4809B07026E17006 FF2A3894F5146754 C6512DB5C81A0C3A B3D5F7F35740B623 0C9D0149CF5DCCFA 790C15B06658F1F3 F4CF32DF96BC96AD 814D4ADA91250498 A09B5F6FEA8C99CD 5A2FEACE0417108C 8A09DAD070064B0F 864F264E13DB6372 CEE2CEBF546A0543 E30CBFE347B36A92 2119B7A8B47F3E9C 8732B8B79AE312D4 E748F7403ABBF6AD 832108D30B6B055F F0DE545DBB33BF43 4B699531FDDCD702 31D0E0CEFDC0ED10 F8EB7FF81E5E58D8 E63FA350BF0A7737 34B42D12C8A3C1A0 F5F84C4DC4663AA2 1FD6BC76EB3FB6D4 45C6AB6AAF598A4C 2E8C31C62EEEDC31 65D463160E95E99F 8664BF8840E3EF3F DD8A696768AFE43C B4551C15BA223634 54F25F9C47D9CBF1 EBFAC7780E95DC37 F0DD6D334711C878 D5855DAF4D758308 6BEFE910A76D2D3F 92B3BB135C0146E0 CFA93352AEE91309 175CCE119EEBDCC2 3A9F04223ED20EE0 F2D709A2A5FDF1D3 B36977D0F95A8E34 D392708C47D2045E 75332F2D8DC8306A EECF55A1DD00BD3A E235A0A717EE5936 1F0461D781035F86 E6395394F337F268 0FD540948DA35820 3C86AD3CE1BDFD56 D90AFAA7D56A7702 11C7BC5B03EE4046 F26D89C582E39A21 0C09BB2B79F366D4 B8A380071D35F5DC 0E0FF798D7706A52 EB63B96FF2068261 FD6CA3FD1D6A14EF FD0301D28B108618 DA1A8F262D5D216E BD6987F3C71E1EED F37D035DD1138A5D E6104BFDD8C2778B 9ABE9678EF40E5C8 D30BB561B2585639 15DF3F8D996DE281 ADDEC1D562164264 5D0C4B686C68AA48 40FAAEF88EE11247 3B27A46C09103FF4 EABAF61C3F5EB683 D8B2362EB6F30AB1 8712DD9F74062E55 13EA167593DAE234 6006020D5311A71A 5A4EE05623B4296A 2B13632BA7EA068C 03187E0D7E626B47 BF5EE6E9F36B8045 5BC3EB9679AD28E2 27A9DF7CDD1042EA 374DF4DAA88D1632 6E43F01781302F5E BF5386D7E5402C3F E754D5257F5AEA3C D033E73D12EF96E9 68BDF773948D8E3B BE0FBBADCC5EE540 28D07EE12D7E953C 6411871751CBDE6C 89F68E27A63DDCA2 747FF527E2EA2853 D75F660E5E1578C1 801EC89117C84F2F 894F2B08FAA9AB33 A6B94DE7A2FE7AA9 B8CB7DF6D7E6D075 0B73D0020ACFEB73 A9330A6488E213AF A1041B544611BD3C D6B69F3286C3D04B B470DCB40471D8AF 0C9DF5F3A7D5BC8E CB65CB4529C5B5E7 A4C9DECD189DC660 002DADDD2B38AFD7 9248D3110F0B662F 648CF85D0405C2B3 F2EE1DE8DAD1C601 FDB47690A543FA68 9031CE6637F97599 CE773E7E7A53EBB1 60B5875BA85B74F2 3668A19FA876E649 502022E2C99A2F0D EF187EAB2DB15DA3 5B51F924480AFF4B 5679299727C669D4 6156DF30EAAC4C44 A25F771FCE790DC0 C695FA29AAADBB80 7299A2BF675F5DD0 2AF8F952D23BCCA1 F67F7324492D6D4F 161D9032336804EA 1F0A3474C2B7BD4E EC21694E6346C30F B52C255C1FCD216C B1F61D33246FC222 DCC0C34D4A75FC2C C56579110D754356 B3CFCEA1B879B4AF 89843660A3D3073E 7EBE9EA4BB7B1EE3 214BE2A86C460A90 19AE8C538A7FD356 18ECE32FAEC6E4A0 E2A72071C8A1B56B 083FA595CAD9DF84 B7069022E15092C6 A7D5D166BE1F3BD8 85283E0013E4C14A 1DBA236E263D088C AF38B68867EB7980 2D7FB7D2D448DB05 818E39A7FF5C2A35 F4BE3688320DDECA
- Read the ciphertext. Strip whitespace: 3,344 hex characters = 1,672 bytes = 209 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201302112159(name+title). Key = MD5(password) =b251e41323bea99f4482850366f0024c, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 52 GUIDs as hex (shown below).
Decrypted: GUID list
1 298c1132-c4e4-853a-8b06-932ccbe0b958 2 433382ef-f0a2-378d-8947-78407c53685f 3 f1d1cfe7-ea6b-4988-b856-5239235b783b 4 9252c278-1041-5122-9146-255d020fb8f1 5 132721ab-591d-568f-a41c-d79a413be216 6 be711486-5737-5443-869d-14a2e1cbcece 7 bd17b1e2-1312-6eb7-88ca-32e4a9135bed 8 027062e2-4b97-1c1f-8ee0-e555aa1bc324 9 bd619e5f-7595-108d-bb2e-69665836555d 10 57644bb0-87f6-8411-94bb-cc3f6591d2d0 11 c2c9f3e5-5deb-12ad-9346-6b644580bc3f 12 521a498b-31e1-0408-bf04-178f5b3bdea4 13 4aaef7fa-a739-7aeb-b910-29e92092a436 14 8f386f3b-0579-0634-baf7-65973f6767d7 15 e981d53f-9aee-4e78-a45f-47f43213af72 16 933b206d-e7a9-27ed-8857-1993a6543bad 17 d9726f64-a0f9-0ddb-aaa4-61b2eafd8395 18 a31eb60e-65e3-8dde-a2f9-f6cb516298bc 19 df10aebf-23ac-7ddb-9cb7-789fb037ecd6 20 d034de02-b65d-778d-9346-1ad5b1ca2c8f 21 69cad70b-733c-7bed-8ef8-ed38d50baca0 22 77dfe366-b47e-53db-b71e-6f1c80a4784d 23 9800a4c2-cf4f-80da-a52d-d71213c737f5 24 2d9adfa1-6f89-2f37-8621-06838cbf36c8 25 e1460caa-eac7-6042-b8d4-f30ea924560f 26 63605ba8-f028-6925-ab0f-539d2739df43 27 765b13f2-fbd1-4a16-b2d3-78b05776f28b 28 9531f203-d209-2ce1-a64c-4e5b72f2f1df 29 3f2ffe39-b311-2681-bc53-96830feb621f 30 b78181f9-c7c2-04fb-8e30-c08e180c493b 31 e4bddbc2-c001-2399-8300-00ce64bb5fb9 32 36ad3e00-bf82-6b60-b338-97eee7d9b47c 33 1a9c9e3f-11e9-7263-bd5c-969de0f19081 34 b699e6a3-deef-5784-8729-1918f81c1f4c 35 79d34fdd-1244-7a18-b762-e72e5fa7448a 36 41176540-c9ab-09d5-af80-849d7cabd5fc 37 e37e6fac-7b77-1f72-872b-9c403a1a8300 38 329c045e-9e75-03a0-aa75-17c8e483f668 39 ab9f1200-acfe-8f35-a450-5948e9d03a80 40 6befc1db-f7f9-85d6-9950-d7794e19f22a 41 39d7c392-e0e8-38c9-9254-ac6f021b24ce 42 9bc7c5c5-32aa-6a95-afc9-f4f2805bc6f7 43 011938f8-336a-346f-b702-fc4014b78479 44 1db98502-09f0-5eb2-b84b-e3118a68c49b 45 e36f535c-eea6-6121-85c4-b57e3aeb3b35 46 b47b0af2-bc9c-7ee0-8b1d-67603c6e967a 47 040513f7-5b8b-7f51-8ecd-b59163e9ff5d 48 25025b40-28dd-1568-8ab5-38d98463451b 49 e0c792c8-8c12-8c7a-9df6-bd4d1e792068 50 bc832b2b-1790-6bf6-9047-0f151a65957a 51 bcc0ad06-309c-8807-9da1-c38b7cdbefbf 52 9571e913-0eea-401f-80af-bbf343ba69bb
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
8345556118107042087775826642202675701088363567718684. Exactly this sequence comes out ofnew Random(745).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 10 of Run 41 (seed 1,681,282,046):
new Random(1681282046), 4·Next(8,16) per post. The RNG predicts N = 52; the post has N = 52 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-01-19 21:58–06:58). - Conclusion. Filler. The content is fully explained by the two RNGs.