201302121559 18edki
explained decrypted filler
seed 785
From the post to its content
As posted (encrypted)
095CD035B735A2C9 A0F48479B818A49D D63B0775571E2DA3 679308E00EEAF7D4 4C7CEA03CE6EE5BF EE8A31005197B6E9 A2CF0992C794E0E8 C508BD26A97B713F D36F3F336B0199ED 2B4A7D1DD83B38D6 5793579AEC903549 8C2F71738E869525 CD4709D64AD7A48C 6F3832CF26722A59 8A60884A2FDF2EAE 5387B1A398255C95 FE3B1E6E9A772066 D2DE62191B5644B0 FA545C3C55B4EFC6 2559D2EE9166D37D 6214A17604E74ECD 19E37CB5A72C8403 BBDF62617D174B8B 4B1C9AE9B6835C2A E9230DE57506D282 8ED34223DD9E4B9E F67BCC0A2A18E445 D6027CE3CA3EED07 C97F3807185BE7D3 DF768359D297E28B D409DBFFBA9BDAF3 65759A0BA96C3A29 B78209231E145C9D 4CC8696A6F383E45 77E324EAF1E3873D 77166BEB1FA336A2 9044B732F82B19C6 54F93AECD6A85D07 B3E22FA4159F4A33 ACAFBB415D18683C 509120B4F78D189B 918840B0FEA6EADF 028020EC458B571B 5B239D0DD71FAF5E 235C9ECDF8E8BF50 BF2AF23E3C7A5F01 1B9E8CA8157ECC63 E3BCB68A1F448B08 A847A59541F39EF3 67297FFBD44C382A 0D88D05277977F5B CA9906BD1114C9E8 7026515544A41E46 BF081FEF68EB9E44 F1CAC04EFF4B84D7 1A35816A31BD417D 24EE712864EA2764 E7DA58618B41EADC 7395E218C9D552A0 1D237CB561BF7A63 E6E438DA0A5339D6 409A2DF1D2D7C06C A297329A3B6167D0 E380E8BEAC3D9729 D003E85F0DC791A7 F76D5D53CEBF61E5 AB0EBA98961E8E32 792262E41A8A91E5 722C9C7E208E6E52 E0881507D8CA9813 14B1E5072CF02C32 ED82CDC1F46D4C8D CA8E7B5D537C3A63 BA5C0970F514E5D5 5A0A02CD23F0A71D 50B84822C3382C22 8DA4F2501DA92315 72B7378553056EFE 2E0F4EB11FDD1D11 2EF83B3A1F8176B1 C6342D7A90F9292D 108F086A6AD214FF A41EF0FB8ABCE60D 5BCEF0FB1CA292A2 EC421D2F25CBD9D3 32F1314B64532C4D A3E30B20238B6E18 A1B4B6F2CE15E819 4883B9A0504F9464 DC7FDC207ADF030E 03AED1894A227D7B 3BB6F5756E197E2B 4DADC829CD83F9DE 3184997A14BA694B 496C3821ECDE7903 9C60872D3DB8ECAA 2EBAA1FFF1A1D5AF 520196A0BBB4D927 151278AADB8F0B23 D40435E5FAAA96A5 8489A8D50C63B710 526AECE7DF66F017 B433B8B4EBA74F78 4DB30C6BBBEF21A0 387067CCC2D267B5 B0AD121EFD431041 1A091D9E0345AB50 54DAF5D0858A16AA 243CE3C96E03B172 A7CB00DD31BDD8ED EAA80FA130E40C1E 710DE7FF7253E03F 37C6F38DAA27DB8B 743F9767F22D0EE0 C169CC10E3A78E9D FA56F79139522DA0 DE3940545F57F582 231C0FDA327516F0 9F70F8C5FE55CBED 7C6CF6773462BAF3 636DF19917AB9C46 90527068557CECCB 351B1C427C977F5D F830B2AD8FFFCF92 417EAB46715A28A7 02A5729D7837B2B5 91336D3FEB4B4A1F 05586CF2AD5A6599 CE4FE7D1202E0CCE E884E3C6B2E174EA 82841A0665CEC8D5 F03920D56ABF7B30 4EA298075232CBC2 6E18DC6E8C7A71AC 5E96FAB888F44184 9380A3C37A2C9084 75C9E08D39D810FC AC48FE8EAAAD5221 E0EE64B9A81D79A8 DD3764AF4DF46BBD A69D62ADB63A99E3 719C5D6240B2F97A A8AFBF619A9D9C76 CA6743D813D557F4 F2090898239822B4 4C2C3194B942A082 CD1DF7CF8DDC8D8A 7CC092437602BBC7 2C55EDF76AD368C4 C8944F8A4FF83C20 0F2A8938755CA80B E512A9A00EDE00F6 1376E6043A47EA31 F1590504DDF2726D 66D7818B0F9ADC1A 5827964BD959D81C DD837A5383F1AF58 7EBBE0614E2A4318 156155F69E6C1965 D03BA8A5443B1F08 15AF866326705126 F545B46BD4AC8675 6E4BF7D9E7D45D23 0B68097B40FB7772 C770C6A00751E330 469BDC2ECEBB4BB8 B1A76C5C33082CF3 176D5FACE7DDAF4B BD61590211965951 53203D6CF6698259 3140A676DFC3AFC6 78366B5C3174DD66 C3BF9963F9FDD943 E6FA827DCE3E0E95 E024D7FDEBB3BD30 AE05B04B1D77D2F8 E1596A5CEF16EBEB
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201302121559(name+title). Key = MD5(password) =b26e5e72b0afd44b46f27fe0bbf40061, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 4d677b51-25ae-7773-adda-f44c9b075332 2 6775011d-793d-1c66-80fb-8125ea9112ff 3 ec8dfb2f-f497-402f-bb49-43b5142acc5b 4 177ec313-1f73-0d79-8266-8e083a6d2768 5 7cc39369-c0e4-5950-9ffe-3718937630af 6 63c01dba-f831-5a7e-9efc-9ac25a289213 7 52756eea-9d1c-5fb7-9dfa-13489772e83a 8 985bf3bd-96a8-28d2-b30c-12d34a6a2bed 9 96877f23-4e1b-055b-8662-fe07428b7961 10 04b3f6d2-0c5b-6736-8ca9-15f1a2b9366e 11 462b5e5d-8694-5dfe-972e-ca7ea989d169 12 751b29c9-ab41-2c50-8e95-d116d1578a8a 13 3c2c4a08-b19d-256a-8d71-692f29277ff7 14 1fa15d92-4b19-7b38-b68d-e6f666d5c1b0 15 21a2ba34-61d0-4472-adc0-227850d1ad38 16 fc2eb516-813a-2cb1-ac26-5ad2251c64c2 17 27541f6d-d752-726c-8f69-d9f406def434 18 1e72b975-2d91-686b-85ef-dd4b85fbccfd 19 a443b33e-cd47-8258-b1ba-181c59d5d566 20 01a39cd8-3381-2eb8-ab6b-d4ec0a20ed11 21 87794e72-da71-1d53-a1ab-b3f1199ce1b1 22 d3ab5b0c-6105-3ca9-845f-8148e716b7d9 23 c4084b70-0279-5f48-be11-fba6dc696a6e 24 c007c3ec-c48d-27f0-978d-38ea3d29a451 25 8b4df362-341a-5fb3-9348-12acdc4edd5e 26 996cb2e7-3c4d-3676-8c13-85c3e57f49f4 27 ef866ccf-c82f-7447-a6e0-5caefd0ea1a0 28 24c913dd-5e9f-03ed-bf5e-65dc1bdc80c4 29 fd8422cc-41c4-39ad-8e50-747c96aa9477 30 b2870008-814b-21e0-ae0d-988026c501f7 31 07bc5646-f689-8444-af0a-2c0a0dd306c7 32 6f32df22-ae3c-2f49-96c0-bc5cb3c0cab1 33 3675ab53-61a4-87a0-896f-5439ddee065f 34 28695a07-1563-64aa-84d3-f38fa860cdaf 35 efc639a1-4c9c-69c0-9911-e0c4fe1419b4 36 330fbafd-7d65-756f-a3e3-3c5ec09a3555 37 25073ca7-283f-295f-8ede-e45223abaa46 38 95503a97-7df7-3173-9818-5bedcbebf8e6 39 31a7d533-b221-6761-838a-4a81b102d1ad 40 f5c447c5-cae3-6400-b89b-88d9e4b8110a 41 ad0fc170-ca24-13a7-9d8d-75ee302f0b1d 42 7bedb537-1d49-7d5e-adeb-149db4748518 43 e631b58b-a4a6-20e4-abea-915e8b20500a 44 31583ce4-b7e2-0958-8c71-6955f74b68f9
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
71405552065227427682135253703282866723661720. Exactly this sequence comes out ofnew Random(785).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 12 of Run 41 (seed 1,681,282,046):
new Random(1681282046), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-01-19 21:58–06:58). - Conclusion. Filler. The content is fully explained by the two RNGs.