201302261402 199vjq
explained decrypted filler
seed 927
From the post to its content
As posted (encrypted)
1E2E89A8031C6A54 D046BED2823A1461 335430124E17B62E BAAA7D946385031D BC5CEBA8002E9C0A FD8318BE2F86D115 EE358269CD0C4AFA 6DB3AC72432CB191 346990E7CC35BAE7 040FCE02A64B96FE 8460E240F237C95A DAD31DCB0338A565 10C26C92FCCBC434 70AB4C0F42CC706E DB51F41E18177377 B10F9298A33CA23D 85E7FEECE5C34009 C54E5C9C39B0CC4C 7A557393CC720065 17B43AF04A63C9C3 FE716B5E205FC920 4B15E1AF1FD3AE13 CE726316B3140821 716AD52C008E9C69 B73050AEA68328C8 E3721D87422ADE17 398FC72E08E5DDE6 057B18280FDBFB75 E65B50C076928B72 D7551596559BCDAD A444324D22EA4514 0C9252BF5DEE3D30 28831190522A72EF 7365836E7458E87B 519F4317340EA6E6 3DCF4E728C43D9A3 30D4DE9C76B670AD 5627C2B1C2D65438 41245BC6BBCB901C 3C6F8DA91682B5C9 AA011CA57C1FEEDE 89634C4CD3548F68 06B11A9CE7E91ACF C688352F0BF39F5C F0CB9A2651DCEAF6 D62BC1B72F9A349C F5DA8DE9E3AF4595 1FF834A73D1C70D6 C112B40531BE8A30 B86A5779C39D1262 BCC3DBF77C7F110F D7D6D025C0B42C97 08CC5CE5307EDE75 F83E656C798B26C0 7C0E4C6B2A545653 7F1FB0A6FC758714 82FA20124DD4CE0F D6383BBD52BFCF5D A1E75F9BEA42BE99 DFFFD12E14E33131 94AB83B896FE85B0 91F2E676A7E68B11 B72EBE1477BC89AB B09300DC534FF5B1 55394AC2A8D8E61E B823A857D24B4A93 7D880E104AC85317 79A338B54C439E0D 939C10DB800A56ED D535508DBE21C98C EF795AA654AEEFAD DE819E77FBF678EF C1E03D4217FE3488 DA297138E52BD411 2E4F50024A616A24 52983F1AA7359D4E B9FEEADB81CF6BBA B84030CB26BCC623 7B6E9A76DA704282 C909848C1365622B 9419C41C3B6A66F3 79267CB08F6DC032 49821315DAB3BD69 9BFB9DB493F64044 1D7B2107F13BF82A 6B8F0340A1A435C1 0D389465FB760C18 C82E70B397C1AD05 0A25E43809A37927 FDDCBE52048E6462 A1816C0E5355333C 77972F5602D8CFC8 5E45F50F4AB51AA7 5B79C254BEE5A61B 39063F4BAB6923BC 980B189E13A644D4 174D62556C7D54B8 BE859230F665B2FF D20BFF8674112F5D 827BCCFC20714316 01D9DB14A5AE58B1 0DC91E3B85FCB33F B444CD06755A6F4D 27CABAA9BE0F277B F8A401D0173E0590 658A7C338EF35863 1235B2FD97289F95 F74E9AAB2AF6BDDC 17E1CAB25FDDBC50 0162C8041F1CAD73 A81870802D6748B2 39D3482860A29E7C 6EDD95A2E882EDA6 64F10F0F538881E8 605D7B36ACBA16FB D22617B443966110 F13A960EE5787741 C4BE5D1F3730AA48 1973C77853AB6B9B 12FBAF045230D758 379BF24F4832F92D 6565E9CF90169C41 C5E8099BBBB8FF8A 62445703B8B7301E E8514B7A86979411 FF5EF0D0498E286E D295E5221DA1C469 6DADBB8D09EF3520 6DD3F9FAD025DEB2 2D10D8A21EF6D721 3F18FD0F948E01A7 74B9560665840638 BE234E22C00EDAEF 8B1E248C03AD467D BF016F2647E4CEA2 F9F4EE0AD43EEBF3 BA628FE50444C310 7A62848F84DC338A C30A89A74F2B1FD7 424F1BB21D423CAB 8E6557E9117F0173 271D5AC780170134 D1095B8E15B684E9 68F122D3F4B11F31 F2938F566EE9684E C67BB50D2DE52682 C2ECE98CBAB9EAB4 9A6B460886D58859 575B4A0CBFF298F4 A39918BC81947CFF 1708DEC9319B772A A68476B732F3D834 15195B9422497317 ED04F68F7B98B7AE 20506115A24D0177 ADB7402146BACF23 14DE144F3C9FD2CC 730B56AB43AE9F3D 3CA704B3D09B0D8D 8BEE5BF9B5BAAFB0 08B151E700A4E686 FD9E24EB087A2693 92C54AC20ABF4121 C2FC3BD232314107 24447AFCE09CE664 F378A4D18E72D2F3 B697116F43D17E82 2667DD3A71345CC0 47F8F25BE61628A9 07AC79AA26E9944D 74EA46FC5EEE637E 3D97C9AB114A9074 6D942C3B31A817F0 507178C01FB8B718 F3A28088E6A9C48F 7C77857AE858CBF0 D3EB4538B538B17D
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201302261402(name+title). Key = MD5(password) =f72928684ce9cca5d8d56e7453e06884, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 bf6fe0db-0ce6-06ec-98ec-34e7f554be09 2 96144f10-bc86-7961-8b19-37de57b7d532 3 8bea062b-e65c-6906-8257-ff70ff03f5a3 4 c220514b-5591-3403-8705-1e9a74918c1d 5 2eb62475-d726-6943-a46c-e68f161060f8 6 6c09f0a2-f11c-5f17-a241-b1e31bd6f05e 7 be1b7847-5b34-2665-814e-c2716b9b7ffc 8 236a28df-0118-4570-88bc-0d311f8580cc 9 5ff0a55b-b789-546d-b811-de442d5fe8f6 10 f9351f11-bcb7-0018-b2c6-f9233a7d9ece 11 6c111a89-48ac-20d4-a9a4-ce2595be2028 12 573754b7-b94f-1662-9e3a-651583331635 13 33f0dc72-8923-87f8-915e-aec0c0dd2a98 14 e2a9d8f4-31f0-6388-ae9b-dbdca99d3948 15 e0fbc7a5-db2c-754b-93c1-1fda1198e81d 16 62f3d470-adca-8618-8358-8ab103622834 17 68499829-7b3d-4a87-9287-34d5999fe2b7 18 f7d202cc-492e-6f15-b11a-ff1cb212f4ac 19 bc0fbff6-c572-61aa-b237-55993cd85308 20 8d0b17b2-88d8-2945-b320-c8d416221899 21 d98b610c-b1ff-83e3-ab9c-78448a3fcca6 22 9bfc45c8-ca1d-231c-ac22-0c35d288db25 23 5ab38e82-2aa1-553f-8609-0d8d151a24f4 24 14b722ea-f09a-7f8b-8712-00a43ff9b478 25 f52195bd-0905-4d0c-b975-ab927f56f085 26 9c8261c9-861f-692c-86cf-d9d1f51a1161 27 24f9a1e8-79f0-86f6-832e-32c9b4452500 28 0e3d0135-ca97-00b6-bf8a-39a01e8a312d 29 799aeff5-4704-5dc3-bb86-d119d63779f0 30 e2eb96ab-ddf5-50b7-b1fb-44015c3e55a5 31 b9cd594d-3224-30cb-94c7-0532d5d4b2d6 32 28a2d674-e804-5796-8eaa-4dc343ab6c2f 33 7df19ee8-2b66-08a9-a30b-98d0fd5ddb4a 34 9a50d0a7-6d31-218a-a648-3d50436ce85b 35 c9b98bc7-f162-271e-a1dd-52615a9e9bf0 36 47dae9a4-cfe9-894c-a511-5676e717dfa4 37 bc8d9509-5f40-84da-b4f0-40c01bb2a11c 38 c43b527f-0dda-1264-923a-522b117ba0b8 39 6257fe8f-7c26-039a-a083-987304431db1 40 78e7480a-d2e1-23ee-b36b-cd6f62789894 41 4af9bd5e-da5c-109b-b87d-d0bcab48a59f 42 1e06a37c-ff51-2390-b317-5526178be250 43 32867c84-5eda-4ed7-96d9-477e647c4ead 44 0015ca25-6ff6-1063-8f87-26ed464f1ee8
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
07636524502186784662825746805535022881021241. Exactly this sequence comes out ofnew Random(927).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 43 of Run 42 (seed 983,934,859):
new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32). - Conclusion. Filler. The content is fully explained by the two RNGs.