201302271202 19c3lp
explained decrypted filler
seed 70
From the post to its content
As posted (encrypted)
C11612C509531B70 3DEC7038CC82AB85 008CA0F3AD70CD3D 780A0602E9FEE7CA CCD97810CE2FFFBA 742B2C96E1A9E3FC 34B073169A4759A2 9917116DEDA2EE72 02950E76F455F395 45C092177C6FAFF1 D5ABA6B8B7DA3A6C 19F5E8243B2A8EE6 EC82BF3943B1CD93 448E0AF79E857DA9 797AC01D1DF3D53C 6383A3F111DE2732 F8E239ED3FB7ACD9 4F36AA3F5A5A5C64 67397569BA4184C1 F36EF50E0AEFBB98 6285997C8D4E42CB C57B2C0CDE72167C E296F05E33AF4C27 4F1666FE650045D7 A95A962657E2E67D 7C98C0B8A2A28D67 55FDB2F32FC5AF62 DEAEB61FFAAA5B0F B099AC0E4797CB6B 7476733356D2E8CE DAFA07C62CB0BB8F 75F5A66DC0077334 3C599FCC674D7F67 935B9C53A7323453 B14270B0A5EADB93 A312BA2A6FECA321 B7D9EBF4A8C8339B 6F16868E50AB33AE 06B14F747848B0E8 EFD2E53F3CA49B8B AFBDB2345B0007A9 495A31CDD4A4855A 7FFE08F72D7FFF37 8B915D0A59BBBCBA C6EC420C59EE95DE 641662499C9C2182 31EC7F1CDF39A244 D8F978EB1C6F38FD 55A46D62D43C1B91 A6D5C19A636F37F7 F9C0A9F43B8CA294 33FF5808BE46938B 61A3CAC8E46AC966 9D700B9115090E83 C093A05875928DAD 80229B7642BB1367 362E786F16218FCC DCE27CAEFC0C40C2 C88C98AD11235A34 59C42EAACECEBFF1 E58156B48F8AD287 9AA65C2900698C47 7CB0F6AB88402FB4 EE59FA59766BFAE0 E613C9D649E76EC0 DA4D99FC1F46FA0E 3D2EE23A85E5D47C BBB927C7F81CB574 AD31140977E4AEEF B9A6D0614E54A171 A3335BF13E0D914D 047E034419A38532 D349CC67557E869A 80C65EFA5EDE9F99 4FA9FC99F595AB0E 1F07E337F07F149B 1C4C15A69138E981 25B98AE010EBC6DE 4F2F711100D79A05 2CC5E9719E99229C 27E0CEFE0E4595A8 F660E156E6957C47 C300C46D4C48F463 8DD9C7EDCFE5790A C1466FFCF39D07FA C320B45AF988F402 76165CDCF9D7BE4B 079EEE4ED3DAC497 E01496622DB27D1A D18FB58826915AC1 ED244F274DDE1ED7 8A7AA59A57655F9A A985FDF41438DC06 0F27669D02DDB970 003F252E70082F43 6D5BF9B1F3FB7802 11E3985387711C84 A28574D5F2F3B8FC 4D873EBE45657AEA C82EB8C6466BA69E AFE074B86FCDF960 172B010308863336 E1C47D32B5258965 973CF077442D414D 5DF419F1B80FDC99 C90A6300A0F25A6C 6114F873D337B038 629B307833C7A193 5879160B3AFD8361 70BB21FF58598310 A50A8B6FF7907FBB 2677C18E9DD1E92A 7E37F6FFB503DFD5 D57DDFE6836F10B1 C4F509BC62A41049 4F669657F6FD7358 26A2D98F9296D5F9 D6FDAABD062B1CD2 5331E945A3BF5659 892FD4DCB0081DB8 2911005C98DBA3F3 6D8E5E937A44F152 CCA1F0B7CFCD7D1A 7B68E814AAA63481 4723CA67BFC0BDEE ABBB3CB2B57810D4 3D070226D4EEA60A 08E4664C7FDB171F CADB0129A1A6AE6A 626835611AB62094 7C5DC67F3A3BB67B F058C2300BEEC578 0EC628F8B1440E00 4076080239EABFBC 22BC426F8976BF87 0F0F1BE0F4E45C59 F8A9D35DA2AA44C9 76E28497D0FBE191 08CCA5F8D9F35973 9252C10EEE91F5E3 DE4424D25FF75465 1C949AA6FA4E8A0A A8C2E2BEC349C154 CBD8F2BAC52390F5 6AACA8DBB0D75B01 822ED465D90C706F 08420EE721CA9FC2 66F6C04E3EDE5A23 AC242A0D648CB60B 7DAC0220C0D6842D D55A401718DF23CD B1FD54198943D5FB F2D058CF7A803FB2 C6BEE7997FD18685 42DF9CD096F2F6C5 700435D45552135D 9E72EF2A6E1F663A 05B82E31876C66FE 054A12747DAEE7FF 36CB446AFE4636F5 7616EBAFC48DE18A B84260D97A1A25AC 82E4835DAB92A2CF 5F366B37791C1C53 60D9197EDB217062 019BED8EE4FC8A99 D4346463B4CCDC42 80C80EFA466B0AA0 B4B97FD6DA33B8DC 3B0C28EA66527331 498202CE72D2CC0F B4C18C3D6A72398F C6BE7C26DB80E016 EEF1D385CCBFF376 5981A69A69038FCA 684CB60C4981CB2A 67E35EA153D51D7C 55E46AFE3B984406 361FA2DBAC85DB20 557905038AD4DC10 867FB570F3D5D611 6DC9CF77ECD8C706 3E9BA98862DD721D 4E1EABFB46425A0D 8172D4E45845523D 5603CEBFF5CC7E85 DFFE550A1E845649 6EF303481E193358 DA07926B320EEE9C 24DC4ACDCB78F8B8 F2DEED710495AFE5 FC202BCC2522F03E 1733A2DBCB3394EB A74AEF9A7ED06938 0B0A8625C5D7D3BC 9E458A36CC0E9486 ABB61CA98B070A5D CB90FEC2278831A9 744AD1B8021CD8B7 282AE3B30CBE5908 6BC543DC2C2BF74E D9F6963D695A80B9 68F6A625A5CA7988 BEF247A1E08A59ED 9705EABA2FDE30CA D77BC8089150067B 568AE958B0C87D37 278E407973E71522 50731752F6D1B6C8
- Read the ciphertext. Strip whitespace: 3,344 hex characters = 1,672 bytes = 209 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201302271202(name+title). Key = MD5(password) =c3c6b4dce35c7f3b338a107d8e70e347, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 52 GUIDs as hex (shown below).
Decrypted: GUID list
1 e03b532d-dc39-28f3-a03a-5dab315eae01 2 5f036658-9e45-3c59-a780-bc6670b30ec5 3 efff61c1-e330-6721-8a3e-308fea4a2aa8 4 bc00bf95-f225-4101-b47b-a8bace6af720 5 494bed63-0e3d-7176-a5d3-c467b7c3f1f1 6 b1f913d6-6208-66fc-89a0-3d885ea64c64 7 38c95c6a-f6ec-217b-b5f1-e373820a39f7 8 4f7f7a51-6e2e-51d0-8031-d61688d43eee 9 85765db1-3fe3-5547-a2bb-3ab4d200351e 10 868d501c-b2b0-022f-9320-07c26eedf81c 11 13143cbd-f43b-7b79-b8ba-cc83e47d2c11 12 bc28602a-dd83-133d-9ff2-302ba953539a 13 a615a390-3186-645c-9d12-5b881e6830a7 14 3941d24f-b768-761d-98e9-1300c9b6d9e7 15 a6ff8903-5d4f-8f09-ba4b-ca8ba872d013 16 451575f5-c618-6d65-bf23-4496dd4a62b2 17 48400c1d-d188-215e-99f1-05c5f39370fa 18 d1d1607b-c2d9-3a30-b61a-05f8d62d4b0f 19 a43c1b43-1674-5efb-aa72-79d28260603f 20 8591ad37-13af-3476-96d0-0b57974ebbf0 21 4d1fbb19-b079-1dc1-a9e5-fff38ee927d4 22 b4bda139-d615-0cf8-a170-1646ad8227d4 23 529e6ef5-20f1-72c4-8f56-9677291d6331 24 ab84efce-dab8-4595-a2a6-205f9c31423e 25 893184a2-b992-5db8-be46-4aa65d5bdcc3 26 2ed13c23-cd4f-4187-a323-54d15fba9d8f 27 5994adcb-da57-12ec-9bef-5e48498fcb8e 28 d6d28e6b-e797-0212-a8ec-909801b0de25 29 46f6c83e-e8a1-79b8-aed9-62f811a94abd 30 b29068ec-8267-40ce-b684-94162364e394 31 cadd1cca-7b14-0333-b6f7-ace80dff4177 32 48f34fba-43d2-8a12-84de-9bf6888fe493 33 02f236ff-a25e-409a-9bd3-8648fcc25168 34 c4f689e5-48a3-6b61-a06a-a3e6fbabcaf2 35 3b6cd630-0ef9-0c49-a08a-c5a5aaaea9cf 36 aafdeb42-b06e-75f5-a937-0880bf8de236 37 555d3e6e-d664-0f5d-ac3f-2e212b44f44e 38 561089e3-35a9-0dd5-be39-6352363b8f59 39 0a05f3d5-7b63-257d-8e0e-b242e1a7e800 40 0af61b29-9b37-699e-a22c-9e3836a04d65 41 d2d78cd2-bd91-2999-8c73-a252dc96bc0c 42 9996447d-61b6-195d-a051-ba610e8da364 43 3df21b76-bf4a-14af-b4fb-28ad9166a8e2 44 f152ef91-89aa-1c40-b412-42d5815833a4 45 065f386c-c74f-756f-9225-06e89a9f8046 46 ca67b1e6-37a0-33ca-bff8-5d74e7a29f43 47 13d3bc8c-7b19-18fa-a4ca-03157c926bea 48 e293417c-1da6-4ef7-b5b9-de63aef3fe18 49 7d01b3cc-0a22-8903-8a17-aa41884ff8d4 50 e205ab52-804e-4246-8f83-d8bfdcf3b409 51 64745ef5-4e52-465a-90db-d18bd5a2671b 52 2f10dd56-d9d9-2d82-a749-e538fdb4094f
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
2364762550716786235310745410740846070026211173148442. Exactly this sequence comes out ofnew Random(70).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 63 of Run 42 (seed 983,934,859):
new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 52; the post has N = 52 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32). - Conclusion. Filler. The content is fully explained by the two RNGs.