201302271414 19cdq4
explained decrypted filler
seed 962
From the post to its content
As posted (encrypted)
0E5C7CA09A9E9385 4EDE68EEA35280CB A7F87893C9FE5CC3 5C6BDEA950B785D9 DA300EDF74AEC60E E8964BA1A0DC918F 16D0091277A20571 578A131D3C586B72 40903586467E3DA0 DCA10098B4BE620E B02F4E5F6F8CD7D3 66780E17F5E4A25D 27E75C0540DCE646 5757245BDEA31F6C 76C3FE783CC7111E 259434A86E3DBA24 EEB1C700474605BD D33AD60AF46B0485 8AE64886D15D095A C988BADC49F4747E BCC78DB0EC55A166 9FBC897925FCCB63 16B41CE21DAF225D D0FC445037A90161 9192F12AD6DE29FC BDB6483B00AC4859 CCB31395B7468D72 D62D48682318D24F A0F5FA9887D68DF6 7180F1BE4E00F2A4 972B6054CB957BBD 1BFE45FE5A7283AD A7AE6BC79E640CE0 9B8AA6D7ABD40445 4FEBC26062687789 A0790F0B0F68CC99 6B5948FFCA92EF44 A32B09C04A395065 BA0D77CDB29E7E22 DCFD5B2BDC33A12F 6BA2F6160B96B18C 561BDE9B11D43072 3B711F58D77A3CE1 199A7C44CE6ED52B 08A4F1FC829F5831 D74C8B0384DD649E 8BD0D6C64106E11B 98E63E3DAF7C8DEA 9B91334D26E2D4AB F74B7437ADECB2D4 3D427BD678FF6B05 B47F703461FB107C E06BDDA88D36BAE5 160B0A851F3D5F6A 124CEB240E1DEAA1 583CAFACB810B7EC 85BD1DA7DE9AE5D5 6E431F9114EA6BA5 EB1AF7A49DEDF2C4 CC57517A70CA2126 F60F16ADE6B1F63E 75370E182284D55E 3F5DB12B8E077828 DAD576E289792F68 A4C93574AF851B5A 826007A5FF29CC1A B4E0BFFDD811F169 55B919AFE0E99672 FD52900D6A4FF866 6B3F267C5A8531F6 193361C9946457F4 B115BB824D16DEC5 83D67613F4CA63BE 005F75E8B66D3D03 CC32D4549D8C0EE0 2E2056305D5D82A0 79037661B628FCB9 25E245CB74B279F8 3BAC4360B9A8179F 23B76B4FB4B995DE FCC2C87A28F0232A F113300BC3B29839 567BE5EA6AB9D0A1 69329F38B06CE66E 601AB81062E871E6 370738E08B1F0D08 FFC19C23DA485D0E 80F2A3F40CB5473C 393F363FD6E7C577 6E05FD418E2A9926 82A0CC03E32C896D 5EF3FB2D08CC6485 A2482ECF65D64F78 D3287AAABDB1595C 62DA89F2511F8EF8 5C775819BC74548E 84A72DC2339609BC B7BC1A1643C7757F 45957A210700318F 08B206F452EA806F DB669F18629D5316 76668C5A4593CA2B BDAB130226661033 CA13FAD1C4C07853 ECF6E87AD4726DE5 2386E8B6A0689A4B 79F5B7B4E60415B5 E5BCBD6CDCE1FA1C CC9123F95FC7F2E0 6358E50E31E7253A AD66CA5FA66829CE 8BC106CEEC390BC1 9668E66575CE9686 67F56E47047E82D0 6123D88A8813F3E2 62383ACB2CA74E91 D042BE18DB850BBF 2B26741E2456B959 5016202FDE133F7E 1EEF583BCE263D67 D39A7E1ECDD83250 A5223F910173B912 7610B8E169F2A8B6 898227DE1C24964A C941B9A6C4A7F33E 49260411D7E046E9 F2E4315B9234D3BC C14102F37CF7195F 653B648EC8387354 CCE1E3F7C66231B8 02152BE272D40017 69D397B6A4532AD6 1781BA9333451682 992CE30B96DD7340 34156CCC684EE8CC B4708966110C462D 17E1F7B734DC7A38 E8F8C1A5910788BA 1F41752608391E3B B8FBA3919B76B557 DBB3E8275776F983 64E457ADE87B3B47 9298803C3375ED48 39E2D24B11DE9623 B668968099720573 55A2F7E460AF710A 0BB7C98ABDC8BB4C 227DE7044105D150 D1665E822A537A2D 631C6C970CB47536 5351B720CA75B6E5 C62B688A1010FA44 70DF98CE4D688E3E 5F331CD2321F1971 6B27F2F49BCCAADE B8762055DBB746B1 FCA08249F08BE23F 1059EDCB0CA820C3 10E139AAD5647309 884C53690E30CA73 F04121EE5D2EDD89 2FCAC773142BD0B5 8DE09C0912211959 8E24B34B27DCE171 953A8BEBE894D511 ADE97E9458D1EF6C F0BFB54CB4F2D78A A643B64BAA2159B7 3A5840B38AA2250A FFD35FE7BFE4BCB8 11718D2686EF05F9 9E523C6A80475A51 5B9D5F44D53CCF03 266852DD926A71C8 91AABE135BFFE01C 33C07C3EDE11D023 BD770070614D5CDE 1A67348281B524C0 AC321F7F59672C53 12256FFD3A5FA0C1 AE557EAA47C05E3B E6476637503A8A24 9E4ED9C791C5066E 7F1E617DB70CD859 E19CD28F441B3F90 AC7106A05C833323 A8EC841DACB37A40 498EC327F31DE231 78F56843F8F4CBE9 26939126BEA1D8BE A34F9F604D6D171F 1010E25D350E7FAA FC0FA095AB7B0C60
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201302271414(name+title). Key = MD5(password) =9bca984ec5ff1ec413e922aacfd7f284, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 5866b428-3190-22c2-936d-3ea1190dcc49 2 18887d5d-bf80-0767-80a1-063f5dabf309 3 8c11eb7b-4388-163a-ab1e-2287fbf654b3 4 0f0276c9-d74d-8613-b4de-5f9d05039ce5 5 fc0d91b5-88d2-4fc6-9a10-c2e9469e0d45 6 8a4b3b75-df52-2ce8-a183-102377e8eabe 7 4ecb1e87-9930-8f94-9efd-cb687e34b824 8 b949a906-02ab-05f6-a6df-2115154504b9 9 8875e9f6-0330-8958-b22f-4763120b4255 10 c198d694-bfd1-0698-ab4e-d814f0ae19a6 11 6ed0b089-d0f2-0d47-b675-80c6fb85708c 12 a0e14356-849e-42b5-9929-946ba2f82b1e 13 2ee80c61-01e7-81c9-a4f1-60b5421579fc 14 5b031bdb-84a8-8776-9288-3b8189a81d86 15 85aa6d0e-b5ec-3b82-9b00-1e8f6b172411 16 99cf2fdd-25e7-7c90-8528-0320f7b81306 17 f00234b4-96c7-2c9d-8089-23199d527643 18 706bceea-43b9-36bf-a497-e87bf3e7d670 19 5798c178-760e-642e-9b10-d324a6038215 20 71356358-3a35-757a-ac6f-77c33899ccbf 21 22325418-4da3-56c0-b3c5-cb7cafbf2353 22 bbc38bc5-2268-7664-9e01-5ff417f6f9ab 23 5a52d0cd-d596-50ef-908b-de5c8b4a651a 24 c76cee3d-8d98-0d8c-b7ca-7d47a75a13e7 25 cd5e790a-0bcb-86f8-802a-181837200dad 26 131763a7-0c1b-2980-a00d-71aa42391e33 27 c82dd1d1-247e-05b0-a143-4beac9590f73 28 9c6d5e69-9f37-6401-a8c0-513a5a384e54 29 a07621ac-d095-24de-a3c5-54b2af8725e8 30 dcbea5c2-d7d1-70b0-a36c-6897f5216aee 31 05e086d7-d7f5-38ce-bca6-8c8d40da165e 32 39312606-8b37-790c-85bf-4d99ce3b379c 33 d4f8a1ec-7f76-13bf-9d3d-e33c8c5deff5 34 a022c4c8-51ea-05c2-87f1-111d97a4422b 35 1348a1a4-7fd2-4a59-ae74-9c8c13c77ce9 36 de84e589-0025-4716-af7c-4a529689c50f 37 7ab1cc6e-b5d4-8d5f-ba91-959189aedec2 38 298cccb8-892a-807b-ad5a-d4375d3f6db2 39 82fd7c5b-c132-0b83-99cf-06aad734c10c 40 41a99641-95b6-17e3-a485-7493630d6e59 41 9302cce6-83c9-0651-b4cc-338144368a58 42 07489bc6-5559-8412-8a1a-bbd22b7bea23 43 6c47f685-c660-4004-9e32-7ba4c999788d 44 d08c09d2-9be4-15af-9126-6cfb9bd28623 45 95632a2f-a8b1-089b-8a4a-4d0320255535 46 46a94547-8d4e-850c-91ee-c4ee0aa6d5cf 47 64964b63-971f-59a7-bf78-3a1954afbd4c 48 1c8ebaf4-9973-483c-b4dc-a1d5c665a6e4
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
201842808004883723675750820627371044880108410854. Exactly this sequence comes out ofnew Random(962).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 65 of Run 42 (seed 983,934,859):
new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32). - Conclusion. Filler. The content is fully explained by the two RNGs.