201302271732 19cu3m
explained decrypted filler
seed 826
From the post to its content
As posted (encrypted)
5ADC26AD9E872E14 17D0271566BE58B2 6391C63F7AC732FA EB26B90FB4C4BF50 014F730BBC33E334 04390C2DFA5D6E33 9D400ECEDBD9E4A6 D150CBC56C22D10E 0E2CCD31192CDAD7 EF5307D15D6446B1 090E37E50E376C14 166A3A246A84B2F2 6174447D18603058 60AAA6613130E98F B3A61C2BFA926121 0284D5320B6BC0D3 BEB7E52B2B72404B 998A11DBB518AE8D B24638853DE2479B 780364583EDF4798 60266EA95C8A43D6 F274B692FD7FEA57 687844358244BB3F 32E854D225FE56F4 7E391789200B92FF 375710698C90FC9C 31875D4BC4CF5640 F663E2F27766C0E6 D059372EB529193C FB7FBCD2B6D2D17B 6EC83477E09F1D9A B174A4A4FF9176F6 AE6B66197578FD68 BB9D20E737B9F073 B3420E742FF4962F 720BD6A266E573D4 F6ECF586348AE5C7 B923491075A9EF2F 28F58332A6EE8107 47A6FF7846FFE433 81954767382579C5 1D53CCD4361BABCC BCCA7DED2D802D5E FEEAD68742BB61E2 C3F371C56CD56BB1 EF19380B6FCEFDCB 9F89F329F2724C62 8063A8B3DCC94C76 5E9130A43D57E7A0 CD030653DEBB465A 317E8EAE58364849 A15B10AA0FC46B22 64C4C2E475EA0869 E60E4D6283BA8D93 805F4B32DF0D41E2 3F2C1DB445D98386 AAC4EC9F21D9A4CB F4C01D84261114EB 43A20C0193C8F4D0 4B93FE40AE21B6A9 EEE8948026E3A0C0 5B80D56EDDF6CF32 6E94DAF7093579CF 3D0429B725007790 6ECD4EFE0620558A 9037C3EB4213FEDC 3DABB5F5DEFE3A58 6C988D61F8F926D4 7B0BF4DE457AF268 03D06CB0CDE8DED4 C30504D36C58D22B 9E498E656CAE65E6 2345316019919A06 D209648752AC8F35 14F9E4BE20AE03F4 A6DE6C7E6ABD39EA 8BB09A5E8A34D201 9865B4C1C059BBC9 3E5E255C7C0A1F25 53A578099556D6C1 1A2DC135B9062E25 19B945DB912B02AA DBD561E0B402707F 2B2028319CD34F71 BB52EE2908C70BCC 38FA0DDDB02786B8 9682BF902E0B5298 E6F34ADCDFBE5350 BE23F56F8EA6E5D6 BBE90C39296E1476 D320383EFC49D61E 766C8532BB0350DF B0B87359EA9519EE 4E5A2C11DAA14301 E4D5192D4666323A C06568FC3BE7B5B8 276A575FCA9EBE09 EB451CA65723F740 CF0702D05C84151F 4457B437596EFB4B 005C1A5A137F9939 74662639303B368B EFB936DBE104225F 89CF433C62AAC370 5D0507785C2ABF37 28C5CC75BE177331 49DC158A0151DC91 F91C646AF8D45814 F1F7B5785945FC51 B6F517707B747092 F307C18186BBA8CD CB7F0D8D62A268A0 4C9A3F37E1A39110 E585EAA3AE200140 9F2D2BB6C79264AE 49FD18BCFFFCB10D F5E66320B8DB283E 4B957061DCD30B14 65CD28C234CB8C38 D5D87FBEA91FB1D4 A4138F6E9B309C3B A89DDCFD1A22073D A310BF9A087513AA 8D048E32E6F9C458 6F5AE40DECE9DBF3 1FDB0BC1AAEC125F AB406E38C6BCEF96 E474C648AB3C1434 C64274851BC9B5AA
- Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201302271732(name+title). Key = MD5(password) =f572b5523f5a757aa1f49462105e7dca, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).
Decrypted: GUID list
1 fe2a0cbb-d7c0-2157-b111-60c0bf1de37d 2 7ba86a76-03d2-1243-961a-01c8e406b861 3 ef194532-4c65-12d8-9778-a4abd61b9ef0 4 6aa3761e-83a4-7a68-a2ba-5685bccf2c12 5 59736113-a466-1dd1-aa26-7e1db4b064c6 6 faa6a39b-c7d5-3af0-ad2c-32cde396721a 7 d0823dda-3ee8-04ab-bfca-ded997c4a669 8 667bf61d-1074-7b94-830b-502716c95cdf 9 d7a3843d-0b67-143d-bb28-8e27efae9a2f 10 5c748f1c-7c70-7640-81e9-5492c16d952e 11 0043fc96-5d91-74a2-9057-a0e9a471a9ff 12 f790ef79-5df0-371c-8cdc-0d4a251eb584 13 bc19603b-f806-49e7-8aad-aa2ed4f0e8ea 14 8f3e050e-eeb4-1580-8f87-3cd2ec7c23aa 15 8e67210b-58e4-115c-90df-4a1503992c7b 16 3b0e3387-c79d-7620-a92f-42848a704cdd 17 ec8dfa94-38bc-0e1a-b451-d48e63fc994e 18 98eb07aa-a90d-13aa-99b8-b7a85b31d838 19 e7c2b437-f821-041d-ac6e-c20a3aea0571 20 862807ad-7fdc-1842-a448-ec524b2dd9a5 21 bf285d21-49e6-5e2c-a290-51b7c9760f4c 22 5dc4dbe4-05c2-40d9-af0e-ce5ac6dc5d2b 23 06b39419-ed97-55b0-81fa-0ab58dc64c88 24 24df24bc-9ce9-5cc6-aa87-be81f4eb31b8 25 eacc35da-2ff0-59f0-a071-5b43015d4401 26 7d6ea9f2-99a4-75b9-a7f0-228aa856ed44 27 1b7efbcc-869e-0a08-a323-5ed9cb895c13 28 d0d91081-c5f2-4875-a001-221813479c57 29 6b943382-bc23-612b-ac9b-24cb203b0b01 30 c614094f-5af7-2a6e-9728-349bd397efa7 31 8fcfe1d9-85d4-1cfd-adec-5e86f2ae1caa 32 96232ff7-71be-042d-ba4d-b4af4ebb0466
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
21171307177341170101545557046210. Exactly this sequence comes out ofnew Random(826).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 68 of Run 42 (seed 983,934,859):
new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32). - Conclusion. Filler. The content is fully explained by the two RNGs.