201302281638 19f5pw
explained decrypted filler
seed 649
From the post to its content
As posted (encrypted)
80842C572B3BEED7 28E6F42FF0CA9BBE CE1BDB3EE2661A01 56186473B5A88E8A 459277A35AA9E302 72C1C4EECEBF85DD E09D1B225976FACD 64F2B21CA3059670 6EBE00A442BC1ED4 791E492FAC51A279 B0ED981DFD19949C 7F9397D66965B529 B24FD27B502CC639 9E38D5DA43CA4A18 7B0C1573A5B31A2B AE0F4B943707A0F7 1C98FF923351C72B F61362ADD2C1B87C A2C56ED107D1C918 685706E0AD621A23 A1237D8B3C792001 C259217D12B2F69E FB3386B80C7949E2 7EE36113A7CFE6C4 9E5801B9F3E96957 DD80C9565CD69C9E FBED25D255E05517 E5F88A51E362A118 B58C35C558A6162A 528B13DEC0221B20 CA24067503F35DC1 4923D97E8AE9536D E22E6BB95760B76A 906C77FCD05D7FF4 20E392A9DB3775C7 BE418FED5B0467F0 0C73A44824AE8A3C FB9F29AA7BD66123 21F0D579F6493A0C DD58195267FB12FD 9C90537EECC77B80 52FFE04BA87F96BC 2D3E0CB061F7B9DE CB2B956264470FA3 BD5D57C1AA014C67 E69700C51DEAAD56 8C3D571D8870E765 948132B53335CEB8 29AAF5C4A819E5AB 97FD84F32E71B036 1F6C41B1A6FFE4E9 2AC99189E99F6BA7 92644E0EF2426C1A 6EC3B55FCBFE69BE 7422222ED1DB31C6 DD0E871153B63B26 A3389F2A7F4BAD9C C5A4F41C07BFF762 A0B437A72A9D4EFD 3659466F38EB5EE1 2A6B25DB44E8805C A95D72D5596A6B31 6AB41DF51D6ABE5E E25151CFB698450C 97F4C5693C0E0ED2 B101D93D800C13C3 DBB431530AC1E3A2 9CE23B349693231D 4A22767A642F4C03 1FBDCC6AFF7D16D8 3D65EF789F600E52 A10C2A02EFEE80B9 47AC290C741AB6ED C385D3141A1CD83B 87F55E5DFBFAA88F F8D4FE8274B02374 0E6E154CC49AB78A A7A46360178FCE9D C2D809DE402D91FB 2FBF281543853F36 FFC1506B061B0B52 5D813DAA62BD53C0 15E3856735CB7616 D11A5E3149C1C5E5 AFEF19A314007485 F2ACDB64A64C7AE0 EBF3979A954D8233 A2EFE1E43B36681A 33EE5ECFBA663C05 E3B407E53CC04401 9DF1AA4F0FC969D6 1D58C2DE452830A1 DA03B966647CD0E1 38F69324D6978E35 34BD053A3AF9CA4C 2C2FD6FED4ECEC2F 9FC2D30C4C8EBA70 06A756889012F648 FFA8743102EAC113 2D87C4D8450C5A83 29155E76D604E6DF F3E5C8296D707E1F E66641D8BBA4357E 89B19DA156C84D26 F6225B59A3E77597 F55EB980121D3EA3 1E100BFD36B7515D 841C7464E4AA2762 EAE06B97B45D445B B2CD342778F00667 4A533444103D501A A5C835F5DF20D2D8 D4E37C70C9A54F9A F42029231401EA16 634D617BB0A42A23 C551EE506756BDDD A810F8009F76AF1F 469DB89C62D62246 4C6D33064A772436 5089264203333AD7 813E9798813EEAEC D7A4748C5C4F3866 E298B477572CFF48 1E7BFC1ABFEA115D 00D340665750A832 EBB9E713DDBB7665 00B338BD759ECE9F 54B412A7A58434FC A263A38ACD4A2937 D8B1035D3D6930C6 A7F2E2C8EEDE3179 53C6D32901A85370 3F79A9302F6C9D43 5136258EE251C5FD 3598F27ED5C6508A DF77F9DB18FDA4A4 D7FB6B62F1221861 C1D364863ACEDE7C CBA50FFDB3A1D68C CB07AB59F9318FCE 907CF017FB61EB6D D718BF1AE69B0430 A3D0BD0E3953D3DA 984AE97AA18F352B F28FAC4D3E48A64C 34E1898C565E5B4C B31A5C38CD47085F E20BA20A48AF6640 5DBC2E91C7F5DE75 328F3B8454361BC4 3C9698B80DE4A726 D7D1057C5D5DDF7B 9BF7D18E8C6742EF D85B4FA38901429C 95ABAB8468DE5C18 9B97DA00C4645925 2E571C621E0D3391 6630651196600BFA FD16C1DC486BAA72 B1A511B0E2CC3A1C 6FE90E88DCF1574F D583FD26BF4CA1B7 7460C61F6603E570 1166C8D75055C73E 2DE38CAA377EDAA0 1A1D65FC44A649B9 A67CBDD72207C2ED 1AD557FDE70C1D7F 32B95B02578EC13C E534C60B94731221 BCA559BB010DB3C3 56726CDF33000500 F077780B1F009DEB 0F5EBD1E4AA858B9 A4BAD9F6ED6137CC 865CB0EFA98A73C1 43589D0677996E73 0BC7DFE475AA46B2 E7542CE7418A3D9C 1C6184111106DB78 FCFC3A105AAD8922 0315DB394B657EB3 6B532BFC80A0E16B A21B8FC2C3DC6FB2 2421EEE1CFADB92B 47B8477C7F20CA70 446292AD876A844F A177CD749B820448 3B094D8AF6C451B8 EB2670005651590B 70B7B69FF0B8C0E2 D93211902BBF39E9 F40A1BAA5337048C
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201302281638(name+title). Key = MD5(password) =7d8694fde8df61773487fc23a03d68c6, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 1e474885-3725-7f80-8a4e-e050668bd1fa 2 bcc255a6-df62-2918-82a2-00c5dfe4b515 3 cc515cc3-f88f-3ed5-be17-7471c50a8290 4 9458c7c1-f84d-00de-befb-c575e0e92470 5 dd2c5b44-14cc-1c6d-98fa-4b2b3dc80d42 6 0a3f11ec-0aba-61b1-8aca-5a062295581b 7 a7480fa3-3c42-6b48-b509-8a0bea6eb43f 8 146d25b1-7a19-0557-8b2d-abe690a70046 9 2fb37527-3ec0-2d67-bbbf-e90433986509 10 cb7b5b9a-58e0-5c5c-98bd-8281017a19ed 11 d209f409-324a-397e-8f5c-dca608aae989 12 70d3b2f1-2650-1c1d-b6ad-cfa99d53d822 13 3a2221c8-0284-71f2-b70a-fcfc88e508d0 14 bf0ed3a8-52cf-1af8-991b-1269149287a7 15 cc4bcd9e-11e6-20c3-8469-cbbfc22b27d0 16 6e631547-7cfd-348e-8ab0-d6d73a197402 17 37be092c-447a-6e7d-a7a2-7dc5ad121da1 18 df342d1e-7a89-35ca-b7c2-e5fc26ab0805 19 849f4863-fc4d-2ed1-ad45-b5b8d29d9650 20 43a71d44-50fc-5fdf-9989-2c7c444ccafe 21 f41cea36-6238-0f98-a793-cad60992392f 22 16e56990-25ee-0ecd-bd71-67ea08cb895a 23 8368a35c-8104-6e79-98fb-fd61bc643118 24 c982e5a7-759c-675f-b577-3425d9992711 25 8290a081-109e-296c-ab58-38f155666007 26 23c62bc3-a9bb-80a6-88f8-a17619593123 27 3de2fa35-7a76-8bd9-a055-d1e61ceba9b1 28 14d5f929-65c0-73c0-ae7a-9e12501669f4 29 42dc6645-b744-789b-bf8e-41770da5c29b 30 e673d502-9296-664c-9b4e-68d4fdba1948 31 f93c377b-ac8d-746f-bdeb-5ec78f717310 32 6948b567-5ffc-3d3c-a535-f340d85bb76b 33 1f3632b1-4a45-2fd0-a861-f38ec923a7d3 34 51358910-4402-236f-a8d6-2d69ceed6ecb 35 b096f66b-2aaa-2862-952e-243464fdf0da 36 527d92a7-e519-8bc7-aac3-a03c4874ca99 37 c6a820df-835d-5fb0-b4ae-af8e8063ea2a 38 3ed7e57f-cfde-6bde-8bec-fb046825ed88 39 a9d5d369-dbe3-4bc1-b36a-5af2e31cadd5 40 d784eb79-5edc-436a-85f1-3fd5e21a36a2 41 15111023-bc73-6c01-bf91-89bb6cd7752d 42 b42620ba-45c0-0b50-8606-73ac9e1513a9 43 d7961ab2-a63e-338e-9c1c-61447e58ba83 44 b15a7098-bb58-6810-aaf6-57d455263099 45 1f51219b-8199-0ad1-88f5-cf529790a3f1 46 4f378d27-9dd3-2cc3-89c5-9501193be7d8 47 31da67cd-7414-1c42-8ca3-8f5ccd03e578 48 e1d8321a-48b5-57e8-b30f-68b6b2c825c8
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
723016602531712363250066288776732228564460360215. Exactly this sequence comes out ofnew Random(649).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 89 of Run 42 (seed 983,934,859):
new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32). - Conclusion. Filler. The content is fully explained by the two RNGs.