201303012114 19i1rb
explained decrypted filler
seed 236
From the post to its content
As posted (encrypted)
F6C89DF4E3B6DF4E 815D49E6BD6775E3 E76DA13D1532AAEA D4FC4F5493481E6E A651DBE6F608731F F6B42DA003BE008F 81295B6338485E08 DFDDACE64727B7E9 409AEF56C1414E34 3ABFA12FD3E72365 BC0D564138F2C731 CEE15CAE13E50C7C C7B5F1F76CB15089 DC5DCE94885814CC F262AF6DA172BBF1 A34A3F516E8D1107 F284402E060494A3 8F63B5E07402487A 75151E36DF479621 1242AEF8766989F6 1FE64987D0DF9B82 93AFA7B81984EF5A 29CFB2F88D691200 8A41E3A3A4D2036F 24C623F1D95C2EB6 F5DBCD9B7F6F8FF6 25A6525F55B31BFA 4AD58AFD60E8790D 6547DE4071E7DB2C 3F0E214EB1814B51 ECD5620EA48D6A6A C44B8EFB7BFF32B7 DEDAD0C7EE6E48D2 510A6B4E0E3B9E55 7FF6AB6DE2405EA6 B28D59EDEB41CA53 96DC5206F5888DF2 EB436485EFD763E7 AA999A30B21E70F8 11E00EEFBA0E5BBD D090F60AED47F435 A079F21B48450438 D8EAF3FFF3457786 9BBF74D8B741CE1F 07381E25CA86DFF1 AB9F431D6A1804FD 6BA398B147D87F94 8DDE9A6FCDE19762 403069B5B89DB609 FE97B9CC76973090 B47B9ED0C2FC51E4 78BEA13DE819FA3C 220034E6A6F13016 E33F690EF451796A E0CF9DDC03FB9B47 3AE51B0D0DC8D6E1 8F17C332B545E64C 272FEBEF747F3181 25F83E0FC8625A96 26A7AE7D526BDB0B AE18E2D171412913 5C7CB75B60E5CB06 C5AD86770497108C 93E716EC4AEDD507 DCC6245DEE3B486F 2842D72029F46D84 6744F61B45B58B25 033169CAA1CC5F22 6BE6BF0B267BEBE3 798FF63058B35FC9 13EB6FF575685403 B8ECE249ECBAFC4E 7FAF6A9A957B173E 33AF8AF0C9436796 0F3A4BD82B4B7FD6 5C3ADD4A664654EF 1C2D6F8575C3F864 E61E07AD87BE6695 E48C7986E03369AC 4C577C517A9604F8 90CB9E17DB07563A 9949BBFDCB3CB259 D4B5899A0125FE0F 6F447C83C00D5C73 30E65E2359557291 9B386138BDDA2AD6 CDE4A1F9C9A3C5E0 4F1A93517E49DC5F D59EC87CCE5D6066 56FFBC01FFA49192 75448B0005DC9FE6 0A5CD523E2464B7A AC523BA5623E1A75 FCF2B3B47F64F47C 21FB339761EB25CB 12258B95A58F9AA3 C655AE7E0053C843 678B1E5DEF36C687 096327E5D88361AC 4C302BB17FCF39ED FFE6BD24708CFA92 10B797034FB39B08 C5A3EF5A53CDE4FB D95D5D0BDC6C37D0 0CAFB1CDEFD4FC71 0F0D631A52DA9CB5 2678CD93C7D1634F 4EC214D2CBDEE25E 163121287F9BA43C 052E5F0F3888A871 787290F7A1A7FC5C F6BE3E76DE0A8F4A C26BD156508BA22D E594E770F3563584 5CE2F13210E76C62 7ABDE5BD379F330A CE824CBD1A604B9D 6BB495AEF004A6AF 903B05DA1C0C2E14 433F74C1A197B25B 2B6E5990477D578F 88D43D535F4DBC44 16B3AF832C88E3AE 3CDC43323B8D8717 E398876E5B4FB530 A02D5A0886226513 B4E7DEA2C0D1AEB8 374A809DE99A93F7 F9672081113EC715 706C01B635C4D193 3FBAD081533CB7CF 8068552CA9B2C5F2 3150B9D56F62B8A5 4E9563D29B31262E B2649F93F26DBDCE 82B67EEBC4074BC3 9E2D0800A16DE8AE FC19CFE4E45C5544 39627952AB006AB3 CBAA99B0EDC77EA2 7E227E65342A24C8 69AC63C892B4B7B8 BF58D44F31170822 D739CBDD437D0F39 D40A5AD1F81CCC8B 2E671209BEBF4ADF C25AC4A8EE086362 02ACB41600250D40 BD8F2D7ED793E5A4 E9FBF867C964166A 9EB03793DA8C8CBC 15C8C44177538538 A6B203C96E411D11 3FB87A33DFA15582 7DB5CF35FD619FA0 5F78D1A6F54671AC FDCE9EC1D9E8D0B3 D9C166EA8DB5C999 648FC761FE9B5727 4C7DE1865036FBBE D83309D826D22801 A834BA1E222879B3 CA98B0B9D13BD2BC 5A73AF743CE683BC 00801F1AF5AF2165 340E6C2BAE0B7D92 C3268A31928E973C FF29635A8DEA86FB 89B17E176A57A084 394AAF2F5EC2C32C 593DD4912262072B 6C5F5815CB401DA9 590F09CE69AAA71C E99AE3D154B94C86 E2D33E5B6AFDB765 9DF13B18937E0282 F396ED3F945665B9 1A4562AEDFF944E5 C9002C485736B6BC 096C4C3F9AC66338 C99173E9C6A3D209 91663E7F415C662B BF37B2B1EC374DC4 1E76E984BA6D31FD BD0E7D1FA8EA0BF3 9987C412C32D2EF7 67DAC9ACC19B03B8 DA23F3D54AF1531E 3005628743F2046C B79F273E5C7B6ECD 4D57A3ED3242E0FD 2F6C979CB1CC54A5 4041596AC48A8D1F
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201303012114(name+title). Key = MD5(password) =d366c5a85425a5dfaf97816a98450451, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 16b7f8a0-7646-0ebd-952e-2f5b7e9731cb 2 0724dadc-e0a6-0ede-9dea-6b1f3cd1ae12 3 9cc1b420-7197-6f59-9faa-4c99e8d6ad84 4 3925939e-eec2-8347-84ea-9d2a1dff9198 5 71dae8ab-3bf2-6d33-be46-b5f531ac4943 6 98481eda-022c-7058-938c-fc82ed628eff 7 9032f8d5-0e5b-5b14-9c51-4bb74453771b 8 d60950ec-7683-76a1-ac8d-8d5dddcfc5de 9 d5f07dea-1ef2-1278-883a-edffba546171 10 f884d7da-9854-251e-ace8-4dbc4269a895 11 f46fff84-e38c-1cf9-ba43-25190eb25303 12 74cadd6b-7c42-6cc6-8559-197effeee373 13 3055e0aa-f414-7ca6-a398-3bd0598d2e77 14 a75d297f-7d10-2e89-a5be-d5615e9b4592 15 8929e0e0-1e57-1868-bd52-add9c9d3e351 16 f16e636a-60ee-3c1e-b878-ec71dc5fd8e5 17 5a857918-bc5f-096e-a067-82d33d47eac5 18 2c4e6f88-d294-230d-a564-13d825d821f9 19 435ac4d2-3aa5-0e5a-98fb-9717c8ab73d3 20 2ca18435-702c-6df0-9f41-c5c15e04e258 21 886250ae-e9b0-176f-b8ea-21978543a1ae 22 462cf2f8-b488-65c5-8841-3f8536ef1ef0 23 5eed5933-0513-7986-9b30-e5281a7e7260 24 b5c66d74-78e7-4e80-b015-1ea42ca9633a 25 85f5e53d-82a1-792c-b2fe-fd0dee581899 26 4c79914b-89d0-223f-b605-0f3857752da3 27 5805401e-2bed-7631-9241-47d379f42128 28 fcd04cee-9180-8cca-b7df-c7d4d0ff2518 29 1d882c50-9d0a-66fe-bbab-1d761787f62a 30 83393524-c093-17f5-87b0-a86611b8108e 31 8c21d268-cc86-216c-be14-14d7f17b7a79 32 cbb1ba47-dc6c-544e-a968-d3dd1176db3b 33 fae436b9-eab8-1606-bee8-0f27184d6845 34 7711e724-9753-83e4-a5aa-ee700da0687c 35 790cd81f-39a8-0499-8eae-6df9e36797d3 36 f2277dd4-dc6d-8ac1-97c0-045a53787407 37 84a40750-427b-464d-8295-21943100cea0 38 ab5daf5c-f6fd-11ae-b455-25de0d788aec 39 10ea05e4-0089-610b-aa46-21659e7b1253 40 8f985445-e01f-82d4-b134-8a639c760273 41 7b801e0f-eb6d-67a3-921a-079834c10de0 42 bdc3a4dc-a120-2d03-bc42-23e1e23f1623 43 54cb2eea-91d4-114c-b3e5-d5f53044185c 44 fde07262-ac98-8400-93af-576855e46764 45 eb9c6017-cb84-32bc-980c-fec9d7a9bedb 46 837ceddc-2c46-5fd3-a3f8-db8b5d6aa1bd 47 8e57f97a-0c1a-58e5-a9af-cd01df0b8401 48 8e181474-098c-144e-ae86-761d8703ee4f
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
006867571216721302061674727861251808416862183551. Exactly this sequence comes out ofnew Random(236).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 115 of Run 42 (seed 983,934,859):
new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32). - Conclusion. Filler. The content is fully explained by the two RNGs.