201303020708 19ipil
explained decrypted filler
seed 706
From the post to its content
As posted (encrypted)
75D99BDB043D2D33 8977AD6F213CF494 223421EC8E88781B 418527EB5F33432B 25537770FDE9D7C1 078ED6A06D66460B F2F3086391F10D60 AD48781EDBAAD95A 340AD8A9ADEDD2FD 7E96DA3E5D305250 6B0E9876589A3420 295FB19C14B1BCC4 9FF94881187700E3 CD65BA7EA1C42951 F4624FFEA487E394 9FA879C836D31A86 ECE34E0FBE922C6F 51529D88FA562D9A CFBABB609510C854 9B7D2A04B7F24548 4DB499DA35E30CAC 24DB926DC8ED5862 D77C23460301C5EE 0B52074D90D0021D B52D83F25EA8DCC9 A8EF7CDFA4851648 EC1CA690CDC168BF F5E154346C27646A F9012EEE309AFAF6 069EF996732B82FB AD31F4248C511917 A01C790499C9E4E1 CA86D59C95A5AB2F 2BF0318879537972 294CBF6719B0FB07 3D7D08CB6A2997AE 31F36FD6671B6087 ECE84A0970DAC9D6 4A2C52CE9D0BF5E7 1FA584D89F9D4580 EAC000AB977E19F7 95F79B535ADBC39F D7A5584DDA7BD0BF 571A43620D37C3FE 6DE413BD20C16556 0265D20FC8EA1A46 49DA7226F8C97222 E4DC977ADF60A692 7CE4F84ECBF3BFB1 2F692C2CBC2E4004 19F61B6392DEBCFD D5EC200B15B014CF B471ED9C67CEA7AD FC4C9401A8EF6A87 4CF5820EC98E005A F991A23EED0E85D0 49DB88C8C470836D 1FA6F991C47450E6 04D5A1428805049A 257E1AE54A2FC4AD 33C92167FA924985 446863FC2F0E03D5 2A4421E8F4E6EB33 D999976D2FF3CDA2 C0F6F8D453D93A95 47DD118B36412103 5EC7282A68BF2BE6 86635AB4C865DB27 870BFD436B25BEAB 455CCE150EE150D2 3C21782D328EBCC7 DE2E9E007566B506 DAEA9E156518A51B CCF33C60C4C3691D C1D9E8D79957924B 6824C45C9F19E4B6 181EE2C81A60D186 E0319E98645C535C 0D10BF610E1B8382 A2645C804268F8C1 794A63C2F7F2A19C E68BE3276CE772B1 A378A508893E70F5 2932312354449357 2EE3727EC3531F88 0B69BA0D65B931A0 D1AC7CDA41BA0C86 CDF68BE214B0880D D80592478D1818BB 99A2BDA4A6E7D328 971D4DE13E53D27C E894132E63ACF05A F3B0F96ACA61B1ED 3B97B05E1E7DF802 FE5A4EC70478E834 E31F78F7B22BCA59 7BB57C7036571D49 62F1A46E5B8A0FE7 2DE8645A198A676B E2E412E4BCBE357F 8393D2F383E61EFF B16D8DB8F0F0B1BF 6A89CF01707D38E4 84E58BD7FF9233EB 5B4EA1CFA9E5CA4B 6345DD1A9E7FC3DA 574DDBDAEBE0B3AB 7FBAEA073AF75FC4 D5A70F2C8B8F7F1A 92149D214D4A0410 ABE9BCCEB6E91749 C6A239532514237D CBD04B9B52230143 DDC45D34602C2396 1613D23CC7658270 D4DBA45C7E6A617D 0FAFF0AA144202F9 0302287EABB06A7F 176ED44ABB0939EB 57C130E265B40AFA CA7A03B648428DC2 80A8F103406DF7FB 98519C7A84097E87 B0A9333E33752197 4E98607A18C486A3 727A07978B3E544F 1DEFA4105C57BDAA 29C5689601B118AE 6BFBC6D1FD49D9D0 39E0C5F46C2A502C CC38ED2684B2F98D BBED072B35BE414C 5F40C8C57520D774 E221D5816A43A595 632614C4E25D0B72 C6DED0A12B8DC076 7EA53929E90CA354 DBFDAD7A246F412E 2136F267BE541F39 24F15F57DBB8996B 324B8C1A99B9A6C6 B80A5F045F841E38 48906FF546EA001F 4836A2130E946381 A1CAE52A3AFCF088 F3409C18C82FC741 2380B477742551EB F23E4830E5BD3918 1A5A0075FA7AEE98 82315BC20D3877D2 10714CA4E0F9943A 52F024FF994E05C8 FAF51921C4072458 5FE31126A2011C2E E08E8B342A97D1BE 79F6371449CF0A8C E75BB56B686E6373 2F4B11F26E850D19 AC0E318B75BE12A6 97C0061F38F0C129 28D8C33BCDF8F3E6 BA05BFCA6DEB9E07 EF931A93431D3A98 16224937A3B0F51B 02E7C4C9B6F1FAEB 5CA6BC85F2B38D17 D82D2B33B6130436 C6B745D6E29164E6 D42A6BF00E2F6D71 D2DC76464D57AB69 AA895061BEAE87F1 744AB008E676B0D3 BEF497D1DC338C60 9C2E86419AB51CC3 C9769A090CC77AD2 597F7D0C90897045 B0B1673A7C9FD9F0 1B7DD1CB24E9D7C4 E7D0C73449AA494B 7933CF996D865280 BF41150C996AA3F5 DB5D37868FD2BB45 3215CFA349CAE279 9EBA141361849BBB 0BE0CA0D61C8D43E 65DD91EABB036F5F 67437080D3B03805 1E3CB7733FB1DEE4 903F951C03176439 AD0F8EE2700AB72F D366A4E738513470 E7E2495FA6AAECC9 E87FDE6CE77FFE35 BA0858F10143254F AD882B27A347A564 AA27599A79FAC2E5 F41327B4AF0E6344 0CE61F70B36903AE 158A04D623194932 2E604134A75B37F3 88CD39A1B43DE935 E3A228157984A9A2 2006EBF6A5C8AC9C F68B4D923704E012 F24C5A0A8B615DF3 5126F828956A32A5 DF8E0766F4F45AF5 A0CAF021EB5A5A34 4A417839BE0DF108 212254DA994E5364 1CB15CB5B4B99794 D94F9047FC090504 637724F973CE6AA1 6800C0A33634FF74 AB1CF6960C8F4CA8 E30CBBF69F9773A6 C69721532D26C888 E68CE58A2530C12C 15876950A74D836C 6D4987D6322684EF F88254AA21F51440 D4C0D26D36A3E9F9 2D9C56691E70A965 5910462D6E808A00 2CE2B98FBF2B00CD
- Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201303020708(name+title). Key = MD5(password) =1d29ebb3088350ffdee0401ad449ac53, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).
Decrypted: GUID list
1 5a67291f-4ba8-5acf-b677-1f2f0fb9ad85 2 8a5a28fb-795f-8e7a-b636-950cacd5769d 3 d4cfe015-ee34-25f0-9cfa-cf05f795bc1b 4 9c7e3545-989a-2f56-8bd4-89793e712894 5 e681685c-5815-882f-ad32-c4191ef0e49c 6 7fe2d65f-0e90-4ad0-b5e5-8fbfafcadfe5 7 2c50b272-cdf3-2b47-aea6-fe7e9f3bebce 8 96ba687e-a7c3-5e10-81e9-4bfb743571e9 9 f3eab823-c34e-2c70-9601-2584824e4bd4 10 2f3cf413-c4f6-5f9d-872c-529d79e9dab0 11 af9be5ce-6144-3299-8574-d152350244cf 12 2a7a7de1-4d37-529f-86e3-08d7e59fee71 13 650f0e5d-9e5d-8cf8-8655-f216a1b0c62f 14 46ca2e4e-711b-6255-b8ff-11e8f63febe3 15 3533b1f3-d35e-18e0-a4f4-1d3ffd5281c6 16 1f244f41-2eac-891e-baae-3e382a841141 17 126f5acf-00d2-52fc-90b8-35cdd3820e4a 18 118cb7b2-198c-6724-951f-59b4ec172c7a 19 8896e23f-f2e1-73c1-8e92-d9b1c17bace7 20 fbe62d65-a96f-6212-a823-bd434a856a0e 21 589d3ad7-8cea-5f22-ba04-c6807d0ffac3 22 1ab9a81d-69de-0490-88be-0820542c6ea1 23 45b57374-bf55-215f-a385-117d77d95e51 24 a3bb22f4-c957-602d-9adc-3bf4faebb66b 25 679ea971-7233-8173-8736-6f371f61814f 26 cb1183d5-4456-5c75-8799-1cdf066eb8ad 27 bbd68b1d-c06a-8a4d-9685-83974da70df1 28 dac8a656-b85f-1b54-a852-21a49e6a360e 29 25deb690-3cd4-43c5-9b1f-de52627e63c9 30 5266aa2c-6e5a-5aab-8929-7bdf94253668 31 b881cb21-1210-70ff-930d-d439e43a10cd 32 dad829bc-aeaa-31e9-8f14-40d7a0811168 33 c8429e95-f1ea-12f5-af5a-cf8f99131893 34 e0da406b-2ca7-6318-aa18-ec937f2dd032 35 6aa97cfd-2c37-1c88-939e-7f75db4dac07 36 715b0342-ca78-38b7-8019-891f1268d99a 37 e884fbe0-6f74-7280-8270-55b89dac40e2 38 0f21acfb-3b4c-4ea9-9cb0-a8bbc276ba75 39 9c86ff25-1411-2626-ac6e-b708584d4650 40 d167178d-d469-7187-a839-18ba160eef38 41 0e5097a9-7e20-47b2-a382-ddb2f800a36a 42 2150b3c9-8507-75b3-96f0-30d06b33d456 43 9c0b484a-e69b-0293-be53-953dfe5852b0 44 4ce111dc-de58-1085-b972-64e90c22d6c9 45 bc13b846-9281-1698-84b6-852329d64dea 46 aeb6504f-bc0f-4ac6-86ef-9110c98e89b4 47 077f6995-a2f3-49bb-a57d-c7febc73dad6 48 a428ea0d-8e90-4271-a755-a9eb45f54c54 49 23b5d2a7-bb38-1656-ae0f-4804765f359a 50 30a635ab-9c03-4a00-a69b-b3c765da8a37 51 90f7348b-997b-3c67-876a-297c93f27b4e 52 4be0c2ce-01f7-88f5-aa08-7000fa187e52 53 b9fce363-539f-6710-8e9f-d0b456e87d4a 54 0e635203-c19b-2590-82d5-4af20ca7aa37 55 2613701b-e200-5a37-9ac6-0a1348e44996 56 a13d5287-67ff-4d1f-9178-1cf7d79596c9
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
58228425253586185676502685814573161374274701144414386254. Exactly this sequence comes out ofnew Random(706).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 124 of Run 42 (seed 983,934,859):
new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32). - Conclusion. Filler. The content is fully explained by the two RNGs.