201303040838 19mxsy
explained decrypted filler
seed 136
From the post to its content
As posted (encrypted)
AF585A0DAACB41CF 0EE15CA8D6607DA9 7BED38993E6BEA2A B1EBA76ED1AA516B 7705E7D458B08451 D9D2C1486D83B67C 39FFE12271F63D84 68DFC1602ECB2DCB CB3B35700FB15FE3 ABA2A81189E69591 E7C23C4DDAA90AF6 45FB38B5B5533DA3 11982ED6AA0CA5F4 21FCF435BAFB9D34 76925E57A042915E 9F7F864A145CF0DC C5F361E9FCFDE4C5 067DAFF9D7E65940 833E8EA1374C62E8 ED470CD6FD770CFD F967F2B6B8295FF0 5407D4C6CF17462A 114818FBCB3B6A02 5DE817229FC403A4 947E15E8FD6655D4 6380EA5492A013D0 1C9F402484A49A00 82332D93ECD56AC4 75EF8F7F226726BF 278BA34E1AE8EE43 A931877122CF2824 873847D78C443AE7 FF790E23F47CC349 84EDFC794161BF19 6069308EE9102526 3764B8C7F44359BF D0DA8A785203C66F 1F1AD06864BC2581 C7C5489C02C7870A 122433707F457FEA 4D16F7189B4D5288 1D636ED979BDA8CB 2031749238ABF973 C1C05BE744EDEDA5 5B40322906A7CB59 06D3386A724FBD0D 9691853C1E0357E8 2305607047C2D299 0D59C64918B6FC7C DF7040BB4DFC624F 3AB33D761252B5AD A353ADFA099BD39A 9939B8D36983B979 C5F08843B7547C73 5E56A74E735D47E0 0C7A593A1D3B7AAB 48942063F537D05E 1572DDA29F199B53 D772CA89939E8E58 2B8508F096D5C0A0 2B79457FE9E3B864 136632B736CB4E2B C7D8B51DDFC730F3 A4E93EC8F74DD355 EC317C4A23CFF1FC 5C56E4441BC9046D A29D977080499DD6 0002C1A6F0BE7303 58577FC2B23002C2 8D17DEDE57DD51B1 FA87B8077B8550EA FEF1FF04CCD4612F AC10AD8F4029A604 07505BFB46B2CF0B 893CE779A6E123D6 F6F0A4E14C1F0795 884C3EA4311D04E5 C933200CF0AF95C5 6A76F1BD86142C1E 45C48C6DFEA9EB41 F684D28DBCBC1184 071DB8E7924C744A 29AAA7208AEA6510 8335E93878F42150 FE18F7E5F4FB9B30 2E27FF962D2EC9A8 74BB6D5B5B7B6F68 273A4B8DC1943EC8 EA66FE7179D878E1 0E4FDF4C05DFBF57 46357BF2E4427DEA CF74DEA30969197C 788ADBCF80FB9295 C4D758822F2A8671 EBB375613D6F3DB5 EBBC92BA08672558 752461083B489207 7D3EAC73F7F13729 27AF76D6D36B4DBF 566AE7529C7677F2 0E5E0E5F15160AAB 80C0CA05FC5B878C 48E1E5DDDCB6C23E D8706426264F3ACD 400E5CA21DB7D12E 4EEEF5BCC476DAAB C2581B1E32C7131E 41A1AC08675B75A6 8082A5DC31CE3BCD 03E68E5E69271AD9 557A117B49B151E5 BBA524E96BFD91C0 C9E3277088FE0938 84B734286884C6B8 731D8B56E07EA6B8 6DDD1A4C904FF6E6 3797E70186BB1864 B987BFD8CA258292 7A1BA0714942E1A3 256EC1FD2799CDF4 8D74E3A9A157E39E 599CC8B1F4811677 DE0C00515EC02DE4 328CF9CFE141A7B3 A761026CA1A41D42 E225F5B10B2E3ACA 42827687A8F7C609 9B65A2DDD70F8370 97E154E7C7983C66 143889FF89C830B9 7A97FFF0815408C5 BF908CC9F7FB2A64 77372FA2378FB40F 64213CF4A2FF92B6 4EE963020FBD9543 94591B52DE98EFA4 B52DD889B3920EDB 547C37A87328F0CC 37D826EC19821A6E 922E24FE31942F3A E800025240C6B510 D6A7F20D9CBE6879 D224830A7EAB0997 87274A1633F9054C 3729B0312FFA1CE8 1A80255D20D7BF87 EEAC4913E65013FD 0A31F7471B46E4C9 9F14910EACA4B147 4A124C85C1DDED08 E6202020DA8A5793 0B778FAD39667D8C 7DA77E03438DE7A4 B53EA4B543EBD48A E7901C1A1CD3ED84 A22021211CD819D5 DD0566415992F620 2BBDF01E51F29655 A1577687713ADC85 C6344A3071574287 5DE8DABD3CF5A789 536CAA0F19E353F8 B19FE9D795CEE37F 78554EFFF2CA04A6 5AA97FA258F7B4B9 43EB7DD603D9717C 6EE268F5DC62115B 270C9FF326E24C46 BCB43504B0A29253 81DE6512CEC42723 4182BDE47717E0CF 3CBD4D6EFE1CBFAC 40E9BB773D42B38F 62A49D7C2376EAF2 8F8C62916BF4AE93 01CDC827E32CD5F8 C0874BC8570D825B
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201303040838(name+title). Key = MD5(password) =f7fa2800755a85e879d5207a148cd62f, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 18d39ab0-e0ba-65fc-bfac-ee4d8a71a1aa 2 f980e445-abb7-69f2-b63e-a33624d078f8 3 77825a6d-1f45-77c7-b2ef-3b79f9195b23 4 551e9129-64a8-59ad-b8a0-3302fec63dac 5 1852be9f-4db6-517d-914b-2444b431ffd2 6 daf72ac0-9ac4-346f-be95-dfba5c3b2308 7 1347af36-4b80-71cb-9c31-4d47e7347c5c 8 caee1e05-a954-64cd-b2f3-decf14057bc0 9 1a201bc7-8725-78d2-bdd1-c0cd0ace5b94 10 bbd6e3b6-3fc8-371f-9d59-23db7a326af2 11 17d57be7-e014-4db0-8c46-ec40eeca197c 12 a05665a0-89bc-5ea5-b9de-2488eab052c4 13 290b476c-bcfd-17af-be62-146bc8e9de33 14 1b99f973-456c-2a03-b546-1e0918e06ff8 15 14d6a4d7-468a-1b77-bce2-f162e8afd609 16 069fae52-a28a-873a-b546-1d790a508127 17 d52283c5-47b4-01a0-ba8e-ed0a0486058f 18 241f5b20-715f-2746-a8f9-4441cda45a2f 19 5d99efd9-3552-3c73-94f2-bce2fe0ac7c4 20 b609588f-1306-8161-9477-a13afcfc7215 21 57284c1d-723e-77b2-aad0-0ce3b91623ae 22 323193ef-85a0-1c87-8d2b-46625d094a96 23 67a45767-7425-8328-a068-229861034a7a 24 07cc762a-856e-4a00-aa5d-b60a518161f5 25 c42ead4a-9205-0082-9255-a89c91409cbc 26 e84e36b6-2840-8364-af7c-7cbd0cf784a8 27 8d697249-3136-7ae8-afcc-339a058a58a2 28 2c21662c-81d8-8e1c-b162-458509dc4f02 29 f03f3569-2703-194e-a2cb-912e76548217 30 771ebc32-419d-5731-8033-bf0f7cdd9c50 31 3ebd38c4-b74e-342c-a075-7b8a37aa2ada 32 3846b241-19f3-2b47-8694-8efb66b49936 33 eeb779ef-ab7b-8b3c-9121-3325c1361da2 34 9782faf7-93a2-3fd6-9410-1b68b283d8dc 35 8f77280e-6835-1947-ab6f-692354d5d62d 36 de5bccaf-1594-518f-a575-cc0db0ff3114 37 bd3366d8-5c8d-6dbe-84b7-acba616e0f85 38 7b84a04a-3c84-0360-85fa-2f8cf8d42cf3 39 698049fd-ecb1-5df0-815a-51b4ed418c91 40 cc74f000-c030-1ff1-bd97-8213315a048e 41 269d4d74-7196-8486-bdc6-0b0c81b35349 42 d5e71d4f-aa8b-4095-b15a-db2f2c2ad10e 43 63215c8c-0efd-8b57-8d5d-cb6c220c31e4 44 1c7328a0-e9ac-5e85-96ce-1609ab112cf5
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
66755376734512180238718408781532831560518485. Exactly this sequence comes out ofnew Random(136).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 169 of Run 42 (seed 983,934,859):
new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32). - Conclusion. Filler. The content is fully explained by the two RNGs.