201303060120 19rfyy
explained decrypted filler
3DES(name+title) ECB, 56 GUIDs, seed 121
From the post to its content
As posted (encrypted)
855F71FD961E68E8 36716B5018368BB7 CB1D356790F22C3E 385E38D1E4E1EADC EF7D71C4D9DE59C6 91913F9E9725D2BA 56EF11F492AECAA3 1FE0BC33B1C6BDE7 4908EF4F165519CD 86DE051BF44B3B3B E8E5B188CC4B7484 8A356C131A8C17E6 93DFCD4161A76B70 56675007BDB349A6 74938AD05516DFD9 4871A30469315196 BAAA7A78117EC702 E4AE9AE8AC3F5835 B48863503EC53C72 57D65765BD8E58CE 2722F49EC15F1BEE 10D2E9A577C0DCAE 40BC6B8B8570C252 FE04EBBADCFDF3E3 CA4E58E91865B457 3C707C74E42BBB1F F5660B9A423EA1D7 B27BAA002E077B0D 31D0F55FA147A7F9 D1D669E8FD487CF3 DE89DD70356EBEC6 FAF501340D0720DD 7E8FC47A6D95ED75 AE5265A5A9E48C68 59AE606246D38AAF 6D723986C337303B 4B3D51CE9BFA4EA3 E4403B9A8DA7D44F A6AE75C7C5619B66 CF6E796D1E12BC56 3688114367489344 EC1F959D08CCA577 C180485D8D179DA3 EADFEE419CF809B5 C7C77C3A52B68D2D E37FE545B815A598 65A83AFB654D4386 524EFE92791BEB87 36062722CCC4A4B9 2B3131E9109742BC C0E5A839BB362702 1BDFC31C9D6C9C6A 35F6E51373814CE6 B36D75493D4FF8C6 EA56FF69F041BE8D 636076FCC749A942 BDF1432434E21D6C DEBC1196DBA5F816 FF775F54C5C0ACFE AA812DFA9C506992 AC26567ECA46DDC1 22171AB13D83DD72 EBE31068A5D0D618 F8102215D8BB3483 296C4149ACFEEF58 89F048633AB58E29 9B96FD8DC3A2707F B7A72B8F5E5F0404 6A6807361645FA1C 4EA1C584B4A6B964 37B0491098BA0333 9010A35F6CF7C033 7581D388B3FCBDA8 01ADDF737D1ACF47 10FF680C65E24B01 95D56224F4975795 995C12B6D509C14F 24D3E0C38DDB2A02 BFF7D9191B0C5E36 59C32CBFB684466A F2158C99FEF9F779 C49A4D65159E1BD3 207FB0F29EBA1883 AC63834D5A060B04 2F7C3D1249471CF6 97D4528D0C89211C 2141AE833B2645A6 B996BB98FED11DE0 AA44804363B50DB8 D1598E797A47468B 3623EDD214DCFC36 57EBA6FCD815811F 305939FDE94A0F60 D94FD5E536988090 125D8F4ECAEF9505 1B0C4001A256E43A 5FF257101E4556C6 B7B0ED50AB69DBB7 8F846BFC05864122 76E6EB8B94ADDB35 670E303CFE0EE1B1 6E86C79B635D4417 5683C500A0D9A3BB 915A423350E77FAE FA60E5745A67422B 8FF4CF77ED655193 6C69E1DCFD0A80A1 04F953CB2EFAC14A 5CFFA7387469C87F 502A1588200E3E49 8932D5EBC214A593 C1CDDE9315AEB5E3 BCB16BA0F5903376 D7470F534EA4C52A 7724F250EED8167E 14F56C92FECEBA24 3ADC6C4DEB1EB921 C700C7B8440DF861 90494EF152932477 58334181DC8BCFF3 A15A469383D84CBF D1D00DB1A7B3AFFB 0CBF27D4AA0091E1 6FF41248D3DF4586 2A820B0C4F1811E2 2445776C9F102DC2 3A3641FB9A2A158C 1DE8C319876C80C9 2EB80857EABFFA67 D57D711A4D8FB8C9 75CC03FE69DE7705 B4621F4E9BD169F0 5DC44413FAA4D288 A3C2C77156D5B795 83707C7A63030820 C8A4904A6FA4E7A5 254FFFE2175684F4 FAD568925622096F 8D7B6133952FFB03 0B1A9BF7917C5DED 5BCF24110E13456B 0C121B0ADF59C6B1 18F275922B228632 015914FF11491DDC 3A276EAE489E0309 5A923C05D539C699 890848974BD932D6 F209590447283206 E2125D8D8B9E3B86 340D78A272E738B1 78429958C4319616 039A11B19EE548D5 28D4869D5856E7AF 1B755D9881B5B9B6 D223698F492A5592 C760984493CAA27D 86F2166F8FA67927 1B7B50F7E410FD2F C06326F7969D41C3 96614AAC287E8D27 998FA804593B0E24 E1B17A56F35EC86F A468CC490805D101 5BE21A61325F4FE3 A18D42C5D6EFAEE9 A4D6BE2ED5A1AEE1 6627A1B2F3C32FB2 5432B0A49241EBFF 8BBDF64AD017EDF3 0103B0D1ABAD19AF 54FEFC91B9F9B847 5CCAD2D8D3B82A43 5453455612EE8EE0 72991F5A92006239 2D08186CB8542CC7 6CEBF126EFFFE1F4 956ADC56CD029C21 0A3C31941479C785 2DC6DA630CFCFFD0 CFF879517157CC19 176BA325879DC870 1F4DF6A44100367C 755FD98AF3EB4023 E536DFC732E0C62A C39FB5517678EBD2 77D250091757F1CF ADA0CFD55EA095B2 14AB9BD018F31CBD 92BE978BBEA46A02 F73680966DA3F4CF F14D82095EC2BE9B 19DAA085BCE2E799 CE7E511EE30D5CBD A5B4DEAEA9DB1188 3140C2082D97878B 8D7DEFEC8BDE5289 CFCD1CFEE8963A04 41F3338668AB2EA7 C349C661C90298D6 152125C858D86E2F BD8A7FB9A6C2CF7F EFB7A4222A4549A9 56F19A0415115C2A 5AA8E26C1BFECF42 C1C56A78041DDB6A FDC9DE0D4B2AAB86 29FE72C85D033B92 D9DE211B053C28B1 D0D060BB80B44588 60E41AF9012823D2 0021C228915C1908 38F86412A9CFA5A6 DC96DB47AC631C85 548D7273495E9060 72FAEBEE6765537C CF312B1D166B71E5 C5B8440D362F99B6 5B63456F497797CE EBCBC86CBE740E54 EAFEB895ECA678E1 ABB7B271C85BDD8E 358566566A93F914 251E2DD73B15FBD2 05EEB6D7F2EDBAE6 A19209BE5ED84F70
- Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201303060120(name+title). Key = MD5(password) =8349be7db770cf16f94ab74cc736bc49, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).
Decrypted: GUID list
1 9e861270-0d90-8829-8f3b-19c016994877 2 57870a9a-8204-226f-988e-3ce71150f9eb 3 a2554748-b1dd-360c-9709-f1ca0cfb8ec3 4 0554d3b4-2e06-3873-b268-d06e72bb2103 5 d078e899-4248-724c-901b-ae312322c661 6 9da41903-4c96-2aad-8c06-b618cdca2ba7 7 dd5acb03-88df-15b1-aaa2-06b44bde1960 8 80b136f5-8385-1dc6-bb9b-1b2d2dfb0be4 9 2d47735c-23e8-8002-8e36-449b26070363 10 0bdde0c9-a834-8665-8236-75287928980f 11 233ff58c-81de-324f-93ae-3784e012b5c4 12 87b47344-946b-80c5-a03f-813393b3b8ce 13 afc90e8b-d3a2-7a82-ab7d-c8f9d50a8165 14 2b56550d-6e33-3204-9ff2-d164b7995261 15 bbb7cadd-00b0-6db0-bd1e-7eaf13212bf4 16 667a903e-da97-5ade-a409-6f831158aa5b 17 1abea2db-4b9a-6539-83b5-7b8ef6678c2d 18 47a049d1-738d-08d2-802c-849fa2d0f327 19 02805e49-7643-8a08-a6e4-e133dc4fe7cd 20 37eaac79-a573-10d5-923a-a8bb41577edc 21 24a4ecc3-d502-8752-adad-4b3c371eba8e 22 057080c3-d910-4ca6-a0ea-bd6ce74b02a3 23 c50aed31-8ca2-3444-bfb5-354cd46d31f2 24 764c3a86-2abd-238a-996d-abed7dce5432 25 8502619d-5fff-55d4-8330-8e231228e7ab 26 dee8f54d-c917-3d39-8190-c94d841fd30f 27 8707b4a7-f73a-8887-852f-17310a6c372a 28 624f474e-571b-52bd-8764-856513f1e738 29 6fafa472-3ce0-8d88-81b8-f70bda471ee1 30 9cace563-e04a-4fd6-b903-1298b43dd8c8 31 cab7a3ed-0c67-7fe8-8c25-f8385450bbae 32 f9ef0446-73db-2686-8557-a334fa6dec56 33 a1929f40-b107-845c-af85-6692dd38488a 34 39948bdb-13a6-0bb7-a575-ea14b37b3c81 35 a892dc0f-1a5d-88e7-b7e7-e0177f055204 36 fd270f94-001f-06d4-b26c-e3a892275e64 37 9f91d947-e534-2b85-9ea9-1612e4e27f8f 38 7bf7d747-a407-7b9a-9790-3dc98f208a35 39 2c0c3cf0-1a39-05c0-9d49-c02557cc0e4e 40 c34a1b0e-a486-5611-85be-1fc3f144a37c 41 7586c3c8-2668-3db5-90ef-b6cae738dd7e 42 6bfe6435-ff03-22ae-8ba3-a05b938d57e8 43 5575a3e6-59ce-335f-b385-a360008b1fd8 44 e7db4048-1c89-8db2-8173-6736ef47e44f 45 be2a2239-4d23-6991-a5b6-3ddf68a237c4 46 346775f4-ca60-3b18-97b6-d8801a864a3f 47 7e6f1fe9-9c13-4d55-8afb-ab76f18dd426 48 c00cd9c4-76df-3585-9fe4-83797b3c3231 49 f7d8d201-8dfe-8e6e-8180-2e567f658846 50 6b0ee8f3-be7c-12b3-94c5-3b532021830b 51 6c8fbe11-6891-439f-8eef-81742d782c38 52 57690da0-cdab-267c-b5c9-4731eed0bd07 53 c8bbf259-a698-5c0a-ad8c-5b4deb85979b 54 263a9020-159e-1be7-8d6d-bbf4dfcdf534 55 086b8599-1eb4-3a99-8e18-1f6fb5c844c6 56 85487ccf-d324-3979-9097-567fa6cd330e
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
82337211883873656081843253858472808027053238634381425133. Exactly this sequence comes out ofnew Random(121).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 206 of Run 42 (seed 983,934,859):
new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32). - Conclusion. Filler. The content is fully explained by the two RNGs.