201303070702 19uacj
explained decrypted filler
seed 623
From the post to its content
As posted (encrypted)
7F35658D334E0584 EFB05D1D3582039E E4D19C2F75C6A09A 2A0E5AF02B347CFA DF42D9682057853E DAEBBC9552D78EB3 138B298FEFAE6C05 DA9494CB57C9849A 47C0DCF4C527C4A2 07C7968206954206 08371076A214A769 71AD6C970BDA848E A141DA2479EF5C34 338883BC97661B07 F5A46209828BC27C 7A82C64D89DCC828 F6D73D6E6D504328 9B8E04875D36A9F7 C5826C7A27F82D7D 9DF0B446457C0AE8 A388A11C7412D4E9 F9B3536D781D287B 67A47E840DBDA795 11532FFA4B8DAE30 B1E4AAB1F0A20609 4BBA799DCE3657C1 B06D5953FA86C6B5 BFFB92D694BD534A 15D575C29555BA85 BC7AE4CBF7660D9B 9082BE578D6C50E1 EE3BA546912005CD 5285CEDF067DAD38 A642136CFF492AC6 B15478DD76B0B2BE 0952177FA7EBF14B 0C332FE6C24968C0 58F5901FF4F51E57 8D079C97E29E2327 F23DE586C17009A5 4ABEE79C5F865C1C DA12C87E0A334FBD 6F40EF709B3EDB19 898F837F2EE5954D 1CC4D89330316C51 4D3A4C74B50DBFDF 2E3B475DA875BDA6 93ED98FCF39C65C7 B3A5BE385E3253B3 FD98D8EFA57BD964 72E918547091ACB2 9163AE123F82F198 B5696A561D57551B 0F1F1619320127EF D2A69AE1182BE5D1 B87FDFB30D7804D5 0FC03DD924790850 099FD53EAB198D37 31D6EFEF2D55DA93 6C4A5FD6CE883B34 85FC09FE02DF05DF CC62D9AE4C5994A3 0B5456E98381A4FA 1AC181BC82AA06B8 048F95BDC60728AC 17F63325B0362985 E36C2D18FE309869 DDE7A89BF80CAAC0 8F18FF9204FF0EAE AF01D74CA4B87416 B7DF9016102D8340 2AF6ED0555B45A10 87C1D6DA94FAF4B3 2AA2C692769633E6 78AF647861966D7F 532589030D74CE45 0AFEF4D2CBF33C81 1384D5166FBCF3DF 59166BB7933EE149 6FA4D3FA54B734CF 37CBCEA84E7A5B07 CA1DC18B855ABFB7 4C1C0832B7E3F369 E6A1884922921D8D 91F4A053B28E8AD4 2CA1F2368C69CB80 103259F57E90436B 212BE8D0C48A0947 C4312F5E04C56957 2E08BA3A48E0478A CE7C5305593B9488 76056D48B9872462 F977FB3EDC30A83B 20339640E7BA2F24 95ABE6582A88B243 3F29147B08BAAD3D 66E83378A4328E45 09ABD9C1C57D4F3E 008FDFE43A411A88 8C784CD062ACE3EE 9ABBD78C3E7B410E BBC00678FF217DCA B4AF1D585CD31D34 D076BD5C968D2AC1 38838283E8C546AA 576B87E6CE7DF8E0 F08398A8E02AB25E 37EE985A3074907C 6C3387527ECCC9F7 CA2F0628E23E3AC1 A38BF77BB2C7133E 061135ADE049EFA8 22C7C9975DE7E703 6A7BDEAD789A448E 91EE55BE58E1F4A3 BEDE70B5C67B35A6 8ED35839E046E4BA D2D670681BF8D24F 4490BB9C4FECD7B0 0BD0250E26FED701 074CAEF40DD6E411 11DAE8BC1B7ABFD0 CA2D4A5921B9ED3A 09DA5B5773631873 2E2CE70FE77CC15B 76A92ED6A2796A03 F58ED265B6F7C0A9 6522EF0045AA9ECC 116FBB711ABD7EAC A879AF1A9FC4EA9F 196DA57443396179 8511ACBC5D23A693 0884D52FCC4CA4A1 3C4C853E66013944 E3118C3FA07CB71C 1C97A357E2991D05 A1226E4938B53EBC 288DD9DE376182CC 8DB44C55B1815F21 63D9CEE8A93A3DA9 1EF40525260EE8CB 5E7BF9ADEACA94E2 474069CFA19D6AD5 EC2FE35890455A78 829BE480A7F94DCE D8C49D05FDFD350B 402EA4523F72F5E6 493158BEE090E925 7D3F85C3E3DA6199 9670381E0ECA1A8C D089844E927ECDAB 37A092ABBCE2E62C 836C9940EA437D40 EC1758F362F772FB 16B76186D06373E6 397BA9825F191282 9C1C19FE077E600D 0FCDF07821423A42 F67D193015C3755D C189807C45F68381 B408BDF10EB961D7 FF84B7552D4D74CB D806594203DD8E46 4EE9CD9E0D9831BB 06876BE9F0B9C648 B7BE70D05E8E1D6F 9E83E1A4709B53A2 81562F1585FA7E9E F80381D4D78AD5F7 45E6DF30C5F2503E E1ABAA8154DB6BF5 4861B19CD944B3C6 325A6D493B8078B7 6C67C4B436868EF9 F4ED9933422853A8 C506EE6B2C784DF5 7C03472AE73B7FC1 E67A7B8D944460E3 321467850B2F585F 796DC3E92155A77C A175B0D2D5D1A0EC BA7D3934DC939B6F D85DC7A64B8400FC 7FDBC971CCF5828B 34FB7CD15DAF19A3 CBFA0FF20F24C748 3BD1F768B3E8ADFE 424800D39B1AE881 77ABCD0B3D3737DB 24D39EAC3A5390CF 47B200E584FE7B7C 218E95ED31A2251E 014D116CD9441A0F 5E0321C7A0579251 0F1C2D72EF6DBD57 8E3A3BB2ECED084E 7C0956F695BCE6B6 1C88759C6F212B26 722AED0DE6E5CF8D 21C8BD386639E555 929CD55751AA51FD 4CCAF7F222030E3C A32BB3A711B1F8F1 C5E05884643374D0 2501BA327BAFCDCA F3CB3F309F2EE324 4780DFFC73EBCBB2 0A75B8270F0449B6 CC590F5500A8EF3D 411EF93F0FD1A0DE 8496423C3C9624B8 4F09C83162C4E82D 7A13CF156F45F888 AA13798BC65B65ED B58D9D6A7EAB33F5 44A3342A789C8FF0 D5ABED6F01F930AE CB64D76A8EB7E222 25CF3B09B778A4CF 13D751D53CCF8B9C 83F8BCEEF21ED49F 02C5F1BDA683BDB0 8DBD6282B42A74C7 21525F641EDC1EAC 5E3F6EE8E7AE60C0
- Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201303070702(name+title). Key = MD5(password) =f31f77974891581c98e5561ea11ff4b5, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).
Decrypted: GUID list
1 541b58d5-1ff4-12f7-aefc-85e7c7f2be0d 2 a6ed3960-2974-5da2-8692-16fd9371038a 3 75bd4609-410b-2004-915b-fac16740a5d4 4 3dbea0f0-4f7c-4401-8eb6-7ffcf123583c 5 518ed53b-6a0f-443a-9373-a5a1a64b1b94 6 5ebb8b59-6b91-8cef-8691-4f7a32579483 7 de19a4bf-040f-0b27-a870-4e0fa78c9f48 8 7ab732e5-026c-82b0-8235-09aa22a4f943 9 3b8629e7-3e79-0cb7-a57f-77f1f0d983af 10 57dfa300-1499-0951-8246-75ee6aed0083 11 3f924d57-1908-2c5f-8c24-6e5177f97a62 12 2ed8222c-fcc6-790b-bf87-1f2411c9dc88 13 1424a1d5-d22c-81f3-b172-2af8707c9290 14 394e6e04-0c67-512b-8424-d8e0fdb179fa 15 28efa518-118c-00b8-87f3-22386be4bdbf 16 8c50fcaa-0e07-091b-a321-674c76838967 17 4d2cccdc-a5bd-68f0-a68a-726d577ca257 18 3efc8733-6083-2251-ba8b-63c6eed829ff 19 5e58c62e-5777-43d1-bd09-4e1a22615a01 20 2c5c6d5d-12bd-4c8d-b93d-55bc72fcc1b9 21 b97ab8c8-fb55-5c30-8fca-0e4368e52186 22 67c56ace-7c05-6f90-8ff2-3df4da81b2be 23 d1f15087-cbd4-20fc-95fe-89d17c874cbc 24 a7926599-a90e-60cc-a3c0-db0a4c9b1dd9 25 3919e4e3-4139-62a4-8a0e-e6c06a1a3b74 26 a372fdbd-77be-289f-9dc3-afc8232119ea 27 9a846d8f-7080-5eaf-9ab0-fc572cb44e56 28 d04d9580-7555-6ced-b9e3-652c7e5fa0cc 29 ec2e4f4e-14c0-5128-9a2c-ec1bb595ac6d 30 40f38b42-fb3e-72be-b223-c2a2b80cffb6 31 3cb5eeaa-71d7-1e4d-837d-92d01f3beff1 32 fefa29d2-44de-576b-93b1-ed2dc5855861 33 5ada1d1e-6b95-72e0-9463-710f05eeeb57 34 2b07a44b-9161-56fb-a3e6-36643853e180 35 ed9c4f63-8c22-1b11-a1bb-6215d5a6f2f7 36 d0b3a47e-23bb-6733-ae33-e52b1573caf2 37 cded2192-3b79-0f26-a4b2-77deb1188284 38 cffc3b68-fca1-8a3c-9406-a0fb13b50fc1 39 cad94921-0dd8-07a2-a689-04a84e92e6f3 40 5268ac04-149c-6462-8735-37a37505bf03 41 e58665f1-b4b5-7c0d-a7e8-8265d0918923 42 eea0b337-af9a-7f69-a10d-ee8c711c094c 43 b0c4dfe2-d8d5-5123-853e-f10e8dc0cb49 44 f558673b-79f2-6780-9bf0-0b1b1f43c1b4 45 2b439f1d-3876-35c1-b500-3328e8ffe27b 46 5cd6efb4-7897-315e-84a4-941c586fcfab 47 5720c081-d2e8-2871-83e5-b43ad658fa95 48 581af0da-ae97-1346-836f-60168eb8e7e0 49 12a4ce18-6d42-088d-98bb-557c02a64595 50 987b5a3a-82d1-528e-816b-0dc3fdabda43 51 d9f3ec14-c703-7ce9-96f8-c3817475d95f 52 25d273d3-8965-45e6-9b29-d8c1e1ead104 53 f11bb66e-446f-38ed-b36b-41eb51013425 54 3f9142a5-580e-3bee-ba06-6c07ee4c2aac 55 c3681ea4-ea0c-89ca-8599-255d987e9112 56 a3b94294-6a02-4c30-8937-fbaac73e4cdc
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
15244808002785006244562662565715751608067756332105743384. Exactly this sequence comes out ofnew Random(623).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 233 of Run 42 (seed 983,934,859):
new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32). - Conclusion. Filler. The content is fully explained by the two RNGs.