201303201701 1aorpo
explained decrypted filler
seed 90
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201303201701(name+title). Key = MD5(password) =ac77e425ca6ea9f9f5eb6d284b0a51fd, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 96988ba0-eb8f-6574-a303-d57908a5483e 2 bbe6e97e-596b-237e-a5a1-22071e23a2b7 3 e1b276d8-8c9d-655a-9dab-53ea41c49b1f 4 584016d5-27bb-601e-9650-7cb351e80f05 5 63a736d3-535d-7a01-ba2f-8d064714f884 6 74dc217a-e3b0-1f11-be38-71f7a9cd1743 7 f3b9bc79-2bce-2228-9bda-83809d0ad0e6 8 1c5628a2-b0b9-5978-b2d7-bd3d0fbf2fff 9 4f1933cf-7afc-140f-8d17-2d3ec1d37c4e 10 43f4b2c9-4b78-4e36-a45b-17064846781b 11 de84d229-5e6b-5c05-aa90-83a146e13bb8 12 07ff511e-53c7-602d-8855-8375c66d05f7 13 e7969a49-6912-4834-8833-735bf30dc544 14 7308dd35-bbdc-22ed-b4e1-fa816e5f1423 15 886066c7-c004-8f54-8be2-beebf377af88 16 0d7c5e97-d893-24b4-8ef6-4edcd3a4e01d 17 a97016d0-ba7a-67a8-acc1-d9bf6b58097f 18 f9186855-ea6e-79b9-9309-c6f7f01026d1 19 9bfc6a19-c0f3-188d-b9e0-428222b1d234 20 b9ab33a7-b93a-1901-9d4c-a897458f1c8d 21 cbcd0d52-ff60-6ffd-996a-e00015103ef7 22 79fc9b9e-b07e-83d5-a9fa-7d333aef8cd1 23 bcc36c2b-aaeb-1bd4-bba1-4985db7590e7 24 2dd5d304-b19f-4667-bb8e-7e9abe52c72c 25 c4415082-416c-45af-b3fc-3a77e4575cdf 26 e406f56b-1951-350d-8f13-766b0dce47ab 27 341f8e72-14ca-2ad0-aaed-6b74ede3cb48 28 c33fa5b9-3c6d-4aeb-a6bb-2af84c386d3d 29 bc785e1c-148f-3c98-8833-909a2e163f59 30 66edf510-afcb-5cc3-8ce4-c68aefaece5a 31 07cd05ec-c572-3361-9ef7-82c1db73822f 32 ebacecc6-6a5b-1404-a04c-082e3e4fb3a7 33 e71e7e64-1cdb-45df-a540-68143c32c4f6 34 77738c2e-c671-24f6-9968-8f337269fd84 35 5bc29155-d076-06c3-8530-895cc2db45d7 36 c228ede2-4112-5326-ae8e-c76f8631de56 37 1f38eab0-c5d8-597b-8069-9725c1c962b8 38 f9c306bb-ab0b-64ee-8fef-d3f05fcc4065 39 ad3750b1-f57e-63a1-a919-128d2098fa42 40 abcdc785-2866-0684-83fb-b717e6c70c43 41 d3c272ac-b360-5cec-ae27-80e5f61cc1f6 42 5817298a-a7a9-6da2-b7cf-2f8824b15a9e 43 ffbbd29f-e51c-5cd3-9e32-4e8a3c0b3a95 44 282b07a3-d2f2-43a1-80fa-0bdbfdc1ccf5
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
62667125145642826711681443243531420556605654. Exactly this sequence comes out ofnew Random(90).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. Grouped in 1aorpo: range-8 piece (7 posts): undecided; candidate seeds 643,201,468 / 636,247,656 (Mar 13 Patch-Tuesday boot) / 542,563,171, 3 hits vs 1.25 expected
- Conclusion. Filler. The content is fully explained by the two RNGs.