201303202100 1apavu
explained decrypted filler
seed 869
From the post to its content
As posted (encrypted)
5ACCA3C2263EC87C A44BA14DEFE92703 926E903F043831C5 D754196F5859AD71 1DF0FA6551AA9D77 E098632AFC4AC058 8FA6941310799FFF 4581ABCBBF2448B6 4D2456992BAFB0FC 74720527304757C4 A502121244D65762 8BBF450A3EAC9E27 8C28E318ABAF48A7 F2A7F5171238B70E F296744A576C3E08 9E718232F5E0E96C 93738908D241CD42 309CAE37DF6ECC6D AF4EAB5CEAC03EAF 80F1FB9EB945C1F6 F69EF06824283170 BBC98BC627291FA7 CD1306351A336E33 BC94CB9FB3F47386 07BFCE6C63CE6A71 D5B755A52CD043DF AB8765A2F3758878 4691160B0290DFFA 27A7EBFD4341578A 372D494AEED3FF22 C4D46B2357F4BC4A 59631B24C010C5FB 0DBB88AEC4D42475 975ABB4D648A12BE 1763575247B30AF4 F6C34A22CE1D9ACA 8ADA1C847DD5E32F E5B387304BC4102F 756376D4CF811C64 AFB9D5110F6F9C3E 289B16B440A5F94F F236FCAFDB81C88F 55D514EDB0A0B3DB 916D83B4F0D7E6F9 D4018F482D2751D9 F17642FF9B36AC35 B89F81A8B187617C 9353E036CF01CCC5 F03BE09511E8C02A 02C6F93755368C5C 9A4C1BE86246D098 71E16FF8E98CF104 83493E1FCF4D5B85 71CFF0DEDF8E50D6 50094600381419DD D81A4BD5A5B8FECF B12091C1703AC78D F7740087912CBCA8 FEFBCACE5EE5CB88 EDF63C51565AEE6B A853B1552EEAE0FE 3FEE2F51373F7155 04F72F914C37FE9B A9DF6685A80114FE B315E82F247BB048 1C99F228BE2EDD5C D40A00883823B6C1 7A447AFBC94F6C8E BCACDA2D25DE65BA A67F0A20460EF555 A35FFB5C753B780E C9B74FA0B74A4981 849A6AC49955D4B4 DC4D776B692D6C4B AFF92F8F80E395B0 2AA40653DD7E84BE D77B0FF67A12531C BE80BD9D8FEDF851 962EC0447BE63976 DF5283CCE3CD9D53 6FE0CE72B5CBCFA4 DD5027487673E3E5 46BE3957A0A7B24B DBE598E7F459A36A 31790602773F9790 D585840093D7E63E 396994A6F21F9682 988893573033C60F 7116B21BD5CBA562 69BBAD46B68A206C 540776585BBCA5C0 93AD23CD098E94E9 F96CAFFA042F6E6D 661EDDD0EB79D590 29C43984FFDEA6BF C9614B23DA56DC75 203FD6E8013D61A8 C8A74AFABE0702E5 1DE330D7C3D9C36B 4D32D382105633BF 6ABEE6E453027377 05D39DEA9FD5D15A 40882CF4F682BC71 747842517CE75245 9A904738B4D02194 75FB5CA08CC83A37 09BB72507481BE42 5E41C5DBA791838E 721B33C28378A4AD 28275AF0C0508F27 224197A2BA967DF3 B486FF76DA7DBC33 0A16C8AE7825113E EA233A6A27353DAA C4D105F835C17600 E9B76A3D7E583074 AEADBC40CE334152 87545966A84056F3 4C617C615119DF46 C0DADAAAA6EE3C38 5A90B62A96044BD0 DB2FE32A9C8449BC 627B43ADAB2F3997 12F8BA18CB39DFDA 25C39B3EDCBA2CBA F2EF2F25171B014A 7225E90BA2EF333D 3C1210A03319FC3E 3748EC345A4E2BAE 09B267CABEEB0B11 2697E9441A8A6508 A0B44302A9658135 8389CB9E0F811700 B100ECFCC426033F C4500EED5F8DCD84 032DF6950A0DD709 A892A840F175E5BD FEFDE8703A6BFA89 8185D4AC3107CF42 12695EA1CB25A1F7 1AAD7CE7F8AE3455 C1BACF1A13E46BEA EE0A25AEA9F346CF CA9D4A0DCC199E91 702E8F1121B116A6 86656C5192709D12 EC4AFCA496851012 65904DDE10795F87 B3BABE39138A3216 2C6A036EA2CCD1FF 09F4D4682CEA6BF9 E1DEA4FA7033AAEC 629A47C02AC2EF51 0A3BCB2499256C72 78DD9E5BFEABC624 3D091D1D31AB1CFA 1F8C40335877329C 6300790AFFFCBE25 391EC89FFBC2B44B F74173A24FD254C9 B3A7B3F735BF225A 177F5560B728330E 485D87993125CABA E247D793AFE03812 20F4E136B9C8CFB3 B92E667D1C3AFF51 DF84D3BAD721F798 EF3223CA92ED9CDB 4A80DA2292A023B9 74CFFEF0FAE93665 23278284CD78583B 36A03C704AAFC9C0 9ABFBDB29488B04A C653918D069C92F1 F01400C50E8BA19A 4D1CEC02A09BF231 0024457AE1CD9EAE 2B8E75592B5EC414 1F5CE3CEBFCF0E2D 6A12DB5E16387618 0268C56E2F410BE5 A7A9DB2AE1AC3322 19AEA5FD709ED9A0 0A3F8A22DB11812E 61DE8810B460106E AF09F5BC57334228 55903FE41D88587C 53072E8CAF8527EE 9EB141D42915AC4C 08679DB758D8C4D5 231B23B6ECAC1963 136B5831FAAA8453 66FBECB0627D0CD4 0ED629083656CAEE 9EF579B05EAA2A10 8A29203B643BF702 C0B9040C6330C475 0DCDAB570EF09799 FDFCD5E9E4746468 17F03F54F0CA692F BDF7B647DB3A9293 C53BE8C12426E17E 30027D620BE11CC9 EA4D27ADE3E72C93 E062A2E0852753A7 A66B6C6B44F6B6D2 F1103037F6A00781 7EB88870E9CBE868 D36AED084C480F0C B03DB38DD62F8ABE A0764A60CCA87A54 A9DFE1626BEA721B A3A7F29BD0C58192 9F879E187C30CA4F 2BD5AE7389A054DB B26CBCBE7C32C8C9 ED9EB37A6E943FB4 839E12ABE7336BCF 4A9D2641AE55ABDF 7A26C3B8E0B50FF7 EB7698815BA86ABB EB82C0752F72C574 96D72B2098F2F440 C67333C2AB009608 334491F3704930C6
- Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201303202100(name+title). Key = MD5(password) =cffba57c44e9484f9048869100ebc17a, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).
Decrypted: GUID list
1 a077ef1c-a6d0-6bc1-8427-f658c946e3b4 2 33c96e62-dc17-7705-80d8-23eaa932a0d4 3 18b8f593-9743-1def-a3f3-024ad54387fb 4 745c2f33-17c1-0dd4-84ed-4fbfc55a1b9f 5 2fceceae-7d67-4cd9-8f04-35d62c2b0b90 6 e1a29ad1-284a-82bf-829e-242689920634 7 8e5b9a89-803d-2802-a559-0307f1160125 8 2657342e-81f3-3cd4-8f6d-8127bcf64a7d 9 c54dfa6e-60ef-472c-a8f1-2433c183f813 10 778d0fff-1a86-662b-bb34-1f09c043f13b 11 e227d440-e933-4ea7-ba5d-65960871b12e 12 023d516d-277a-83b3-9765-788f55325d15 13 996189ad-feb1-0e1c-96d3-a2b628b5062b 14 84132bc4-9561-55e0-96b8-69a870c5cc41 15 c4a322b4-ffa2-2fdb-9558-b46361e465d3 16 313b1fcc-ad60-6334-9d84-5bdc4cdb7699 17 0d3631f5-d777-134e-8003-8fd163f56ba8 18 7e3c9b9f-053e-6155-9e40-5dc42412c735 19 65367e29-320e-12a5-95a5-8852f624a141 20 4ff9e7d9-181c-7297-b0f0-659d31e31081 21 f651ac90-8c67-2dad-9e54-040dddf174c3 22 a1137723-0387-0095-82b1-f6e16c62a881 23 b272819e-3ecb-7cf7-b18d-4f46b5ed8c4b 24 38516658-c950-5913-8cd8-be8570c8404c 25 8bbc2e8b-eda3-77c1-9030-84bc930a56b8 26 7dce11ce-f140-4744-b7df-225e33179a31 27 b7fe757c-71df-0c5c-8a12-f12f19ad4f88 28 b63f0f2f-074a-1882-8d28-8e9780645e49 29 b186af07-a42f-5de9-8925-1a6c56b65410 30 943e277f-037d-8bba-8300-cf1fa04a5586 31 9f3a8305-ef7c-08cb-81f8-02894ad6b4e8 32 e5429239-933d-3c2b-8c8b-8aaad85fca75 33 abf11401-1210-6e44-9b47-d080872053cb 34 39e0b2a3-fd96-626f-bb72-bf1c41ce8b88 35 2b9dbe91-1a29-0afc-b808-9affb139eb61 36 1abe6d68-2b9d-3ff8-8f3d-8aab4272e5a9 37 28585af5-1aa9-752f-bed5-7311f85f948b 38 7eeaa25b-3925-5a27-abb3-184a11d7b2a0 39 9e494507-4819-155a-aa8e-7cc11a4fed26 40 0d839d29-d474-3aac-b092-2d5132c27d5c 41 54d2a380-a097-568e-9208-42c636398df8 42 7ea168a8-8b89-1aa8-a627-fa461e43fd2f 43 c68dca3a-c20d-25b0-840d-a086f2fc7be0 44 249da05e-c9aa-5f25-a027-e6f9e192ea81 45 369124c2-d236-0d19-a06f-1641bd72e95a 46 e8ef0b4c-64cb-0b96-9401-5e78a9c1176d 47 8a34881b-a270-8473-97df-4e2f4730f94e 48 2ed58c8a-ffb8-0502-9235-47be64e41c0e 49 b1cdc12d-c3ba-0565-99e0-36712d5313b2 50 656903a8-0219-05bd-8cfd-4d655d70d46a 51 c7a9e4c5-7242-3fa5-b9e7-fa1f2c2cccb4 52 7447830f-ebe8-3d45-8530-595289f6e233 53 7c0596a7-1fb6-1134-abb0-6f874568b519 54 7d0df85f-c9e9-4828-b478-dd5f8b70466d 55 eeedf449-9238-1dad-b1d4-2ac76c5f724a 56 a3654e04-7a7c-6d5b-87bb-7d7cc78e6a71
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
67104823464805261617207574015803660375135125008000331416. Exactly this sequence comes out ofnew Random(869).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. Grouped in 1aorpo: range-8 piece (7 posts): undecided; candidate seeds 643,201,468 / 636,247,656 (Mar 13 Patch-Tuesday boot) / 542,563,171, 3 hits vs 1.25 expected
- Conclusion. Filler. The content is fully explained by the two RNGs.