201303202300 1apk45
explained decrypted filler
seed 814
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201303202300(name+title). Key = MD5(password) =fdbebb8791e6ba04db2675ab9578ebdc, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).
Decrypted: GUID list
1 9e12db38-9250-8d7b-b4ca-e58ad0121aa8 2 c18ceb19-d391-574b-ad7c-db604399184d 3 f90ff9c0-c757-6100-83ae-66da6da57951 4 c364b28b-949e-2fdc-a1a6-1a47a1bab7e3 5 942c3c9f-8d8d-675c-b046-7c20d5e8dbc2 6 ca144b6a-a6c6-875d-a94d-de012ff69bfc 7 2a87f541-37ad-5bab-bd74-65c271a72093 8 ee7f23e8-0e54-7b68-a871-530540377173 9 b761acbf-df8c-6da1-86de-f3089ec90083 10 48264ffd-861f-31a1-a839-ee0822b09bd0 11 c1332e50-96e7-8a8c-99b4-662a94518a20 12 141b43d2-46ef-8070-96ef-65dcd4549ecf 13 64f06a84-da03-1683-8624-2d1e0280109d 14 a489a02b-eb31-8628-b667-d65a5f899bb0 15 966ebcc2-e3b2-667c-a50a-6aa48bfed947 16 1c1fa8a7-58cc-3849-8064-f4d53f2e617a 17 43901687-def3-0959-866f-7c074d419d1c 18 a4190b43-f20f-6104-b538-3759f5f2a4dd 19 3de9f405-5210-68e1-9ad1-d99d2bd35e51 20 a6eff03b-9304-428c-be90-c0cc88421534 21 7ed6b077-bb86-85f9-a35e-abe7d1bbb1e4 22 c8d03619-4758-4796-bd91-9964f06214ee 23 9ed73949-c4c8-5721-b95a-aa46b4d08a16 24 93a91f16-150f-3070-8158-b7c0e1e0c490 25 08d62085-df81-444f-a485-0ebef248cf1b 26 c25e93d0-a0f1-03d2-b2f6-d2c4dd787b2e 27 288d4b46-d079-7e14-a8b5-925db286171c 28 47668c7e-8e85-059d-a4d3-335bab4e9398 29 55c1e178-d4e4-3d17-abb8-ba62ea88ff65 30 5f18e207-a518-5b0b-ad2f-e998d4121421 31 a3e72033-d1e3-655d-9b37-bd4443b20963 32 8bc9dcf3-3b17-7522-b0bd-cad4642f0b26 33 25f4a7a1-83df-582f-8bc4-57a1003aadcc 34 baca668b-6a44-3d56-920b-0fd7fc816c76 35 e835c983-8b27-74cf-b735-cda39fff32d9 36 954b6bb3-a239-0f45-b1b2-5986a4c6b0f6 37 94329b79-e30c-2fe9-a5d1-1e5d49f93d86 38 3240f018-4496-1aa1-8e02-e561a2b9846b 39 a8b2ab1a-6eb3-697e-b08c-943c71fefa09 40 31398b33-19b6-1960-9386-8c21606a57e1 41 041a9b07-919e-38f5-8d4a-cf2d388220d5 42 a1c5dbe6-62ae-7909-913a-2dd05a948a94 43 7ff7321f-3cc5-7185-8523-07a4ddd241bc 44 323c7a25-bef0-34e9-bad4-30ba3dfe7b67 45 c6ce2f5e-3641-0952-a874-d61f99426158 46 693eb501-fe8b-5c0b-9d78-08d182dcc420 47 d54f0f13-5d78-28b7-af56-8c245f6973f5 48 88e33def-1ca7-1f5e-8611-f33d8a23811d 49 70e39394-279d-6526-b628-018c9651ef6b 50 c7819b9a-c524-7f75-b73f-6a9855f3912e 51 dd083bed-8e6b-86d1-b903-54218796d3be 52 93c99b4e-093e-589e-90ed-2140a8c06600 53 7e54d8c5-39c2-12b9-be9d-098ed0064d9e 54 b54e0ecb-6d92-2ddb-a413-d9e7e6b4c677 55 83a1103b-5a42-196b-8f3d-ba5d33e0522c 56 a069d18d-bfd6-3c9e-b115-a6245d9624ae
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
85626857638818630664845340703567537021613773052167851213. Exactly this sequence comes out ofnew Random(814).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. Grouped in 1aorpo: range-8 piece (7 posts): undecided; candidate seeds 643,201,468 / 636,247,656 (Mar 13 Patch-Tuesday boot) / 542,563,171, 3 hits vs 1.25 expected
- Conclusion. Filler. The content is fully explained by the two RNGs.