201303281059 1b5ceh
explained decrypted filler
seed 252
From the post to its content
As posted (encrypted)
2348EDC5E9FDAFC8 6BE83667EE7A7645 D707256765E22E00 7B2EA5C66885AB86 58ED29B94B484935 E2538C5F5C146944 60A9452AB73B6441 D4473193845E97DF F11FA1E16447C754 AE12098FCD624A9F A9B42B4DB3A11309 9EEAD96757A75E27 E7ACA121EC1DDB0C 35B637F2E719E79B 552ACB99E9C28784 D0A174FC1BCBE615 49A43C335A68F8C1 DFBF110F65854A2E 874A7F676D5055CB D65208C7FBEBAEF1 617EF5F5713C8E28 769D8817FF41BAC9 D5EC16B98B2A59C0 F650FB34DE62CFCC 9F600223DB1C7DB3 C496E35849598060 E69CDE9DF02E48E1 D1F8D1093B940E20 8F29460A50395804 6B21910FE5AA5EFF 31CD7CD3CB2E4200 41C7424546062F03 A3D9B2312D432126 DC9B56DA2C11A569 060C7E261B6F0A34 3D404EA24EAAEA5F 2A2D76A231480F9C 0F8AEB4A138052CF 97623841EA5319E3 CC0018FF4990E264 AE51B22C358189EF 01386288E6888D30 E25E36DB5104AE6E 7B66E806412CFAC7 985479F71F39B22C A09610BBF4013622 03058AFF47E355D2 513FE5F752C55203 AEBD72B98AD93043 4E2F4728AA96B3F2 C6A0B53B5FF5ECF8 6ACC2BA0F40CA882 49B54399D19F92AC 56C6EDF8FB13F5AD 14F6649A589BDCF7 F73B364CBBECAF88 7E9CD9BF56542037 372803EEBD705D30 405DB772216F6291 2E1718ED54C2EF5D 12BC2A63E6605AE4 CDED778E0428D82E 924569DF01FE1010 BFDC1D3CB1FDC718 2A78763E559B3441 45A8C6158E167652 F59CBBE5FD10A5CC 2EB5FD827DEFA8B0 CDC36E8D94892F42 BB65409863F412DC 02DD4365A37EAA54 447596279DA9C2B2 E11598A7AE274E26 13B55792FFAAF5BD 5E93411239E28C65 504C7DF8DDD0D775 0AE5A53291E87CBC 38E8E53AE7659534 51277BC680129C50 58923AE7E2C94801 327AB694BF956C11 3552D98F0139CC7C A5600048143030CF 43FDCC9302FA14A6 0364383E7E83C91D F81063AAB5ACE928 3E921D8B99A642BB 0C85783971085555 6C00112DAABEA60B FA0FD2A35F2175F8 610CE88D42B2DCF6 FA46F40D67558D2E B8A4941B09A3C700 E25A41314EA97D83 B5D53DBD8A417C65 036F613E0AE67E52 62F9A2E97C671F0C A5BB91C2F3D922DD 75ACF65FB99D2487 13E39702B2EF69EA 6D7F15213177CA69 071E131F76E85487 4A65C416B597224F 2B06CD962E77A579 C576A5513882B81D 4AE1B662639BE255 8649CABC81477552 02BC62AE93D19454 77D3BF2124DE5563 ED9AFD588FA97FAD AFBDFB7684193D33 484B618F9B8FCE41 61C35D6B8581618F 16A10BF7236B3FD8 82ED73C90BF29FA6 3D16836A6E719DCB 39EF99BC399E3CB8 688C606565B5320F 3AD0629E7C006856 DF7DB42B386D066B CA5CE23E0ABC0A68 C2635784F55F270F 57C7E1A423AFDC6B AEC2F43E4B05CC7A A0B9077527F3EBA4 48A385E161F3D415 1CF3E2BB23B0AF57 F484F92E330807C3 307BCDE5F7627578 AE9ABD4FA56ACE06 60AA2F406CDD46D3 5D40E2FEC455998F 8792491B93D6597E C0BE7AC267FED1D9 B3E4333F0FC31713 ADDBDAB93FE69B3F 404395E2A741BA0C B41EEF52AF37E14B 443B363AACFD65E9 F431E3B613261C1A BB0A9890D4B0979A 8C2DD8CD3AD1077B C43628DC893D4AAF 9249F734158C955E DA92F6F4AB6D9029 54DEDC2E5AFD5305 027A32A803B39B89 FB1AA128B379AAB6 070C95E577654DF0 E3BB54B077E78C66 3086C8089F262D4D 53C00BD0DA3187B6 0466F8BFFB5A714C E30D9CB5CEDC2B4F 84DEFD0D49B45072 871A40A8FAE30191 2B8D259BACD16B9F 20677F9940BBE08D C2E139DA402251FA 12FA8B480F9E0DE0 2E413DB4E689BABF 03900571C2B3B223 E97BF362E885D394 07A6A5F216CD2605 4F373F3CC6FBE809 B3159AEA8AEB7348 2E361AAA2185388B 8BAED1F0E072E171 9CC311150AB12F9E 5C9C5CD9DA6B7FF1 153F02292B95F0AE 73C09EE29284BBB1 BA81A68A94FA10FC 5EB682D5C4C7B863 2CD1AF77F30F30D3 00F132DDF96F8439 838FE29A5E9AEBF2
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201303281059(name+title). Key = MD5(password) =f39f8c127331a28e12d08bc529ca1247, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 f8ca4dda-176f-31eb-85b5-1c6c0e5e65c5 2 e1b638f5-1bce-6ae4-a482-178b63596722 3 77c6d6bb-21f4-861f-b3ab-542a49fe1136 4 1046a1f8-ca56-35b0-a264-e9bddc6f296c 5 c6cc006c-6db2-846d-ae46-437337741b0a 6 6ca0c45c-ee27-7e21-845b-e09047618ea4 7 b8a94c03-61b3-753f-a02a-dc47b39d79a4 8 96b285e6-35bf-74ba-8523-86300457f73e 9 7938e293-1727-16a6-98f2-8b013d685e04 10 bbb9bc6c-6091-16ce-a3f1-6eff430af394 11 30982730-ccc1-86d7-924b-6830ce615eb0 12 45e39572-3777-1164-a31d-b8ecb712a4f7 13 7c4fcd9f-4954-7f85-b25b-b08e576aecf9 14 8756adbd-bd4e-54e2-bbe2-6b34852a4499 15 f680ead0-ea78-3527-b757-e3aa77057c8f 16 9c09f826-c0a9-34e7-a9d4-01bbd2820463 17 fcbd0770-ea2c-7a99-b46b-a72b64bdbf2f 18 0adb5b78-32e2-2d8e-be00-0b0c19171986 19 e22ee439-4ca1-470c-a839-47d027b0c120 20 c6433969-d06f-8b36-9f16-f67d0b47344a 21 6cdd3ed3-38af-2c60-9463-a210cb5ccd63 22 10686834-bc76-6bc5-8cea-6b9af492a58b 23 a5c08161-6ac5-5d2f-b26a-5576b3d9e9bb 24 0edf8151-bf09-0f4a-8cea-b7ad942c9f18 25 2a47f4d5-b5c1-3956-b735-f893f3cc0dfa 26 295a0c3f-f2b9-5feb-9936-813f7f1c0023 27 a9f02bf9-2f6f-5cd9-b3f8-aecfb6c220e5 28 7dd52f0d-e438-7d8b-851f-48a50e58597e 29 df4bca35-bd5b-16af-a74e-156114de10f9 30 8e88cdaa-4fc2-0d35-86cf-bb68d7da06fc 31 5df4ea4a-d013-1e99-bfe3-fa2679e39573 32 ac78d335-9203-7c47-bb9f-e5e6cd9a45a1 33 7c53adc6-35d0-5b4a-a9da-ed2d1d6e6202 34 0712ad48-bba8-2f50-96be-9b07bb36fe37 35 411148b7-f982-588f-a2e7-af01f6246aa6 36 f85c5cd0-4a30-6707-9334-003837e5107d 37 db603265-4e0e-6176-b51a-b125950b0523 38 db1eaf1f-1e3b-1663-a1ca-5203ca93b97b 39 928c420f-291b-409b-8ded-f8aab5b0e82b 40 aa9f011f-3ee0-0ecd-b169-1d37de227c55 41 8d637116-375d-8ff5-b138-61e97e87450c 42 8cc39321-2714-60f1-9ef5-2fcc2f92a61d 43 66ef6b9b-78a1-2170-8f11-78947f39cf9c 44 00e13c24-cdb0-7593-9fff-e48fd13a8eed
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
36838777118175337248265035571017525661408627. Exactly this sequence comes out ofnew Random(252).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 26 of Run 43 (seed 120,022,078):
new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39). - Conclusion. Filler. The content is fully explained by the two RNGs.