201303290809 1b7d7m
explained decrypted filler
seed 131
From the post to its content
As posted (encrypted)
67EC5D84D320E938 87219AED6418150A B0FC035C92D6FFE6 CEBAEAD110082E89 603DAB7D76EEF0B0 7060897C1E242768 135D2FCE586BCE05 8D972D2C9CE69C3E C05FBA95ECB6EF48 1ED2D723CE5249D4 CF1A2A56CC625A15 0D3787DC639EE37F BB8E70D6FE57721B 26BB782274CA2481 0B74034994F29C5C 2CB542080377BC9C 3918B2F737FD7D92 552B55C0DA2DE3B2 6284B36D5724094E 3B60949084458522 3B51CF31DF483EA5 DF0B4A65DE60884E 627F16B01637E2A6 D510915E0A666300 8EC37C7E5DC6395E 39FA6D6693B8E5E8 C57758535942A60B FE3C8195DB270598 E18A82370CD06B2F 27D34D1986A1A79B 316C8863D510E08B 2D135CEEFF75CF56 16935D4E0E288760 AE8ADC5596385A87 B28070FB4EAF91D8 ACA7052F6D995F53 D1EB45B4B77A4A21 7DFA80B74DC26043 DB40498194802636 66846DF831AD3F2A D1001358E4A55802 5CD0E0975B42171E 2E61B6A45E7F5B29 92C5EAE5E7BF1DFF 6CCA2A020ED5F15C EDE7E3BCEB3B7AD4 E49A8BFDC0059155 66D5D2C7CEEFB768 AA25A7F2A1291E7D 3AC86B7402D7820A F54C615CACE7F555 39A558E33222C133 0B2EF61496B0FF68 6570747033BC686E AAE27994E08ADDCF 640EEFCDD6FB148E F887106840D13D75 36C3C0EED7F85AF7 7297EB04AEB100C9 64FC94BC0E8C2513 47B60F4D9DEEAE66 CA1E7921C5AECE39 0B07915031CA1641 A2CF9994FD3B54A6 308882BEEDA45F67 280FDD9662D54516 8B53578C50E9376C DC60816FFFB0ADD8 835B21B42F03F56F DEE75A87927A1F1B D610F6E124604A3E 4BDCE82FDEC8EE35 EADE2FB2D3EA1661 0852805A80893D68 8C24F91DAF53A535 EC4F3250BFD6457C 195F40CC10ABA2CE A8D36B0C4649F2E2 8099EE90348C80FC 616B91652A616BF3 E0BE73CD91A41A01 AC2F09767F8AEB58 75FE90B73362F9EB D2FDF2143C439E92 EC08F40345E43F5F 6FE0E2D9169A1F89 8DDB296F6175D76D C78EF0CA8215EA07 6280DFD8020C95AC 630ADEAB9E460166 259E947B00FC3DFA FA84E592EB02FAF7 5EFCDC5BDE895D8A B25A5571055D9221 DEE1B3569890DBD3 14611B45B6DA67C5 9F595FAF62FB1BC4 24CC10467D9ECCCF 0D5A51230B38F0DA BCC5D07F80FC2580 E7A73B89E8869840 CCEF69D211E34008 9ABD407023A644D3 BE3B60ECDFDCC3C8 7F223724B2CBC1DC 42C161B3E6D503D1 175C0D1BF608D17A 43E36BE66DC60B82 EBCED2F2CA1496B7 AF94E103B17B07AE 40043BE85A720B10 2B219B485D240F7D 16219537E7973C54 B4469625757C4D48 892658D8B1F83700 A34E0D89BD2B8917 F0A3217BA0A14FAE E15FE2340AA9463D 6C180A421CEC71A2 B420C83B339FE9D9 6A18DA370C4863A7 C1469660D547A83D 66377CF8CDEA7D39 5A9D3927CCA1870D 8D663FCFFA329F65 24DB5F0E50B6B496 A324E8B38B58AFFA 55DCB0F46AB1F3AB 798ABEE3CFEB5A2A 84C59EC8176E5537 A1FEA5D7C83215C6 D6CAF46A409A1E79 38269A7B084944A9 A501F3A2C739CC11 E2F44387231A2FFC 55AEBCB1D6F63E84 1B6D20D48624558A 299628B2093FF4FA 298B29B44CBEF060 F3303144C8E21A0B FE573FF7110FCF5D 68F3F0BBF2E6A1EA 9849EE5BB5D9F326 5A96BA64CDF9E3A3 CCA6BE3A40C23D85 F8775CAE7E123AB5 F417DA73349EA90E F0303D50A11F938C 0A102CD3860DED21 671E03596B7F6CA6 47BE04E5BAAC7E3F 9C31C41D3C3BA3AD 987AA127AFB612E6 1609887E96F01672 68BEAF87F2108430 896C8DA8D7F387D1 0C9880FE87C464A7 35F3BA46E3BDE322 08850C89869373CA 2CD133558E8F1745 FF1E45E86692E523 13AF44CEAF53D60D 482F05448D11276D DEA76643C937B88E F2F6368F8CD70C07 EF36AE05BDE400FC BCC036BA9A5A3037 CC08BC197018E65A 7EE314F29AA208FC 63F56650A92246DE 0294317A7BB59654 53D740C61854EDF6 EC491512F34EDB54 7E9DA775B0D6081B D4F1F6D3E6972AB9 BBF193053763E930 5D12AD5ED28DF0AA
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201303290809(name+title). Key = MD5(password) =e10f6c32cd188d0d6271eb5fb110cd45, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 2230c5a5-a79e-1eeb-b16b-e8ee44cbfae3 2 2053f3db-3c39-28ce-ad39-837c5317023c 3 066c5dbb-64e1-3809-b2a4-2b7761bef29a 4 3f603e1e-fe24-442b-a4ee-cc63b0a45e4c 5 de41ebe5-c0db-3ebe-82de-98c88e317f8e 6 7fc5f7d5-7c36-0212-acb7-5aa491632a53 7 747f90a9-ca28-50e0-b168-9d19e53431e8 8 59547d0d-ae70-15ad-b911-95e9172463dd 9 a3938873-3962-117a-9622-1f356de5b25c 10 bb9d5a51-40a8-5ca3-a72a-8e7ec0ea381a 11 a5e0c91e-3701-73cb-9def-358a9f029216 12 558b68d1-c027-68a9-91d3-da76d681ec74 13 0a8453bf-1156-6ca2-bc31-b3efcff96b62 14 67a424ba-55ea-5f9b-87dd-1f43db7b55d8 15 13a2a560-6688-61da-aa57-65ec2e40c02e 16 0dfba776-61e8-7aed-9a5a-62cdd5ac231c 17 8c0f5b75-8f50-8086-a171-8920444f15d3 18 cac4765e-f0e5-1431-8e7e-21a135f9448e 19 b22cbb55-4ac3-2109-a22a-e431d5ed4296 20 e5bd70f2-6fe1-0741-adc7-a9f2eb71aed1 21 9d671f23-6523-295b-8c1f-38e7cc909469 22 796a0b74-8b32-8607-8a0d-b97f61d827e6 23 967c4111-c3d8-1986-968a-c8980963c104 24 de827ff2-5395-79e0-9ef6-ba96a2b76220 25 ef32ccb0-c938-4d43-a9aa-cc5e02957ba7 26 5abb4d3a-2f7d-7eac-abaa-d81f20db8a5d 27 06186ef9-f7cf-5ae9-8b5c-3f13c7539f21 28 573f1c6b-5410-726f-b354-d0fc0e99743b 29 34d52f00-b2ec-68ac-9f61-e85f8f231948 30 458a1718-9e5f-59e4-9b91-e0c8353b8e14 31 db4d4daf-6792-4afc-9a06-cefa8d5309f4 32 a7089a83-2adb-8487-b464-c8f4a9d606af 33 07229b05-f41b-876f-b4ce-9e95e1ee69f0 34 ee533778-981c-2fe6-a014-a7015f9e042d 35 ecaf060d-21b2-30c4-afb7-e94d142180c9 36 32fe8d7d-7757-3744-b4b1-a2713727e4ca 37 b34ca2e1-b9ae-4f5e-ba91-bc52177f1d05 38 ac4166db-f546-5e72-8c4c-8ac0ca592d1f 39 7f55aa5b-bcc1-6a48-82d2-d0696d821d44 40 bce756d7-d0fa-3ece-8588-ca7d22e39e6f 41 5a7d90e5-c5e1-0a80-b65a-9ce4051de749 42 a2947d45-ae88-092c-a665-05017e1929f7 43 9a80a629-d662-06af-9b7a-541d2c2e97b6 44 95fff04e-cc62-0c32-bf81-75764caa4f96
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
12343051157665678120281747576548823345630000. Exactly this sequence comes out ofnew Random(131).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 50 of Run 43 (seed 120,022,078):
new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39). - Conclusion. Filler. The content is fully explained by the two RNGs.