201303291244 1b7wt3
explained decrypted filler
3DES(name+title) ECB, 44 GUIDs, seed 950
From the post to its content
As posted (encrypted)
F0F0618EB630DCFC CD54D0F2708BD59D DF4337EE04E25025 55ED556A81512320 E4A09CD88A50754C EC57C851419794F0 B8E4C36317F2040D E4535DD98D27F070 76E3F61CDCE7AB36 A94F38A4D3AF9C6A B053D4C3CD6FD910 EDDA7A5228E5E51D 22B49704B085D19D 64AEA57321FB089B 0B86EBEABA037EDA FC98B404720E7731 D8AB583E6C36C6B6 8049A8B7A4DBA2E0 54545FB873D305BE 1F77A7E26E764D53 B3C535E8CF0A39A4 EBDCADC52005329A 23E1BE7FD2AA5A9E BCD5EBCC79B273EA FC0C9945AEB3B79F DA5ACEB3565EDCD0 8A4061FF437992C9 194A50E1AF653443 D4F7130561938589 4B92A884C4DCC0C3 18C25BE695B0F6BE 72B53551F9C7D9A3 EA3AD316093B5DF6 1501D86779B221AE F5ED66EE1FFCAC3F FB2F2F5B140FA461 60D0C556DCC33CF7 44E6DC786B6E85F8 980D47B90FC4DCC7 9C37567947F20F6B E3E2DBBF1F70E460 95B3B2A9EA45C7B3 DCC6356E5C841A36 6B7956C46EC1FD1F 7624E2A13315DAA8 5A9DB7F739060B26 9C72F8BE700B632F C8ABCDF9828489D3 44064AC776DC062D D0A54A68724B1F53 E1B63863653FAE84 65E965086D526E8A 45E09BE90153D09B A62F15E211F79B3F C157397272B3A61B A05E7CDF15D70B7A 2E70EBCEAE7BC48D 63A0BE8ACA436D83 0F35B955C87586C8 4990FA4A52EB2DB6 CB409DAFCE63BF4A D7AA4F8C26781A45 8986B0AAB9FC5B6D 874EF639FA660066 A2866D0610BF7ED0 84FDEE456BD7ABCC E83A658AE606539B 9F570D36B19D65F8 EE1F6A5C5D2671BF 97E0D5A0A2E142B7 CFE77293B492995B E1C51E721A7FE03F 45AC02552DF61F80 6B81BEEDF63850DB 7C73660619FC827E 7C8E6920C361511F 7FE4ED9B2E027952 AC8945380F99C158 8692C6F711077FE7 C5AED84934EC4BFE E549E7A2D47F744F 8F7795D684CC6628 8F452DB67179D1E1 46B1D15707845518 A7E8254A3556B9AD 18D39E91F39439D8 FACA8ACB2EC7BAF6 AE740DAE690277C1 5B3767010650D33B 190E104FDB5A63B0 ADF11B6F5F25DE6B 13C1B16CC88C3B5C 0C6E714766E20961 EC472CD660062AE6 AE50F4527B3792AC 0E5F743AAFB045BE AB4DE34CDDA313E9 FC1689997FCF95DA 3DFCBCD39CFF955A 75FEAAAD8F890204 C5FD232F9102077C 3597E31201346F67 E76948A4FA29A05D 3E5B5CF477777D39 3F58AD2DA5E09EFB 3F9A49E14CBF90F9 85380E7DB20E13E3 D84E8273D26034DE D30721E49C395B96 18AFC1FEB411591B 71F22D48ADF6197B 51AF800CD5A5DC8B 8DBAB48084FEE54B CE6CCCF75C503229 BCBE850C744FCC95 D65992E02B2E34F6 29E74E600BC2E059 9C2C49955F504B7F 40376D2854C2B899 F2B5168745F2FD4B 0BF7F4E2D120E883 226CDACE124AFC08 BCA302891808059C 6AFD760FF2F77C6D A19A5C9C8D754B26 566CE194D40BFCA5 582AD1A1020AC272 144E6994CAFACBB2 CBD205FC41C198DD 8F2DBCE16E5228BA 4AC59C61FA74D5F2 7A4DF765B0FB0F72 04C626228BA7489B 03D02B9430472A06 0133C5E2B0ADAF5C 91D23A0C132A8448 573EAD10E311D2B5 D9A879422D96012B 9DA05F9C34D3BA3E E72F3542AB493AFF B37B2E19E28572B2 0F3E262160E276B1 049719B816527A90 0853191D9613581C 8B973E1DEBDF56E1 1F9A2AEC701C3770 C18A85C35C7497FA D2ED05F4686DFAC6 059C7B2A61D19C72 02F69CC60F3CFB8F 2DD34FBEE896221C B4EB0D01B560E365 411821BA6622A5B6 D658CC848E872FA2 D4AFEAA0BCFE4164 3518D3E11D37DCB6 BEACC8E541CB3678 385D0289E8A15409 2D6411D60FFD639F 987013A090D29E11 32C306B5E1383DC2 D80D262B14101043 2CC1402019233DEE 2049456789019A2F 4639D0BEED62892E EF1EB92D302C3ED9 EEB744D291B0EEE3 56879C88E1EBC786 5BCFA30D45205F41 E2481EFBA0E69775 65B997490038B228 16563C994AC345EF 2B67EBD1469B05BE 3480DBB5A02716BF 683C073315B0001C DA1C15E7A54AF568 BDC0EF0173E9966F
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201303291244(name+title). Key = MD5(password) =1e648753114f518f83794d5216df1f31, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 05898cc0-2c83-0f6f-bf0a-28b4ba61741d 2 fa6d8edd-1658-5cfd-a61e-8acfce273fb2 3 2eac3866-170c-78d5-b5c1-10da1b226677 4 b0495500-560b-259c-a0a2-4b6849c5fbf1 5 b3307c99-f04a-1b2b-8ffb-b662910d82cb 6 6ea21b5e-471c-6d80-ac54-51bb14cb23fe 7 ab8f7e5b-94a6-5df9-8ce0-a66bc6346961 8 f00709a8-ff0c-0e2d-8d5f-5a73f2718f56 9 ad7a06e9-bb25-4752-b439-c13754314609 10 b036f42c-1473-5c0d-ac1f-f086919c3411 11 d8cec12d-8277-1f31-856b-cf25e9c5e13e 12 9764ce6a-6550-1475-9d52-350103f45318 13 a9af8a8a-771f-6ec0-807c-51edd747ddbc 14 0c1e057b-d13b-68c9-8f83-3910314658b7 15 9608c231-721d-873a-b54d-6f27d324183b 16 76966098-0f0d-20fd-afd6-28e64fc92e02 17 30a7fb28-181b-1cee-92c4-dd9222143417 18 13760a23-4de6-8807-baeb-31453837d635 19 f89093af-2016-3e0a-8b58-f8df1f94d2f7 20 4676c094-5616-148b-abde-f4c7117e3696 21 6f6a6a52-6c60-0a8c-9e0f-a22ce913f187 22 acb274d9-0e89-8fe0-99cc-d13322c20413 23 74fe9046-8cc2-4250-8496-16dc502bf1dc 24 353ea5b9-b47c-8dc7-8071-a809c60822c9 25 103fc5c9-f68d-733f-b141-6ee3c58ed89e 26 45684447-719c-4851-8a9a-207f88b40157 27 c0237a33-8927-6d25-9564-bd80042c7490 28 687a9bc1-2c79-2e8b-b9e3-267cdca095e4 29 77113521-0d6d-86db-810b-e397bee6c4d8 30 795bd9b8-3023-1e69-846e-ff5a70e56997 31 6daff036-96b4-8fc8-a823-2a40c47c1b75 32 d0c92b6d-3f70-68fc-aa59-cd1c620fb744 33 5467ee78-6443-20fc-9998-9b202fade598 34 bc388b70-802e-79d8-a5de-d9ae23e056ac 35 9c63e6e5-718f-3e94-afd7-029f71920ab6 36 cb8fad2b-1e19-8d93-8593-ec986a72ee5c 37 85e11a52-050d-8602-a5b5-e5481d589c49 38 394d081a-2d95-7744-b60c-81a2af9e3b00 39 59da08ff-7bec-060b-9bd3-1012cb08a9e7 40 13b6f889-e103-332e-8a2d-70d188191cae 41 03153cb7-58fe-7a00-a667-e51d66208148 42 8f1b2a41-0df4-5b5d-9aad-e53a82101b67 43 baef729b-6779-5281-8c90-980f82c72cca 44 dd1cee0f-ff73-798b-a2f6-cb0a03ece17b
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
05721650451166821831084874628186273887037557. Exactly this sequence comes out ofnew Random(950).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 55 of Run 43 (seed 120,022,078):
new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39). - Conclusion. Filler. The content is fully explained by the two RNGs.