201303302144 1baqtk
explained decrypted filler
seed 682
From the post to its content
As posted (encrypted)
727C0721B0325CFC 682755CEA52AA765 7E241C1BACDE7E7A E826E94C4F85A7F9 4D3DD8FCF79B235D DA7A81E5D66C13F8 9FFC7D2A1ECDAD6C 5EB58074808ACD7D C59879979E84613D 28755E6838FE9F15 B6B8C889047B3B74 670AC51D036D87D9 959024A6285FBAE5 B5185BAEDBEA3F36 92F9D84BE2596762 1DC1EE650D94BFBB EEC461DEF80AF3F4 5372BF7A62DFC7F6 1C17F5E022A94372 60590E7FA4E24519 D90E6EB8096A066D 84BD7BC9F14B984D 991C9FED5733C548 FD3425794A1FB389 76EF534E2DB65541 3EBCC0CDD8A34084 0196B0CAB32296AD 88B7B7BEF6FF1960 07F1EF87618F6DBD B25F9A73FB5A456B 25CB2438560389A0 5379A6A5F80D4112 DD97CEA06001C1EF A390F66BF6A03FA0 407ACDB69E40D8A7 19CF78CC3B4A4900 7BDEDFA926835863 E3A88A108D986088 5A6D5239EAA9219B CE10BF7C7B742F2F 333A2CB7BFBAF1BB 5C1933728C3BD48B CE229894932304A0 8D6AA643E5B2F1B2 324A47F297511AEA 07001B630731DE00 4ABDFDE2B4B8257D E6D8836073609F95 7A507F2CA993262D 9DD01B8C4B493E7F F6DD758BE4AAF77D C35E6E4CC1E5D48F 3BC5E711E11A7014 5AF7BFD342B5F05E E869B559B5136D32 109BEA37E037C8E4 392B3923820E00CA 4DF36EE8A6926576 9A7588FB31936E8A 8F017B369B8892F4 DE13EFD44846BA8B 5177AFDB11EE137E 952B9734DD930491 475483A6C73C39DE 522769C660104215 77D9A492E886BE3C 4097E87D24A27F08 3395E8109CB417EE 90F67F3B725B5C54 BDEF56BEAD3DD299 064D8CDFAD9035EE 3CFE00DBDF163958 E150B6F69D3814C9 98AFED893CE2B2AA E405DD7879388E48 44539CDA8ADDA78B 43C7D36203BDD547 4AF402E59472111D D34D9BFB0C13119A BF94E938DBBCE081 07CBB610BDEB027D 40632279883DF505 185EF80BBA72D2D1 ACE55DE73FA6F958 5DCCA937BADCC995 CEE441880C759102 E3BD7C0EFEA7C06E 09BBCA05C7E40BB8 B362030844D84F50 80789AC4B67608DB 0BBAA78911F4AB67 84AFBD02A2F5DC90 3FCEE6A62BD60B99 585439E918F9C2CA 87AE93E33D22AF85 3A65CC5FD76F1D69 08855BFCC1EE9C6D 9D56598210BC3230 0292A367A7E23204 E6E0465BCC19C958 72C6572C4D6DFAE7 EC34EE22E9389C9A 44DEE525FACBEF7E 3395A3E302D1A029 B90FF43B256B7EA6 6FBFC29C258165A4 B2DA7AD7A44FEA9C 9088361F802CE875 A5AA5C52CEAF9A6B 9F24A3EFB0DB1F13 00F7D9FB84104B6D ED44585F79367708 714D8A35618E9DC4 5F39FA178FC74DD5 41A2FE4567313A5F D40BA56EF2729A6F 77DA2312633F491A 37403C3E2E68593F A72407F21665109A 4CA6F9E2B4D8C1B7 52614A85D8E36C15 10C16CBAF8CFB460 9D44B140FB321DB5 5F68F691F5976085 A76FCFDC25AC5E1F E25EBD611635558B B03213A62B1EA250 E64643B4C954BF58 A86763666EF0897E 841EDD4140D0D54E 90FD794167752B5B BAEF30D9A072D414 FE23A6F2F13670DC 1FE3CFE0223CD857 A14137E8EA3174A5 B805AF80F2B0FFEF FB718C218D221C58 C038BDB718E5DBC3 F50A3D576AE8F925 59CFE469CB54EDB2 029C88A58B8CC7D1 5C351E5B5F1E06DF 5312BDDDE4969B60 92AA48522339859E AB6DA1727D2B7099 98BFFD1EA9E5177D F6E0640BAC55DD84 D3D9A26CDBFB5970 2FB66A5F0B62182E B7F62670B27AD6DE F448DF3624AB22EA 70838131996DBB81 BBCDFB04BBC058F0 124F851D8F8E8CC2 421E641253A4032D 1D0E17B5D6B45E9D 7C176B05332EAA8C 8C7202983DA46084 ABFE4E40129F45C5 AF6926F816960C92 D1EBCA585080666D 1BA25AEFE0BA2BD9 07EAA00C33C5263B BA439C2DABEF2041 63005467B4F08289 D5DBB2635E360291 D51554E1696F94C3 803FEDB149E4E590 30BF758145C6BBA8 42E804020A9C0B95 C949C78AE3BF0460 59774B6A2F556C4F 1D13E02FA6D873ED 0186AF24F2AC8158 26D92881BB101AFE 171F9CD1D5E7C9F9 11F64D537CB84C0D 0A9777E7AD09437F 690684D06AF4F78E D6FC8DC2224AB034 570D9CD7D196602D AF2070455035796E 4F88343814070CD9 08F09394AE1B4E94 1FD6AEFA8EAB94BF 53EF3A899C861275 42203082458A76FA 47978AA79A0CB4C7 914582BB6DF7989D 87A576A6F0A0B67B 3326AEDA935C4123 ABA6C460BFA69D57 99045D035A16B4F8
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201303302144(name+title). Key = MD5(password) =2e218b480bac46d7c42c513f475818f4, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 41ddaaca-d42a-08e5-aaef-2ca71128d3fa 2 f10ba447-b8ba-84b8-9e41-6451c2852669 3 17610b26-ea51-4539-8ace-43757f971661 4 88715af1-2b5a-1018-b5bb-149120a72a47 5 45d245ee-fa60-12fb-b7d0-3cb4a7eb413b 6 e769cc1a-403f-5136-858c-152281ec949a 7 2827cbeb-8830-4db7-97fa-5b1b29ee9d1e 8 8bf84535-5e3a-52d3-977e-78c1eb6f812d 9 f1a1089d-5397-3a81-a33e-ed9acc8425f1 10 767e4ddd-bd1c-6fd2-97a3-49349aa6a143 11 f2800819-77b6-680b-9ec9-2a449a488f49 12 1f4d12ff-c700-82d4-abc1-546dd2d73f55 13 f1b647df-4029-479e-8279-6cf34fad7b04 14 0bd0b5ef-84aa-2fd2-b9ee-1523597a8cb7 15 c90c8a32-ee5a-3cef-9673-2b592345df66 16 45de081d-29c9-8b28-bb42-af1a7089273d 17 ab06bd28-74ed-424a-9236-c24ceae9b9cd 18 5caa4b3d-9212-7ea1-bd7c-11b727daa36a 19 192e3146-7670-1ff5-b59e-9d1f252e6d30 20 fdb17e26-c9dd-33d8-af44-b6fbe349e80f 21 d80a5972-9a66-3cda-b48b-07cde8d3d59d 22 23086f87-4c4d-1da5-adaf-a80cb530f141 23 8901a829-f7ff-2c15-9283-85ed9484318d 24 d84f2cea-85ef-29b7-9716-6185931fb10c 25 d7c4ffe5-99bd-4f40-91f6-c9655d0ed737 26 cf5765c1-fe81-150b-9c79-21c68ffe5e27 27 7e2bd5d9-a002-20cf-8030-93fb4d821ae7 28 4332f338-4249-2189-a237-4dd3f0166df0 29 ab673fe1-967e-87cb-9bff-613ba4887905 30 b151cd7c-9d81-3f8e-bbe6-5c3420188adf 31 018d7472-641f-8ae2-b825-b7bc17197446 32 4e3201c2-51b3-035a-8f15-9ebe25910a53 33 16e89387-1b5a-4eed-b8de-2250f3e9d1cd 34 5106191c-fc5d-04dd-8bf1-20d3ad9b2bb7 35 8abdf462-7cbc-7c85-a088-d0b9106f5a9c 36 babbed75-c671-2148-a08e-edd02b1c7205 37 fe3d0d25-c4d6-82a7-b497-c389527447fb 38 25f9adbe-cd74-1e93-9643-c887d7fd840f 39 700bdb16-5a7b-191a-930f-a49fdf52db13 40 1bb079d3-2fb5-1342-ac4e-7a3cd60b002f 41 33d8cadf-9078-0511-9365-96790705fe19 42 a06779e1-efff-1c2e-ba3b-c05f5a55edf4 43 45373446-5c4b-2f54-bf97-78d4102735cc 44 bc5a2326-773d-4138-b8ac-ab2a84b33906 45 f2db919d-f64b-4460-b1d7-a6f641ed1cbc 46 027b025a-8fbd-3e77-b322-c5030bb5883f 47 311ee735-a4d8-3cd7-b17b-3e1e1abba535 48 fa530800-1699-1a4e-b315-5b33d35b4048
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
084115453668423847133122412283804072811101244331. Exactly this sequence comes out ofnew Random(682).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 91 of Run 43 (seed 120,022,078):
new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39). - Conclusion. Filler. The content is fully explained by the two RNGs.