201304032229 1bl07u
explained decrypted filler
seed 391
From the post to its content
As posted (encrypted)
0937DCF7E56A0C40 F4D35A08C30E83ED B420279CE7A2F8E3 FB978E0185593156 FFB611362AC02BAA 2FE08F1DE29E6F2B E64674C5E307FD1F 33D7B2CE4B2D92B5 1276F3BA1688980C CB2BCA7D9EF6C0BD 48B821127FAC2412 7D314D4403A18A6A CE46A18E442AC40A 8E55C5DE620AEA20 957E4AEA046F553B DED271EBEEE33122 2E4ADB9DC59A1EC8 A8957D9C72C5ED47 CD194D07BF507A77 7FBDF5666DD09194 E6E88804C2D1E7AA 263DB0A2D9D85E24 086125501DB8F95D 971C7B65957F05EF 75AD3A6C7379122C C84D547625E9204D E21C5ED37CCDAFCF 8C5CE7A3EFE13174 433B61AF31067097 99A1776ADFD76812 BDCE6865C6E0D757 2776C63EB7C971D7 6CA0C8E50E72384A FCBBA07A26EB0A0E 7AAC323D28B91FD7 F4D223A9B5072554 56E391A5A56C12DB 77830E9C9A2B6306 5EF8E07DC2D4B8F2 334D50219E5CA798 D7168AF692513363 E1C21A979521BF6D D10A2D8B84E81962 C3BC114AFFFAB8CF 3F5036EC291BE863 A1C1F88DC52DAD72 60478758959291CE 37925227462FF4B4 066FAF8E0E88FC45 CA7AB40491F03668 4FBEDFF07E36BED6 0275C24DBE575122 A9AC979B9EBEA78B 816D3DEC5C62FC7A 88A12C1B3EEA8595 877682386552F807 4ED45FCEF3D409E3 D7911A34D67D7CB6 2FD26AD52E274A41 6171671368487B8E 4FB0CD23BBD6C69A 7334A75DF957C978 1D1B048F99A537C6 228E532E2002E725 7C8180FE645AA6D8 43AE913D7004E55D A1023CFE302BAD89 2848D56E6F16DF7B 2B43BDD54B490747 C8C6589CBDA50C56 D08210D139FE32EF 495240CFA3712FB0 9C8A28940DD66A56 DAE1DCA8552E53BB BF7A0DEB4A2AFE30 7627FC21C1BB75A7 AFD1D7DF8FBB6E86 38E46337B4C1FCA2 4894CF9A51CD02F9 3784305EC0C0FE17 72B5EF0523896952 5448F931F1121BC5 2B85C821D666B5BF 2306225EA976520C 02FA20E1785FA399 63A21EDD2B73D904 FBE2D48FCC54A212 B66A00482862030B C148D2E613A6F401 024F630B88A1C3F2 D0217F1D8EB67C77 6603B8CE744FE780 C450CDE4CD16E795 8F6C02A4EB9B4C7C 438BFB7CD91C633B ABF8157F63576697 DFD990E3524B102B AEFB8313F60DD7F8 A310DB1B79AF49E6 B6E8974E50BD9E3D FB8D98FE4A548EEA 7B427349EFD98355 B1E8F12B483819B5 AA5160ABC34D4AB7 B44A0FAD69DB71D1 C93E3A550243ACE5 36E6637E8A0115FD 9AA7338977903CB7 4F0A735F6FC24308 3E2561E7E5FE348E BFF69DA8213B1A5C C70C73A1D1D6A08A 9E0BC9DA0B8326E1 D2BB98410E7F3A2D D7C9A7934B2BB13B 921305B0D21D61EC 39F589153D400538 3265FAB7A32F883B 7A3226D9324B310E FC8EC434544FD436 33CEACCAB36902F6 497FCB5191CAF9AB 821394E3EBB07C76 C251A375B8FE8DF0 7ABB841F7B033AA8 5ED32443D476954C DAC7A6B0EC872A73 97D8243B5832711B 41DB98DD8D0CCF17 AE1322410F45480C AD40B6C41BF5351B DD31BA253A3451D5 ACE291F5257FF0C6 443123819E921FC2 324F93E2C8C0B5E9 3E881AEAACEA35A0 8967EFEBBC8DEA04 55D24F647F0FCECE AF9F5E4968C53056 1E121F31D05C5EF4 2CFDA8F6DD63572D 8439A24D6DC30313 6F7FC9F210697688 73C39EB1A98A308E 9287B4EFF9398FD7 C6DE90C06225961A 46EC28CC22E23786 32B6343DBC3F47CF 24CEBAAFC2028533 73411C840C669CCB EFC72165F639AA8E 3899A4892756D7DD AA7C940F296BD4AF F2419A4A1FBB55F5 53396080A93A6A37 C82B49647B7D9485 69A4B5F3E70E01B3 3A0D7F1F33D8A56E 845CBEB3F8381500 0154D3546D98B017 5EE280D8356F28C8 ED04B4B4E14EC9AA 76F404DBD2867C21 4AFB1FA35FE6D737 88C53A16CCDB6F44 9222B87CEC01F780 8BC92E061C0CFA93 4D0636F60948E1CC E44645229FBE5A87 524F0E2E3E48493A 0E19D3798BA8FC68 B79B1BD824C4DB77 75179CB424BFFDED C623D2A6DCEC744F 4FEDAD07E0091584 A2CB91AB521C117C 6A01790FF6F435B2
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201304032229(name+title). Key = MD5(password) =18aac54514c475245ca9d5a4b70e54c1, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 7def1ed9-ae62-8957-8b24-93e65c25a085 2 4adb3fdd-1193-4d92-b8fe-1c7471842dfd 3 f6f227d5-03fb-0560-8109-045a6f92be73 4 9a911b1d-9378-0214-8196-5c3807e6280a 5 633f3a68-4dea-630f-848b-c977d7fb04c2 6 05aed3ef-262d-2224-819b-72379243b394 7 a9f1a219-9679-04a7-94d3-6886c34f95a7 8 8bae62ad-9bf7-5ded-910b-951017f79092 9 344ee70a-c826-346a-809a-fcc457ba4826 10 b2ee6e6c-6095-43ec-a154-b3be73718de9 11 4c424bdd-322d-3001-98ab-3c09fd3c5c79 12 2fe11368-6fdc-68a7-9fb0-44c063d77a3e 13 acb1499e-d42f-37e1-b6d7-da38ba3465bf 14 251712d0-b751-8194-804f-b43ed10da067 15 94e58823-a80c-6515-ad23-dddadcd5ac3c 16 a77d2264-7d43-170b-89c3-7b17bf4c6a37 17 be93e9a6-ed1c-2bf1-86c2-40f3be49a9f7 18 ddd38181-8a2a-36bf-b048-6eee5776624e 19 d482bb3a-d6ca-2015-a288-d4b526aa38e4 20 386223af-0276-6298-988f-7130735b6329 21 7d7f2f8c-1e12-683a-b091-95aa453fcb9c 22 6c49a527-c5b2-6bef-b917-1ba1b900b000 23 98e4bab9-77c1-0968-9376-ebafc9cb9397 24 0c70d091-eaca-5328-bab1-898b0ba407e8 25 6952c4cb-b174-00a0-b17d-b61ed341ebad 26 40b406b5-b492-05b1-b450-ae3c9b8bcec8 27 76d155ee-9083-0efe-865b-9e2af4e05588 28 8419d13e-cc20-8b96-a765-7f1a204f8b6f 29 206365fc-05e4-483e-a43e-b086e1a7a528 30 bbe726fb-eb93-8418-b176-cc69df13df7e 31 e27c0252-8b84-4094-bac2-367bcdbe8f6a 32 16c045a5-e714-4c20-b845-d2550b2001a7 33 fdd05fcb-4c99-47ed-886e-102c650e4671 34 5a8956b0-bcd9-79f3-b6c1-4d07ed13f72f 35 4bf09e62-a5ae-153d-ac9a-c6b5bbfce4ec 36 a1084a1f-aa46-6191-b77a-1a323bc67a20 37 fb4ba13d-ec98-8be8-bae4-1cd675277602 38 c1a23018-c246-7c7f-bbd2-4922306b92eb 39 92f3eac1-ce9b-2aa8-855c-61b707f61724 40 a1c4fa15-ac54-8836-a395-0c55a08affb5 41 728a4ad1-5a6c-6e74-b8b9-ab941ff9813e 42 a601ce00-c632-3d4b-b53e-0060586d1f4e 43 9d27dc04-c2d8-78fb-b2fb-26f22ddafbb3 44 529581ef-0ec2-41fc-88de-2433978c852c
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
84006205343638612326660500084844471687286374. Exactly this sequence comes out ofnew Random(391).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 19 of Run 44 (seed 1,087,967,875):
new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19). - Conclusion. Filler. The content is fully explained by the two RNGs.