201304040549 1blxgd
explained decrypted filler
seed 986
From the post to its content
As posted (encrypted)
FB7D4B1B175E880B 73F259FA1EB62057 95EE744021D8249F 2AC517DCCA8116E3 62BBCE02F3264D7E 8A03904BF1BCC70A 965E8E61C599F3A7 8018A609A9C0B40A F4686435FBD3B61B 5F86BD59A2C05D9B 9C51AA8E5DD833E6 C5400245149EE976 EF294F46CF95821B BE31D4DE8B607CEE BC36E9A9509FD02F EC125DD0AE735450 0A17747BCBE7E7EF 32DCC5D0377F9A5A BE31F3FBE28748E7 DE6CC069A846FE6B 2FCD7B5FC64705AB 751F391547FAE0AC D54D48B44A8A9E93 92C593449E835215 F06D50100111CC12 FAF248EFE66358B8 A32F2C40E6986B70 FC9C4331CCF80FD6 895FEECD60CD606F 6A4AA1C033963392 7BB837470681B827 A3D017E3A4EEDA6A 5BEF7807E44070BD 8CA6C6C7ED53E334 325D38543E5BD8F5 B2018988C4DE7ED9 980F9DCF1CAFC96B 45B2FF8B2A62C916 4C960F4D524EE2F8 42EC88C3E162419D 236248D96C1334D2 5739799170B65782 5DEEEA2BA31DC619 664075E0C27DE580 FF75C830232E68D6 88038EE8DE8731B9 38FCB4031EAB4B76 BAD32BD6466D7811 E71DFA86152DBE40 5ED50BC138561886 0CD3E83CB7AE0444 EA904014C95D05D2 C0CC3346485EC076 A9595D1F3C4CD5E6 6343FB687208A84D 7963ACDB3FBE76CF 036BCEF6F1600B3C 84926D76FD500852 74A4983DF0AB6475 5C54EA1C37A9B1FB 498E3F77C4139564 92C71F100AD60C3D 46485566DA75C452 07EC0342AB91990D 5894B2A8E879E6A5 328FC6AC039D9DE5 F17FC76112D23D2C AB09EBBF162BE24C C287F579E1CF5876 0A3122B4867A7B68 41127B0138BE02EB 5879DFE84B231451 9F820240664C7F5D F33923EAE8CA3687 4B31953E4415DB68 85D17781780998E5 BA3D96D788C7EC7A FE2E8A686E0A2F19 E535124A61E5E300 3A91ACE87B0CBEEC 5DF76B65A16B172A A66CD0CBCEB9CCA7 8CC3F3DEEE36977E AD9129440F1EE90A 4503C55C5A496227 CA85E09EA054D801 BB127AD7A1137CC0 C4649C628E349057 29BE53A19BED6D90 85A07C30888220D9 3F4DE857ADB9F722 CFA03B674660A492 5D965A59A473106F 480DE428C4B592A3 2F6BC722D9C3EF22 47ED6CE06E0982C7 BED3E5939DD55418 698D8A6CB018D1FA B8AD4E9C6B396AE9 518D6CE4169D37E4 362D58DBE0CE648C 108AC88FC64A1DA8 E61DC9A501D790E9 882155954445DED3 0D797C2241885CAA F5ACA2B63A5BC956 130DD21B72B8B4AD FE7FFF68E9A9A56A A6A3745A97D93351 41F0EF644F22E239 A30A68CB44A1EB54 4FAD413A4FBDF606 1CB6AF1E9D8D8757 38A9CF07FD105CE5 6742E09B7C01E3FA 1DA5626B109126C9 3CFD79B40CE21ED0 CBE74AB7E971D1DF 3787694810934FF5 9A3ABE2F03AC4599 FF80E2913D88FA92 9ED44E65D2A3E2AA 12CEF3D3ACDCF7F2 FD82F02E5FDA9152 81891E67FE5C2613 232F555441265AFE A50B1BA29F9908FC E5929D04BDAC3565 6FD418D390973672 92215974D8B8A1B8 D2B0FB1B78AE7883 E5C743E2ABE55E18 D8CD61265EF3B691 DB64D169B702AB64 9D4BF2E86444E53D C624266DA78A82A5 B39E6BC2A5502846 B6AA911CA93D8D7A A1BFD10D95E9261E A51604F45B1AA94B 6FEC67F633374AD3 66590E9777859AE6 3609013F063F938D B5E702109A4F1959 1A0B3B6739F6CA19 FC4B7585EF42DE29 3E785DFAA8E47598 F671A3E928B97FC7 CF3E128730DBC6F4 F083906C660BC44F D639B3ECAD928F86 6467D6165A486822 68F8B41EEED0E0F4 6AB096AFA16AE8DD 49D22F319877530D 0E0BA8AC5BCF9B9A F0DFD9D60A8E0294 1D086712E4B7A468 CB324B3025234D89 6037233305B49CC9 D743E5ED1AA99F2B 86CC87E7C388EF6D 97B94C76387E2EE2 E405A1E415494822 52882DB7A9BEFBAD 7DF4EF85BCB7A7CD DE392D44B487B2CB 9FB974FEF5D15437 B81335194E658B71 2A55BD2F635ACB09 58C18797BD449C24 D6F478ECBA9243C8 0C752879F3D7E445 56E9A26E20E3A193 94B9504A5C843D1E A71D5D90AD5EB2A7 0C4DDC45A04E945C ADDB198CF87D97DF BA8C45517746486C 885315A6C0E63A00 B4955999019D287C C2B43A330FE81475 011BF144B43DC548 F7EB8FB79F995B1E AD944BF44DFF6986 55BAB67CC42D4C3E 66DC10E259AE1DB8 3EDE1A15859188CD 73A1D3E744DA8121 4384DA4C23720EED 6BA147B54D5A0B27 6429763EF1FC7226 BDD071C08A2A889E
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201304040549(name+title). Key = MD5(password) =668066aeb7ab3eb182b888efe45119c8, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 24d5dd75-060c-7112-8349-2b9eaa6b15fd 2 b10d06fc-9873-1e6e-809f-ae55aa50d2ee 3 83c1f4c7-08a1-86a9-8d01-5860893929b4 4 eaa5a3a5-5a28-0b71-9de6-3524b1101559 5 21753383-0d7a-3bfe-8ece-f2d0f3af5a49 6 761b3cfa-55f9-1466-af23-0a6665c07856 7 8cbfe2fd-f07a-64d6-bbd4-2c4353936f51 8 8a9324bb-fa41-05da-819b-5c14c2826dee 9 9c4c1d4a-4ca9-82bb-a58d-a5e31a038fe1 10 b831a552-0eba-7387-abba-d0f115f9b229 11 eaa26e52-5a63-6ecf-9cab-47c9c1c7459a 12 5612d5f6-4e1c-2d04-abd9-adc05b189723 13 7d8c0447-d30e-4c34-b919-db4ed31e5ad0 14 4f03bd59-9711-3503-b490-46095cc59fd4 15 b60c3f94-b2d3-1b9b-85c4-a2119c797b76 16 04de3853-8cac-7491-a673-202462f5f521 17 5b616396-202a-3d8c-bf14-67465c29fe1a 18 cbb0fefe-5067-2cf9-a96a-7c225a2b2ca3 19 90f4958d-46a4-3eaf-8d44-f21e5c9a919a 20 d0152200-92df-0638-a3c6-42411e01a73d 21 99ce9e4e-1686-7a00-a1cf-32c6b1ea99cd 22 fdba37d1-61f0-68f6-bbf1-ab3bd8b0f2fa 23 95b933f7-c3f5-5ede-b615-83598b06e601 24 ad8630aa-6ecf-4058-a639-bca34364f2f0 25 a9cb2477-6a03-3d2a-9cd6-cc4c466ddaaf 26 6c0f9a01-ce3a-6096-ad8b-1fa7ad6e9a53 27 a51279ac-17b6-5398-a020-365c9faa4c7d 28 c0bf82e7-16ab-5dc9-9f61-dc960ec1ce97 29 cb880b29-8982-845b-894b-6fca315964c3 30 3ee8f01e-0107-1de5-b7eb-2003a4c500aa 31 dfa19752-2787-1b5e-be0f-703c6995e0c0 32 4c41ed49-93b9-1a42-a439-b7835294c15f 33 2e68b1e8-c2ca-7383-ad01-8598f1867119 34 c5f29a78-9d51-6284-a671-4f6214b39ca3 35 da2eeef7-f860-83bf-9698-b8c4f993814a 36 75794bcc-8be4-4493-aaa6-05043235bbe6 37 0c6c3367-83c4-7bc7-b38b-f46e880ac3fb 38 2235fa37-c46a-3a17-974e-75250bf4b5f7 39 be8c10d1-5466-173a-bf11-9516021e5d42 40 b57383a2-cbb2-7557-b2c3-271de10c8694 41 77674e03-8c97-4693-b3af-89009fdfcc98 42 9fb3ac2a-8cfd-5399-bbdc-ef486c6abf30 43 1064da50-a4d8-2475-a144-1ddc629f538e 44 a7825522-e89e-74d4-8d8f-7420f6cc6ae6 45 30e2e956-5b02-6d3b-8671-33e930ae6cd9 46 72c31d59-7aba-0d22-922e-b4d6fb34a2c9 47 b2d21a65-ed58-789f-976c-b06eabc03869 48 f5e115e1-4d4b-8e2b-bf8b-5f2ec6ce5e0f
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
718031608762431732307654365581117684731745276078. Exactly this sequence comes out ofnew Random(986).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 29 of Run 44 (seed 1,087,967,875):
new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19). - Conclusion. Filler. The content is fully explained by the two RNGs.