201304051321 1bplcz
explained decrypted filler
seed 424
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201304051321(name+title). Key = MD5(password) =ef3a35458370d97673954c4de2ffb3a1, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 e87f9e25-a5c5-2a61-be24-6cecf2ea2dd0 2 43a7a723-26e0-2687-893c-405667fb3ac7 3 d784db4a-e5fa-1b91-b28b-7cb74134c1e6 4 7fac3867-36a4-0597-b336-a3c85966c551 5 d6f06640-5680-5984-bc23-a62d953d6a8c 6 b9922033-2e10-0081-8927-7347d74ad83d 7 630b4710-b347-7bb4-ab12-e965722f325c 8 17af449e-eecc-16c5-ba81-cc1eb6c65599 9 991ace4e-7ea4-38d1-91c3-d751b2b0d713 10 0365edea-edf7-534d-9dc4-22eea74b243c 11 6bd42914-e28b-57be-a066-cb5e16414eed 12 fa0bcded-cd5b-4d14-90e9-b2870875edc6 13 867b005a-e2cb-10a8-a2d0-59bc992f3b68 14 33d345cb-b456-0b7c-81ef-65df21402e7f 15 1ba8b440-b9e5-6b4a-951c-594447761a2b 16 e4106b94-9fdc-7318-ba5e-4e8a240a517d 17 d33a9234-b6fb-0eb9-b6e9-80747792909c 18 e95e4e82-778c-7552-90ec-f6c4dfdf1e4f 19 36667c69-165f-1162-873a-844f21cc76bb 20 5a4fd775-f3b6-4fa7-9e1b-3a79fcc9e871 21 8a915fa6-ceab-11e5-a11a-29e2bc75ebe3 22 2d0b918c-2657-7b17-90c8-9a4e3e515f28 23 8e477318-3744-5c3d-96fb-90d2e8a7b95f 24 aa03d9dd-5a24-1d29-94c2-fba596160a93 25 d5b37891-737b-20bd-8d21-8238358cede3 26 b6458a4d-9370-28f6-a1cc-8edf7c0141a7 27 ffe4739a-470f-4dff-a585-3753fc6439dc 28 7326d5b1-0261-3d0a-a476-e4e3c31da6e3 29 b1a2a4f9-d749-52f1-b106-a435d2a727c7 30 d8ede33b-2304-4134-abea-2b2566f00aad 31 e20d9078-006c-6bfb-bd01-b37d088e6a81 32 faa80770-208c-1311-991c-65dc88cfe724 33 6909830c-fc31-7be0-8be2-297fb9665bb4 34 87d14fc0-1cd7-5d74-b82a-f87606972165 35 3ab63a4d-860b-65ba-b87d-fd0dca641191 36 ab87f225-a6a3-1603-ad45-834a572639a9 37 61c7eef1-c883-2f96-aea1-3b40d6c3c214 38 ab8c2b6f-fed9-37a9-a45c-90f41cedd175 39 f554938d-52ad-8bea-a1b4-63f358b53d9d 40 2a8d2027-fd3b-678b-b310-bf6f529a5d88 41 bd95c24d-aa55-052b-8c41-1934559f54b1 42 b723d9c3-1858-45e2-b841-809377ccc607 43 5f9588e4-2ca6-6c1f-b683-e5324361a462 44 1333ac83-ac98-2b6d-b3ae-836874efd93e 45 5717d1c6-fd7d-4c12-81a9-b4aba9518c90 46 662a655a-5cc6-1202-80f6-bc31b396533f 47 3b7550e3-e13d-5f56-b8b7-1aa1cc3d2cd4 48 ddc03b7b-99fb-0595-89e1-a7e0e2f2d65e
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
221050713554106707141751224354617561238604624150. Exactly this sequence comes out ofnew Random(424).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 72 of Run 44 (seed 1,087,967,875):
new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19). - Conclusion. Filler. The content is fully explained by the two RNGs.