201304051701 1bpxky
explained decrypted filler
seed 201
From the post to its content
As posted (encrypted)
40248D300907F6AD EBC21F6ABA465DD4 B9D78F38636A071E 477C0190EED6A73E C767544E809DC647 CF1DB9FA92977F79 E9FE2B5E407F5669 67AAF8A577C5C13C 3317AB92DCCB50C7 8EAE78FA8C46CB5B A441F54C03763140 6AA3058B95504501 9F25071BB1A31394 96BD55DA623CE014 34EBE3CBEF117C38 79D408CD16F249D5 F25038562D791A91 461A96FF5C2A7107 0377B39B3D120D67 F13AB7E1BDBAF005 A56A53A9715C85A3 5C1D6DD7B47A6D37 CBBD02A9FDFE1250 90C6E3CD52AB9669 F3C2EA575BBF6EDB 84EBF9A747426061 4DDE071C7E8DC776 9E6B89267076A18E 58399AA6361D8071 AA5A3926E4958598 BCC3E999240DC5CE 765D06A98FAC211B 0A71CF3084ECB013 C5E4EEBFE470675B 57C5AA420F7192F7 61A40F12EEDBC596 89FC9A6A752869E4 400489908300AE69 05AFCECF43E8CCAC A6EBF2FA6EF28D1E 2823E34A22E3C2FF 0828BCF7EEAD1DD2 75BB07A6E399ACF8 404F44EDC6D1A3E8 497C99712DA63AAA 113BA7A8EECD3825 7D5FCFC580C20AED DDCB308DDE8CE3DB 6447AE202F58059F 0FFDC53960C2D162 735D22121AA11D01 FA7B6AE23759F27C 3B7EB981A1442A64 7CC2F8F5B481A549 1967443DA6960790 9C97353B61D79478 F9612C70028BF744 955F59D15AA13471 9604FE9487B462B1 8814595B2742DF00 22E3619788CD7405 9E842651AF90A9F9 9EC3E521CB016BF4 899FEBE5B0ECC3B0 B861BC15279C9597 266D83B429799502 35A9940320621B0C 125487862A0C9D14 CA7F769F026B024F B17B4DCB360B602A 6EE944A90F9D01D1 1947DC34CC66667E DAE2C1234050AADA BE506AC8C20919C1 C212D21E25F0FB4F 31D5D68C5D730544 FB992B58A899E158 376242E3FF617AA0 6CF60EDA87CACF0E F4DFCC1773414EEC A5302E88A3A085FA AFFCCD9FC7791CB1 553B38A49DA55F2A C4FBB1CCF36D8511 264BF27B710ABDBC 641960A681FB9814 3D43FF96D95EAB1C 05E0B3AC8891A694 D4E733B21F9A5BA3 2187C4E11663EAF3 88CDE56D91D5FBCA E80D94C5CC5F8F34 E4CBA89B46BE6375 0BCF9F1734F5EF2A EE52119DFB0A6DBD 88D567FF56E38061 DFBDA06F1711A5BF 164DB4850F528CB8 B69206C4638B1C1C CC924FFB30983178 3BE39F4C9AF0FA87 E5CE1DC4BF191ABA 0F30B9D9BB1475C0 4672B8526B140CA2 85ABA57F6269574C B99C8ABCF5834F74 F17D0C82D367A64C 4BA78456EF4F269F 9987146D31F775BB 34E6B550BE30B63C 27EBDE8B79E3F5B6 80EC6A7A472595B7 DC746611AACCB1ED 993004E9168AB5BE E8ED707215FF5D90 EC1B44FA07D9650F 66343F7084110101 D3290409F6257E31 B07EC55591DE0DB7 8AF2BFFF1016DE9F 5EA74B7E24E9E605 C4A53281A67B1EE9 C63A040D0F24B420 51C30484380D2C11 A0A0BF0CCC93F1E1 2FB35306254EFE8B 03241CDFDA0A562F 27576501618C0B39 E4FF184AF1421629 BF63D94EDF232128 79801024153F754A 4C0F4E6C6B8458C1 432089BA797153F4 1722E6A7F784885C 2C0C59423D7A450E 4B4E8FBC3F5E40F5 C6B14C7CE68631DB 5ABEF8463FDB27A7 6181D76B1F17C9D7 B902B1E80C5C6086 26360BE775917257 A7E9C55DD7800904 60D86CDCAC252EC5 3087EEF1ED4D8C7F 61AC7FCE9A44D1EE 0B5F533FBB08602B 48E089184C363F74 446D6C2809748462 0EEAFF6AC9744662 EB721A0DA06449CB CC312108A722C2DC 7320DA431F38712B DCFD63DD3BB3A9AF 6494196D2CDA18AB 842030C0570FBB64 9CD663760DFF1F20 24CCE319256FE713 3B6606155FD7B749 0E1255074CA70CD1 594B5B7643CCA82A AAC998EFD2D54738
- Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201304051701(name+title). Key = MD5(password) =d810eb0af3570ef2b5fbb1ac2a406ede, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).
Decrypted: GUID list
1 fe714c24-b971-6a22-910f-39b2d086be7e 2 a5d849db-fc9c-7d89-8f86-9a519c40d1c7 3 5d6ce9df-02db-2936-8003-7cdfbaea6a1c 4 2bcd25bf-8de0-4ca7-9b49-36b312b28e4b 5 034ad91c-b0e0-817c-870e-7e46d74248ed 6 e28591a2-cb62-10ab-9119-d056a40c710a 7 87136825-d6cb-88b4-bd22-a005dceb6424 8 5bfd063e-527f-2454-b185-0106813604a7 9 3769f69c-698c-7427-9bd2-be14b2a57c05 10 17c28f5a-0453-31ee-8370-f8ac21755f66 11 fc52493a-e6f9-34b2-a145-92a98dcdcbbd 12 399187f6-0e5a-36f8-a10b-720e0c346868 13 657e8f2f-5105-7024-aaaf-c1cb60e7c275 14 4bfce684-209b-034b-ba64-4edc2790d8ec 15 c2585571-f741-6ba7-85b0-48697027d0ff 16 43b1c87f-1265-5af9-81bc-16f8db810d94 17 5f279ebb-e647-335c-8169-8f807306e7fd 18 51650e74-0f14-58cd-b458-940dcf9c1dfc 19 cd4b3923-7fc3-1ebd-a8a8-37e905e4f5cc 20 78bb8e41-ce2e-1d4e-82ef-2f79ef9688d2 21 485184ca-df9a-4090-b5b4-43d732669316 22 f61910f8-1f8f-17bf-a6e2-e3d521ff10dc 23 2bdaa5e8-0dc6-83c1-9649-fc5fc715c704 24 1a089d64-b548-259b-918e-c2236e7dc9a4 25 aaff6a2c-c5c2-384e-b497-dddc9ba9bf41 26 74043829-b3e1-7bc2-b36c-96a0340ec14b 27 c295d9c8-bcd9-6cdc-a4aa-a6d25227a1e6 28 8c63e76d-97e9-231b-9b8b-9bd7b668fe95 29 61d1fd07-4d8b-0877-a5cb-8d402f0651b3 30 0dba1b9d-5fc2-831c-a90c-ad590a62fa88 31 b45152aa-b868-370e-a155-dc51928364c9 32 6d619890-cf72-3801-921f-6c804957925c 33 5efa97fc-4dba-1ffd-aeb0-14642aad1ad9 34 1512c095-976d-072e-ac54-a740c5512a31 35 c2b4c672-98f3-7f65-aa34-eda780b6a696 36 7c540f43-fd1e-4618-b3d6-3001a1c6c24c 37 0dfe060b-1577-4133-b16b-e4c5ac85fc6a 38 009dec41-93fa-3582-9a92-7994c85bd9b5 39 eace4594-3cec-6ebe-abdc-fa5563c16a00 40 b96f2147-9daf-00ff-b3b5-edf8d74bb18c
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
6724818273337065351141823762083310744360. Exactly this sequence comes out ofnew Random(201).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 77 of Run 44 (seed 1,087,967,875):
new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19). - Conclusion. Filler. The content is fully explained by the two RNGs.