201304130310 1c9c7a
explained decrypted filler
seed 375
From the post to its content
As posted (encrypted)
EC89BFF082451C0F 6F9495153E281465 E5B30F9D495A136B C66CE9D0B5AFA294 BA24AD665D252B6B BE2BCE52C5907E98 14D004294D71D908 8F7A16A4F4E5F087 1B77A920E23060CA 85620EA82EC69A9B DFEE69095B839F75 17C6289FC190E10D 736080F44AE1C89C 9F69A390DC41747A 27C0014D235340C1 B2C7439F1AC6EC9D 0D734B3385FEEDA3 732F8647E953727C AAB55BBA2FA6BD36 A9C179BE82F70366 2DE170E087F1AB2C E3603A9D20A259D8 30D200D71DA16614 280B1B8102736498 EA841AAA8A05831B B4F629013867CE98 6F0CA18E434F0593 A574D3EEC474EA0F 318943C89B1225EF 8978F9CCBA0B7D43 4326DDCF380A8C85 5AAF17CCC4BCDDCB A4CD59CB7A355D6B 88670DBE47A44DCC 451F7A8F9A5F9EB2 57B513276840097E BB2785F5BE46F264 C1E91B03DFF62C0B 6E5518EF113E3A98 DE4B93B6E69A8B6D E46D92975AAAC9C7 85776AADD2A35106 DAC40F76F6D8EA0F FE61DB63FB66C3BE BE6B50533FBF2E07 645C3F3E97F60DF8 3A48883B0D55FC80 E1332E25625360AB 029BE981B22AB436 59F1B738F185A796 A985B75D282114C7 9602530006D178E7 1DC4BA57BE76455E CEE0E9BEC8D11A35 9A31974159CEEE86 80CE30501719F116 A55C79C1C85EAFC5 10E635754E903DCA E86006E37AAE796B A3E652D23CD37C9D 66B611A2C04FBAE5 9C1B4D828D977710 A63C8EBA540DB275 D63FDB79999ABC2D 587F3BBB45EBA56C 8B49474A9CE25361 A50F06A534AAB442 79BA051A780EF1E3 FD40D1F97FB7713C D8C2E76061DB59B5 31120368EB2E88D4 0C78A28A69AC3D33 F97DEE6EAEE491E8 16C4D512243ED5D7 5D4F432BAD965594 209FC0F49DF2C6C0 94F9FF822DE9DE1D 97F730D65F708CB7 3F564F7905FF3993 B771DC9D787CB530 176D383001C40BA8 0999F1F461ECF350 A723B33339FE8419 4A5E6539EC019F57 9C3599EA072667E5 E138F4571D3AEC47 AD9A550FA423F93F 088B9DD60C2ECB76 B3705D05ADD2604E 323B82BD5C61BA4D D6C41BCA2597684F F319039688B1F638 FB2C639BF9793901 16DA95EAF6CAF6CE F3B26AE52D147EB6 2BE1999104139D78 031835CD6AF1F467 9E1524E5CD919D8D 12F0CE437252343B 7AED01174F9FED2E 0D92AB7041C8FE38 D0DC62F550B1542C 0A6A437F49A78688 90DF5DF7F4FE72FB ED3CBB5C66DB2E55 A72095B7A962F042 38660840122B5902 E2F200B2B7F04473 D7882C87FE9BBDD6 2FE263985DCCD7A8 2D4B9D0F5617DE0A 486604ACFF378BE4 29175380304B8B9E B9F1BB4CCFC8C7DE DB328B8D5CB8524B 86DBC0BEFAE5822C 3650ABF3B79B2214 F7FC906F250D4024 F3FBFB3317CDB653 3D6621F35197B666 8D0B75A7DE56CDC2 D35120A16BA972C0 7DCBB68C7723F56F 345F462242E47494 B474EE70F6D2B848 895B2140D16F2591 928E38C8EACE3F05 67673C3130DEAD79 234DFAF97EE98E31 9ACFB163CF1FC39C 90C07B09E72C4FF3 57CD42A2FC7E0B58 49D3D9549EE0B51E CEEF0110F835C8C9 DCE61C0D80E500DE 1E9BB9E28678FE35 5490B3893DF22EF7 C39104981EE0C242 0C233CB39CCE3E1E 5E8968CB5B5E1C72 58971C35E1FD9310 BB1E1D8419AD44BF 9027DBCD6B82C7E2 3FAB15FEF3FF6DDD 19B976EF6B5C7D0E FC34D97E504BE4F9 69BA1A917F5135CC F674EE79A737D45D 5F785B6B00ED427A 29E5B08389C0A654 589800EC3A47419A 30B23EE149A405B8 5ABB29D3BB1DDE53 D67EE38214DA35A3 8E34C49048BA38E0 341D19C20A09BF04 DCF8F5FD5DBA3E41 CDF3529FC7463B25 2EF02AD7D5B50FE4 B01374DB175B94A3 63C67F7606B185D5 E5CE2C65BC29A3EE 144A6315DF018A4F AB02BC659ACDF5FE 4DDFB6A958D51BD2 EC0C9229B1F6BF18 0D6698505A296CBC D7A154A0F2B568AA 52923B40B9A922B2 94393BF71791BD37 3320A25E0A507970 FC2CEBEFA3C7EF2C 353E9BE6057052F9 390C13ED77B108F4 7D2B8E990E159092 BB13634DF285D836 EFBA4A6042CFDB7E
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201304130310(name+title). Key = MD5(password) =d24142f46b5aa0e0e94929c5e5aeac34, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 f6b6116d-1a74-513f-8682-57e0a52b2032 2 9b2c1810-78d1-7a04-a370-f87f0146849e 3 43cc724a-4733-7d0f-9e3f-7721f92aa487 4 37543ea2-67b9-5cbe-baf9-ccc633590e9f 5 b7da1948-3c17-4714-a042-04d3aa94f635 6 669f2271-bde6-28a3-a8b4-03ece79c5ca2 7 3dd461c8-5d2f-8d2f-94f3-0f3649b0b2c2 8 93f495da-445b-5d98-8033-8256796675cb 9 5adf8bf1-4991-355c-a66d-45dda4c53337 10 6fc971db-8584-4cc3-8545-ec71252082f2 11 d59abe22-12b1-5551-9376-b727bf8660e2 12 fe28b535-db66-29f8-8655-d95bbd8727d9 13 5d245833-10f0-32a8-8641-32e70b6c8c45 14 25d48773-0445-5429-9492-06d2e7c8c072 15 aca84efe-9228-4de1-b7ba-e75d3ea6cf69 16 30807aba-0a1e-27b5-9068-2838cf1cac04 17 406b2f06-e727-4e64-a910-763497654b50 18 731b01bf-7585-4dc6-bd7c-b00ec64035ac 19 4250c50e-1ff5-7563-ae7c-59cb59719602 20 c5281f6a-176f-4eb9-8165-3441812abb93 21 0f206d7e-f14e-540b-8e30-6d4449da6565 22 3a65c0cc-3fe2-7aac-a9db-e0f7ffaf0e6f 23 f4df8321-9678-356c-99da-8c5e817ffb86 24 8f9de2c8-af8a-09f0-a7c5-a9b1e101942c 25 321695ba-69e9-4388-be2f-00c0134e61d8 26 8b8f1398-7248-6c3c-8bea-846157c5cbc7 27 1192f88d-12ba-36ad-8b51-3074475b296d 28 05d47a7a-b9fb-0db8-a757-36593e5540db 29 53e1a464-bc26-1ad7-ba46-fd6f2618d539 30 201f8bc1-6f69-02cc-910e-99d3be5261f8 31 0d65bff8-5ac1-58b8-80cc-209e47b216d9 32 c2937204-8ba6-232e-a89c-50ff9699c6e4 33 63d7ada1-9b72-05a9-bac7-3c2894ef992f 34 37fd226e-4fec-3d69-ae85-6b9935bcd993 35 7362c06f-a0e0-5f24-aa82-c21fccfedd5e 36 f325df2c-7122-0160-bdaa-608db98e402c 37 3a21a3bf-d1e6-5a1a-b5d9-8a6b8e1a96ee 38 2d12d2e3-7aac-8c68-a412-a926e41afd7e 39 3b966a58-d905-53aa-b4ef-4a2ee21c2086 40 0bd695b4-3f6e-7d0d-9363-f81ef9bc0531 41 9c4a69cd-e603-3dc4-80a7-78992e06dc7d 42 3fb461d6-d8a7-84d8-8a2e-17961ad93d40 43 0ef1a886-114e-68c4-9323-6862e3459f7d 44 8906e7fa-ca54-6a4a-a2f7-02ca150fde3c
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
57754285345235424474573046301052035058573866. Exactly this sequence comes out ofnew Random(375).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 8 of Run 45 (seed 51,450,859):
new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39). - Conclusion. Filler. The content is fully explained by the two RNGs.