201304210913 1csqe4
explained decrypted filler
seed 568
From the post to its content
As posted (encrypted)
15D84195147B567D 439F58C99CE7E42C 5C61B7185ED29B83 0B066B4B5966996D 6F727C602EA190DC E6816854BF90FB83 6B8DFE9C58EFD2D5 8F7704920444B4D6 0888EADE8DF2C3DF A0538200BCFB8083 2714AAF0089CA24A 8D0060040931C676 FD5DD086F8743EB6 C3A6BC8EE5D35D9F 9DB30D9518F773CF 77367615D36B5BD2 973ECA093EE49EBD 6E2AB42A276F3119 071F031E578AF13C 5E877CABB3E44C9C E0D83A14CA1E704E 32478FE6FEDDCE18 7F4B9B80D3471775 5918D3E7952A4ABE 16A45243466C9FDD EBFE5CC0BDDA696E 87EF3A0F17978987 976781783A3664D3 4C0953232CADD02A 1F1711FB95E2B825 9DA0A322C3B8C7B2 60DAED4D9734B468 898CB1ACE9A52ABD BE45CA3DE8814560 B28E5F536A54A98D 30FA4C57F09A37CB DF572513CF3709ED EB285FCB6E26D2C9 6A0331B0051005F6 E724AA3B46EB67D1 900D3B8A5830C482 DE65045453476C65 A8079D68BBC816C5 F9142D7E6F3B86CD 952E18F03F676ABB 61BEDDF4E3EAA967 4F381F48AB4FCE63 D4CDE14C1841A433 420866F184518742 E3969840A877039D 5672FD5932A97A84 077EF89B46EAEB9E 68D46DD135E31912 71BAB35FA4841374 E3A93CC1768B0832 804AC6721461147E F944C8D9063EE13C 2669948A1ABC85B1 9C820B533258009A 28A4671BD124BA2F 149223616C640060 8B9605DE9244A66E CD636B2373585C62 6E672F501D9E686A A525C4814338F029 BE4CE8319893CBFA 7215C4E259223673 D89C4238301AFB6C 78EEC4A829984616 8580C2C360391323 D0B5E80234FA0049 D012DF9F1D8EBEC0 6B916E064EDD99C0 0314332037665E95 D2EFBC93664C12BA 70C638A6929E10A3 D33393CC5E3FB2CD 666E77523E1CDDA0 F80C2511CE393E1D 24284A426288C08E DB7F035A703F6F58 D012C87DD028730A DC0B085758F62D92 181E7FCC06DAD7E2 8B846B5B7E4C23C8 DA39524F1702BB6F F022699760F60345 20DC7BD6CB95D461 90706B4A5715B81E 537371B04EB20BFA E21B011F54DB35F5 CA47352082DBD1C6 B60DFF9EADBE2345 98BC337F2DD9741F D3DF7CD158A13A4E 263EFC312F615ED2 EF008551DC177C90 43C107273BD2A861 F404BC6A0DDF96D0 A4122DC91C3FD969 34780663884AE1A4 F8D5C627B17CCAE2 D55E6B3F833B2CDF 5EB40A25682C0FE6 73EF998826674E9B 03C7B58969FED5CA 79367D12EE906FA1 50929AFD87E1EE9C BFB7E42A86A2008B AAC8094344F3252C 75A5BE53D2251538 67B4779543595E7C 00178BE5078171DA 342CC653926E3005 C0C024A4B2CFAF43 7675D8A8A7B81F77 86E0DAEA5D43B6CB FA39EE9419D5E5C3 CF7801CB928FA9E1 FDC36388B7F7F262 61C6F344F9F1F3D7 15790B2DE4F07CEE 6655E55BC25BC534 8EC5EF8382E2CFB4 489F27218051BF4E 9C3FE705D60F53F6 9C8DD9D47F7AB8B3 0D6801AD5EBD989D 2F3DC4008CDD019D D96A5ACA7D482EBD AD82399A9620C53C B6C131CDA746E04F D82FE802605D0889 E0E1EE49C6C4DFAA D0A114B73E4E8EC9 D12C20E360E3D2FE 71400A115070C9CD F5894F83DAF7E01C C87012EC905CC990 210FA3A0A781F559 32E6C0B22B4C6EA3 42D69AA0F64F4613 885F6E465EE9F490 0AAF910E23198415 8BD2AF754C523221 1AD8AF43245AC11C 7FF8008AF842BB76 8A8645DB5BFD0B3D 4AD8E7250B17196B 7669EE59F4CAB8E2 CF84B63E4065440B 5202596036A3888C A895AD38FE208E68 C64FB0F8E2698025 01BEEBBF7A4F39E9 3461DDF870169F95 43088365C5E26A2C A3B652403A3F535C 8EEA73E50E94076D EF0B702FE33BDC31 F21F772D65ADD520 BA5D3592C991B06B 61529C089355A2DE DD58AE4E5D2334AC C3EC9E5F9A010AA5 8E4ECFD51606F274 7AB3E9B9A60513C4 7A37DD6290CFE258 8A991FEF5FFA6FD4 700CD3EC6A9D3A64 A63988D7E8CC6291 64A38F23AF30A290 33A5750EA27C8822 977B4B2C0C8714DF 5F032720A0635656 5C483EF86B147FCA A6688935132054C5
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201304210913(name+title). Key = MD5(password) =03e0f281b5f52508e8bac4467ff0376b, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 a3677a1d-9a1a-447e-9f82-0fbb6548494c 2 9024d094-7fab-42fd-8b9e-e01afa2eac97 3 f2485485-a7e6-7ee9-ae8f-8943c0e745b8 4 94c003ef-239c-7d1a-b6c8-04b3e543d931 5 565212c4-42ff-5031-9639-70e5aff0e5e1 6 101ac5ca-a5ec-8efb-b1d4-7c2be636d1e1 7 010cb517-3d28-3e2c-8523-72567b9a6e80 8 343668a8-c69d-3e48-9416-2a2e90f3f39b 9 6a537948-002d-2bc9-a152-c7721e135aa6 10 ca2e3334-4a78-6d88-b218-427a11ce9a65 11 de0d2ba4-33ed-6c4e-aedf-b41c5a6efc8a 12 380d460e-6858-8141-b477-c001d457c5ff 13 664cfdb2-5578-0ad2-b46b-1badcbf889dd 14 a2c9006e-8e47-8e78-90f6-0fa0b419ac21 15 7e78cbe1-2ecf-54ee-9f3d-80a8a4ac9ee8 16 385e5c56-45f4-6cb9-a4e8-f79757210984 17 f0655a20-cbb4-5edc-8e66-f49094df223b 18 f9a59a97-85a4-1a36-8bb3-d3cab97336c8 19 6a3ce6ba-5da8-06ff-ae72-784a3333d8f9 20 bd16779b-4b13-2fa6-8f80-74ee60fc9414 21 3396873c-761e-2040-a80c-1cd8a0671217 22 c8bde967-d922-17f5-9a46-b9d815a4d2ad 23 f19a1cd9-cfee-8a6e-8669-e34f56d366ee 24 1126ea19-0104-416f-a67d-6bc11ec1f1d7 25 f64e04bb-14a3-3c4e-9a02-ec5f565f0563 26 92aa3efc-cf13-7fbb-9c94-d4992bf1c4ff 27 13d7a07b-5b22-23de-8760-f677b5b499ee 28 294c0beb-fad1-58b5-90d9-0d31dd0440ac 29 0ffe940e-7363-3528-9cb1-00c76c98dc10 30 2cb4b562-437f-49f9-b267-4fa5ebadfb04 31 08f769c6-a92e-7b06-9720-c264b1202c20 32 478aa708-8bcd-0595-9613-ccabd1d80eeb 33 8448af84-9a3f-6786-97cf-69a26debc6fa 34 d1b7432f-6bd1-2685-8925-8972b7972276 35 2df0b5f5-3ffb-8087-995d-34517a47ccd4 36 b063b77b-3c05-3637-9731-9afb726a52c3 37 c7798662-6fb8-4982-be44-7820248b4df8 38 028a2799-b7ad-45a3-bbdf-f27bcfe9c54f 39 58372ca7-a4a5-5f50-8b98-952c5f319575 40 2deb8148-64d3-42d1-8b00-d5d2e1ed8d49 41 74c9e4c4-2676-55d1-9b10-4690fd1d0414 42 475d2cfb-a689-441e-9faf-479d88cf230c 43 9a05f925-238d-0ba7-ac4c-ee2a1703392c 44 bbf2fc1e-5701-46c5-a652-a169fdd3bff0
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
44775833266808565102218437253470628344545404. Exactly this sequence comes out ofnew Random(568).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 59 of Run 45 (seed 51,450,859):
new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39). - Conclusion. Filler. The content is fully explained by the two RNGs.