201304240314 1czwb8
explained decrypted filler
seed 492
From the post to its content
As posted (encrypted)
50D729348B28962A 9D81BBD38DCA8A2B B271CFFC6A3E8864 39E90E32CF9B7457 D706CE82852591BC 75B3BBE2B5DE270C 7AC9B90A15FE1131 80BFEB1C065A15CC A24908E70144261B DB5C63C6F50AC85E E25471B6622F9104 18C1353DD755B668 A83958B78A4BA411 0E8F933BB51A3C78 3478F6450A8B15F6 1C37522150B53577 F346391B87E32BD7 CC5913C5D22A24C3 AFA28A63CD6C6F95 A7D2FDB6E017E358 F19D423B04DE24EA 74C9EEABB704F594 855EFD041321ABF3 A085EDA7F08BF58B 5866C30F7C192063 87B9E693C1D306B0 85739F4BE78227E0 8DD227945B939E6D 23BD34A0F6C6C244 953CA40142C8E76A 427B6310D56C766D BCB439AFC2BF6B26 FD2F5560D3D5DF49 81A32654137A4ABC B5D043A402DE324C 041803B14A60FFA1 9B28D21308ABB770 DEEC665EDF997387 538F0388CADDA75D 03378D0FB6F257F2 D7BA7670E0ADAB41 11A5A2DA13464FFB 783C6458A5B91604 06AC55D14DBA0461 DD2BF9EAB75DEAAA 82C6C392753CA74C E8B16D9999D7FDD7 9F5A72B016113730 CE95A7403F2CA20D B64C98447C508E66 19F622F8B2B4DE89 CA9EB190268DBB65 88718B32F0CC0255 373B525E70B99B53 7E43F7E696C301FC EF856CC6CF5D198D 2C94E588115D325D 85F887061CF91147 3A8F063D4CE90B8D D3DDB7747216907D 878E1AE84B6D4043 15CDE87D6741F685 4879A4BECDF5349A D1C2C59932F53EFD 6096FAC28D5DB6E5 5DB6B9C361DE9754 41B756CE0E6A5147 66CAE0F3B8B23ACB 6857B19AA0431EB7 304E53F6659BB989 0A5EF1BADACEA602 BED900DD79369956 6C09B96D70D022C2 03356B514FCCC2DB 21442E3A2570FBD6 82DF4757F5053626 ADDDA010438C4B06 5DB802C3B56D4D7F AAF4F0502E44CA09 B2325A3A412592A9 1AC64DFECE2E8D6E AD5B35C59904799C 13B92F1D60D54ECE 9F7C52B8981C1F34 A9A3327A5B481943 99D0CADD54CE82C6 01472A59CF8BFE26 D7F996572088A919 F63C64589EBA94BD 33A7A003E0BAF297 BB4A238C92F5F4D2 78D9EDB6A7DFF44C 2280E62C90CBECF2 E2DFA6A4C921F9A9 2EBCF376099DD6FF DA7CB461774D3CB0 D0AE4B625F40DCB5 E37D7871BB654E89 05461401DBA8D932 DF6EF438950D871F 4716DFC14DAD7F6D 8C7255833A294D8A 877CCC5D2263FA97 C9F8C3A7D23F7731 644F70365F14B92F DDC84873B5F729BF 5A802B8D02462E36 0DA2915D21C72FA7 555F49005F38E465 6F06ADD47C4CD314 78755C102F8C8EA3 8A0B0E824CCC38B3 026715EF171B9037 4528D616D10BE2E5 260141B4E697603C E9C7304429A4126B EFF4BF290736B896 39F21BF74148F34C 5C4388D6FE951029 50AA2BBD7F3E6C47 490A34838421A232 2B17069F14E9A706 795802014F23CAC9 67FE048540270B95 38A0893A55FFB964 C43C7AF3D18CDA04 DCF8746E15577974 E255CF563B07EB33 D111D0B8F3C56BB9 7D82F302042B57F0 4BF3AC2E1E5CD296 7F22501C985B0746 E52D96DEC6B0AFB1 1C4B0153F2531DE9 D59A551E9074E138 CC865016065EC8A3 F6FDFD0DBE668EC2 A2ED622F89C24094 82B13099ECD5FD58 3BEADB02EDA2A1A7 7CCCB6658D0458F1 138FDEB2AD478661 028A237FE6039998 670EBF0C4201D63D CD003C30DB53B2C5 3E9184AC001B8FF1 45D8B4BB2D7AEC27 4BB069F6F19CB09E 4F1C849381BB64FA 575C8D880C609792 1984D41C744F11E5 61337B3015F4EA4F C02E9C06AAA1D17C E1084550457EB438 AE9964EF69E4E7B5 60BCD72EF325B55C 9A8258B8D7D6AEC7 13A94F75025B2634 8B3A08920C98E27E F094B15CC37880F4 851B87F98D25E19A FD9E4C77D22D37EA 7D89F60DE9B94B79 38E72BECA706D88E 2DD3C49ADE172122 6276C5D9F40BAD75 085DBF93E9E1CF3C 964FC379BC95B4AD DC0B91674F9329D7 0B4A6B3589A0A47C B8037E1135841956 4FAB5DB7F0C32917 80F57841E4467739 A08C148C06D2A4E9 EE3E7DA21D7349F5 F745FD02538A0BF2 EE7C04DBE2BBFDE8
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201304240314(name+title). Key = MD5(password) =3acf937aa495044a67abb3c8e7ea9a3b, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 7ed2d89f-86c3-6c30-bc6f-f0e8478dd4f6 2 7b771af9-58e4-136a-a7df-b83fbdaba73d 3 a61f8ff9-e50e-62dd-a335-7cd1eabe1689 4 48fe8be2-76b3-5dba-9359-bb717aa71ea4 5 34630e2e-1770-3d5d-be76-7fa42d12eb48 6 2661fa03-f513-4e71-af6b-ebf73e3ff425 7 795ee0cf-606d-3901-b172-bc04d77632d8 8 a1da5288-f789-2739-9110-3d5ddf8792b8 9 634ba614-a512-760d-a4d6-4e536a6a69c2 10 69380d79-f63d-6f68-a131-4f238ef600cf 11 b96277b7-427f-6d93-8fc2-e115460986f6 12 e0789ed8-68fb-5d3a-879e-7c6ebce11454 13 3dd69d58-d631-7f42-9697-a701ab661347 14 84749ac8-e71d-3acf-bb90-d29ffb9b8f05 15 bc5f24d8-80ab-3d9c-9fdc-66d0127d4a78 16 f8153e62-228e-2f0b-a109-620d4a030223 17 67b96c8d-9cb1-6d2c-bde5-820e2fb4fce3 18 12878980-d837-0815-88d1-5b6a4c919016 19 1c108e9b-ae27-89a8-9120-d3a794eb15f9 20 17168a19-ebd1-7b3c-bcc5-4620ab582286 21 fa782858-a7da-181d-9030-51767c97efaa 22 e773101d-c310-42fe-936e-d45b993e8f29 23 06a5d9c5-75f3-1199-ab94-e3eaa8939ba6 24 27e361d5-3e38-8dfc-bd83-cd97cc22f845 25 115876c7-5056-8307-a67a-5757c54d2661 26 2f487c49-cd81-8300-a892-a0022a9d1cd4 27 28b4f75d-c44d-80bf-94e1-0223410c60dc 28 a26337e6-c989-4c8b-8e30-1daaa7443f4e 29 d8e81249-8010-35cd-9bec-417101060d7f 30 abea3a1f-3071-2780-8d53-6d5360e60622 31 81ec0de8-7c3e-7743-9b7d-21f8df600af5 32 5cd6db5c-6162-0214-b8f1-28b5db7747f5 33 2ebea831-a319-184e-8bc7-8bb81621ddc0 34 7e4adba4-6877-287e-a1b1-7b6c77ae6de1 35 48a5013a-13cd-315b-b460-ecb906faac8b 36 b32777ef-2ed5-0db0-b4de-ad9635a8beed 37 4abccf84-8279-5436-ad0c-f744dc5d91ab 38 a3172c3e-9e82-6037-92b5-a518a6753b5b 39 7ea7f6ba-bb08-512d-a600-3cf0e444469e 40 82d8ed64-2c0c-2aab-8f20-21b07f52f5b1 41 d3cfcb8f-4950-10a2-a5a9-cd8b2a464484 42 7d5e6319-bf58-3d2b-811f-5431b3611ee1 43 4fa51da1-7e2a-5ea2-92a9-633a59c99cbf 44 0def53c1-e98f-8b54-a7c3-f188a8e19141
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
61653432766573326087141888843270123056521358. Exactly this sequence comes out ofnew Random(492).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 76 of Run 45 (seed 51,450,859):
new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39). - Conclusion. Filler. The content is fully explained by the two RNGs.