201304291545 1dbor4
explained decrypted filler
seed 162
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201304291545(name+title). Key = MD5(password) =b0e2175fb5243ae79ad86bb1909b14b7, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 2217e3c6-d59e-3d63-a550-1f567e2d4071 2 87f7b7e1-de73-3fd2-900d-b9904b77929f 3 eb2b4c72-1304-022a-92f4-5ee541dbee08 4 4e086146-feea-1073-a292-8770d9f3aa21 5 166c24d6-0542-37d9-a2bf-d5e5cfe0d62e 6 247ba3ba-d34c-14eb-bef9-5607459dd3df 7 9c01b2e2-6cd0-4201-a981-0ceaac3a60e9 8 64f9f75f-3247-6c1d-8a06-1bb72522307c 9 bd11c64b-90d7-0741-93a1-22711230f4e1 10 a42a8dd1-a8c1-0247-8a5d-6b07dec23a7e 11 ce97bee1-7937-594e-8bb0-68a7240f7e21 12 b8fc3e1b-ea67-8240-848f-963fa1021ebc 13 b143fb56-e5c9-8a2c-962f-d1c331b95d2f 14 036baf63-cecb-6938-bfb9-b4748190d06d 15 70387fde-7deb-380d-b0ff-0fbf5bed0714 16 427fd300-eb32-1f6d-8835-741a041d2620 17 bbfc2f07-602a-8ac1-b2bd-e5731dcb2ba1 18 6246727c-f37d-36d1-9673-43a094e26f1f 19 548a3146-de7b-0399-bbb6-7adcdaf88302 20 84232667-2d88-00fa-8d53-270402f29945 21 3af83d23-ab4e-32b8-b74c-e3868c2b2432 22 5b5f9cfd-5466-56b8-97f6-1ce23131cfc7 23 89a790b0-4498-38cc-85cf-cbd4246b0c04 24 cffd1caf-9d1e-504d-83e9-936b86722cdd 25 6efed08b-c744-5b4a-b149-d67d0013729b 26 d143508f-9c4a-6ee8-89a8-f0f5f7901e3e 27 8a624fa2-849b-170e-a1d3-e09f9c696927 28 02030377-9022-075a-aaf8-49991e88baef 29 ecdebfe6-407b-2ff7-aeba-b19c50e4e003 30 307a6c41-aead-41e8-a886-dd0df4582011 31 b5501342-5f84-8e78-89ce-22e8b565514d 32 347c8cea-5517-16df-8861-2bceab0aa12a 33 4caf83c0-92d8-3f17-af2e-949175de7bd6 34 e2918685-a073-0e4d-9e81-1aa3e38365c4 35 68df55f2-0efd-1a87-8d5d-be6b3ec6f541 36 c4c26244-b2e8-7e2b-b542-a330261a9428 37 0d5a2342-eee0-2260-a29f-70b1773cd2c0 38 914931b3-5a0c-7962-b262-4955496815b1 39 637d471f-5b5f-07a2-8178-cda51f319aee 40 2bdbf423-8c86-8bd8-ae72-2f468c368cd1 41 92a62690-9294-7e6d-aa6f-363307c5f50b 42 d0eb6c44-e5b7-6a34-b694-68015c92764b 43 6ae24098-312f-7799-bb7b-57649aa99231 44 eda1cf41-9a5c-512b-8f05-f0e5a0db6e38 45 626233f4-044c-2260-a524-a8101e684f40 46 a31254ff-b7e6-47ef-b1a0-e2556dcede04 47 31c16914-4947-42bc-9c26-5315e11cd755 48 9afb76da-bae6-821e-b192-835930b96353
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
330131460058863183003535561024813017270876752448. Exactly this sequence comes out ofnew Random(162).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 94 of Run 45 (seed 51,450,859):
new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39). - Conclusion. Filler. The content is fully explained by the two RNGs.