201305160606 1eetmv
explained decrypted filler
seed 5
From the post to its content
As posted (encrypted)
8CB22788F6800FCA 34B5873A3BE02DCD 036165EC8F521200 A4A96477EFC06E05 F61F8981FD9A3EC9 C5EC079FFDEFBDB1 98340C078F0E74F3 949805A0DBDF571C 63C2DFE3155B1C9A D5EECD7B4A3DA324 76307AB2B9726395 6FCAFCE7A9AA1BFF 765F4EB94846ED3A 4AD4A9787FE57205 C28B0A7036A063B4 4E2F83BACF42D9F4 63F8D6CE4E0065D7 7710CF57743DB235 15E9B580D5E9757F 97D4074A05E53EA9 9ED9162C57DEB186 9B5D3663F2F1D72A 68990999DC67E397 3E88E0894BAA466C 66E7DA92FB4B95B1 F143FEFFB6FCCF20 9EED48A0AE086EF7 865302A327501953 EF03FE4EAB7519A7 BD039E5A8A4612E1 1A8F295E0C2B2382 5A77B7F58B2E26EA 3D0EA2C694E82AEC 5E78618800240FA6 890A75E1AB28FC02 F1A95CC316940B83 7AB656ED89EB0C4F 633B7B2D78C794CC A1E5EC5A3175430B 331CE667D139BC6B D7489D39DD732A22 1709BC4FC63BE127 A83D86E763C71FC5 84B960B198BEFB0A 48C767FFCB6930B0 34EB883A8C75D513 B57442AB8788ABC7 707264A80AC4CAD9 946AE15191109C8A BE6D1361BBAF4E09 536CB345A8DABBB3 B5149E67157DCE2D 7047C29EA13D2399 0EFFF1EFC71F5E96 45BA16C31DAC3E10 449649A624DAF25E 3841811E358162CD 0A01F3FFC1B3A469 9464C7C0054101BE 2B499E6C8EE36433 67083C684FE6D122 7305E13CAF7D6AA9 789E32C11ED6FCCD 305E9607F7CAAFB0 8B0AD0CD85EE6E98 1A288B32656D7E68 11002D54933B5731 F79ACDEBEA593453 AC61A55432491638 28FB8AD48B1F6201 4A9E40F340E7CEE8 01E27D1A0585979F B6CFB8AAE57933A0 DC35EBE2A1822F03 40CBC5635B212886 88A7648B8A6665D0 F77C821C22244F58 38365FB01F3C5BCE D9E401FEC33667EA 60A13DF93C1D543E D4D3D5E97634E049 E9DEE3C915433248 8E602BB043B43984 66295211B609C076 57D89F68D3D2C0B3 40B4C912D4EB9138 29E0FB7E456C9424 0235D618A80E1B79 6B9C61807707854C 71076244C233E51E 213D51A265E0CD4B BE398B686E41CBEB 84C1D0536AF8F2D5 386EDC642C515B0C 03476B4CD9BA288F 437E17088447082D 2E4B24E3208797BE D52ACD52F6BB9661 7A4145F342B1AD08 784A58636B6C5CFA 6666E8A0F7D67E02 4361D8C93BDB9188 F67A29D26845F6EB F97E9F8F45E3597E 127EE1F08BB33638 67EE230AA5547680 4AEC1E92FE9BA9C1 475312F7A89C7724 C3DF1DB88F611495 B3E62063365E38DF 4EA7F9D7B570635E 5FAA42F6050D4821 77AD9B65E5EA2056 D19DC184ADC2BBB4 2F4CFC649B38A605 FE7C16A89A7D4BEF E2FBEA2B720BF98B 7A21D7B9A0086DBA 1CA8714868D49E1F BF53AED8D60E4B1D A15C240A519D52E5 C4FFD40B309162A1 60EB8AB4A46A0F01 DBECA608EE865B31 CB95DF6642B2ED59 793F369AAFC209D8 1A7AC68229C1028D 9A54E74742B54981 BFDC2B13CD209EEC BC14E3D87E6EB634 F18A3F10854423BB 7DACE9B42AF3DCB8 0607521E35A66DFF 41BA9C1486257825 A0FE4B30E9E5FBF4 D78A5FB1C75D7F3A DF24CDF26ED1EDC4 101C417A81DAE5C9 13F5387E7E09338F 58F752A65BDD70FB 8A3CA4CE6DB7F7B2 1BCFF3BF7E6D7879 3C86A0D2671D5DFC C08E8EFC1D9C5584 451198C4F063EACF 6E607E6C78596753 60ADD3657AABDC76 57AE3164467C36FB 3247B88103AFAA43 878103E7DCFAD290 9E521824E7879906 33D55BDDA82778A8 236D4392E80E6E18 97F4AC9A862BE855 45070A3B7BBE07C4 36FE309BF2F332A1 B59BB3195FBDFC2D 9CD19D938ED8DA37 CF7D2F4586B47ECE FF8553E3951BA091 1BAFDC93A57D8D0D DC321AB83416B1A1 B8C06A45D21252F9 2EB3773F54266751 79977626140CCFAC 25371D00EBE4B320 839FF54D9EAC2AA6 AB8F26B0EFA50E53 C82803D618081F51 56F9087D3C0363DD 4A4024BB51BF2735 1558ACC834168F2C 75943615F00EE51E 783E2C721C26DB2A 9602A31ADD4E92D8 EAFC9AE11A88B7E7 DB2D255EF91129A8 A0725C8AEAAFA3E5 FD938E8BA22C11BE A5A819959E202F84 B18AC482929F9659 B1A520E15B23F035 4966679D88F33974 C3B70F3C5F7CD506 A6FE199B14743B33 D03E2CCE02C3AE8A 01F39F0B2F3BE534 DA0BD330B6B3943A 3BABD91070B2F56B ED251957DB63BF6C D0E533993175BF0F AAC0BE14C339F908 445BD0C6BDFB2985 6423BC9BC69809CE 62DBF613D6B52DED 095CA4931F3FF94C 28F36AAE10A3AB55 ACC01E6CF90A98B1 C7D6E180C652C320 EF09BA2FDD7BBAAD 0D7FE3D078E91C40 9187CB353C6927AD 82D77089FA86F35B BDDAF08784B457D0 1F61955BCADB3D63 947F6E96F1D5303E E07327D0D5AFA865 62E3B43BAE443A60 207DCDB3B112A297 123F168D0D04CF73 F212C93536CA4811 CDA60F3BA5CFB38E 37B02F2F95724078 AF9848EC9AC22E9B 21797064B9039D97 FF3288FCB2D41DC5 ED1FA8BA1A113540 6193D8455CB552D1 CB1A674420F8C2BB 6AFE34B0C92BDCDC 7F29F053EF5B5206 E6EFA105E3EFEE1B 28F4737DB342D5BD EFE8742FF544F09C 12E8F481305827F9
- Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201305160606(name+title). Key = MD5(password) =5b614df28de6ae166ae298055306dd53, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).
Decrypted: GUID list
1 7ea79d67-0cdf-3073-9c06-69e840b7f4af 2 1aae5702-9eee-23c8-845e-f02b16d4ca60 3 14313c1f-7eef-245c-a0f8-309f26c20e78 4 757b613f-f296-5efe-8938-4eb7414115b8 5 72f3eb02-a8d8-430a-b699-4dbcb77f5b22 6 132e9c78-c9d6-88c8-a82d-ad6a40565a25 7 79377205-1138-10f4-93e5-e25814220efc 8 2b91d427-ff79-8438-8ed8-69173f62f252 9 a21b77c0-0ca1-5905-af8f-41a508caf15d 10 65ba7156-aafb-174e-96df-227f3c068332 11 735b1f23-33fa-8436-bc64-eeca009d5e53 12 a26e1c56-ea80-3460-8eed-f2399b037c46 13 393859e2-d527-0a69-aeb2-53ffc2b96997 14 a0c8609c-b807-0d23-b9d7-a239bdc4f108 15 a87ad76e-01df-47bb-88d2-583c15347876 16 d3d77c38-861e-11c9-9959-1eba25209821 17 83f79c2f-9659-8428-afcb-c6a31c8fd464 18 affe2527-3970-0a6d-9877-882d8463472a 19 e0f5c8fc-bf50-73c4-ae68-abce3d8af0ad 20 8291103d-1c4c-2686-8b4e-c7b975d7dea6 21 674b3aad-aaac-4570-964b-141ba29388f1 22 f0447104-ffb3-06f7-97b9-6259f6039d57 23 3acd8c82-dbc5-7ccf-9e87-718cdbe3b23b 24 d06fdfdd-36e1-7c56-9cbd-e001d7a7b44e 25 ecf129c0-484a-1989-8bac-19d988fc24ec 26 841d62b7-3c50-69a9-be38-baad8f0dcc50 27 bfee32b5-a94d-2740-ab1b-512bb286738b 28 ab095500-c60e-70bd-b7ff-e4aff30c77b8 29 ddb3ee2f-1c39-8865-8164-80e167e06fc8 30 56656991-00b6-0ce0-9598-9cbbda8d3ad2 31 36b4af96-abed-0dc3-b7dc-edb844049b99 32 8e7dee4a-aa2d-6900-be51-799ae2feb756 33 49942257-c158-25cc-9f1c-b1fcd4419351 34 865c23ea-c246-1041-8189-c53ed1c6e9e9 35 46f1f211-db10-30b0-af38-be6e1afac3d1 36 34581963-45b3-8dfe-8cd4-09db87e8a4a9 37 a033688b-872b-1daa-b971-a0ae51beffbd 38 25ce7bc3-f8fb-708c-8464-871d9498a152 39 122695d1-5356-133c-b82d-05a020924b8e 40 27649fac-7c0e-7994-a010-1cbd8befc2c3 41 68de0d1e-a2fb-3d9d-b349-39e6b157fe70 42 ef627fb9-4eda-0daa-b789-b0a51a1c6430 43 0baf841a-a28e-859d-a9cb-5c6f16724c70 44 b3c2ab33-11a7-7b33-9498-71b6ead306fd 45 71833a28-7bdf-4a88-82c3-874b21234c75 46 5e4a6d06-5497-1d5d-bed8-92c9c14c6117 47 7b10f900-6b91-06ae-b56e-d98d6db41ea1 48 1245da76-7d57-4aef-a4ce-892bbf3b6511 49 eceea24a-0658-5162-a55b-b716aac609f3 50 5bbe1c74-a851-79b7-bc96-b30519ea8879 51 c873f774-d842-8102-951b-674c3cee493e 52 b106862b-453b-80c7-95cb-ea8f1f83fa04 53 354e5727-e4a2-25da-9aa9-95d61bc627be 54 80a7da45-c603-4772-92fc-8977ceeda726 55 c0a55f75-c25d-1557-8fe9-fb9c44e9789c 56 f3b238df-50ff-2b77-94f1-f46f12466de8
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
32254818518300418072407716278006213817173087410457882412. Exactly this sequence comes out ofnew Random(5).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 2 of Run 46 (seed 39,043,781):
new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31). - Conclusion. Filler. The content is fully explained by the two RNGs.