201305162045 1eg42e
explained decrypted filler
seed 257
From the post to its content
As posted (encrypted)
C74D07ED4C3DE0EE 391A306058D12ECE C5E32303D7752797 7C983B0FA977C5B3 28C5FDC801C99EC3 83483014705C22E3 17A48CE2A4C7A168 C269BEA0269090B3 2903AACF35B587D7 D4E86301FCC1E31F E9B37893D7B2AE04 EDCA2C2305C5D810 FB500A5BCE93DABB 8D79A4A706FCEBBC 6833B0A0B16B0FED 6630151667B21FC9 3FFB5100E49EBFDE B31CEEA91369F199 8666A5CEBE26D5D8 8F70AD9A2D5257AF 4800EDE40C8E4C7C 24E5400E59530AEB E5509F4EFBB57B09 113B9C0B7AF589EA 0F05CD011A78868C 3127B2D9566C5EC5 A3EFB8CF37152BEB 51CDF2B708E0A43F B1BF0B4F90C4F34A 6454F7C6BD8A04C3 B46B6992DE2F6D63 C5A8746E16264690 D920306E5BB83354 6EB5BB4B000D2FE1 B2395FE955FC4B83 710C8BBD81E4E1BC F6AB66FDC44417D6 15F9C0225DD5762E 3A7D983145E9CD9C DCE4FB34AC3F9941 1D6B3CDF821DD2CB D78CCF97E537147E 409554B0C027CE9A FEE8A72C4D07867F 57D18E3CB2993380 4A8114D02B1065F4 2D295D1EFC89E2E6 1CE21287B1F41C5C BC2A06FEE9A0842E BC200954D6D9C9BA 38EE526EFCE8A680 6326C214FB713E5E 255CA5D46F2A6090 8D06CBF1B23A15D7 97EE248FCDC37292 89727CC76C3A66DC A9AF28DBFFE7A174 EF28E78B433DB171 D0F51DEBEC89722D 3AD2DAAF89A567DE 84C88C67B888C8AB 69C0D5AA83157057 C68417430041B1E3 75124E335F989B44 DDECA007A918B272 8132D4A5D92DDCC9 E92D499BD087F499 CD307B541FD568B6 F0D6C409C853DAED 5CD8DCA46E454ABB 3A1D16D19AC2E334 E0F36BF8FB262B11 DCEFDC8A41BD5696 03D2EF9B579DBEC8 2797A0D03A42A872 78565F2207FE2EEF 45FC25EA1AA1DF41 0A1199187DA6A099 9FBE47352DCEBD34 9A41568D9779B2F7 4FD0461363F7824C 1C8BCFF380720707 B404F74A78AA4F8E 546245E4860CA0D4 76D9D0A33B4C17AE 0476ADA832B4D6F7 E8AC51239821C72B 3372152B61FA5EAE 11FCF10C393717E6 00E5A8472D7155F6 FD81796FAA972FFE BA795A4BC0972806 D08759C475D41D02 B2D27EF11BC83267 CC297C3F5FC7C7A7 4D45E9A42A0ADE31 CE74A9DCDCE817B8 25AF9B75CCC2561C 3B77D4CE8A19CE89 938B7023D154DBCE 0EE3884A394432C8 795F292268297C45 6E0D7E84A716B940 C651329E548F4085 A86C9D87A5DB5501 335FB7093AE121DE 956F59210223916A EE85A536C50E3C75 373BC3A8B8ED06D1 87DA0FF650BCB967 E06729BB7230244B D9DB7783DA0A3101 E9A6D64C80E76F85 A61DE643A77EC761 A652F74C238BC8FC 4B22BBF7A965DEA4 60D28749C55FF0C0 3954D244BBFDA5AA 1F94F3EE7B505AF7 ABBF7B4DBE0136D3 B537ACA8C4D815CE 28C3EDFF213B0073 098C30C279271868 D9B41DD5AE64BA51 BF9C86B63271B36A 04378F7307CD55C6 2770352CE5248E49 394B665E16804DCD C910D4831A288D75 BE150CA9735A5FD7 7DA564910D540158 83890D9FDFBF44CE DF37079BBBC81746 10A3090AD5FFDF0A 20DBB0CB60C9601B 42E9C066D71F0078 4BF12FD06F097FF0 F79577CE4A3DCDA0 CE7F91E2CA01A670 19E0EC9FB29DBF3C 1E7D607B0D6B5D18 97BFD027A456A5E5 B26DD8EE4750916B 99377FB46EF79E20 E8CA6B3899F8AA36 B1071D5EF4E03030 9F0D530B250BEB6C 00F727C820567B8D D4A2C046F1E6A2CF 10E072C654BB1B99 963AD20F93B05152 7BEF32C5CB1C2AFF C2F9285D0A2CC466 DC93C0AD1DEADC8D 5566FD6DA92F42EC 44EF1A0F8D1CB9FE F727AA6DC3370805 7E05C00BC104425D 374972AC4CF2F312 7153501D84B040F5 5C71B6718BAD7B5A EE5CA57DE75BA6C2 AF786229B88BF15A 91BFB8A0D91EE6EF 917F12BC771ED5FF 2FE6BD4289B2E7F3 04500F94CAEEC0C1 4153ADF8EE1D5888 BB947442B6175580 90841B9889711FCD 8FA37D85187F3932 D799B81389F7B7C4 08F2DA576CC2C186 99D8095FAE234998 E1FEFC6A14521533 DEA5CAF81A2EBDA8 66C1ED75A0D34E10 0AE13A01E5C7422E 0D5465924E6DBFC5 6C37134B2F5FCD5C 2AEAFE4F1EA0D1A3 9A4973FAF6AE097F 0D4F2F334CC7851F 28A617E287D19F3F BA49477D389D1BE0 92042483F912B225 7AD2B5DF7EC6C356 06539267DCC396DE D1A88EFCA26AC44C CADE7579B4C4249A 6B812C289E35CD81 BB68CBF6F565AAFE 9E590BB44C970AD0
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201305162045(name+title). Key = MD5(password) =ef14a499f25ae3b8617ad4ca1ff84286, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 74fcd644-8eff-8ad1-8301-de0980b94aff 2 eae8a332-5225-2ecd-906d-21c079bb661e 3 fbab4d87-b9e8-39bc-bbc2-8e37e2baf44e 4 76fcb61a-b682-321a-b738-0a5d07d85ace 5 d5bf0edc-178b-2183-9e52-4ecb14b9a77f 6 5301a880-0f18-1398-ad11-66c837d35364 7 9f27d9a2-40d0-033c-9f16-8e3b574690f8 8 33bafc6b-28ff-38ea-8c76-b0ec8c7f8abe 9 e7d2360f-635d-6f53-b08b-98d25d5cd7f8 10 a6fb9b2c-0a6b-07e3-9e92-5ffd1c89c601 11 0c6be710-27e8-5022-ae4d-cc375b6c85ce 12 a3561338-c07e-06eb-a63d-85119b4319eb 13 a206c1fc-b418-2ad3-b633-62d7dfbfcefc 14 84c671f8-cb72-12fe-801e-655a327f5748 15 e1b2cadf-0046-70a7-8a04-f357dc9e12d8 16 2fb04a1a-09aa-4ab8-9e2d-187e5f132b1b 17 7b5cbf02-2a87-8b3b-b574-96b7aaaca3d2 18 88500b6b-b8a3-36ce-9839-a49f9cecd844 19 210d6e9c-835c-57ac-ba1c-27dd0faaf299 20 59d48bd0-b734-7d25-bd40-e63a734f7ac2 21 ca64f734-18d9-87b4-a37d-c68155d6fc34 22 253d1c31-df23-8238-9635-c8f053439a3f 23 29d20cbc-596f-37ae-bb28-cf48940264a5 24 160a9803-f2a2-783f-baf8-d8540281eaab 25 b51f6b58-02a2-7a24-87bd-863e26f17176 26 1271ef28-1c24-7515-9657-b3e84a6d25d7 27 5f052cea-703a-889f-b9e9-11b262f97393 28 c52bf9de-c112-88bb-8807-d9d24134d63c 29 17945cc6-80e6-41ca-aa71-8d84a8a83779 30 6a7fe742-a255-0589-84f2-03e868e005af 31 d99a0849-2982-0a22-b44c-fcfb6e5f9c0f 32 d5b633cb-b0e5-1f28-969e-6588faacddbc 33 c7e35d60-4fb3-55a5-9ce4-6536b98eff2c 34 47fd89a7-2de7-37b7-a351-54831b97ab67 35 cd5cb8b6-0579-3a64-8e13-c15d89cb3ce7 36 e02301c4-6f37-890b-96aa-91bb23abbd8e 37 f23c3edb-8aff-8623-a986-2aa573143154 38 6540b10c-f226-47ac-b485-dba3972f1ae9 39 e7a03933-c12c-3f10-83ab-d87ee6dcb4db 40 afff031a-1dce-7a0d-b4c0-56904f3db88e 41 b54377fb-43f1-775c-aeac-12676d1fc7d9 42 286bd837-9eb3-14b9-bd86-2c9b8a7d1011 43 89469415-20f1-1856-a304-b264c9ff4be6 44 285fb21a-2c77-39a2-a45f-d0c8bf817aeb 45 7b4feb70-5279-330a-91a4-baab181b7afb 46 4fe5c258-ed25-10cc-8d9b-af9fa590c588 47 b9fae9b4-faef-64db-8e03-f5a58c3856d4 48 9a0e55a5-a3d5-485e-a213-2d76c560b9bb
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
823321036050217483578837778840015338843771133164. Exactly this sequence comes out ofnew Random(257).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 22 of Run 46 (seed 39,043,781):
new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31). - Conclusion. Filler. The content is fully explained by the two RNGs.