201305220831 1esv8r
explained decrypted filler
seed 771
From the post to its content
As posted (encrypted)
8C0D5B11197FF330 6D1D992004A879FE B9F1A9D9BE4FCDBB AEB55A8847EBBD2E C7F27CA16C1EDA25 04F50C54FD7CC105 A3FA8D9E7A999167 0AF596BD7BA17506 8647D2727277463A 3EE8EDB9956756A5 B668C3C351CD5D4E 21F7A168943212D0 2A264E6466067FC5 EF6CD829CBF164BC FBECF9213FB9ADF9 C4FBD1BE6126470E 631EECE7EFD32C86 6A215F33C60880B5 6E9369A9ECF87AB6 ECB951338779B82E B9953B0039DD4212 8D7ABCE0A3351F48 57530CEB55A985EB ED31B7C787E33C67 F2A3ACE1FF929473 88272B4A89C9588C 6D02D963A62DC7E6 1C7AB26A63399757 A66B096F2539B1DE 58673DB4606FC378 C4E2B47EF19B7E62 BFDD6E0FEFF5DA76 4C8AD8C038013262 A85EBE71D13E4956 8B5CDFF22725C5D8 2B3965DE2F487BFF E2FD9A2AEDAD745D 10890965EFDA7344 823E47C880401E9E 06CB427E042AD858 2C54CDB6D750A027 93D6093676438221 F15C1F639C54627B A531522ACBF56920 59F78B32EEFC92C0 AF9171ED5F9F89C4 F84CE17CC177A8D2 47329621AB550F88 8F21FC2A704829CE 90F69098CA35C09D 159D87149A696348 AA3DB27A114B9E7E 1B7DEC406DFEC9CE 49E5E97D8308D238 8D29D8BCE96A1443 330A22D07EEE8386 4CDE0C4EEF8D4A88 9CEFF2CFB3123B46 E805358965E053B2 52BF34BD61E4D886 D0432C4E41802112 F59B02986F48E243 F6184C678577A3FD E7E0DD256097982D 050B1D1B6825E2E4 1AD564F8CB14C1E8 1CA560884B044054 C96D5C7003B75DDC 79A5CBA7CF8EB4EE FD1D6240A033A9F7 5C529BCA0DF104B8 49E4DA15F7ECB3B2 430CA32FAE6F8F55 C9030B53A9087631 F7946ED805FB8756 3EA0764D20808C9C 24BE549ADE32408F FA7DEAE3F3E0039E 7AC977A088989288 BD785C2A52F0D369 EB3AE7EE6B75CC96 18FBE96531093604 F52A085BAEE21D81 650041F87D9D44BB 1607205DBDFC7402 EE2AAB3184EF0BD2 FB54D9B8C6B33610 194602037F1F0A4C 877B0B3C4DE061B4 65BE52CE0219A6A2 42825EE6B0F1B1A4 8D6A6CE5086800CA 36EFB2B0617932E4 08B7A31B763C7BD9 42048CA38BE5C558 F75091BB4F895191 3B1F7AE57830F6D9 51377AFFC4E48F65 D0440CB038473EC4 838C8AD8693012D6 C23991F9F081662E A3A16A7DEF9CFD1C 62A64D4EE9732118 0CE8D52B4401A06B 2268AA14BAFD6031 B1379E3ABB31689B 53FD26078BB306DF 39433185245C2158 257DFB90BDD8C793 B3654937454C92AC 75DBB376BE8AF8F5 D18C4159CF980522 6AD6A956B7BD98F4 B0367D33FED8D223 C24C4CF3F8CC5D98 DE37FA0C988F4662 2C5912FC2E317F99 06228818F58E1890 87F86CF46E52FB99 A0FFE2E36D4BCBC4 507C596DBBD0955F F16593FCAF1BD8F9 1E58E2A94DB30B24 CD88C43BD5A02E06 2FC724A1EC799EBC 25B89436013725C5 969E90A0F4220E5A 2B23D53841157A04 38EEF7736E58D1EF F96F2713F121C55F 4F529A38DF9B7A12 3D0AE0FAA0893621 2AE3CE5702094A58 F9FE8FBECA58D1B1 FE256F72791F1C66 DA06FE70E4F6504E 63173BD031FCE60F 3B718518FD737D4C AC7014B82C3D2A22 A1D35068D70A73D2 1F0C356EFA0602A7 5A37EC9FBAB0240D 661B359D0A0BFF3C 38A6294B7AB163B4 EF91992B653FB793 779888F9A1D91EEC 7E0D67965536DA8D 46889FE21F25F158 867AA08E3980004C F1E399167C271BC3 3DBF4649623400BC 5DE05EF8B96B2948 1C56501C5F4C30EE 360F7F9D113117A5 1D119F4A9886BA98 539A34C73B53DB99 3BC59DDFFB8238A7 692E9CAB1BE6F2BD F79BE35E56442C2A 190347B7EF3C34DA C92E1B21EA653069 AD97089A4A0F818D 9160F5182E69DB88 73D4242FDF3486E4 593249A39433C076 F93CD8F00FB639B9 0B7851CC700CE55B D1922AF60518647D E7DB4B68F3F6130C F4B20554BC083460 EEE4CA7359789679 4966B3E71F351EEA 51C32F294D68AC0C B519FD0A92C9DD7B 3257420C50CB0057 BE22AB6DE4821FE8 D6CED0FCF53D72E8 294116D41C34448E 0A3184A281A55BF4 7FD10F38F6868704 9302B2B3E30EF302 F69702E7CDD972B5 58B2ABF18B6AAA17 A675307F64530943 D5AA75935B59B98C 2B8F4F1A258E1F33 960E1F30729DF6F6 5CAB562CD379836F C2D86B9E8EF59464 7684C136F644F880 EB4D89EA8A8798D0 A9288F2321F99F14 3D47AD25CFE6932F 1951AEAD583C0CBA 3797746F03B204BC 0A5CD8857BBF12DE C93048BF8C62110B 94384D201380FC44 18815A5FB4650F73 2D7B55C3C3411D2B D71B347485C4A09A B4DE10FA90FDC37E 7E83348E4FF5BBB4 4A6EE881C8FAD15E 9625C6B1DFD74DD2 461BBDAD8B46D48E D5597530989FA6F3 BB889E7D3C30022D 4466369F23960ECA C40B43E222694762 51BDF4A1DEB3E002 85BAD0C9429C4922 64CB166E601092D6 5F6ADECCD9CA3786 6BEACE30BD1311BF D8F349E5A4F23840 4D566EB3C7D97417 70A6D675BE115D05 D4504CEB810732C5 558E1E11604E9F83 5F43D70C165C452F 1F4EE9FCF7A55956 EFEBEF49B8B145A9 14935E6A94255ED0 5FF7D01463ACCDC4 7E8FDEF6930D4D87 EF6009FA66D26D4E 539296EEA4979C55 660E965ECBCF293C E003A3F9D44CBEF4 EA1B18EF70C62626 40FB4E8933FAA73F E644BB94CAC0EBFE DA2729A1322B1D34 2D101DC846E732F3 29F08865B7852D46 32C0988B1FF023B9 E01DA4FC5276AC21 9ECA546FE3555FDF 314FB73B4CFB773A C3E9B87967A10B3C
- Read the ciphertext. Strip whitespace: 3,856 hex characters = 1,928 bytes = 241 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201305220831(name+title). Key = MD5(password) =615428e5f70d72015069e14b16206459, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 60 GUIDs as hex (shown below).
Decrypted: GUID list
1 e092acf7-3253-48ad-bb99-6a737f39a50b 2 c2a22de2-051b-0351-8b9d-1257591cb270 3 718d7151-1020-616b-8c88-5f3a54f675e6 4 6db231d3-595e-1a46-9459-8d74c1690fb8 5 f4612f24-687c-23ca-af26-959804526609 6 fb3551a1-6962-386d-bef8-170bf8daefe2 7 27009704-04db-36fb-8671-13c85472e401 8 bb4ce0f2-db41-2edc-afcf-bf8e80b0a2dc 9 724c9d57-c9f7-3d05-804a-ec8f2133ff5d 10 2492fa90-7cb8-5cd6-8a13-2817190e1e40 11 3eeb6a21-f402-2699-b32d-e3151d096bea 12 0a071f06-235a-30e3-a124-626c1bfe3991 13 5dd74757-fd17-576c-8b56-bc6a2423735e 14 90f036e9-b4d8-5a94-952e-abe244dd8308 15 3b319d7f-8d38-595c-83e8-34a0262dc0cf 16 f1ec48a9-932d-4004-91a6-de171ff5a599 17 58b10a5b-7303-8077-a0b7-45ff49bb1194 18 a55190d8-9040-0c72-928f-7d22bee74d1d 19 9ac785ce-9299-43f0-b066-527fa5ca6886 20 59424020-3b62-7d42-981a-590ec47a0306 21 5b56fdee-9081-2356-b81f-96a6644c17ac 22 8f388284-aca8-0c4d-b034-20296f1bf03f 23 07cc0e04-aec1-2eaa-812b-0f6319e61a9a 24 6402ce84-9976-3e77-b595-86dde21181e1 25 283a845f-35ec-253d-949c-c0620523d24d 26 5c628a1e-3777-3bbf-a63d-d704e18edc44 27 4ac1ed3c-200c-79a3-9cd2-1f3a26f138ea 28 56b88934-9664-3eb7-9562-c8c06f5befeb 29 ca4c3a87-2731-476d-99b4-470a42368ca0 30 da237c30-57c8-0b5b-b4e6-0b40c6afa675 31 77c9d3ef-c63c-724b-9aa8-16687500fef0 32 0ee8a3e8-1cdf-41a3-9f05-8d460b25a763 33 da6240c6-0550-3584-a379-22605c957791 34 93ca6f3a-f7b4-2c06-8d7e-19930d9bfaeb 35 80b81327-18c3-7d6f-b865-8d8c85ba4450 36 111dd755-b722-17f0-9d5f-c5327dc2f772 37 ac18b046-c382-6f45-ab02-bf439d695e71 38 51418d17-22af-7307-8c66-e715a64edaad 39 792b9536-73c7-3b59-bdb8-b4579a94522e 40 3fbfa7da-bc41-66ab-8cb5-2bd406b5170b 41 c947ae95-87fa-3791-b5cc-901457110abe 42 6f4cea51-0ccf-8444-8d40-d5df05a58ed5 43 fdec94eb-629a-219b-86a2-690e0a6e9cfc 44 a18b9a34-1664-4ba5-b843-b3687536d15f 45 1b265d36-9af1-3b16-8c52-1e896b86ba61 46 ed9df52c-6dd6-6501-86f4-289380cd5892 47 aa6c0200-0700-5782-bb24-316412703c3b 48 2a9b962b-b142-41a0-9426-8e7194875a34 49 4855badd-40fb-4432-9f5e-f76f0fc05886 50 89bc7cd5-0749-1623-b0e0-914a3637beb2 51 3aad1841-8236-8876-bbb0-074256efe359 52 f3890e72-b302-1ba1-be20-682152160926 53 9c427d6a-32ee-8166-ae52-66e2e16d7ea8 54 02b03900-4aa7-5977-aa25-6ee6100ec2f9 55 9ce78406-52f1-5fc6-b2d1-faeaa2027ee3 56 ee96676d-4864-4bac-b8d8-d75917117224 57 206225b5-7759-67e6-bdc4-cd5f4a02225f 58 533445f5-5b3c-2fc4-9f1d-e969e9cf7c0a 59 afef1139-4209-735e-8e44-36c1f9d8ade0 60 78403369-c3f9-777d-981b-85f730c97132
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
406123323523555480472023237340743271673638243654418185546277. Exactly this sequence comes out ofnew Random(771).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 48 of Run 46 (seed 39,043,781):
new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 60; the post has N = 60 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31). - Conclusion. Filler. The content is fully explained by the two RNGs.