201305230643 1ev68n
explained decrypted filler
seed 522
From the post to its content
As posted (encrypted)
33E046ABED393F9C C318084654F6451D B86BADE91ADF0598 43BF87ED2DD2551F 44DC6ABBBCEF9E0C 0CDB7E37F1156799 8E325630C83F2313 DA9FB5165054AF0E E9E1079331E07B91 30AF8709ECFA169F 9057E9D885A25E6E C8B8E8E9DC4D7EE3 7272F5974AFEDEE7 18ED500293296809 B415E39DBD3700D8 C0CF8F362BB0ADCD 27961DFA8A34D757 3ADAF0F5C5D70BF5 B0E18A1951C2CC59 884E318921CA21F7 779B57466E50579E DC62071A9C7F72B5 574452A3209C6ABF 84DC1535470F2655 8294EC47DBC821B0 6E908841A3858CBD FD128B9AB8CFAC69 AF04335D2A72D18A 027441468B3ACF6E E29AEE469A705CCB 394058BACD6DACEC 9EBD3D590CE9AF07 34414032EF4F3E83 DF37D5A0C77CAF2A 27DA06E15DFD39FB D3CECBA1A835FA42 51F368278470F552 94FF3E10950E7843 AF6DBCF699C65A7F 0CB0DBF66D08DB0A C8A4540AE53157A7 5B6817A4C2FFBD12 ADA89A282D781B60 4567780ECCC55B38 7BA963A1E98B8E24 44EE77C5772CD965 B4123739B9E488DF D81BE3D03E6613DF 109428CE146D9B97 6BBF59B1C2A5B8A3 D85A7B3A82DBB755 C7F825C952774801 485276DD415F1BAE 71617234E37F8A19 D3E7C1D0C55DCA11 087A73EC9F13A4E9 119254721CAB89F8 143F4F50F310B63A FAFBBB4E320F4A13 9DB00549EBBE3549 190AEF5FEBE17E17 5B0ECCFBC574E300 B9FC8119F86D3BFB 5CD94D03B5486266 A95A22A8C7560CC4 4C18FAD4174D74F1 4217E7D085A49A0F 07AA0E55E028F469 F618FB88501D49F5 B02B673D6E505639 65431455F84D0721 B61482808B7217FC 873496758A9DCDD7 EA46CD893D7A47C8 5FE59FC495125931 C2CC139AC0BADD80 B9A5CEFB663BC396 D63305DFD275F190 C0102F0E1D0584EC 79BDC8A3F01C9798 29F9A03FD99A1E60 AACDEB8DEB469FA4 E234A8797F50EFEE AC693011898D2DCE E7229D344A5C0627 3D319A1449382D6A 58B34C36E9292D28 D0B464E4F89B9F45 098AD67A29C5D195 20FA179E158EB3CC CAF876D810274FF5 03B4B3B7A1351AE2 6F895FF58160C5BD 67A80293E371E024 092954107618136F 75AB30C200AA30A5 86FA8E6071E0A755 DF37F9A8FE93E6B4 6435C892F0ADFD26 BDA51517FE00FF39 4DA7CA2473578BA3 462A5F048DAACC86 E9A75C3C41C85E86 C3A4B97DE79F6713 1C7922413E31E587 01082C760AC287E1 EBC5FB0B490B4341 129C350CC293A17F 3815C95F168CE39C F127541339EDD091 E51C2E867BC6F160 FA31900D68C30A46 37654A7ED4E5BDAE B92E55ADF5520E0B B9BAAD3A4C1AC8F3 EC40626F30A90412 62E332A4B3634F4B B0AA1F1CBA72DED5 5FE724B6FDE68C26 12AF567AD83E04B1 F214441F26E98D2B 77441646D4A86122 458DAD0AC478FD86 511448A132F58022 CA82585FDCBAE242 70A8C1B583113F05 BDBB9EAA0FA8E1DA 918F2B131F6E6E41 C5324887F825875F 5794D1DD3031036F 23A072AFA6B2E5DD 8EB73F49EE40B988 E2F5EC858DAACEA1 FAB400929E9E75BE 4377E031FF8191B8 CC9287ECA58FA01B 991829E06B1B586A 78D7DDE3FB4CCD1B 25D43E354D773FDA 89BEA9243855BC50 AAC24C5FD77FFFA0 12F2F7BDB389A4E2 2E03FAFE811BE6B8 726F707B219ED1E5 A4AB7B1CC676D7FD 47513CD4FD6125D5 DE99FDFB0C947589 BDE56AC43001544A ED16081B8E50E2D6 49C7323DF3788B73 889B4701F5A1BF5F B2FCE24BAEB822E6 C9F08811538DE575 E00D8317821BAC64 522864B99BF1007A 0CF4F381DF198300 4E62F579B0599DC7 42153E3718D8F2B3 704E24B8FB4CB313 59DC3CBCC93F9A08 652F90F1F49E45CF 2A57D6B355652209 2AE0D135C6CC7ADD 36858550DB7660FC 289FD634086C53B6 E96C8CFA0A7D71B2 520072E4209C8E15 C02C999ACF02D811 99AFAD2B8CA0CE72 4773CA7C3599D3F6 F6BCD28549923E7E 124A17A115736514 88F3D87FD2F3B37D AF9334B0B7E57D98 84AF4AC422D9A347 9D5EE1E0C04A2B3A F56808CC9688F990 4490A551BF15F0D8 CA059B8ABDA38CB8 16EB12C0124274E9 48A97613582533EC 8CADCAA09D2AE732 A2E30FD9C37D2081 8257499C32EA302A 1DE753B4EFA13C87 3632ECEB3C2F9560 665F7C1AF3E092E3 90E7E735BDE33062 E3290F5F4AF6764F E5BC09F377E41856 C2F810782012A910 11387400CB248D7F 640888908F42BB9C
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201305230643(name+title). Key = MD5(password) =e3e9421c447bd058683c79170e64c3be, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 e6bb3337-137c-3250-9a86-f101c466d30a 2 17e7db0c-e18d-89b5-9ab1-cb3daf3ecfda 3 f1a5d466-369c-519f-be7b-788c2e73f03e 4 b888756d-b9da-8e3e-b559-22b76e06c724 5 cabcca43-29cc-727b-99f7-395166394aea 6 7ed03d23-1635-6744-a895-ae6a30b840a8 7 b0033add-7267-7fbd-bd41-b12c6272c91f 8 7dba84cc-133b-297c-a80e-64e86798e52e 9 c0c5c5c6-e625-5478-a524-00ab35edd3b5 10 effa24d0-f67a-6c26-aa7a-160cec165109 11 435459f0-dc94-75ec-b722-deb57e19b7a2 12 de69674a-cd08-059a-87cb-5a9dcc104adb 13 5b909740-aac2-4d33-8ef8-fb2b5bea3cac 14 899bab57-39fc-0bd1-accd-67c593f4516c 15 ab27fee5-0185-3260-a69c-bb8b148aa73d 16 e5b60376-b984-0805-87c6-f22b23b067b1 17 c40db32a-22b3-2e45-b5e6-ed176b2a34ae 18 353bd072-622b-55c3-9256-aabfc18eb7ae 19 8d5a87c5-29df-7076-8ecc-67f350b966f1 20 2ae4e6f4-f033-3c3a-943a-0ae9e9b26b55 21 d9dd4666-b089-10c9-a1d2-22f254df033e 22 54735824-4f3a-8383-88e8-82eb23371a9a 23 86055b47-9564-1119-870f-235fa1814c05 24 6f624678-880d-3844-81dc-ca16816a9c16 25 6050597f-fc3f-7e04-bcfd-c53838da3b3a 26 4023ef72-39f2-21a0-a98d-7fa6d7ba8404 27 a64a5df5-6b39-65bb-8a75-c80dc8019261 28 53e724d7-f99e-143c-9447-317cd47a9aef 29 0b98a628-c7b8-6cdf-b00a-2d3110dab7e9 30 aceeb425-bc8c-496a-ac98-da11a5b31394 31 45ff7ddb-e1c7-8a83-914b-2f408f901f6e 32 563f73c3-d8f6-8e8d-af0e-3e58de71662e 33 e6c2aeb9-ad95-11f1-9b2c-ac8eebcc54c7 34 fb85475e-22b0-0667-98c2-aa25534c5dbc 35 5f61cbd6-f53e-8760-b189-89bf066a1d57 36 df9079ba-88ea-3d3e-b13b-d2fe42e5001f 37 557df3fc-877b-3e92-af0d-1cbe116391d8 38 e506d31b-abe7-1c23-ac8f-4acfd1ab1e5b 39 9a1a9796-35d0-6d88-9d5d-8e28419689a9 40 2e633f06-67fd-312a-b8d5-f7c16953db08 41 309f79cb-0f12-2ea1-9f88-30847bc65cd7 42 f844774f-0a00-6acb-af15-dc85b2cbdbdb 43 829ba5a1-5035-7fc4-8bc0-3b80f0d85c61 44 ea645808-01e2-39b9-a840-3312f23d5959 45 79d7ff99-f681-19da-a361-bd824dc709b9 46 47a00e25-5ab3-467e-a43e-faf0245e8186 47 3f11729b-57fd-84ae-8ce4-d607afc37c1e 48 1af19ac8-9474-53e2-8405-f2b3a11b9fca
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
385876725670403025731813726164881083316326731485. Exactly this sequence comes out ofnew Random(522).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 51 of Run 46 (seed 39,043,781):
new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31). - Conclusion. Filler. The content is fully explained by the two RNGs.