201305250307 1ezkhe
explained decrypted filler
seed 976
From the post to its content
As posted (encrypted)
C93404A69C2AB23A 3C8108FE3CB4D7E0 D761207D17781D87 06AB1E7EEEBBE017 821B2D6FFFCE37DB 91D0898A4CA294FE D91A8B444006A88D 70179B6F5A001AFC 217BA4BC1361530E 4F2278E5D07E29CC 15D67FD8B9CEEB99 C0DBFBA8ECC5DEAF F7614A458E9CAE94 285FEC9ACF2EE67C 930CA2039B8C048C 0FBF5E82CDA84947 5DF595FFB11D0A47 6195F1B73E46CEE0 F7C4D704E19000C4 5D5954F821DA3A21 6254B0323FD23F49 50851E1EDE2E2586 D5F85DBB194D0669 8157C7BD138DEAAE AE5FF8CEE4B13C14 610D3B0EF2562736 BEB39D9FE8DB0B4E 7EB27053E762D741 3F382B31BBEF9D16 5369164709840C28 49BBD1FBBE2E2991 4162B2F76236EC31 EC9481898639DBC1 37D61BF00DE14BBD 260EFCEE46ED705C B1AB2087F707DE16 2377CF2B68C82F24 1547B8780B1F99E8 27733B83D82C2308 63B3324AEF81EA57 55817AB699261292 02FC5EB791B0ECA6 596252BFB2B62457 4396324C0065108C 4391F22C71219E54 43DF1BAB31A0571F 603DDB8124086F9B 14668A749ED3F893 00B27BB4B9928E33 9A2B6B45C43DFDA7 9C3FC0D540FDF1D6 14F785DC0FC49E5B BEC44F0FD9467C6E 73DFDFE142BD886E D5A6441467E29CBB 836DE3D393EAE693 F0E100B44600DAC8 3A7A1CD5EF1EB36A 443D6C73D7F5A3E8 4175538275DDD32B C7F13EEEBA5D06FA BC169DA2B3A0EC41 93586F54EA4BBC88 B07A006BF114A78A 6F5CD0D5DC0E788E 1186F8B4379D075F 9FEA1906C7C50787 827D0F73F80B6B80 C9D2128BA86B1A22 23F8CA3B7ECB0429 147C6608DA0ACC6E C3C43881620468A5 6D788EC91C112F9C 2E9CC744194210AB 437926CDA3FCC2A0 20894917F6AA0F3A 695D161B0751063C 16CB9C7CDDA0C50F 144FD9BF421E7F37 D4CF77EE689ADE48 93FA9552642D3734 21ADDC698C57168D F467885BE5D96FC6 0902F120474B22CD 9EAE120404BB4E94 48B171188EA82324 9C3F78157E0A731E 2A9220A7C43D3C44 E64BDCA47FFDBCEC F17C25C11DC1A573 AA47C7F2042C37FA 3517338A9789D27F DC09F57834E0DF6D B5A06739FB237816 B90114ADB84FB72B 3AB36F8F0497D47D BEB302FF73E1EB10 DC1CC76EBA154353 10D881359001D5E7 746664F6BB7484F6 FE0E7332F10CB59B FD8D305833F3BADE 5B8DAB11D70CA379 A9B433A647E6FEDF 976320B0652FD59F 55063D167005F0E7 E9DE1C2D7D558FB3 D2717EEB52546DBD C444333508CE1481 6840FBAE9AB222D3 6A518CCCD86B70E1 E313CC860E76EB09 2BCBE24440F8B1F9 F14A8618E99DE55C 34CE724A71F6F63D F03D997E2D13E72C F696034E52976CD6 5FAE29EFE62B7FFD B9762DF82AD6798C 2593702F886227E8 E38F302FC15676DF 844098BBC22A00E2 E631DABF829C5100 153349568FA7FC3E 29B96D851A501DB5 1FFB9664C7F6D378 BE5E4453930A269C 9E226BBC4890278E 796F60BB0E7E03D2 1D11FD71EF330ABD D72B84CDCD266811 A9EA798CFEF725C8 BD95BA2D40D18EEF 85843AC97DFDBBC4 9994A30008BE7E8F 6221202025EDC8AA 542D36EDBE03B9C1 5BE55E47DE5EF24B C8FBB6135B65DF28 EA943BB0D884E068 45E6F64493E5D206 08D9172A0C34AC0E 4E95C92AC77A8C48 886D54C86987CBB6 31E7D624B0B12D81 1A6DDF4D1636093B 494356D1D51DBBAD 8AD4EA2C4A562872 CCCCCBD589253EAA AEB28D672CF4E0E4 C30713329A422C13 67606FAD4039A25E A006AB5CD3DF37B0 819D93B9D5EA2FBC 0311D6ED7F50DB83 CD04EA155DCE22DE 29AAB826D3EA2EB5 C620FF9C419F745E 72D98F060A84298E E2B0F6B28080B468 130D30D13CE50E6D 192B714F5362690B 967D817A9B9A45F4 9CBDA01E7731061B 1CCA69DB10200366 855DC41B32D5230A 43B9F0FE95450DF4 7D5FB9B4B0508CCE A5B210CD3EAB6DA8 3A779DD01D3C0CBD 6D382683046BD952 E217FA79B1011DEF A39702CB4D22143C EAD23F11576676D2 A87B30FC02AF0687 34558E7116D04B37 F27539AE252694A8 3030E09958DE6CDF 0E50B3D06C41EDC0 253A00B6A7E23AE3 E432CB34C391D2D9 0975324129E3E230 D05F1F5EB29B9F11 9A5283FF2EFA7853 450CDD4E4F7D8D36 6E11B602103E5718 0A18A96BB0EC5600 E2A0DA45EA787AA1 E57166D63367D3F8 A5AC36B68AC63799 74DFC88357F385CC 63DF271283D69756 DB6C2F791DBB4BE4 5AFF134CB52DD288 4DDC7A9FD9EE04E4 9A1AC68EDC3BCBDE 4A298938B17F8949 5CCF6E93BF382B6B B184578AA08291BC 123066A849637357 C2D24AEA04DCB5E2 061BD88A43D97C52 7C6A5B5AB9191749 ACC46F3EF1DD46E9 C5DBC1F5D679055B 3275757C4903AB5A E469A9AB5658FC92 8CF271ECDE0CDF05 15C7E35062954E0C 0607F8519E13134B C590822CCEFAB964 93043605D7CED3C5 02B416463CC1BDCB 2C933E8DA23C8528 1645ACBA87939C7B 933EE4C7DB6968CC 317F5AD69D79D65B EFD6A5A30C448A12 9A584FD388E4CD5B D37EBA48728887A0 F6A83AC870329B52 69FFAD7DB7046761 B6F47123F37CBAA8 0E8AC0F94E30BA1E E125C68D0BF12F34
- Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201305250307(name+title). Key = MD5(password) =8343af4af23f9f1bf048fa0c3405c59d, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).
Decrypted: GUID list
1 c9b63a37-956f-5da9-93e6-d99aea970793 2 5bd0d8aa-31cc-15c5-8590-3a56bc5228a7 3 8f7006a2-9181-8eb8-87c7-e7150050475a 4 d6b77f1a-4359-72d8-ba6b-d79a664d2825 5 8f962192-5cc0-7f8a-b4c2-450f48337eb2 6 d3ce77c3-6b0b-4ea8-8b2c-28396e554e34 7 dd655418-cb0a-1d71-a4cc-90d7f451ba1f 8 74f85ce1-9688-03c9-b3c4-83b252a227b7 9 ab42d9f8-cb9c-62a5-a3bd-d92447054ca2 10 73cdeab5-55ad-1e3a-8503-09958885fa2f 11 24157b39-e67f-354d-8d50-e3c5e4b267d5 12 8a2475d6-2638-4559-952e-9a42a188b8b0 13 9c6942a3-23d3-5192-9426-a7ca9bc1ce0d 14 953475ae-0e65-2d43-a08c-ff5d4cf281e5 15 ebb2b815-4362-11f6-be51-6c72b38fd6df 16 f71a4532-f488-57ce-a00b-64b3107fdd12 17 eea945d6-ef11-1dc3-9dd1-2ba1281a8a9e 18 0e227d74-fd24-1e5d-a484-5bef512f0ded 19 03631701-fd7d-0805-b5c6-3fab056dd867 20 d7dce5bd-9060-2377-870c-45b02e83e09d 21 9ddb4a81-e264-4906-8ab7-f29081928118 22 fee6ebd8-aa29-2d89-a39c-83e44149689a 23 ca0dac6e-f464-8adc-b8c2-38c3af3285e7 24 1dce5dc5-6341-89f8-8a17-2eb75629b8c9 25 e9ed95a8-ca23-3393-a06f-78d30427556b 26 9326cbea-b334-2eb5-85bd-79326fe06e5d 27 1592e8db-777a-07ce-9ccf-fa19751639fb 28 4d40185a-c254-3595-9e23-b06cc0980607 29 3f2d7547-f872-1fdf-ad6d-f4dd1036c083 30 b98b9797-4dab-1de5-a112-809e4a662413 31 65238b7c-a308-4c2d-a8f2-9239ef3ccb2f 32 fc5320d6-6f43-40cc-a809-6dcbd15ae2eb 33 35dab630-0d6e-6001-8f2c-ccc614b42fb0 34 6d94f3bb-ed4a-40bf-8afb-1b0e9d2e8c40 35 55d470b1-b0d2-3765-b6f9-9cb2e5f9731b 36 3d39f35e-8d3c-072e-b181-ef4d16ccb539 37 de808854-f6ee-4ed6-9ef4-25d7c805a1d5 38 0174a524-e975-448c-9a7f-e9bfd6888756 39 992d9958-50d8-4a56-a0e3-288b8b9e98d0 40 910fac51-d08c-1b1c-b988-aa00143f1f5e 41 32cdcb7b-0267-6ca4-84ac-c6d2ba8ba32b 42 ee7d194e-94f3-7b42-bad5-056eee3e92df 43 1aea0ab4-8be8-4227-9e5f-bb43e8c5dcb1 44 4839ad81-2b42-6a6c-b1ea-a06ef07f7388 45 38a02038-d073-409b-87e8-1f8008e1cc8d 46 3e6ad16a-377d-2400-a0e6-44a2922d0bca 47 13fe5dbb-a630-3891-b635-ecd0533d7ac9 48 31a21356-5855-6585-8583-f61753d6c81c 49 46c9cff2-3f82-431b-9879-2c5671f31afd 50 c03b774d-b837-13ec-b380-58539aea2786 51 f43951b2-1054-7a8a-b972-69ce3a34c0d4 52 c498fea0-0218-5bd0-8c7b-e9f71b2efe59 53 6f0ba2c1-9d75-807a-871a-2746db3f8240 54 a7d6d86f-0840-2c48-8cb2-69f32b910481 55 f8bf60dc-bed3-59b4-8c53-b708eb8d3a68 56 16458602-b3b0-2f44-9f2e-8b70626bba77
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
51877410613452151102428832031144643044416746423641758252. Exactly this sequence comes out ofnew Random(976).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 57 of Run 46 (seed 39,043,781):
new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31). - Conclusion. Filler. The content is fully explained by the two RNGs.