201306062059 1ftybj
explained decrypted filler
seed 566
From the post to its content
As posted (encrypted)
05B95D1913F313BA 82936AD019292526 86FA54F8CF0ADA65 F682DBB9994EB8AE BAAFFFBDF779D42F 743700C0C0BAA365 3FF704CCAA5D37BC 5C8ED41F6A9391AC 51347EF507B3CF80 47F6C7F22FD5450C 708341F24D3B000F 0A07D45A5E115A7E FC495EBF0947E047 D6245A13012E3735 3874312556E54210 A8019C967BABF411 1AE2EB105A60A39A 2239F5A1FA9CF274 D61B541EDACF3560 E7AD50EC1F8A64A9 9E74FA2B72AF2CBD 43EAD6BEA031B46F F8CA9DCB07815176 6721B4F4C3FC22FE 352F266F5C2FC097 72889248BC3A51D5 5EF967F1A8F1C968 EA2986AD3297471F B7783C245D39457D DED5E21C2A0D987F CADBF587898710EA 726C2A0B9D0D71F3 468D239236F39B6D A72E55FC4D63F28B 56524CC9D6F3731F 1E81CFE61F323373 1AFDCFF6F2BC3F5C 53670B6C7E0AAA72 070FF283374F9D33 0E5492BB0B1AD720 45788E700AE2AECF D9DC5E76414BDB30 DD14D1CA7D7F42D3 AF8644FC88270227 6A3268054E0F7983 8581DC2DB9C859F6 74C0EB526C0EB3C0 88F0D8E70327F40F A767C51F45A48D5C 66CD6FBF9A512F9E C0AC6915D64256D0 C9B27B4F30184133 80A2C2E18CCD8A17 972767933FF5D5A4 3127E8AA84610D6E 805525FA3B41016F F8E0413A8B3A3F03 E366A006B300F1A3 7F52421D80E41D76 2AB1B317E87CFADC 548F3A5598B9505A 73E18E87EDB6AA90 AB30C08489B46863 70C241C2F26BF5C4 942FC5342B760C20 4BEE4F9749A023E0 7D5D65178571EEA6 C679CAD8AC9BDC44 1656D50EF70F45EF 262EE4C22CBA4891 CF296CB85B043F37 45256571FE527D98 0A815CF997701444 ABF73925442F6F74 97AB7920D0744E81 D04BFE855DE4444A BA01716931C00A96 C84BC9553539AD21 A2841C4B1F8D8ACB A7A1531B2C7CF18D AFD751F739BD8CCA 328977D3F9754F9D 21354C5AA20B4F0E 607C267A702F1B70 2507382EE3571CFF A7D8D1C9B9E051F6 D45D31B569EEB61A 188AA16ECD5B2CB4 04AD5285BC178F58 9B2F28F0835E2E6B 4417319D0EE8FBE8 39DDB9009561912C 4C8F7A922F36D3DA 7E620EC0E90E5B5A 0A4DE47C637F9AAF 36760960BF7B7037 EA7E23AC91BD6238 5B922841733DC317 D9F6E100F27316A7 76CB9A9BF9CD3427 79FBF8610CD82D56 054E86A8FC2BFC0D 7C6CB6056B9B33AC 4A01E06F9D27E260 B0AA79294DB532DD 707D0BACBE9CDC91 A669EAB430F3878D A2767EF3F542AEBE A96114731E85B44C 52B0E4489AF689A9 70FC0545664763F8 195EC985B4093D4F 510110AD3512A3D2 793950D2B3773CBE 50BADFE6C681E43D 46EDD858595B2F40 9AF89AC0D515E995 9DD08BA65B46531C 04EDBD4804137927 E85095D53A918C59 AD7F2B9B87B4D57E CAB2DC06F114BAC5 372F09EC6B9EC5DF A35040D9F4B6C76C FCBF3B06B72CF3EE FE19D20B15499608 6232A11FB14634C9 034CA35F7CD38770 5377844527691EF1 18680EDFD31FBDA2 7A4F41BA7013ABE7 A5C6F0CF259AFCCB 1317674EA897B411 2B4EFF0EF706CFF4 FE6AC621700D2DA2 C95873A01ACD7918 6FD4C324A7BE99C6 FBB26E54A4F08807 8F883F1B5C20056B 417FA48329AE39E3 B1ED6FF506E1B16D 4377657580551686 A768B5AFC4D670BB 2C0253DFCB0C41DF 7BE9400AC6F5A153 6F2C27857859EC4C 5DF59DCECDF008A6 AE787B04F2EDBEF4 0796DA7B4AEAC224 74B9DA0382945B7F 11E21D3364775288 96057DE5B2C25BD9 5EF14C449BD104AF 12C9D649B6A2B3DA 7EDAB2004C549F32 298FD01DD511DDB8 F19DC9B85FDB74FB 24D50952AF6B6B66 C4E0828CB0715C3D 56C1D4838086024C D68583418F490C34 3B718E1D71C5FF90 3905E4A6964C73FA 8387FFDDD88F7AA1 9A2301D272212271 E49B43FAD9897EA6 C1BBC57073A4FEFA 954A3D89B269EC06 E6D5A3E5674B719C 6844616A64164CA1 5A810A693D5616DE 5074854D646D1584 48D50E9649FCFA35 D577955CD893B4D5 BC6B8C23F9B0275B 99F8C6C6C3B7488D C1B4CF946D70200B
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201306062059(name+title). Key = MD5(password) =22b5d5afbd8e186ef69d2427510706c8, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 408da092-2f16-31a1-8ba9-a1cb56050c00 2 dcc578d4-01e6-8613-89bd-14f2cbdfc805 3 3f32b320-d721-33c2-99dd-403eea24384f 4 70c7169d-63e0-32f7-ab93-c7ae2db7b4ec 5 4291563f-51a3-6f32-a9e5-817c9bb12e6c 6 9568f638-3c09-1db1-bb1b-97bc8d44165b 7 90d13841-ee58-4993-9caa-c6e9abad1a16 8 96914c80-44a5-3cca-a00a-7d6e8cdf2f02 9 cd30fef6-db16-00c8-9a22-3f3f7d61abfc 10 53cc1c42-edec-84b5-b3cd-b9f69b31487d 11 02f062dd-47fa-2dde-95e9-46d41165d863 12 04601871-2b3a-3ca0-8fed-2c7dc5c6188e 13 7bc8e191-c3eb-6d23-a7d2-1a8165a16bb5 14 cd987f78-377a-8e14-928d-6c2ba21fd28f 15 bd5b6695-b62d-1401-af0f-62a93430d87d 16 b882e71c-7619-4f6b-9593-ddf2861a45b0 17 871bacab-8cae-7371-8e7b-87a3c55ef54b 18 c14f6a6a-3277-881d-8777-c502f1e6ee26 19 5030d5f9-6bdc-8559-9a0e-d259eac76441 20 affb96c8-37a3-4465-a4bb-739afd1f1b36 21 aaa204a8-890d-05f4-9583-fab2017d9a09 22 a49b366d-c729-6a3a-99ab-1f6b96413e1c 23 c0100e46-a553-59b0-bc14-aa2003017b22 24 22af8473-c1b6-6e2d-850a-707efbaec400 25 4507f958-4cda-1613-b176-53b1b634172e 26 b15fb22a-a1e4-520f-a2ba-b17c7c91da7d 27 da45dbc8-4fbb-591e-b1a3-e2728d8c9091 28 69d4830b-a5d9-3fca-bde1-8089ad2b0338 29 b9e4ed75-8231-7a3b-94a5-ac6cd4fbaa14 30 e803781c-bfa6-8b73-9e2b-be908047a2e2 31 7781f93d-c33b-121b-be4d-812fa6237aae 32 afac5611-d3a2-4869-aa3b-be789bd3b12d 33 37777a59-51f0-8ea1-95f2-45a1ca7cda9a 34 62efb83d-3b91-14d6-83c8-5e700645ad56 35 22670408-af5c-289b-a058-a8fa22092817 36 8515351c-532e-2df6-bc5d-b161d17a6707 37 690be507-dd02-71ee-be46-d682e5ec43e7 38 c11a58bd-89e2-0727-8af8-34edc5095991 39 0cd47755-402a-25ac-b087-005725986e1e 40 2270eb0e-5709-3d87-aa53-3f9244653fc3 41 c70c88ae-34d2-0706-9d64-3d39b43a52fd 42 8cd0c685-38d7-8b46-a99f-293de3e7ddaf 43 b8137ea7-c2bc-8ebb-b44e-5a5f4d1305d4 44 6337f337-9fe9-2551-888a-28b7cce72107
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
38336143082368147884065615537814812270230882. Exactly this sequence comes out ofnew Random(566).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 5 of Run 47 (seed 1,776,839,421):
new Random(1776839421), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-14 23:26–11:26). - Conclusion. Filler. The content is fully explained by the two RNGs.