201306211759 1gtlmc
explained decrypted filler
seed 563
From the post to its content
As posted (encrypted)
F1565D360A0157AB 391952C0CC3CEDD4 C6DF6AD1911E5267 4C5EF714D2107890 61027A8E9B1FBA3B D3D44F01597C100F 07ECA41DE7A37584 18E86E1EAE968CEB 431D1F2B3F0C4EB7 04E15096F8073186 D75F11081D9F6D89 315217021D93FE66 75D0ED8CF3427400 33D4585225A5E223 6BD7CACA1570A963 53E113B64556EB4D 4ADB265A9A80109B C69128DEA77A9F63 3AD2125060BC9044 3D344FEC2D141DFD AA6D7C825D364B8C 181842D3D6C48F7C 05DA9F2955BA2591 1E34736E3F164DEB 8D967540BDE53265 E2064BD2EA19E082 9C40C4FAE7B2BB41 F7A20442CA674FFB A9D573A11E76AD74 63A202DCB9AA0C42 2C3C46778DD93E21 640B3E6F10EA14A6 4F6872304186B863 2D9CC14AEF7AFBCE 6C59681F98D865AF 8CA4EEE0B85A740E 87F98EED353AAC8F 4179139AC8B2DC10 C23E7C9FD2B1B329 45D119B0336CD929 3AAC88519EF5BE27 DDF8BC439560B331 D780474739E15E2D 7259F711DD4A1611 7AAFC2387793CE6D 398C260F6137E8B8 C4030AE2D03F969A 41D1358488422579 275AA0FA735C4904 179AE84D0D261354 8A77B49A356FF978 6D77085CB56F8DC5 C4B4A13287CC911A 6CAB3AB13374511D 684FA76DA0754229 7B548F5C95F3B520 FB5BBEB3E4718CF7 76E125636D925BD8 8B0E8A0EE33F7CF6 55BDD35A8ADC9374 F06AFA3E874A4577 3D3931549ADEFCF0 DB0E70C4DC068DBC 140047D524A17DC6 DEFCA3C597A3AB14 94B356F4CC94AD80 91919B081B6C3D06 0DB42B3093A7625A 35F6F3139F0CDDB1 887CF94A47D0EE1A C1568CC5F6544D18 CB2BDAC6F2C30353 98B060A80BF3012B 3D7CA6835EC0ECB7 48DBF93B0B124982 209323979048A928 AF758DF6790FBF6E 28093FB418FE827D 6237CC85DB7AA27E 3B7C4BB68CF1E629 9FE75E141BC5452F 16EF13FCFDAA3FD5 7880DD7FDE6AA087 A395F11EF80AE74E 54F1A52227E408C9 62D924AA9D7FEE12 558DD4E9B2856501 5F93C1AF6C71C3A5 5FE9E0572E1F259F 136D6EDC2F712BA9 242AB0D63E05D44A 86DD75EE311311C0 0CF95B81E044D841 93F513526EFF8DAC 862123CDE1DFD546 E55D9A3F44920E71 068EA78A901FD66D 7876B6C518908BDA 52B919FF37295B9F DF31D830D819DA6E 101C3D86D2E2BBED 55F20BD0CC914A94 69D96A174A2B3826 D26347D5C981F64D 8F4A4811A7E4A37E A3CA0C4EB5BE7EA7 43BA5C42D80B8171 339EB0FDD28AA8A6 72C20E7DF687F59F DC8C794701EA6AE2 2E39EA6189092EF3 1A177AFE3FADE84E 8B89F1CD934DE1BD 4F0BEFAF0F4E5822 D5267A2C5183B288 C165B90F84DBE776 60F84D905FD2D89E B17D45CEA14C5AF8 647EC1850199E7F0 2E351CC8B13808C6 9A427F32F7D97A26 19BB54B37677B13F C58BDEAC3D7CE902 97068F603F158A5B 99F0BA683E3B8711 9DC7BF54313F4917 A0962D0C9759FCBB 7CB2C15C12283610 F59A52914F50FF31 E04FD009C379AF29 90F1E3024BF5E700 F3D623BF5D1F2004 E016AD9A00269515 42F6D63F52F859E8 E3C9DAF3AC17201B C3FD977A72D7522B D3AEF6EDD2C74E15 340BA33066BC70EF EF2352E4E6565F82 488643514B050154 58F0E8CE6D258B66 4AA376787D5E9B46 D759336BF1DD0BB5 A7B6F9EBFBBC74E3 38B159206BD6F960 7BE279CA14E23F05 F9700E13C90BA26E 7EDF456B660282A9 15107B68BF8A0E5E 20E4431EAE4D827F E8F8C08A89A38007 D7D31C03DC7D8E9D F8BBC7B0B4297D1B 562825E282B4C22C 639EC3DBAA97D498 2206006D18E53EA1 9652932002F54E0C C225C692A88A32E0 935F90B0AEEF9F4F B2DE1425A04F75EE 715C772E5F9163F5 B3F047860D134470 9DB561D200B1162E 4C2938785B8604DF 590405690E6402C6 9AF2C0448A346A10 7F4BBDAAE7DFBFC0 16794E2C3D29F963 4EB73675042B068A B608DBD4C1A78FD1 B9E41695CDDF00A3 812577C1D1BA7F6F 22C3534D3710C2F4 50CC2A109748CBF6 7BD437B2A2671EFF A1182D0D8CE401E5 A0D0E6F4D7D7375D
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201306211759(name+title). Key = MD5(password) =568e0612064f59f55969a9a7f9e1d9e4, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 c2d10b40-4ef2-77cc-967e-eaa9593cb5c4 2 e5897c79-8074-02c0-8849-61026dd1f334 3 b4ce6dff-e25e-2d55-b38f-462e8ef7d3e8 4 1ce49dfc-7f6e-61a1-8fd1-d716be78e61f 5 67a94dc5-491e-3006-b25f-99e9db084886 6 a8222a5d-aa70-53df-a26d-27d7ee901403 7 43daf706-bece-19f6-868d-81b119c40c12 8 8a6b43e0-8358-8542-a5fa-95fea4856e09 9 43c0ed8c-53b3-5fd4-a7ce-2f68c2bb17e2 10 d10fb4af-a70c-7028-b856-f985b49190d1 11 4ae965cb-e934-02f5-b456-11145de9a307 12 900a1f7f-8f89-0d0d-ac34-6b786fee9acc 13 f4d1b91e-2558-6f4c-a462-9352ea5803fe 14 2c715140-c4d9-38fb-ac32-7494de242316 15 2d1c8a41-22ad-078e-b0cd-3f88404837be 16 6b6fcb34-80a0-56e1-b90b-eb4199f14189 17 a9024794-89aa-4be2-8646-92aa619e7c42 18 c1b00074-4023-0a17-9c67-9a89cdf0813a 19 333f8875-c254-8577-b052-8783fa6d88bf 20 c4aef185-baba-2612-93f6-8504a2d8d1ef 21 d11b2709-6d8c-5a43-a8e9-df1f464076e7 22 e883ba98-b47c-845c-b816-6015bde27652 23 05cf0c93-6752-1e3d-8d6e-fa51ed1f8564 24 f5a2239e-6d0e-677f-a511-be00f1dcfe97 25 31b303b7-12dd-7243-89e6-12a7bd48a256 26 0ab36a10-b4b2-59bf-a644-376f7a9f3c4e 27 4f14053a-1e8f-8323-b075-e4e08bdf6c55 28 cfec55da-4f1f-4937-b480-43e2785c69b7 29 c6d7b604-5ffc-0cfd-b223-72113b0cc40e 30 e8fc1f1c-8b04-4b90-ad49-2586302b3e9d 31 48df37fe-f042-0b3d-aa31-e8fe84d64088 32 35412481-c521-67db-99e8-90b313dabfbe 33 cd948f1f-a9cf-6ca1-a9a9-e7b759ecd828 34 efdf48ca-086e-0c6e-9b37-f334b9e5b83f 35 23f2f61e-af4a-2027-82f5-8834c4c35a37 36 3f727235-de97-1f39-bccb-78c1b069ba0c 37 bab4fde6-d70a-39c4-a126-356966a84fd0 38 8373a9c7-a022-0135-b58c-8649a439369a 39 601cd5d2-0b60-662c-9225-12af4a598ea9 40 c523194e-54f6-52ab-8406-73f7ed3ef3ae 41 ef9c6024-f09c-6a3b-baf9-d9628b4ee919 42 9b734a42-5d0d-1510-a644-e3072289a8b7 43 85d38d5e-a5c5-2812-8340-2ad403e23492 44 20a0f229-5bd3-838e-ab44-d3751678b5ff
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
70263518570063054082581675840406602130656128. Exactly this sequence comes out ofnew Random(563).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 5 of Run 48 (seed 387,048,281):
new Random(387048281), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-06-12 10:29–10:29). - Conclusion. Filler. The content is fully explained by the two RNGs.