201307011759 1hge1l
explained decrypted filler
seed 553
From the post to its content
As posted (encrypted)
CA384318EA0E25FE 0D8773A7E7EE0DC3 CA4A1C07D6E198F6 B0DB0A40F0DAB306 9F4E810E23E6C9A5 850E30E27C332C7B 384E2F26A8647462 3B37691E27DFB449 653772450003A62E C50ECB3AD4EB9DF9 010364BE89ED7091 4840F22771704B5A D19DE9EB55F12722 477D9C09D3B0D985 648336ADB1511AD8 4BDD592B53ED38DD 800A891722966819 E86A99C681430D0A F57C2E1ABE1BC158 61704A29E7C21282 A60AC9EA18DE67F4 A743EEDD52FD799C 38ADAE3C5F8001BB DA8C4D2E63FC6725 C0ED80BA4748BFB1 F72F4B5F4055601C E72C6C90E996FF5E 51A862F408B3782D 526AD8B307763B0A DC3FFE69C4E5FB75 31B466058BBC2EC7 30F89684C27CF9BE 3A8BF8681040591A 833FC72A49BCA68C 7F63D7758C11E2DC 836E1F553A4FB379 BB72E7D9E26105AA 948D44C5BED2A306 905B885FC4045552 53229B5DCEF9B77D 2BB7BD3A784CEB12 DC47F7B4A5EB7FC6 82E61DDF7F961F5C FB1F9492F5864A5A FF0274288ADEC1A7 A82C052B9FFD2E37 F02782E1922AE316 DF7CB1C791681404 D3211BCFA5C51CBB 4C4D2EC1718F68E0 8339121C3A5E0464 9446BC809F11D525 1CB4768B7501D505 2461D1C8DB7F61D8 CFF06AC7F30C4FE5 6333155F596708EC 62E468F656D34939 EC22630623E93DFF 511BDE1DD5AB0DE9 FD5989AE8EB83A1A 0C0B8F0D5816879F E26A6A2B89ADB5C2 EEB77B78E645857F 4229B8D0F04827DE 8E4B4EE40E4E1FDF 1344DE7DB4E231D7 30967FA50A02716C E70D2BA43DA942CD 09074FC1F881E392 5687FFFE73610604 A3D4DA2B569D021A A5644DB3BC38F1BE 661BCC8355C0FF08 17EC4223D5384304 8C2A14E36318544B 824B6B7B0C3DF72B 727FB33D9616D6CA 18C4B71085322E90 D9E5D9E33B99C4B9 198A2DC1BC4A1E24 46CF8ED33B335DE7 E8AC4FB9D310D689 A85F5ECFBE761D8C 41B9B76CF9B3587B 3268725199C1E314 99BF98366CF2F950 AD91702FDB6E5772 312F4E4D3892EDB5 09807C9ECA47A291 E597F6312BF25911 1A0DA75B60EE17D2 78D54FFADB0EC758 E0A70D3C1EB1FF26 34DE8193082BD861 67A9D38FC8CB314C 3548E67594D2E592 A82061EDBF2FF135 69072E9136CFF93A 8DAA1E4DF45FFE6D 90BA1115A803B451 18492DC7D303E50B E2314F39815E269B 63E2C2130D515A8C 5567ED99986A3940 954FA8C21E527AC9 675EA7FE50B7671A AF5CC39EABBF1960 7655CB46338FA879 96C1087393284AF2 E31D0E02D24C6EE6 2A9037F0F094F0CC 1A5B214E64D96906 78D8CA292F962E98 E8CB9378C18FBDE8 13DA9F97F26F669A 81E9238403F3016B C4158F7CF57E002A AEE9D58786BD9D18 A8D16CF95EC7A05D 06B9B199FBBE24A5 8BE5D93AFD462891 3F2D6F9FDFF28ABE 8221FF47D27CC3B4 A03EB67F0CE4A9D8 DCB584892118159E EAA85C5433775D47 B30B7D873C18AF41 0C8F30F30C2941A2 E272578AFD39CC05 CEB220EE64939661 78861F780BFDD6D7 5BA3DE5432D44994 1C87124A09DAFD5B C468C7BDBAFD557D A60CC4F05767A68D 53C478F7ACDAC289 07EEC66264B9208F B095EB8C084C2738 9D29A677CE2AF928 1B640BC4F109396A 707516E429285B3D 8E2330DBC5CF0DFF 7CD09A2CB5983D7B FF9D64851179BE77 69373A4CC53072AF 00852A1E56D125EF BF7F1F3291CFB82E 981B2C610F46C372 3743BAF171502AF6 F168371C646F4E48 A4229D6161A18C2E 7F72580AE7A8C4A3 FDD15910EA5A362E D805293C6380D810 20F8EAB14B01CE60 C6DC20DD9209071F 6534921154EEDB8F DCB632AC41E21583 31784B5415722400 FEBA54B75B192299 EDD37DC4ECF2D9D3 0B99159ED6BA6D91 59F92D2B7046F48F 90A796D76080C95A D8A39E368431B929 30576B540BE9DFD2 F5F9FF501209D702 FBB761EDEB30C902 27F835A59BA56964 7839F3EFE2FD5AB0 B7FE3C4C5336F997 360D6DA31B5817C9 BDEBFCC900588BDD 8C228121AC1E46D5 E1B101EBD9C0637E 771C687E108A92C4 AACDE769AFDBC7E9
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201307011759(name+title). Key = MD5(password) =6aec90c81c2bc5659c3ffa2e35d905f7, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 d3faeec9-77f1-5567-a905-15804af06a05 2 d6cbc94e-35a9-0f79-9f19-8b45b37ae1e9 3 b23277ba-8596-2913-ba8f-cb2dae51373c 4 4b3e9475-560f-52c9-a855-9a25ceeb178a 5 307cc8f9-08c4-722f-bbf1-96d19270e1b9 6 7c62a8c6-add0-754c-aa03-6d13639fd3aa 7 3fe34cbd-8cca-6535-b5f2-b504e03a6b47 8 c7569ab5-5871-7702-8ed2-877e946089a2 9 b6e55dd6-6d18-3d8a-8693-882faa5f67f9 10 9401c356-4ec9-1d54-a9bc-39ee82dce0d1 11 abef41cd-923e-6b8c-bf19-56ff444504e6 12 0945f778-a2bf-133e-ab33-935679dddc4c 13 e16f217c-5b5d-7c77-8987-cb4d5e4339a0 14 fbd33270-f11d-12fc-bbd5-1c7cdf2536d7 15 9245a718-c6b2-0904-a0b3-34992f98cf72 16 f51db38b-109f-3ecb-b373-787fcc6885b3 17 03a460bb-75ed-2fce-a5f0-d19315022010 18 cf261c38-3d12-76aa-ac07-7239b6e81b64 19 3583d3d4-b5da-597f-bc87-3209fbf0e607 20 8a2b92b7-5bac-307a-9fa1-1d330dc5dfcd 21 d18759e3-9139-2550-823f-3ec9af709bf5 22 68e09148-3309-42e9-9112-5e5e3c4680a1 23 56321aff-fc5c-4aec-af77-1e0b1f512bb7 24 7c192341-659e-1bde-bf44-d71f8bb8ce55 25 8a1e60b3-9fe5-8e47-9cdf-32ae416d0456 26 38ac52ff-a109-10ec-847c-b31ee5f4ba2b 27 5d3277b6-b835-39d5-a7b5-7864cfc890cd 28 b59cb1ca-b3c1-2162-9792-c7a00db4c735 29 65dcb37f-46b2-2950-8150-f6bd55b60956 30 638838c5-6211-4f72-8447-3ada2ef8043f 31 c0424516-b316-3ae4-acae-c12f2b48d77e 32 1c5ee603-87c1-1e8f-8f80-b617982eb792 33 b523b028-ffe6-6f9e-a0b1-15b06cf7e248 34 bc34f961-5a65-7d47-b4e5-1a68e7e326e8 35 5789e8f0-8045-6d01-97ad-57b91accb2b2 36 9d3866d0-15d2-60b7-b008-361be7710af3 37 2737b7d5-c521-0bc0-a789-f70db372cc9f 38 130535e2-7339-2ea7-948b-ad505db3d325 39 24efb227-c361-07ea-96f3-5c6655a8b77e 40 f24da6eb-d8f8-854a-8eb4-8761a029c8cf 41 a0f97e59-a5e6-0d75-be65-1a0b598bc09d 42 e4325e76-b818-3f9c-876e-1efff6e759e6 43 a621f562-9d58-44d3-ab3a-44b210d82aa1 44 a590a5b0-476d-74bc-a600-a391c788ad13
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
50257767316171032753244181322431676602080347. Exactly this sequence comes out ofnew Random(553).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 15 of Run 48 (seed 387,048,281):
new Random(387048281), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-06-12 10:29–10:29). - Conclusion. Filler. The content is fully explained by the two RNGs.