201307200925 1io1l2
explained decrypted filler
seed 893
From the post to its content
As posted (encrypted)
88DB722E1B8089E6 45D626829F8FCEC8 0A85EA2131096741 26206228D86AE80C FE3D1BC8EB70AEAA E3C3A6668359CB56 ED8D50B1A6795B1C 61233A1597257F93 A9CAD542851EF4E6 341371BBBB2E0086 26CC9ABA83F1E683 62DD595C88A8E821 CFBC57E968DA9AAD 1B4110AE8EDAD29B 6A50A784271B951C E92BF44C993708B3 0FEF5D1E5B9DAAFB DA608C5B1D1CDBE4 87221CE93BC9E798 C562F79784D515A9 7FAA5164333D10B1 4C61BA42FE735E07 187CD257BBAAE83C B38DB66FCD22F232 F0CBC1AE6331F4BA B8B798F8401E0611 FAF4907B88213805 76D6478467028723 8F81CAD2239AAB8D 017738A01C844D9F 5D13D7EDCC6983CF 16DEF005825A2A40 590A619F4C3EF3BB 921B9C28AD595EAD 535F6DFC516D257B EFFB3F1B7465C732 FF349769E2BCB188 32DA657E09EAE982 671D15AF56D5FED5 08547907484F94F2 236B82DFCB386392 BE717F084D6EEE50 2110B9BBD637CB55 F3B34376691432C4 AD070CC11882E60E AC2C0AEC0067ABA2 DCBF90EFD72C5D73 ABA7739A352056C8 337066A8050D9F7B 8623A542BE753676 F7E860C1A680024A 79588672373A50FF 69B7C97C7D93CD0C 92C73C2C225F49E6 24FE3AB3C4B07A7D B06AFB62F735BF8F 2EE89948C45940F2 82E7BCE7CA819C97 A12943F331D487C4 ABCA5B15C684FF97 CC3D5CDA29957143 FD5BE9DE10E75765 977F9B14FCF2E4E5 292231517394A7D9 FD8D546D0B47FC1F 338C7A16A1EFADDC 794BBEAF170DD5E1 90427A075A03145E 8417CE6469407078 330C965BCCE01ABC 7E36484B9E404DFD C00958EC48C776BB B488919B6FAACE42 480E3DF1539141D1 857ADE5C4BD27000 7BD2B5AA0ECB143D 0F22563A807209A6 3C295FFA98B1672D 8874696F6D791C04 F0B3BD2B6EAB2237 B0154C400A24A9E5 E29BB3D321445109 73A871047A74D2C5 12BBE350F0585777 60D45D7BFE504BC7 BB41EE39938E4FD7 103D3BAA02380A94 AAAF66512B3CB205 E57D253058912D0B 68336E22BF93FB0E 4DFFAD7475303032 27310B887DE69A86 AD20891988B81044 9CE9854F7503C84C B2B1AF645045A20B 52D00D21FD467481 30F64BA366CB7FE2 E9609C83C988F0A2 52C6FDA4D2D69ADA 5EDB5AA4569E2DF8 0EE38456046A7F43 8A7FF20AA275487E 3B7B1AD766B466BA AE0393CED75BE8D9 F6DB4B3073BEFFEB 62AAEC05B78C0A39 9322DA089EBC86B5 1124A2F64A932CF3 0FBCB769D1A5CCB4 FB64899211C1269C 3B876B26B0C0C7AA AD223E9B016DB9B8 C5CF75295BF75CEC C79588149D1AE604 B57DE2B395C264FC 4E43050BCFF2000A 1E84F48D02B1358C FE19638B2F1D7154 361D45396FCD2CC0 63483D1F2DD55F99 3A097843B91B8EAB F2812767CE2285B9 F7001D5F84764E86 6AF92A246FA7E2A5 7FC1A1BFD701BF02 584F4EF3910593DC 6C602B8C1FD45D30 DBCC918DADEF5A03 D6B78CDC888587F6 1F78980A8DD13C13 DFA6AA6F81D6C58A F53C378A7EE4568E 24DE9656B229169C E2513BCE5D86A5BB D38ACDE386E2C8D3 B84933BB7A1336D0 482FD17DB0DBBFA4 C388DEA46689CE94 1BA657D7F6CA2802 744C2424F5BADF7F 1855F6CE289B507D 964E3A0F9EFFEC39 5DEB31E380B792EC ECD913B08FE48272 7A18838017B2AE5B 3EDB280C2ACAB7D9 B12FB901424E82BF 4ABF052DD6351149 D1A5C9B6F8D786B4 D797B3940DD7E8A6 E6E6693B8E264D42 4B1ABC875958F5F4 5366AACA86E83103 C7D9A06AC148758C F0182DBCCD2C671D C6D51F16DB7ED2A7 362B89AA9F143CC9 FF7AA27FE31F2FC4 C2D63899EFFF3D47 0CC6881E47B28819 D04FE3C3953AF2CD 78A48913429ED5BA 4AD38A1C8DA43134 C2B8F90C625C7570 527937C9EB4909EF 5C2A9E5F8CE17728 6CF9466C8311F8BE 1042FB525F8AC858 FCADC3C748936548 ED79C58341B7D0CE D5483CFC9C2CFDD8 990437FFCF2E6A3C 936C99FE614E6671 A58995FD16A9C942 496B9FB7929B60EB EAC426784D2B0DC2 B4B3862C4FBC3933
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201307200925(name+title). Key = MD5(password) =ccb883f2701a470b9bf0d6551602908c, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 63d200c4-7e16-2ab0-8dbe-539b49ed709e 2 ef31855c-3aea-7d9e-8bb7-36a28366bd6f 3 f6455db8-4c9e-85d1-8be6-2f515c477258 4 62a980d4-eaec-165c-b51c-2a26bec046f5 5 ad550846-f5fb-3081-9425-d081a4660be0 6 1c24b963-a5a1-854c-aa7e-b97e51011eb1 7 300ff689-eca9-0db5-904a-2cbb47ab06aa 8 c0620088-89fa-4c2c-898d-8de1880b76a5 9 17f11cc4-a96f-4739-ad81-47283de03454 10 ba52c19e-7ef6-5175-8402-41b7c1bb0c06 11 92dae580-dd01-1373-9d84-2a29b37959ac 12 fe5762c3-4b28-59a5-b629-98d0dc4d5ae5 13 9e1bff3b-9233-48b7-89cf-40c614c1c0a5 14 395ab8a7-d61a-0696-a689-276340f784af 15 9c41d042-6225-02ce-a29a-128725fc9655 16 81416c8d-1ee3-622e-ad9e-b49567a62bd8 17 552537a0-a698-21f7-beb5-57b2a438fafc 18 d0f9f178-83f0-5c0e-b59d-80658f2f31ea 19 c7faa23e-805a-71b4-9816-03f4fb6d8b0a 20 d3cb4e64-0dc4-0724-bed6-b46ae80c1c23 21 8a3fec31-6223-4de5-b2d8-5c2787629fe7 22 48f5d3e2-6e49-8235-be80-994ce51dcde8 23 bf16bdd7-f664-810c-a6df-c6d5baaea575 24 819bbdc2-ec24-8a9d-937a-902cc85f525e 25 c8ed9a83-318e-18b0-99be-916f369b867a 26 c6f43318-568d-7edd-9d6c-2129e59ec4ef 27 c2bc2da2-3419-6f5c-8589-7723738cf11d 28 3d8fc014-a6db-8e5e-91dc-9167875d2368 29 f85ca9b4-7a9a-1480-ae53-0e9d0119d02c 30 ee7cbfd9-53e6-26a4-8d90-bfea457dad7a 31 964447f5-b532-74f1-965d-170d981039cd 32 b1fb34ca-2619-6ba4-9e08-2c31fc426cfd 33 316fb438-48a7-3b03-a9ab-808a8b355d57 34 9608c6d4-130a-30fa-8ddd-aefe489811f6 35 de09e53b-4978-41dd-beb5-3ffbf95b2868 36 d5ddf628-66d3-495a-bccc-ea00df24cbfe 37 22a00191-c25d-6a89-973b-d91b98580f34 38 4629ce32-bf92-8b19-a664-30c475398119 39 a7759e81-b211-2c3f-89c9-765b60f5161a 40 7cc4c476-4def-0fac-808b-6131614e8b3d 41 39c0f3ea-7ae3-025d-a870-527be5250069 42 699e3065-8f4e-78a7-8837-b4eeab6129a9 43 a15adf47-be0d-0b39-bc19-47cabc7b689f 44 5bc4da72-6d50-21ba-9bdb-9dce525caaa8
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
27813804451540062570488817681276334468200702. Exactly this sequence comes out ofnew Random(893).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 14 of Run 49 (seed 822,652,546):
new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29). - Conclusion. Filler. The content is fully explained by the two RNGs.