201307210923 1iq2my
explained decrypted filler
seed 743
From the post to its content
As posted (encrypted)
3179A84F2CD9FAF0 1707BA8795BA4A46 45410AC85FAF5C48 2438A8B1A6350BE8 9F5C09F4921D44CF 50181A123C911F2B 44CB80FBA4BB8FE5 2A515A7A138AA41C C957EFE85E300077 E7E9A179FAAFB181 7E465403F52E8726 158046A4F20A0A07 D11D323CB34A71D2 3B768249EA6088A1 4B1734887CEFA774 E47DC45294914FD3 CAFF9EC1CE3D9718 2A5F0DE356B8D561 0A47B48F8F7B75E5 4BB0631ADD25807A 8B3D3398D60B7751 F30214C06A64470D D37A8F09FFF7FAC2 830950273DF49EE5 737988A1E43BFECC C83655205E13962B F5C859466EEA9846 85532EC8962659F0 F1F2A4A92ECAC953 9D5C634C3992B203 F48A3B1C6976AD3A D6CABBE03F2AF2B4 9AB3FE4468AFBCEA 309A78987814CA19 64A8A6A26E039F62 A3BBEEAF1493859F B8DF316AC38D2517 FCAC0BB35921D81D 5B8FC2CD99615749 4735316C3154A71E F07951021ED3EB39 D913B874AFDDF313 80EC6BD6C5D37FCD AE7F1FE6EBB79D53 00B3A76EF86F6EC1 41E80BC5D91C6087 DD530119A16ADC56 D2FF92122202CDAB D3390DC2054E9D8A 9031760013B53E4C 47CE8F5912611829 AEB5D9D68194ACC7 8E0940D54EAC1C4E 58479E894B86F839 73FCC9069FAB4BF9 0ECE9CDDC4C43F02 FBC9AEAEEF839ED5 25A9ADFDEFD68E56 5EFCA23BEBCD8809 46C43F82C92F5D40 52FC972EC278B242 723605D90C954554 E5C98EADF124B5A4 716DF181F144B469 3614B46085AFFA0B B2D6B9A0B3243BEC 7CD37DEE57E8D53E 7DB72FDC7EF6D447 4205E229EE86B2B7 D8E19CC838BEAC06 028D26D0964589F9 F60172BB71FA1B6D D799D3DAC2FA51A9 80EF07560D44DEDC 0839E2EB369F52E6 5ACFCC76E300E1F8 FBEA1258EBF1B041 156DB65F400C6377 3F7CD92566C286E2 007BCBD8CE53BD3C 049CC51CE357D6C1 2EDCC7AAA2FA223C EB88ACE8F783E25B D564287BEE712743 15E19C769CF238FD B998CCBD51B39B14 DA9C327EC09C8E61 0EC01A7D026C7AF6 24FE0DC5D2ABFF53 0A6B90E164E52EA3 D0F210B14E842FD2 AA44177ED6A40C39 09D9A414D692F24D E1E31CCE6511CC5F 13961D429C4ED89A 189BE988E3F5BC1A 4AF5FDBED82957FD 5BA0CE71B6FF75B0 35A8545A69AFE5C8 4E8ACD2F99246B38 90D52BF5663A0F58 516AFE4B74B5EB11 FCED7AA336CDFC4B 731FB3911C75DB38 7A85AE5DD259A697 7B3D001902E6F4A7 F2B1F1936334189D EEC50F4F6498701E DAAC9293E7DEF785 AF51A9458C25315F 769BFA051E109734 7E30242C48DDB303 18C5DE6F606E8B5F C42EFF0593E57F16 D65BE0D5794D71DA 7954D458E6E0C9B6 546F462D3EE391E8 A96234CB2362842C 8EFD58E70237BC27 CF6F086C163D4746 1767EB87F6AE37C9 EC8A69C3DE5BD9EA 6EC1FB5232056C1E E6CD7E7779564FC6 262262096648A9C6 A90825567005CBE7 DE5E792264216149 F08802D276461838 7774EFF5DE6FED72 F9AD13DD01F821BB E029DB92DCBBCAD4 81AB4FF4CBC75989 362A7649F215CFF7 ADB1591CEB1708F2 EF27C6A7D4AC92AB 4D1611C7392A7959 79BA576FA8C47304 CF193B069D81EF80 BDB7EF5BED3498FA 0B3278287C30D53A EE989A7F3A103B97 83559A9333427A6C 5BEFFAB1E2459D85 005334A6B2AF6538 98ACC1B692CDE16A 2A3BFC3CA75DC261 31799DD700EE9441 A2C1F43064E8DC06 49998F5C9A47C914 E4D8B7155A021BC4 8C33A55CCD7972B6 93DF6202B8824BEA 15339E16E14C52DD C26A38E8A896EB81 3E907816E479CE64 09515F4F464DB2A1 232F4A835A64D699 C8939569BEBD14D3 ACFC6EFBEB88F7C8 2D75C81DF215BA90 CF7BC2A70A9B9FBA EEE9AB18CFD98BD8 5C35FC959043D9FE 5D74B7BCA61DEFA8 85C699675896A642 EC65D154788FB7B9 EFB4DCB9574EBE73 61A7FBC3BF47FF62 5062496B8DFAA937 23183EC2AB735DDC A692ECB947CA64FA 546EAF45FF3C174F A9B9C733D156A4A5 DAA51AC68AAEED23 7F6A50FAD6774C7B B0B76C2CE1C623B5 600573AA8A40FE83
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201307210923(name+title). Key = MD5(password) =48882f252d787e73cbd532cc3d3c12e3, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 c8dd6031-159b-77e5-b8ac-f1ab63eb1a5a 2 445be8fa-9cd4-7f8d-bb3e-aa1e2791ec26 3 91c51c22-06b8-123f-aced-5f43003b53ff 4 a8f84b9e-c28c-10c0-b60f-866828dae88e 5 8f76244c-7b05-5b7e-a236-414e53019901 6 d7c69059-f7d4-7a2d-92df-290c011208fa 7 de3f12b2-1c8e-75a1-8783-557bf9610341 8 8e8bd9ed-2fe9-191a-92e6-3a5221d57b02 9 07d3c918-e8a6-8cc9-8514-4d4ea74b3de2 10 199d7ef6-32b6-26ea-8ee5-df89df1f84ae 11 69699962-3b35-6552-9b37-796cffb09666 12 470825f1-29a5-4a86-9afd-d579738aedfa 13 5c4cba93-da63-3b24-8a67-9fb7c2842e13 14 d005280f-370f-06de-90bb-f7af82db92cd 15 08a281e2-4e20-05e1-9c21-85b4d84313c4 16 f09e959e-ac7a-0359-ba89-fefe32171500 17 0ecf97dd-bf16-197e-ba36-f9f17ee66826 18 6ddef0f4-dc04-54eb-b09c-03fe8176e4a8 19 6f547006-fbd7-79c4-ba39-b183b4c0b9eb 20 6f492738-7aa5-0c58-960f-a7b07d580b21 21 a641f268-16f0-4d80-ae3a-46c18d1a8201 22 1b979a53-0ce9-1cc1-a50c-5f3bc3a9fa56 23 d6b0b64c-69dd-5531-b97c-71072fef63b2 24 f06e873f-87e6-5e55-ab1e-56731591d3f9 25 c4f8164d-cdb0-487b-b734-e771bc9ef95b 26 3c8e613a-cac8-3afc-abf2-4fab3391115c 27 65c05714-cb55-6a6c-a5bc-a3a4b0f46f3a 28 e32852a5-0e38-0fd8-b621-49fe1aece6a7 29 87c2c0ad-84b8-64f0-b120-eff89576faaa 30 a01f00dc-7a3d-4981-8d34-8be8b88708a8 31 c7685369-e8dc-4a66-adf8-4c4716a932fb 32 195723bc-7cb0-16eb-9157-fece1e12851f 33 c11b5676-9dfc-0c90-ae43-b15d1a3f04f8 34 a9038dd9-4006-59bc-adfe-6714d10b23ff 35 44c785ee-cac5-09f4-a999-cc608f86d8ab 36 5c533060-3296-8880-a2c2-6a30861f9eef 37 0d7da7ee-8de0-4d41-8c11-083f8304a2b8 38 d455178e-88fa-6151-aec4-d088c626405b 39 fc1761b4-d616-51e4-9be2-c71bc12c5ac7 40 15384fa2-9422-770b-a58f-e3dd24fdcb99 41 c2186d94-1404-82fd-8ba8-c80ff8f047bb 42 da4b5c96-5ab1-1354-89ec-6bd1c7011e6d 43 075420ed-618e-2686-ac3f-293fe63bf0eb 44 1906437b-ebaf-373d-8871-336c302dd7e7
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
77115771826430001570415543606441050846578123. Exactly this sequence comes out ofnew Random(743).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 42 of Run 49 (seed 822,652,546):
new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29). - Conclusion. Filler. The content is fully explained by the two RNGs.