201307230910 1ium4l
explained decrypted filler
seed 657
From the post to its content
As posted (encrypted)
3DA5598AFD9A4D4F 80575A743386AA7B 13710311F7A39FFE D5EE5ECECDFF491D C4C3C2533A3F4671 F9840EA56F01B0DC 0A2005AFA189ADE7 FA7568D0C98B09DC 01A3CA2B65609F27 690EDF4AAEC3A3B7 DE5A03C9FF60068A 9960E693397A800D 5FE87361DB7B5C2B D0732EFD73217F97 C2393479DA32380F 6EFEFFE824394891 2DD90B6DE98EA57A A4A6E274AD6C3439 8C0D303BB384428C A12BD753038687EC E340BF7CF56DC35D 63D5CEDAB2C03248 6E47BBB67BFEF91D F3A451103B061F6F A183BF57149AE0A0 70F9E68CD529C14D B7C4ADE457C033A4 D91B9051352F0B87 836393C09FC66E9E C74E57F2C3E0983A 61D6AB3EED593310 A7D2EB558E48672E 6EB2B130B63A84BA F1D31B9FC4070546 25AA86B9AF288D54 DC5F6F8347A89BA4 476AEE6F23E4022F 320DAF9985FD021B 2299510D0EF33ED5 6BBE516381BC5263 F924074921434225 78D79E601EED1878 8EB395771BB3D319 AF9DD3F114638DC0 9496C7BBEC968490 178D8589A3763C7E 20018DAD9F3460AE BFA3F4571A9FDF4F 2BE800D7E47422A4 6F86D447F91334CB AD01768E1E9C1080 DFCC324222E92357 666F23EE1B9AF02F 97CF3A223AF276A0 09B012D5DAEEB765 14E51E9FFCB19DF3 1254548FE64F719E BAF6E9C8B20D1B65 3BAB5CB34D5EFF27 45774DC2D77F4182 B743E05219302AAF 90F25F8980A1B3F9 80E630A1150A835E D6303C9509227729 EDB059BFC881A164 CBA8928A0C7F93F5 74E22DB0EEC1E257 1E433CE7CC1796C0 0E5B6BDC6B9A145B DE9F87810EB9A0E8 A02DFA06ABEEAAB9 0F06FBE15699BFBE EECB8C06FE69B688 57831C65FC276D18 21786B0775427D7B A003123473197E97 7318EA27E456DBD4 4EA8C4BC96CF5200 37FC08E4174621B5 515F059520DA7F02 303A1363E22A994D F05EDD222CF14EC5 936A173795E7AFA7 62CD877023B94BD5 9B2F2A82D020215C 4C26DAB4D457F910 8082B8F6567A6F3F 4779C2C92F8FC01B 207AB362EB80C928 0399ED19C366F9C1 4517B3111C9F2992 7C76EB5972610D25 33B0341F835F9661 C828CC325CA67303 42D9AA34688184F8 C4B6040E9788BACC 40A46AC1C5944642 A9E0118E9AF5084D 14BAE447EDA5FB29 C0058FE43C93358F 736152827E617314 4CD9E2B2DE8847F0 AECF1C3A60178A62 8238063953C12741 C9E6DBAC031EBFF6 17D78945C5B807C9 C0D44FE92B45D4F0 895793E308F74690 D9CA9F427792599A 9A7BD8B899656AF7 D5D8ED52958ABFC2 F71670EC8F1E9557 F72B472820BE02EF 634D4EF23E0E9F13 3E1899DF60D8A542 3FB861397681B116 A9176FB8D3FA6B53 310B7C8630E66563 4E1AA8F2364E7ACD 0ABDD4A68367E921 5A8670E7C6311AB1 2E8A8072EF993EC5 3BD66B794DA83025 2933F24AB0BDBDB6 B4F43BCE6A38C0A2 D43E8D0192D408C6 AC616B1689F74EAA 73A38C99E648914C 5A1AF93536F72F89 B63BE0CBDE006D34 E6F39CBF4D2FA580 805E24C5B9BAC9B9 49D378401FCC1DFD AE259B2479E24A10 C36C04033CFAA6A1 4B5905F14C14506D 954870E9997DAC68 0CF2B25D583A3323 F429230F9EBC107E 140093DD356AF031 7D704DD9C1F7EA41 C54DA971A593D929 1A070EDFE01221E6 8DB98D815CD9D69C 0CF7B915F9EA099A 89A6E0305D5089DC 21A397FAF447D7BC 9A1F876FC3320D15 A6BB617522F7D930 023AE7FD2F3356BE 5C33E419589FC49B 36E2894D02D5E09B B3E53065B72753D4 2B22F6C8DDC30126 13090A5E0A30BAF4 D4459DCF329AD244 30374C8C41935B78 2BAFF30E61764AA5 EA1375B8492F5F01 68CD75AAEAF7ACCC F81810D841EE4DBF 383F96330AD5518C 10B06FCADCCB5299 91BB5C5D76BDDB1B 23E33F63A023C457 6EF4C95A042CABC5 60022BD76B95EBEF A00C70BEEF2910A4 83AFEA8F1E9BE570 1E6510A343FE877E 9887A0F7318A25E4 A95F72BDDDEB86F6 F5B01966F53624AC 9B8593EE75645E0F 709E342B7CF4C358 BB3283C3CADA2AA3 388D4D69A5E15036 C142F24D5CB3492A BB085C9640D92246 6147A6DBD9D58F85 CD3A7ED8BC89B145 31C714A42CA84DD0 31EB7EAA73CB2133 21709F58C2599916 32840703CC01DAE5 15999EDBDFCC2B3C 3FDE04EEE192A3EB 0A352FA528574FA4 F68C35E94B327735 73ECE8409C708213 4A065836B0627424 65639E836C69FCFF 4F252DBE2B3BA35D
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201307230910(name+title). Key = MD5(password) =8307a9d96afa0f62d76dc4276ac6b8a7, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 49da9d19-e909-8b57-88a5-c82a8eae4bd2 2 a3991d0a-1f92-5259-b4fc-80576cff9b0f 3 24b805a9-5954-0ac1-942d-93d57a64bf04 4 92aa8bc9-f852-7ff9-8cc6-a576d24e336c 5 77c3b289-5adf-79e2-97c2-cc80b067ab6b 6 fd32fc04-c0d2-69d4-8052-79ebb8bff8b5 7 1cb8d657-e780-227b-8e51-7c0bb35eb5c7 8 f7c287d5-dc71-04f9-98a0-46b61a00cfe8 9 45e88043-82a3-2ffd-bc40-e1c499db8e5a 10 cee4a70a-f1db-4706-8228-b485ffcaaa4d 11 7e70c5c3-4616-25a4-827c-9f1ce9465b0c 12 a5d25638-6534-38e4-821e-c49856316aeb 13 b4cff012-ed2d-23fe-a8fe-df3eaf92036c 14 a0d82afc-7e37-278e-b253-fa4007001dc2 15 9af82ae5-5b7e-7fee-adfa-c7b4c20e1606 16 7b1ca74f-7dd3-30ea-88bd-61f85fb7444b 17 5c1b5b77-14ff-02eb-bd25-17bbf90cac3c 18 7de1d72f-98bb-30f7-ab0d-4725881f66e4 19 c2c54121-a946-4ca6-a85b-97030685544e 20 dfcbdfd9-b68d-6f4d-a14f-57641dd57abe 21 36d950de-9d8c-17be-8f58-607f90b47f69 22 097643eb-9840-04e2-8e98-96045a4c892a 23 fd274569-a439-0aa4-a942-e852b6130a5c 24 517875fa-16cb-4c25-a947-09454c427920 25 7cbef312-c53a-03d9-a278-b192a8f376fa 26 d603f71b-79f5-0ad0-9608-1c2b546ecb0d 27 a8e4aa95-9245-7442-a412-aed7b05f47c8 28 a4cf6607-7c0f-634b-bcf5-8695fd319759 29 cd8e77e2-5721-066a-8431-9d110b792a16 30 d57ced18-7e91-1675-b176-a7362cde8056 31 c3d40efa-044b-6f06-8f31-92663345cce2 32 9c92e09e-eb61-417c-a43c-5886ea4db0b9 33 64965c49-8791-4202-92f7-112b52368599 34 60de3c42-0a08-4fd4-9f8e-83d130752e4a 35 d93efd76-3b03-003a-85d2-aa93a72078db 36 f7ef029e-9fdf-2b9a-8296-3655725aae2a 37 d2997c1a-9007-2bce-8433-299e81f61cef 38 be48f686-746e-1ee9-9598-5c26657da2d9 39 ee6decd2-24fe-7f22-a9ef-3a8e639b1120 40 cf874d4e-8dae-0ada-906b-6bb48d8a9d7d 41 e2feeaa2-042b-7f2d-99a2-b98d28788a40 42 1cc7d1ed-e901-2bea-a400-6942f6e00bd4 43 deb274a2-a5c4-0df4-aad9-a3446ae762d3 44 a605e41c-77d7-5e84-826a-b5ccc266963c 45 80004d1d-2d92-24e3-8f2b-66bf3ac7ea8b 46 ce5298b0-4431-3408-b90f-e2e05bb10836 47 6131b008-8df8-7178-87e6-dbd6d06ecd88 48 b73768f2-61e0-67f1-8241-a618a953de1c
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
850776202423227303461004007601644402217072052376. Exactly this sequence comes out ofnew Random(657).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 65 of Run 49 (seed 822,652,546):
new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29). - Conclusion. Filler. The content is fully explained by the two RNGs.