201307230942 1iuoez
explained decrypted filler
seed 664
From the post to its content
As posted (encrypted)
7901BC0C55BBE254 31037E70197E47E2 23FC53F5BDCF81D2 47924BB9797A97B0 FB98CD3EB2B11736 FA8E2D1755529A92 95AA3B526361F83B F0DB3F00AF452075 215508390DCFC2D0 9707E19B18954BEE 1333044A1A37F4AC C599A9DFBF266391 371D4D64A558791F 08E9DEF62D66FF60 36136636D330CF2E 8416DD033587613D AE53E2B57011A76F 271494783AC3422F 9317F453AFC0F494 29453B621317C148 79E22A969E9A9646 006A4EE5620651AE 9CC463B934EB2B2C 2D40104C78EF0C7A 824BB20ECF8196F9 7C8C2D4F67ADECF2 68DDDAFFAF5D2F30 C57500FD34EA08B4 0BED21F09F89C66C 77CC976C82642308 FBD8F3848141BDF4 4E1A337D9767660B 4C02B722D229881D DF886700E13EF41F BB61A7C05A4C6430 C8E82F623FCB039B A5A21B26E94E5A60 F0D6311194B276BB BBE62C10AA9D7942 A75D0FBE891CDA33 A5A8B3057F4E37B0 FD4AB5D4C80F4F46 33D6AE782E3393C9 ECABBBD014DE1CE2 A382B714B3B1D8DD 70E9E597A8CD383E FB7DB8DA3A995466 61F23246A8E43BB8 C07362BA4D9D78E8 38F55D09C48C4D7F C0F86E625ED46364 30AD43F69AD224EF C1B2AF668DA8B75E 070136A0451AE492 2705FB75C761196E 06FB0037B978171C 2B8E7F324854FF82 ED977901375CB0A7 B1EDD9B687689DF6 C174E135BBD968D6 F78884B2F14CF173 0B95A635923B8450 AA5E61B21998A84A A37B11651D34535F 06D20E056BC3E684 8A52B5799F7332EB CFF3099477765B69 08EDF2466D755F6C CAD88FCC57FFABA8 3ED376084B37A8A5 A07C389AB5DC65EF 8A4571DB823A24B0 0EF8205C1A410094 CD372AC073841F83 DEEB10201A970E50 5DC7065C628AE5A6 327BA53F786021BA B6A63F1F1B65BA39 69FEB9B9AF47B9A9 CBE219FE33D706EF 55B7D7CAF5504B48 1A6AF2FBE37A03A0 98AC4D6A2763FD23 83824DFD2D0B1D98 C2177A7053B14BF1 2D578E19C35CD9D7 047200A0065B92A9 262CC53B02B879E3 A6C1D4B09FBC4EA4 8593ED32579223DB 60951307C976A716 5DB702236E2C119D E597E0BDDD159727 7BB5A439B308D236 679FBCB2E25AC78F 98909721A0BADDC2 CEF6481AB66EC681 5DE239DE2D219D83 B78665A832E09864 19F657931D04DF8D AEA967D568AF3E92 CF1114A2DB8932AC 7544EC9098FCFF87 D5064115A94A18B1 E0BF9FFD4FB31B02 1DE3CF65660AB9E9 BD31095F9200F613 2723B43A75102FD9 3FF1333DA0239F18 0CC386425195C0B2 BC2491B104237BA5 4DCD035BAE34CB2C BE2BA49804914D44 76B80F3D2CA88AC4 855178517F31AF7F AFAD582F5EEEC7DB 417D978F542B8C7A 26A34B95AA640A4D 5D3A2F9A22DC8993 54FA8D1C4CE4DFFF 284662701BD6602D 4831FB368D8CCA2D 2F1CFE3119C1DFC2 055E8E0300AFDE1A DB923ADC531DF19B 80F2D22BF7F28A08 5DDC28F8113403EB 07CA844D863714A3 40E499110C8CCE01 86F54C0C7A8EA2B5 DA71283E07BE11FC CC64748897FADCEA 4A89E31E617EB07E 5DCD228C2AAF4B6A 7FD98226FBC5CCB5 A932B1DF1468EAA8 BA26C92F44BCC7AB 17FF0AB5FE0A09CD 78BA4C230363EE68 DC71D1E8A4677E47 C7086F4358092F0E 49B5FC1B5A987C3A 87A5518B003F7415 6C1EA16F881B394B 9F7E3599593478CC 0C167276CE9590F0 2540C3C6373EA191 4B73EB629F541FAE 8F9503B743D5A60C EA58BE168E736BA6 C5D6B0A6086C600C 733CD3B8B40A461E DB4B911FD1BDDA9B F82061DE578CA8E3 3907C46BA61349EF F700F8533B3C64AF D096F9CF4964C634 0D2658728AB8ACD6 FEDE174D9C32FA4E 736D52E2926F71C4 624AE69BE8B9B358 91BE244FB8D20E5A C59BF08433B7F1F8 160A2534247F464F 57168DCC02129507 63F5113B5A3A5233 EF8DD678EBC4F6BE 239A3F8E6E845FE5 5381B4783BF7AD05 1D5A788E8796E657 AA70C3E30B3DAA2D F169318D9F3EB21A 86494BDC3A42842C C9CCDD9F1A584548 BA00971891620013 49A0A5E6CC3BE8BA B927D4CE4FC3F0C6 06E35D61A6979A16 83E964C7A0400169 2F85DBC455FEB21C B57DF91EF9BB9845 D867F046408B1CEC A95CB488837D6F15 08D405AE031F5AB3 594F518D800DB000 A94EDDB264294A4D 5F315F1DD2A35F51 8824691C03900CA5 1BF7216D2B9EAE37 CF5FDBF324079EF2 F5B608308F6D4D01 A3FE482ECA273B8F 5246B3F2DDA2959A
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201307230942(name+title). Key = MD5(password) =c84977abb23e741a59888d660167c103, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 8c832c4a-50e9-5f7a-a591-f2453f3f257e 2 825f1bdd-c48a-59e4-b458-ef76c64f1905 3 7f9422d0-26cf-84df-b2e6-433e8630f4ef 4 f84d46f9-5777-23b6-90dd-f930047f5657 5 7efcd535-e645-856f-8f2e-8d2807077182 6 b3561d92-4ec8-7214-b62e-597c5e360d2e 7 9c0b17a9-2175-3b53-a238-147d11d98362 8 3dca5a26-1b04-5b9a-80ac-190537e01550 9 0c0ff49c-7eaf-1bf1-89da-a7d35ae04c10 10 98c3ca20-88df-1cdc-8edb-ebe6b5ee83b7 11 a70b8653-5f99-4120-a03c-d27a25930e6d 12 f5a2330b-c9c4-7f09-ba54-d5820a3da520 13 4ee64ce1-c1a5-08f7-8d20-d897ff337374 14 084baadb-ace9-8cdb-9338-77a08ee90607 15 ae38e589-6986-63b8-9745-74a2c0f2bbd1 16 ee74535b-4155-66b5-b2ee-624a20e898b7 17 93389311-3818-84a6-a293-a6def3ed9f6e 18 05b21caa-60f9-650e-a76d-54325f49ce53 19 2cc53be8-05ec-5f27-a781-b097cd4594c0 20 e2af7b84-7fa8-3f40-b193-8789a33fe6a3 21 5b7cc924-318d-082b-8899-f31aab6e9911 22 fca07994-b2fa-653d-959a-322f8227eeda 23 0bc3dccb-ba4d-115e-af20-b13242c42fcd 24 e0e54ca6-3d28-8196-b147-bb308d3e1452 25 72b1ca2d-518c-638b-8435-2f1cee9757b5 26 57f12c94-b065-5b79-a656-8f6efffc3dac 27 5defac1e-fbb7-70da-bcdd-83fb7c58a150 28 50f321d1-35d9-0a08-86d6-8aefb8de3f3e 29 534bb728-d409-8da5-91c7-63563d370e97 30 dcb720dc-ec63-7f8c-918a-b239090a35d7 31 78986d2f-4b42-2137-9502-88aa910981ad 32 f41ef4ec-35ba-3d89-9930-f27ddecd3574 33 4cf37844-0557-2436-b03e-6c86de5fb42c 34 5123fbb7-f0ac-5f2a-8b74-fce790eb1e5c 35 de992f29-19ad-41c2-b7d7-55783a292438 36 acc5e24a-10ae-4ed2-8411-f6bfea5077b0 37 4f91b75f-d668-02ab-8c9f-0d08fbd05bb1 38 021e83a3-3b1c-8163-aa48-6c4c94e55aab 39 4e283f60-0a51-00f6-8c38-dae61d1c6011 40 bbbbb9c4-89f9-80ca-861c-991cf1e6f201 41 8b699dad-79f5-2050-928d-a219644406a3 42 3f5085f9-5293-11d8-a99a-12585eb61604 43 8f352389-3f3a-04f4-9b7b-28538ffddfa9 44 84d79185-6dd4-366e-9a52-8252242823e6 45 54002fde-f674-8e66-83f6-2450e3b44ebc 46 1eef7368-3d91-4ee2-a0fc-3aac74d00f3a 47 b17970e5-62ea-2cc6-83be-eba496f2e88b 48 a8e216f9-d5c3-7fba-952e-5f5f0f86ccb9
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
558287351147086686530618657087232544080821038427. Exactly this sequence comes out ofnew Random(664).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 81 of Run 49 (seed 822,652,546):
new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29). - Conclusion. Filler. The content is fully explained by the two RNGs.