201308061506 1jt1mv
explained decrypted filler
seed 250
From the post to its content
As posted (encrypted)
2A2D6BB639B0A319 CA25611950F0A0CD A9F509E9A1B49721 3E194B51D3766DE4 D6FBFFA4C3D6F8A5 969CD620F172E3AD 09D99AC05DBA94E7 1F2C783AA1760BE7 F148570922D1AB1B 350540A2C747ACC9 061995FEEBF3E712 9D0A70C643ACF885 DFE384E29BCA16B5 A406646A91B6414F EEC62CBF853F5F4B 2B8ABF6AAEB078F1 16D9832BFBB0B9C9 B31E6519FADC53EC 6473563CFA37A702 51A4C05448D64653 2BD4FF86D034187E B1EFE310892AC0C1 38E35023DE4F0D1F E0BB3B7D87F81164 8E5C1815A5E3153E 27D21AC9AFBC217D BD83D50C2628B822 4CD43A9965907DAF 4A7EB47C13971890 4B3BDA6837F9DEA3 092FB8FC54BC120E BF9DAEB163999D2B 06678062E14388D7 F239F0525ECE23FB 08DFA3AE494B235F A425ED59B146718F 122003F27B29890F 32072920001F7832 5F740751DCAD9E47 7FB8CEF23E74830E E9B95CED77D0278B 4B3A88C6BE66765B 4BCD43AFCC48B084 7CDE4BCA8FF8180C 26C289AE9E0D61D2 00D1D781F3F68BD2 61BEA5DAD6840DE6 144F12B9647A62BE B1D42137C731A211 BBA20592582AECD8 C853042CD3C64411 7118E9FF28BAF1B4 3F5210A8E83FA3BB B2D6F364DF9C5AD8 89DD48C27D16296D 0C30531C7C0AE859 7E8958C8F1306DB7 CB794AD0B0C2957A 3CE7C9564E8B200C 58A81B47E9146F8D 796A29FCB6C1C6DA F701422387D700CB EC7A0DD9486123EE DE27A1F4A31668CA F0551A55CBA58929 04D5D0260B540909 EBF878DEB5F284EA 510D5A715F28858F D8E78548B43AED4D 379523E154BFD2FD C60927B089DEF1DE 6B527402633A639F 66AAA4841ABD1FC4 D4B6C3B0A44D9E63 999671BDDF16C0BC E58F5B79DEEDE748 8D682F3394E4781A FA3738628067C942 08E41E916DC30EF6 B20592C10B686194 12873BFF1926F983 66CB000E1044AF62 A86FCB326D57FF8F 51FD9B8E5A44185C 2DBD881559A57414 AC11A20A84A2AA0B 1AC42E25E37A2A85 D1F90C7D739BB69A 8A5948EA3078BD56 A3C8FCAAF24AFA36 729B493F78B46CAE 3B133056352594FA C9F476A3B6F8C288 875AB49C3BB2809A 44AF171D5D3DF5A0 15BE7D8A228FCF8E A2D3485BF6B74353 CC18AEDFEAF35716 F978D13A2338FAA0 A23E0A3FFDA1E5B1 01207CB1C1E2AAC4 8016E548EFFB232F 8C0E870442681521 CBAC80D85C5CAB43 C85D4A9C2EEDF0C1 502B2CF928CD5643 BE145BE10DC79F33 2B1DA37963782ED9 2EA79BC6E28D6C3F A981C5FB3A9B52C2 E83BBA65F9CBBEAA 1E62FD2FED35E27F D15EA41604A91F12 FFD100761D029BC1 C67D806A7253C944 08E8867D47F17B5F 00A2D1E35E8A0063 1C1B84BCB4122FD7 617D73CC40A1AF85 1CABCA1417952F26 2A065278488625C4 59121EFB1E55F0DA 82FC00020E7C4992 20A3A3E328C25249 A065A6DDD50900FA 378319A738F9435B EA2DD4A2C3A0FB79 538B6092AD62DDA1 0047F975CCBD5518 19F798FE45969C6A 2D8EA82B519058EA C50404796142CEE7 4A71855C7AD363EC 7F84A674C39C4B83 2A4BF9965C5FFDD6 206B22D64BF3C08A CE3FFFE871EC5F95 4984C3B79C169D06 1F5882D733D97391 E5E5078CA3AD4C04 C35313881E44C3BF 92EDEF3E47742B08 776784E2E6204987 9703DBE803F715BD 6D3D671335937FF7 C05D1547D25EB363 1A8A71981A8FE330 CAAB620A3A69D901 8F80D69A0B6E2224 A598627B97972498 12DA4645B3646A6F 476669AF38AC87AA 6CAF4F93E4BBD638 34E6E0AA90ECC022 DF04E949179E41C3 526B1892D1B51EC5 669260405D24185E 0366935448AA1346 4790A03D04B07EC7 DC0E1769DCB56525 D211EDC2ABFE97A6 B60A041295DCF334 789D97D5C747EC6D DB0835C6B8DE07DF 7E7338DAB7E873C6 02953DC1034A3861 4CA8332C962E9930 3AF1FBE9363A0CE5 5B64050F26368391 C35B03D6E2CF58E3 8BBFF4009CD36146 1844473A6D8EE9E4 D3B4C14DF0133AEB 3D91963F7D9E015C 92340D4BC0956C03 F589D63B760EDF7B A5E22627FE122131 010490A40D1296C3 3117E477355404B9 0533EAC092B6273C 6C038EDBCB7E09CA 5286A61BB69DC8B9 4790BCCC2551D333 8278D5ABEA6C3A4F 419644911C34E744 010036E52FF1A406 8A135BDB085C9B87 361D0F020B6C9650 249968B93107338E 344F33943F2BCE4F 9F6A432FBC3FA53C 095EE7FEDB19A204 3AC25C29AF5A7112
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201308061506(name+title). Key = MD5(password) =cc66bfe4ed1eeef707f5c2ba16a0e79e, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 c92aef8d-6f42-27ab-b354-9881b672fba7 2 7b00d113-dade-1912-b3fe-3de6d03f6630 3 23f699a6-c530-4b80-b57b-946669c61383 4 4d04689a-c98c-80d6-9ad3-69d1f67acd70 5 83223fea-77f1-0e58-a41d-510915d5c6a0 6 e27edc52-2256-0cd2-9838-ddacadb5e9d1 7 84cdaa15-8d03-824d-9ffb-77e00d6e12ce 8 371d7676-73f3-7ce6-9980-45d56e389fb7 9 ae4d2171-3d2b-8b4a-be33-79bb756fc7f0 10 c71513c2-02b2-42f4-bd92-dba7e841ae5d 11 c26f8e5f-d6d1-45ab-a70b-42daad45ac01 12 547f45e3-7f98-5652-b337-a7711ba049d2 13 98e1f036-b46d-407e-b84b-fd1f2038b96f 14 da3c1142-3fbb-4e55-87bf-475a5a2dce66 15 8dee9124-bd9e-88da-bc66-0cfe652c99a6 16 fca82cdc-2664-1375-b780-0e9d570642e5 17 b676032a-6640-8806-b5c2-f69fc81d2a66 18 a587658d-4973-8329-b777-8db0869e0e28 19 98bfe0c5-8631-417e-bfe0-780caafbf2e1 20 40046a09-8b26-13e4-8fcb-41c795f8e42b 21 a6a6e8d2-76de-0f8a-b039-c16f68d2cd2b 22 127747eb-63c3-13a9-b88c-9dcfbc548840 23 d34f4d95-47cb-2556-888d-fc6f48271335 24 3fb389ff-b422-3d05-9976-3af7d2e6c053 25 3bda43da-baf1-1979-869c-85b3400bdc5a 26 bbaf000c-1509-2f9f-a1dd-c1b4556e49f2 27 2a33c42d-a2dd-7df1-bef5-ea99ab1b0610 28 cc164713-96ea-5683-822e-086076df5a75 29 8c378225-3d32-53ca-b3ea-7d53bd7f2da0 30 ec69ffa2-7c49-35c5-b641-9b526a384771 31 b19e8783-885f-4883-87a6-61e10be3ae3b 32 a903bcca-6172-27b5-874e-7a933696d0d0 33 ac17cca1-8232-7f44-85d8-d17ded03c313 34 2e24cd9d-a90e-2312-9c59-063dc1ead624 35 38e98eaf-4263-879d-8107-6efa7dfaa67c 36 8ae4c0a4-fc25-5810-841c-587df78652fd 37 5d4e53ab-e0d4-10fd-a243-9fe87ac0fc86 38 85647dea-06b3-6c80-bab4-5d5e9d1709e0 39 f3e58c61-5d54-156b-8126-6d951d873d24 40 07510341-2a92-8d5d-91ff-340e4019f2ba 41 ed67c059-7716-3db6-b917-3184cfd12546 42 5efadcc4-ddec-11db-b2b7-a769c4d2687b 43 97f63ebe-2cde-1dce-9c44-d082a4070694 44 bcbca976-0b82-56f0-a0d9-cfa5eb738f66 45 3c9673bf-817a-6b7f-ad28-df5f280282f7 46 5a96bab9-0a98-89d7-b6c0-32a2664435c2 47 c07a4239-5c33-3336-a039-1909c5b16a98 48 12456a82-ecab-3b4f-aabd-b3b5a10c7fab
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
214800878445448188410123127553427285161831156833. Exactly this sequence comes out ofnew Random(250).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 5 of Run 50 (seed 2,278,890):
new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29). - Conclusion. Filler. The content is fully explained by the two RNGs.