201308070006 1ju5yr
explained decrypted filler
seed 832
From the post to its content
As posted (encrypted)
AFF6D6762455F1F0 47F9EE01D33C047A FFBF0A627831F145 55A9EE93D02CCC9D 12E26C3A0253FF3F 2BEB275D8B235BCF 1919FE6B1CF4E0F5 A53E5F286E738C7B CB6E62423EE6A563 A4A0916709DF9174 3B246E54CB8F4F5D 49558A1002CBB706 7E717CA76080D10E 09DC5CB386691CA3 9EED73E8A5CF41F1 C895D986016FFF1E 747386353222869E 5C4DF45BBE25BD7F 3047C8C3ED6AB9BD 05912A32363432B5 43670F1689922F35 56974579A7A2AF6A 8C365DA9D9AFA894 D45BB96A2E14170D AD339E660E56850D 0E6A0791501AF695 AF80E02A4FD5DDE6 25600357060052E2 85B07C6C5365435E F2A35DD094B7DFC6 06F584365241643C 97F5415936724457 4DC002D4FB348357 A7D9D6CF38A544C2 9746C001EF028D13 1671054CF37006BA DEC853337CA4CAB8 5A1DC1B01E90785E 75EA1F539FD5C409 14A77236415E99B7 DC4CCED274FB31CC 2193BB5BAC2089D7 0A90B3FAEBC09F71 FD9CD8E28C33F311 EDFF695BF474BA9F 7B38D1F754717D65 FB7A5564830B2299 750CC6FCAC84BC19 0BAD412576121299 60269DB1E3C77D3B 41CDC1A831B9F7EB 54243F0A50C94A6D E3D8A5C179DA87E7 7BE5758040CDE6F8 550A3967F8D1326C E00BC2EA3BDDC68B 59C82BD84DB1FA42 509E9D75AEDA1D21 E955F48CF970847B FE6C437D308C4C38 A78E69204CC2FA0F 7F01BB55809E4EBB 9D90ED4990AEB9A7 870CB06804ADF4E0 21C085AF30A7FBFA 95B5C29580B043FC 41BEB24F14556A3E 3C6C420D31064C75 480EF648EF7A59FF 6839E191614D7F21 7A3902C031B4BFDC 8BE90D35C2E32F89 9D4DADA3C7EE53A3 6169E9C34BEC5067 906572BC7DEC58A8 B1142ECAE8CAC401 1EC2336204099D85 DD14DE64FDF4F3D9 922397054813F15B 78C0BC3CFDEC2EE8 8ADF4CE3FE2FE200 88DBAFA84EC59CC2 6DD7A736626F2BDC 4C32D8BD9A7E399E 6F8CF8CA73D981E2 D29482A4447D4D40 9F2B0F25B43D8E6F 71FABA675D4DF9E9 56ABB18FDE4235E6 06A7925B48AC2EAB 0079F81A467CA1FE 7992A948DB5CCAA6 0D3D3EE0D292446A 438ADE8DD28F7FEE F7E549B36BB58862 D39D2AE7D6B5134E 4030ABF487D398BE 6E4CA8E43A1FB094 043B895D32EA1719 4097059F7E292238 E08E8AC37C0EBE8D 961C60830A97C5A7 E6E301736CE71650 A14F40B25BB10FB1 BE1CF2A9C2EA3ED6 89B2A8F08C3C2746 CF1783FE2448A262 BDABE479ADE7ADC8 DDDEA05B188DAB53 FFFC8C80437351DC 5FEA0BACAF03792D 7AAA6618A91A1977 BD0731CCADF456EB 59E68F196EB53852 3DCB893DB0CCF1AA A571DE07372FB4F3 9351C365EB14E2E9 E83871B7F496C0FF E5A714ABE20C7C14 41E27AC2F1DDAF69 44D002AD6CF9F14B 79EC1CB2B8335330 1B219886832279E8 A8771CB5E3C84242 7C40979ADFF666AD DBEADFE74C863778 13B5DBCC6F776994 62BB4477C9FF599F 6D7B9E0E7E86027B 5FDAD5F0382D29BC AD642502797A6731 D68E9802F8A5E752 E0098E009BB0F528 D75C6025FB338929 D331D738EEFEA93F E22CC55AD1C1F012 63EACCDA79FBCA69 E83AB9227A507CF7 3252B021313BC954 DE10AB978CFC04D9 83D54FD96DD5FA16 7F3AF77AA595A497 97BEBD3E274B97E1 5263E95FB2DCA797 6EF8722C92F47567 14ECBDDC3E624969 8018B5F093228090 7DC56290F3F1D8A5 55B51D6BE29D2628 938A5A0F5D318404 B3FED500FF0BEB73 C192DBA984C26C55 FC473635EE62BE1C D6AB1913BD6CF9E0 31190D03CAA91209 29D439F13BBDB474 E24A329DF9666F1E F97BF5E04234E904 41481E48F59F8623 AE73C13DF5367679 1A57107C99958DB1 CE63F8049828FE4C 7016DB19C4E86193 4DB3EFC60B7C675A 52131B937B67F906 C7E1A8DF8EC50ABF 077A951EBCE4088B B89E37B55CAE2BE7 660F42CBF912BFF6 43FE210F1BA39B13 2817E95DBD6A099A A3DE6E1BA8919D15 5101FDA4BB978635 DD1FE56A6CC637AE C458240A655767A6 36C1F864716C2402 7D1A41632B335E5B 56ABAB94350AE1C3 C78E63A2399A16CC 2171D1AC4390CA08 D46EED299856A4EC BA4C6FC5244E4218 2CF253FAC8593FED D0DCF6509BFC3642 C54DBE68A626AEF9 7AA5729A70178DF6 4CFAC2EBC7CC790D F253A2602E08A998 FB460C59EA5FEAD3 4F5D303BA16670AB 332640EBF7203BC3 FF9B28B15B87695A EE28D32856D372B5 8DDC082C92500FFD 360CEC320CDF1BC7 E73317DAB64C7735 2D52B8E45E3158FE C581137ECE3586DE 67ABAAB05EAEFC4C 51295C2C2B7A1AD7 D071040E8998389E D89266091687F22B 6AA40E1E33BF5E9E 5379C83CA0D1DC42 9784AEC750EE0C14 2485E568F31F1DAD 63A23046870F6B9F 0DE5E8FFBD632F61 2EBF3F8C5B38A313
- Read the ciphertext. Strip whitespace: 3,344 hex characters = 1,672 bytes = 209 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201308070006(name+title). Key = MD5(password) =fdaa1a16e456ee11826f73456bf8ff3e, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 52 GUIDs as hex (shown below).
Decrypted: GUID list
1 a0281ffb-e0d9-3496-b0f0-9a985cd0c047 2 afab648c-a24a-8c8d-a51e-7228d7cbf94b 3 59f3597c-5d07-22cd-b437-bf1e6c106f5a 4 e73449e6-b200-1e3f-84f8-59aa19b9e67a 5 10558c23-12db-7a04-88ef-cabbcc714d2c 6 6f269741-e93d-502b-98d0-b264a3ad4e63 7 801acf6c-ce26-6854-b5b2-db882f13fd87 8 5f207dee-e3ab-768f-b0b1-6261d0527618 9 4ce47ac7-1d57-8e98-b4fb-aadfe497e352 10 3659fc10-4653-09b5-a5e3-6a1ba58fbe78 11 3e4c62c7-fbc0-226d-bc74-f26ff028768d 12 cb6bc6d9-d679-04c8-a22a-fd6c02eda896 13 f5e88d3b-4620-5d88-9361-746da50ddfb1 14 6668e0a0-e820-2ecd-8f98-d1fbe9b113db 15 9dd87371-b858-3148-ad2a-866c0ed655e3 16 de010e32-93dd-5631-ace3-d4605b10c21d 17 5d0ed704-8403-597d-ac0e-5c0ba56c926f 18 91e4dccf-3e59-7e19-a419-aa1a25972b29 19 c0437825-e86f-1681-8d23-97f070c44a85 20 0cbc0dd8-813b-4f93-877e-7bafce7d31b1 21 81357d7e-69bf-3bef-b981-970273e62395 22 8f1e775f-4e90-898d-9919-94f39c8c5778 23 d7e59ce3-67c1-5935-bb96-510120f81e1b 24 f641b98f-f609-64f0-a44f-43b96d7384cf 25 36301f5f-f805-2ed3-aa62-7cba49620435 26 6c3bab29-a75a-5778-9488-f393d85566a6 27 97070cb7-d46f-2de8-93a0-8683454da491 28 541eca80-e113-10e6-b705-68813dd4d4de 29 f1cf3115-8e2a-3de2-bdc7-df81900b0ddf 30 44fab5b4-f26b-1136-bdf6-75f33f070035 31 a62ab4ec-9358-37b7-81ff-ed132a5e416e 32 e39f8e96-2290-5ece-8a3f-0b2a309924a4 33 8a3d2523-a53b-76a3-adaf-92521edeb722 34 c498f121-9d1b-7f70-80f5-0c93db78fded 35 496dcf85-b9af-190f-91ed-158ca90896bf 36 6e79d7a8-26b0-7273-9532-27ac09771c2c 37 72c71fd1-036a-1083-812b-846b0c4d2be7 38 6b14691a-8287-397b-9cf1-5252df7c6b20 39 5319035d-a980-7a1f-93f5-d663a2c4b54a 40 f85000f4-899e-378b-9d95-f1b178f57134 41 61b52e12-899e-297a-a734-74c24d919d00 42 88ff64fa-9571-79e5-ab73-38269d11336b 43 c79daa17-8a3e-18b0-aa20-0ccad257dc3d 44 f440fa28-3f35-39c9-8f0d-e6516393a60e 45 d386834f-39b0-5d81-a088-7ebcfb415dcb 46 e745612c-a530-4d93-89b9-b0cf1f50a3a4 47 eac1e579-fd45-3ab1-b8d3-0ef1425dc988 48 1453f616-64d0-4e44-8324-4eb59c8e9ab2 49 1cd959c1-1ebb-3244-b7f7-55f1bd957263 50 981a5519-02c5-1871-9d21-6acaa087dac3 51 d03c59d6-8461-0471-9873-30b25365f2f7 52 35d1fd24-bc88-696b-a0fe-743f389d0776
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
3821756780205235571438562521313577171373271354343106. Exactly this sequence comes out ofnew Random(832).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 8 of Run 50 (seed 2,278,890):
new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 52; the post has N = 52 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29). - Conclusion. Filler. The content is fully explained by the two RNGs.