201308130606 1k957i
explained decrypted filler
3DES(name+title) ECB, 48 GUIDs, seed 733
From the post to its content
As posted (encrypted)
9CEDA52238DAB6D3 B860F3961E06F9B1 E3F8D2E193D673C4 24BDC9663C1BE6EB F3A313FF9FBCB634 44941250A85F33BE 97DE63FC3855B259 CFDD8E584C283203 B728F54E399F6643 0B114577E6451D67 FC5D2E8F303B7C45 FFE97AF39CCE898F E92E4C3E57E00D14 4E42D6379031CDC8 C94785B06388411D 84205D9308A7277E DC7FF989D7689C77 D577E7063B9579DC D4DD73578EDEAD2F 5491B78F729F207D EB4BAA80BC56783C 1A8BE69A66BE0498 C3E77F9EA93F6827 DEDED6B3F419B885 DB2D5D8A879C9ACE 00EACD40259E84EA A183C0413D6E703D F366B91E9B05FD2A 36BFD1A2CE2A286C 169E31A42A590F1F 6ECD98ED86D3FB22 DE800E9EAA781F44 FCEB50008773D18F 2DDDB900526B9F49 FCE7075F452914F0 5F66EACC0760AD35 596DDF71C7490B26 CB7A8E04BF5A780D CDFA84851A913EE0 712437B46823373B DF9A408CFED5FB19 6D8E8580D658E8BF B5CEEC6A27A803CE 010983FE444C5971 1A9A571C276A086E 7FC81F134D1252A7 50D31CA02CC4970C 2FEC9144527571BC 86DA7F4FFF7199F6 F7489DD1F8FC656C 305E61CD915DA428 1AB41F03CB224360 83730125BC032A9B E245CCE8A60B4F00 F21B4745AE1865D9 94CEE766FDD82952 D1242A3237AAA49F CFD39041E3B5AEE8 2C8C69AE60E60BED 69D4D3D2AEF2EA63 4722C7E24ABD342E 6311B0D2E0624578 24830D9506FA5347 44CA3D0CB4A89544 F924634C64168ACB 77D06214F83443D3 0CDC2C0FF56BA9D3 6FE1F4A9520B3F5C FA98F14233D4AAF7 642FDB7FD2715CE3 C75F30155C2ACB8B 586232479A88A748 77CA30ECCEAE85BB 748946206CA9869A 8C9004457BBD4C82 16D11734865A76E3 4806D91755C5C395 098C9B2DB9BD3931 9A50EAAC43C1333A 561145EFC546245F E80F9F46F01CFB03 D7F1DF647C3B7551 A3D393AED241EFBD E0CD087692222D5B DFD7D9222875FCF3 3C292D30BEDAA9C2 3B85C2A453DA294D A97351255BF8C52A F86F4CECC897B4F9 37C190821DC3B5D4 D1CC12404CB9368B 6B3D47AFDDF4BABA 16E6637E4C033A48 8E4B9898FD7A201D 69CEED6E82C60E9C D52534F6624CC371 57F39928947A7FB5 2CED1125E93D12A6 4112C22F11153734 38D29B6AFFB8D10F 56DE137F585D2520 8C2ADAE64A2EEC5C D4FA09C1AC64BD59 91DB5F1A4DFDBB5F 6767B3CF52154D8F B706C4A6DCAD602B C76DE09FB0085637 FCE40BF36655733C B88AB526646DB3C9 E0B6F4FEFE71B781 91573480F9510AA2 5F5CBFE2B4740FCD A878D1C4194F4C32 4E4A07FDC669E0C6 42FBE73006406FD4 DF261EF771F6E189 F4E086F47793BDF6 CA4BB87F5F02BEE0 FB40FA822E1C20BF 903183C34C68FD4F 3DDEE8787F1ED017 C8CAA2B4DE7444F2 27B28446B99C4649 5732DC43155ABF51 AB9A1544BEC6E4EE FED0524B898797C0 786A689FCC3D3765 38470A670D1A4041 ADC27E5587F8D031 983663D5CF934C79 1C22681A681B21AE AF63E962680B0A98 F35B97A5B8F81CE9 A2CC1D7F5B4D51A2 1A7BA50A6B634344 A04BDA476C0A83CD E9D67B6868BDF2DB 1AFF4580BD4BB205 CD7561ED03E5CD1D EE668EA2D39990A2 F9940F24D012E44F C56DB37DDCA7D199 9F33726E7E626C91 E6EB4A0FD71F75F0 28B6A224AA77EBD4 782CF2E8D329A9A2 F5475A12E8C46AB8 0AD82EC58DC3CE30 204F989D70C5D83E FAD4DB03EB22BCBD AB75AD1832F10725 85B1DB9FF3EDFA92 02F9E3491C23A1BA 328ABD17D9C66358 50241ACF28B1DF94 EABA6F6D8FE9413A 689CCA184400FDBC 9B124B50CD87472D 81218C1838E7A13C EF5440A39F6EB8E9 8EA3815CD10FE7AD 4127EA76710C83E4 07884C20FCF78236 9AC4DBB5AD2B1156 63A6D2B460E3C689 9A1B8AA8A34897CD 4855E9CB995FF603 05B687D0A50BA91C E8A0160E4FDE7A30 E40FF71D389AD35F 5AA55E860C1465BA 42C43ED3AAB56DC2 DAD33EB2BBFCAB6D C30EA9994377734B FDD52E3C2154EF38 18722A1049B295F2 FD8137EB317C5966 2A176B62D5310E91 201B1E05E9DC597B 1C23929A95CB0AA2 7BC8808050C2F2E6 C723CC44D203DAEB E9FC998FA3B91A5E 845FF7F45E0F5838 DA31875360DCFF5C 87C78B4CD85F637E 7F2BF4B5F18D6285 6EA48F0156CCDF63 B9D3D3668CF5BE88 0B4401A4020C1BA4 D856DBCB773EAB3B E7FCEE3DA3A58ED2 0BE5863F13C16676
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201308130606(name+title). Key = MD5(password) =bbc8ed7246689fb85c6e78d2b5ff9f96, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 8e6e2959-3921-5027-819f-665db8c5b9ad 2 e8d22970-5a7d-8c1b-8ce0-44b22e373f90 3 9e0924bf-1e6b-16c2-acab-d943cb513e0e 4 9123b52c-618f-0ad1-bb05-64e08dcc8512 5 d667db19-9c2b-106b-8173-010be8116121 6 cf139eeb-73c3-1181-b4a9-5a3bf6783165 7 8efbe65f-29fe-2edb-a15a-928b1f112b3c 8 74a26496-8ead-11b4-977f-426f808be34a 9 a478b5f3-b4ec-5c27-9429-c661135743cd 10 08b481ef-f589-577e-ae6c-b3d293090eff 11 e1225b74-b86b-26ef-8484-5b3704e13d5e 12 3a2ebcf7-a472-6799-992f-2d7e4c2146d1 13 1bae87e1-f5b6-46e6-9789-5f5bdf52c26f 14 bbe1ce2b-d453-7a72-8b92-e2e62d1f2f16 15 362cbbf6-8aee-0be3-a4cc-d406fca5c822 16 1996e8d9-9eb5-7a89-acf3-3239b01bf666 17 1ac9762f-439b-82f9-8798-5981c01cadb2 18 d0f194c4-33da-4432-8e1e-4a4796897453 19 56a23d7b-f4f7-484f-81cd-4078244a358c 20 9d710752-90fc-1646-b597-eb02775131f7 21 696b1e59-8541-14e3-a014-ea6bc52114d1 22 fc772140-ec84-6d65-9182-5e959106322b 23 0f8d60b4-fa13-7f27-bff7-f5788b31346e 24 c2f3d686-720c-0590-b890-bf1ad17926a9 25 4be50fda-2b6f-45b1-a54b-6231ed09aa79 26 3e62bd58-2da2-820c-9c4a-a0214dcfcb5f 27 4aaaa4fe-a328-164f-b687-98c7b970a35f 28 18d44835-0aa4-7b9e-89e7-a5c65c3f28d2 29 b7ef38f5-a6cb-038c-85bd-fad4e27bb0a2 30 b938ec75-9e18-37f3-86b3-4cf20aafe963 31 5d5014c5-a749-7fbb-b6c4-0b7f732e3b13 32 a9666dbc-5e33-4628-ad99-ed981abc8837 33 fcc70093-ac2f-0eb1-b77b-ec4407793958 34 eba3e6f1-17dc-388c-a030-599d7fc94500 35 4ab0ee35-f944-5e71-9cb7-df97bfd72270 36 aef1cef9-4289-4091-a765-a7aa1e55e13b 37 094f0e29-256a-1f7d-8147-a857094fbd7b 38 9a12b2b3-8570-8472-9433-6b6f12e0d02a 39 51949bad-a3d8-7128-915b-a3dedd9668c4 40 969e5867-4e0f-1373-934b-2fc49041a994 41 364682d6-3e56-2921-a67a-3061d316153a 42 4604d6b1-8969-3aa9-a2d5-caeabc86373a 43 3f3ea58a-e30a-4479-88f7-68937bc6abf8 44 5595e641-76e7-2777-bbb6-96b236d94113 45 68afa86d-7dd1-3a55-94f8-31bfcb4aaef1 46 b8094ea9-72ad-2f1f-994b-87816660cce2 47 8938dbf6-0ce6-699f-a2df-623b778dee2f 48 eb06165e-735e-81d2-9577-06a7ca3b2d34
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
581011215526470784411670481703740354187123423268. Exactly this sequence comes out ofnew Random(733).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 58 of Run 50 (seed 2,278,890):
new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29). - Conclusion. Filler. The content is fully explained by the two RNGs.