201308140306 1kbcor
explained decrypted filler
seed 703
From the post to its content
As posted (encrypted)
F4129CA93879D57C DA98E5C075A6D6D6 B4F2FE0E89FAD0D8 BFEB392B42286BD7 7E5AA10573150555 D9C7954383D3340D 9057C0D2841C6BBF 36148D469BEAA902 FFEAC760B554ECE3 AEF09F62BD9F3F12 AB2F68D3C7BC61DF 055FFB053AABB74E C29ABED7EFA5964D F6E92315F757969C 024C5250A8C25B55 933C0BF9040685AA A01CA4440475CEF2 F042254590DCC6E0 30622D55099EB260 9B55FF095C33148C 83D061F42B245C7C C6DD2C9EBAD4234E 23066D3D76B6DA64 8286A7F75E399D14 C96C09F4F3CE4C1A 1B402409103CC73E 920BA9A9416A3A6F 1EFBB66723BA11E5 3B94C1A307A5389B 34DDE1A5DF70A93E DEAA16642F7E0334 94AADD048A85FD93 814BF48E3F8920E0 AA1926D3988E3215 B298C3BF9A74A92A D33B741BAA65F039 8ABB199A6A63B564 6D09B8A18324B4E1 59813299FD4446C7 4DDFDCCA490F9198 232FE149C03FFB47 B53E7721E6E53E69 6196885AE97205F3 A598401D8F40BA35 7110132F9F7CC54D 54355DB34FD923AC F4BC9509F5F59B89 CDFD20A8F6653A5E 1C5ABB010F021EB2 4D90DB88E7D7CE61 1C8D92071D8F3A87 9D05F1E645B27F2B 41BCA82126E7258F 452AF0AB1397A11E 65F308A7754ECD31 1D1071BF79ADB9B8 DF9B02E17A06AC31 07950D192E1B764D 884F858C99FA2506 A021FF340C073999 749A5B65D154322E 5A74DD9B47C595CA 6ACAC207D11A15E3 CC4FBA7EDEE2B882 52AB09F7F086529A E170B0975189683B CB6CD2282EB83CEC FB68BCEBDC4E2A01 43F55040EBF58573 6CB83B915B745AA8 F0216B5241BDF558 E702F6DF00F3C97D 98A37BC42D54B2A3 565782FF3545CADA 3C09AD890DCA0885 ADD1903D13FB2545 1A7EC0D9F8849381 9C3752EFEF366922 53DC71A18FD919AF E301CC34B8230CE2 98A6DA2D0515B593 877D0B70DF6A2E33 F724FC02710C92B4 1EB93EBDFA31E81F 93E165FBFA039AEE DDD6924F43E8AF98 3BE20407EBDA7628 87D84A75B46DC285 6265940AA4C516C2 CF83D5707B1D4F8D 834DF553B4367882 D1F520D0E6136EE1 493AAE0C601CFA6E 162F521CF9C73F81 45BF42774DB6F3D5 D9CC5B7C2B6256F4 6F2EBB86AB19927C 99FC4B9A85E775AD 93958F371208D09E E81AD6D7EFA23705 D6DA8367304E0C1C CCAD70D36D7C92D6 4A27F081143E97C6 B74F1D33D678D282 B171A94A4C647B2F A08E892944372297 F03BF3C284ED2C35 A7F542DD457D5ED5 C65440F8075FC8F1 6B1B0319B570922B 2C395BCE4A3BCD2F 246F93017DAA3C20 223338C962F294C3 79127075F95AC826 B47AEC15AE88B9C4 7DCCA95EB8B84D68 44D3353CB00A4CB8 2FB2B8020680A6AE 021A40CF14586570 CE272811E22CD394 7814557E2984E5CF 1EC3B7929119F94F 5C0412C597C1BF78 1D40256254134CC2 70A8E6ADE752E7DA 45313E1DDAD59B5F DF4E86C2D8032758 73259355C677DB5B 6F5556A4AD17C945 6086065F171B2BB9 499371B0BC641B28 F3C51C6B3AFC5E47 13312FDA636E7F37 3EC961165B20A2D0 CC06B32B2864EABA B49008CF3DEDB4C2 381BDD21DFAA594F 3F10A41CD1A2D401 4544DB2D2115B32F C46A3C3F541848A6 9B6CA03501B702CD 9AA38B676D364411 F53600F6238EF6F5 ADD752E01F47B664 46426E7D7846FEBC 5C6B3B4DE9885570 3D129B623B2531A8 D1EED6B1D382C67F 9AEC23FFFF503802 CF40361F158A70C5 9A2BBCD17F38581A CF8A02D0139F65A2 7591A1EE14F7029C 1376021A4ACD0AAE F2B02AA48334DAE1 6C7235EB10FC2209 8DC0C7B16F715059 CE67DAA72F2918FC 8A486EB1AC395D97 3789DA7F432CFC7A ED34E8FDD35AA137 E7932E989810A9E1 6EEBB00AF1B9226A B383C41100254051 277D216A96F6BAC8 627AE8543FACDC23 11B7CE4517E31623 1AC0E6818376FA4B 64EFFA39BFA23381 E13590FE2D4489A7 EBADDC9D44DCF3D8 BC7593664B72BBEE 6AA4D058FBD82F38 953BB0CD03B82339 AB8A960DD650BD98 65A9C904F1DDEC15 0E089EE3E1B9EAF7
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201308140306(name+title). Key = MD5(password) =9d69cfb8b2c8251d654f83b5551eade9, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 e4d09b03-f702-8859-8c83-6293e292c41f 2 8b0e82fb-e7e6-0b89-89f5-fe953a8b0954 3 8a57c490-ed28-1db8-9422-7cea5aea00c3 4 2dd6bd27-5432-59ce-95a1-0b8732e2ad85 5 c20b7c92-bfa1-528c-9b7b-68af555572b7 6 32565d2d-ab24-803c-a8a8-a7d3bbd6db8d 7 cd1743f2-89be-87e7-affb-33093d3dc23a 8 0b60f1d9-64bc-159b-baaf-86a881eb67db 9 1e33015b-7967-8fb3-8c88-317161659127 10 c2fa37c0-c135-4e06-a55d-56131bfe96cb 11 01dfa888-68e0-1fa6-8c42-7870609b9b09 12 1de9903e-b744-2aec-9041-d87f6f755a09 13 636eb3f2-38d0-8e03-837e-f9c577de7e81 14 97e262dc-322b-19fe-aeb0-5506b0b49df3 15 2b7b76db-1d01-0f11-b296-87b2e30c9307 16 575e2b78-cbd2-0f6c-ac8d-6243554d6a4d 17 b28e1478-90ff-3980-8e84-5b2867cd27d3 18 3dff2e69-0811-7b4d-8224-1b6d3f6ab337 19 86b92599-d8c6-6c90-bebd-8127e0880707 20 e5d704ee-03d3-404a-b16a-e593814acbe5 21 e4eaafe0-5b91-2224-835a-66f34edaaeb2 22 78c2f8b0-967f-2faf-8dd8-85cc5d00a51d 23 19b7bd61-6a25-72c0-ae3c-10c1c3988020 24 f813e89a-e352-5589-af0a-3e0853a0eb9e 25 56b79aac-165a-5b84-9505-43712a5f5d42 26 afffc284-ce22-68fd-ab58-064a62fd547e 27 d9bda1a0-dde8-3ca5-8390-64335fc36237 28 398a3643-6a86-2ada-8143-549b0903d5e6 29 aaf4cd35-1633-6ffc-a437-b0199aebbb3d 30 754528fb-eba9-2e94-af0f-eb72a7e76579 31 583bec5d-9b64-6dce-992e-9c488e20bf03 32 cb1e3606-3547-5d9a-aa2d-81f0907016c8 33 0e4b30ce-8c84-844d-a8a5-93271ffc7ea6 34 f4243159-0261-5230-8b1e-7045443efd77 35 5c548991-47a5-1d19-b2e8-fe3d48696f34 36 e2d14d03-ecf9-242a-8d5f-2f714890a18d 37 c37ebf0d-86fe-3d59-851d-7594a84a60a5 38 489fbb16-1b64-471e-b985-dcd5706f5df1 39 c637f5bc-cac7-6237-8d25-39ee98fe5069 40 b0ad7b5d-18d5-1ba1-9ff2-22357473fb75 41 1d1f26b9-7010-1cb8-9bbc-a6fcab0752e8 42 fb27061a-0343-0fa3-b4cf-4db402d9b541 43 819dfca9-968d-3be1-9592-0cb733cd0ede 44 bffb78c8-13fb-713f-83eb-0d5a2e040747
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
80155881841281003764227556326265851234611037. Exactly this sequence comes out ofnew Random(703).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 65 of Run 50 (seed 2,278,890):
new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29). - Conclusion. Filler. The content is fully explained by the two RNGs.