201308230829 1kx7ve
explained decrypted filler
seed 496
From the post to its content
As posted (encrypted)
38F5288639AE1F8F E88343F3A68B7C66 5447B8B88AC43BEB 0A26D63C18093501 D4FA9D3B4C04183D 3FDF605D3FD0AD54 D247043B73D4E1A3 5AA54BEBAAF15DA3 4DA2510B6DD13650 436842738E590A06 70761DA07D5BD08D A71B9D166AF2E268 3D38FBFFF359D8CC B1918EFF1F8369B2 2B54624AF7B8981B D4E1273466A0C9D5 AF5306D25F9F1FD0 34C428F830591740 CBF71865FBE444F5 E528032B62EDE269 7D580A0735A43F00 5E27804B79E91434 2C3853B4550C320B B4820E2308D152D6 51A9AAC45EA6B746 088DC09824A74367 873DB7FE0AEB6682 B902836B2B955580 543639C37DF3B406 9EE442E714771C5C A5C1C7E214F73748 B32A06D2D45C88AF 95DD33DAB38A4F5B 291EDF9A2F4FE3E5 842D9A332A81D08E 2AF8D6E8DA068A9A 20ECD11C323268CC ACC4435CD957C8AC A0DCC987ED876F2A 48F94F4D736462A4 AC2C2634CA391FD8 8669014B8394BAA0 FB5C16AC6DE1F017 8D7DD2EA1EE21BC3 8BDBB935C14AE7B1 27A344AFFD7E19D4 CAAE4533AD3D5CDC 2BBC8A4BFE4E9998 E43A91B3B941ABDB EA09C3DD59B2DE7C ADDE8916775C6C0D EBE2011A1A6E8F28 0E382F16DCF36B06 8B27FE94729D5BC2 7879EC0B8A267393 879970EFCF863457 4060BE9456BCC379 7EC1A9287CA09F45 A38431FAE05D05D3 09D3845572213CE3 58799A8D4EAAD455 845DB1E785284843 8BBC861580BD25CA 2CDDE782AA1C82E1 D9845E91904D3A22 B5B34A4AA7A55249 8C76751B8A842A3E B26DC177946A3762 FAFFAF8AA9C99C6D 4AA632860523A2D9 F5F8EAB2D118063A BD5D9B7826266F73 F958195AE3CD51E7 AA2C1A557F4D0EFF 18004AAD8BF21963 BA3BCB1A5ADDD04A E0D95A6EE5D478B5 A4C8DDB702A68D92 AFF76494356367F0 59C92BE582E4D012 1DB9EBC0B23B7F8B 738C4C19769B425A 745150D38B1F1093 8F1EC573A6CB212D 660764A1288D2641 70874656C4B04C9C 1D793AEA6F32A13B 2AC96B64FDA39B76 867EB47B74319034 C619C7A89EFB487B 61FA2B78F218139D 85821EC552F0B30C 96A7EEC3E356E26E 497BCA75214FCFD3 47D5B1F961248391 4B309EB6546BC5C9 853102852ABAFE7B DD8BEE86A34D7415 1E0F4DC7A2448150 9AF4B8B20F591BF9 DB9779A2C60D6DAA 948F9F7CFD2E93A4 EB1ABE4390FCA87F 35ECAF7AF79A83C2 D468E1AF54280DF7 4E23EE6B4E497C87 AC86A59019A47406 83528D02DBED553A 4646FB9E1A7B58C9 A43068AC5623E64C 68B12319FF27A87D A4D85236E37E7F25 5D9B31EDADFDCBFC 99E54740423542AF 7360A604886B0015 1F44F761CE80A866 676DEF012ED8D3C0 99CECB2D7FBA1EB4 BFD1454406471BF9 92C8CB5CAAC27709 47C67CD51AF59D1D 0166ACB34AEFCFE6 7C64763E02B4AA2F 6C1424138278E818 94140041645046AE F6ED77CAEB5E7B8D 14C52E58AEBCA780 BD99316730D68963 7405BEC4FCD4D402 BF3F40F85C53E4DF 4FAF7803EE736475 A994923E038B5B88 A068796C8C68BDBC 694EFCA3D35D392C BEE2B903409E5587 52BEBEA70DDB1AD5 C51FCB67FD1614D4 176E28C97D4305F7 21DBF85A8A93DC28 B165FA74C8334E51 E59DF45193C1CE38 16576B62108B3DD5 61B76F90ABE58D02 920C5D728D63D6B2 9107643309DB93DE 3BEB7FFCA93A0F83 E54F37373FAD20AE 8013653E417ADF19 1126483ECD7A95FB 5E02964C3B272A40 CF8D1DAE2FD7EA42 BA46207849D70AB6 B16DA70E4DF7B4C9 D5A29CC99C75A3B5 A0197497CE3106B1 0745F302B0BFF4B4 31167999E8E1726D 2C6AA19C1ECCC181 964A0646EF3A0911 C3C329A2D19399EC F542BC242EBA801E CEC0DDFD3723BCB7 51860CFF600DB850 5515CF965264A3CD 358B7532DEB6AE69 E383852E92E471EC D672B45A40AA96DF A7B0C6BCEE481C6F 77B36873A9957DC8 33529226E2EB7F6F E897AC143C28CBD7 653387828DE803B1 8A94B1B51EDC3727 094A88657CE6889F A53DC9A123B03549 A54F3330428A4F70 410B252B4013A7B4 9F6C4669D27C9A70 53D86E711ABF10DA 7DBB486EB8D8091E E8FAA91698E6986A 47C8E65377689EF3 29C4352DF3C48D2C 4F0696D758D23749 3E587CE013A038F4 802975A498658F86 EDEC2B9E76FCAB28 9092B3ACF3464392 FA51FF43B54CD48D DA90A95FB0A8C830 83184D54C3847C29 296E460DCC06F8E2 5C945F8FF0211BD3
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201308230829(name+title). Key = MD5(password) =bb9a1d54fe45aab7e3beed06670b70d3, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 c3769f09-fcee-7a5c-90d0-7b25396a628d 2 009114df-8d17-384c-9913-a58b0166daf3 3 bd1e17ef-3f9d-47f4-bbce-096ad672ad38 4 4a8c690d-9e26-3717-be48-2d5a23cd4eef 5 5ab1808c-d3b8-1e1f-b7dd-91fe88d8c6b2 6 182aabbd-a90d-0a8e-be80-1f01fe7bc0e1 7 1375c955-d5ac-1452-9b9b-6d5dafc298d1 8 56f67de7-c3dd-2e3d-a3be-aa6aded015a4 9 6f6c7cc3-77e9-35f6-902f-e9ce96d8a3e4 10 092bf46d-a27d-1ec6-a0f6-185d91511086 11 3549d6f6-28fd-6c48-a747-839dad649cd5 12 7402264a-2688-631c-9b59-f5bbe41c7764 13 fbf1aa4a-e131-5d08-b342-108bfeb34b59 14 3f2a8430-09b0-434f-ace6-aa86883cb27d 15 aafbcc1a-0232-18b2-9230-16ba835f0a8f 16 31a00127-325b-7ec6-8259-5c8f54d18fc0 17 8baccfed-7086-3cc2-b0ea-da891465c703 18 d2d0ccae-29e3-498c-a0ff-d70df9aab767 19 9516da00-970c-0901-81b3-b6ecd9a7885a 20 f3d9f26f-bd44-3ea9-963c-73df1e0fba06 21 3e0d077b-7997-66f6-9263-0a098e2a5c0b 22 6337e9ee-84b1-4939-a11a-4a0b69ea4517 23 2c8c7933-b238-78af-aab1-055d82081df7 24 5ae9946a-4fa4-27de-9671-048496024fa2 25 4837c0d6-365e-223b-9ecf-a7d5504a63e1 26 b70d7080-9c38-4c8c-827e-1654b5da516e 27 93bd6062-e26e-3db9-83c1-f90487408f22 28 c4f954fe-2095-0c01-bc18-1eabe32abcd3 29 66e65706-6656-45de-b72a-574f2d7a46fe 30 12600c04-825c-4461-ad4b-3b40454aa8d3 31 4afb53cf-3e1a-2741-998b-f1577fac1b00 32 992901f0-fe48-0a04-8097-80ebf3f55bec 33 24415435-8ccd-68ed-b9a1-5f5835798bf7 34 7a94c101-3e99-3cb0-b655-ae58292ab61b 35 9f32d48b-836d-707e-93d2-e4febfdf70c3 36 8a55e5ad-1b4e-2e34-88f3-9231e05a3f92 37 19307af0-7712-8286-9276-eec636e9a17f 38 4c8ca13b-5f87-301f-9897-621294c6ddca 39 33bb9ab8-067b-2b77-9a98-14eb26e5da03 40 141abb1a-c854-531a-9705-0000c5c64270 41 a69b57a8-0af1-28b1-b5ec-9f0253d4af97 42 e160a297-7139-4422-aa7e-af6dca4d2c18 43 8b65fd93-f9f3-8e82-998a-85c8284ac1b1 44 9c640e5b-906c-347e-86d6-06f600ff8a7f 45 078b3a82-5704-304a-a0ba-15d48d523592 46 d97fd1ed-d829-5be8-884c-9a18ab2b1893 47 ce2b8af7-c708-0258-80d6-d9d4454693fb 48 cd3ccc7f-c3af-26c3-9e9b-199ee51cb522
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
734310123166541734036472243044206372832524833502. Exactly this sequence comes out ofnew Random(496).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 2 of Run 51 (seed 714,271,718):
new Random(714271718), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-13 23:35–10:35). - Conclusion. Filler. The content is fully explained by the two RNGs.