201308272229 1l79pm
explained decrypted filler
3DES(name+title) ECB, 44 GUIDs, seed 628
From the post to its content
As posted (encrypted)
73BD5E0F3ACD4D81 CF53798BC466DFCE 0C5F2EA10A5DDEF3 CBB8B89973FD0D98 3EA7484C70D5DA8A 85CD83E369AA176A ACCB72E1F2855B88 56DD6E7D193625C5 D311BC533E3A622E 6F90FE0B58DEBF55 0581CF6E132A2BCD 7EB122E7784ED769 3AD56E87031B5820 32348D1BB8E8BC48 FB54FA3384669BD8 DD6E090D3CA062F3 900A37D2D67DE145 4EA1069F3CFABBB7 612185D79000DBCD E1525E758973731B 027B4A70484A50A9 A882822967009AEA C28C4A2A00324C0B DD0CBC6D234ADEFC A4EF280DBD804B4F F7CACAE6519438E1 488EB8058C3FC660 0435DC76DBE62571 3F8E7E81491EA94F 7987B89CFDD0892A 77F3A70330675628 4ACBA4004E602579 531741A71ED4A929 5031C1485BF3C47E 7184DDC150137964 41BDCE05826CD8CD 36E73570B3DA8643 C91370115FEACDA1 6264AC466494E754 BB0DC1DA204074CB 4EE0A4DACD64C6AC 06FCA157C64C2039 03AD8E0A1314591B 0999AB7FED86F359 DDBE3C62764E3AD7 2E32379F14E716FD 3648C77F50F235BB E235856B57596925 07F4E1AF549F079F 47EB989C02D16ED9 588E9426C4592262 2AFAA343736C73A6 5AC96CD74C29D4EF B4BA5C053C2E6D56 BE4B862B7F164A3C C92E677AA74558C0 B8D94223C5790BB7 5F46F07F26362CCE 32F5703CFDCBAF02 DF22089645A20152 8C66D95447A9D3D9 86AB2DBD8D933C34 A9F4154196F26342 2413130894550AC1 F434615724300E25 E6B24D36CE72BB33 E7034A31ED9F1CEB 9E141ADA0F520145 0E582489BBA26E92 6107CD7A2A90FC42 29E1BF87E56FC944 255B17E4E51A17D1 CB66870A94368D6F 2C8D365FE0EBA1F0 54089AB0A2295CEA AF8193DA7CF0442A F1D8B4141E454A6E C0BD4452FADCA96B 495CD7EF81C87924 193C33003B5B0A68 E4E1E6FAD16B51A7 3856226E84C93144 3574E85D1B966E4D 953313C0EE798198 FCA91D5585400A99 8270BA39DD65BE1F 9A7EF720CB41012E 130E4F2AD0A5B86B ECE8E050A42115D9 6AE29CA89D3D13CF AE9A56CF7DF37459 DD5416FF969961B4 4544B9605EA8A3FB 06A112CF4E6BE8CF 442E66446F319B78 3DED9F34959485B9 2832A994BBE53EEF B3289AE941FC0DD5 CABB6346CAF4431C 8216EA6AB9549F57 B01EA7B9094330A6 657606F04ED8966A 8BC391315C69E953 72449D36C22934E4 2810D108F34EB60A A8D8899D9568D435 B1B0020A384C347A 23ABB809EE908E42 076D03B448C1C279 2114A5ED3AED071A DE72A725AA658229 FA133D78610CF7FB 41E39F94CDDF3BAE 5E47F6AB31CA9258 974F281025D6AF34 BACF93EA5EA46899 1F0D34FB54594CF0 9D6BD4B486218BEB EAEF84DA3A5E70F5 719F33A5DB488458 4F45B4B324DCD854 3030C4906A3CB94F E209F0E377C5A55C 901D86D2F232FDC6 B11ECA68D2ECD4D7 CA78EC51E587CB36 5C07776C2FFBD4E3 B55278BA090ED4CD 4D5D4B19A62A661C D97068F37CF43FC4 A55615612426E363 0A46CC27113BE5B5 62CDF1839EEAEC05 5E8F704850F52369 B6BB406C26389DF5 0305D6240F439D4F 99D23CE17EB17D9F A1055AF39051E0A1 7E70B02D30EE39D1 B085EF4D826581A7 2CAB40CA4F201963 054E8AEA20A5BA2D 4398A6E37068C751 255E4C2FE6DCEB25 EE007517F825EFE2 0046694E851734FD 92D6CEBF368F7246 D43791A7D5D6D77C 5DD14BBC2C72474B 6B5821DF5551C953 3614BB3DF45C1D1D 85E87813FB394C63 6CFB3604527B81E8 EC12B90AB067DE95 8D35FCF2A4BB7701 8EF2B89EF21EC39C 748E8F8B081F3EB5 7873CA01A7E9B19E B57B0C2C662A78F6 AD3CD23BE39A3C4F F303654F6B5E17FD 876D943F16E5D9AA CDD2F4CC5562B5C3 D87307986B57D43A CE545E53BA5ECF73 AC2A1520983A9F0D AB9F2FED7C23E03A B29BAA67EBFF3463 1BEB1BE32A47A4E1 2207EE8D5CFBEE11 2236EAFC35F8EB5D D292EBAB847F2DEF 59A0E88CF95530D9 94605B21F7BBACB4 4A793C816F3C17AD AD66AE3B8278D17D DEB4629854BC088D
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201308272229(name+title). Key = MD5(password) =f1cbfb9dae9bb46b6e2cfd9ae4e80219, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 a2bdd38d-6ca7-7069-bb17-cc264135d5b4 2 60061dcd-e243-0055-a9d4-d9c0fc87b018 3 ea09df3c-e91f-61d0-817a-4cc6d1aeaaef 4 342ee39b-32e5-5c9e-90f9-7d6db195630e 5 cfc9ca0d-cbcd-660f-8284-44f6c9924206 6 986629bb-cc99-33a3-b261-6f52249c73ed 7 8b128a7f-f7d1-265c-baa9-ccd334bcfa08 8 4e951111-8b65-4fd9-97d1-81c757d0ac03 9 8070d92b-eff0-647a-b718-10fec90edc29 10 a0deaa2b-a1e5-753b-bf73-cc8e1e538d33 11 36619c7c-217b-8dc0-b0aa-1d913472b902 12 db44445b-b116-6574-9906-219bc8e6705f 13 95296671-989b-3057-9ea8-10b9862a7ecb 14 e092fa27-589a-1889-82ed-4443a8b402a2 15 e3805644-f470-5261-af38-223f04c345aa 16 eea2d7e7-fb28-235e-95c8-2183d6297d4d 17 d14fbce5-96c0-7d8f-a24f-a6b87fdf9db9 18 f2de6eb6-73f5-3280-b4f9-2a28463afa7c 19 c3dbfc2c-d936-6afc-b269-411fb2857380 20 40501632-4591-4755-9897-27018e39489f 21 cc83d40b-86a0-2efe-8eca-7ad2e3571442 22 e4bba9e4-f10e-817e-8000-800f55b7dc38 23 502b3353-0d4d-1084-962d-4a52e3a358cb 24 5243982b-f764-3b5a-bf46-8d03d47abf79 25 27c39706-1462-2dea-83ce-01e3dfb0fbe1 26 6860b997-9bd6-440a-b555-8ae70ac3bfac 27 702ee4da-a7de-76ce-b1d0-437efb1ec928 28 b6a64075-c575-7447-90ce-ba7894c9c59d 29 534be109-c92d-0521-b40b-590c8c2867fd 30 0d374574-73bd-776d-9b30-1380ea2fe4f6 31 25234351-7fd2-09bf-ad28-9f8ecb25bcaa 32 fddf6fa0-3c7f-79a1-b24d-08d92546d9ea 33 637d1b2d-d6df-7e28-8256-da944865aea4 34 a6fb746b-eceb-6f9a-83ff-7675a3b290c5 35 7a5e0828-fe4d-8e38-9267-4f7ded4c22d1 36 fc969602-8223-83b3-bf55-7529515b98ad 37 c4afe891-d183-24cf-ab2b-2db0f7757db9 38 3a995fcf-5f38-3640-882c-a57d0fdee1ba 39 32cee02c-a2f9-8fe4-ac96-6ee929b796d6 40 2ce47362-302b-4d39-acd9-023f7feab04f 41 b41bd981-d56f-5310-ad67-5be8e185cb06 42 b8bd6e54-42f0-1fdd-bbf6-300880e786ff 43 9167d1b5-e510-3545-8d5d-21393b40ce15 44 5e974676-d0a9-3864-9641-4c65949aab2d
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
70656324678631527364281324770707768823845133. Exactly this sequence comes out ofnew Random(628).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 12 of Run 51 (seed 714,271,718):
new Random(714271718), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-13 23:35–10:35). - Conclusion. Filler. The content is fully explained by the two RNGs.