201309131059 1mbg95
explained decrypted filler
seed 975
From the post to its content
As posted (encrypted)
5FC3793335C0AC47 C95238D8DF5C2C5F 8C10105333C6BFDB E91963D5F240D9FD F90CAC8E16325361 3A0ADF35E37E6058 1982B52FE642FB44 DB5971C172F7DF1D 90665767D7948187 0E58C11CF4E823D9 32E2330A59574E7A AF29B10F174F07B5 45B074C2ADC8958A 7ADF563590132EC5 2D2D93F67B6C0F2E FBC4FE5D547FDC3B 38AF55A9AE79D0A4 543C69E588E542E7 2D731D70398B705F 364CF100795EDDE2 51692D7A6F1C20C1 38B952E7DF13D32F A096664A573EA5B1 A7EC6306EFC94615 D88435FD68F8B0FA 6DA43E3292A966C6 0A94655EC1B40699 37C427746DE1C68D B9D0DF784540F2E0 D2A1985C7F12A674 6EFA79E8A3366E1C CEFD10B5C6DFA71D 1AC0CCF378FD0E58 DE24F552FECA0CD2 0EDBCBB1598EF33F E2AB08DED355935F C3E72A47A95C9B71 AFDFEB457DD4FAF6 B76994940D9F1CC8 8952BC313CD26907 32F2E7C393281A45 7310A734C4014D6E 58415B9EE294A50C 3690D75A26D37864 6CA524EEE469FD11 79A457CD1E3633E7 7D190F99AC127891 3307352573475AB6 5FE81D71A620857E 5987D09D771817BC 24BE48CE41844722 C40B32E3E3DBAC55 93A1C6131542D416 17EF50766415FB41 FB6D675140825D70 4893006C1C157BAB 2432C742C50A8916 C7A44ECC6E2C8B91 BE93107FC384D16E 29B305D80E233266 B8EA0AE14BF7DE2D 42858AEF033D7805 20112A94C84E9E77 C193FD928921BD57 9B45944E1DB40D33 C4AC8D1F0BC66887 DD8391C93F0D7C1F E83B75DF8B72B03D A860A080D4B5B23B 98F59CAFB2871655 CD1590448D97E0E4 CBE32EC87F98FA28 50FADD5312B5AD10 2D4884DF155F2B07 230A333F2E5B3FCB 2B7BB3DB4DB24236 C4F7F362495BDE37 F9201A54F7B0DE8A 09FA35321D55A3C5 BCB78ADAFEB7F894 3D693B8B931564A0 35151B13E2DB40F3 96D11D8B20A49C58 82717E2E1CCCC916 E5FDCF28D1855D91 77ED55644291F076 71F59E717AB597FF 59B0C9041F4321C3 950C9D9F4884AB1F 8AF8E94A90F09051 E48E79C2E5AD0D70 4303389D72CFCA00 BEEC3519B672F7F5 A75FCFEBD475AE91 CDB3BF55A317DBB4 9E1D4F1DEA68942C A4BE95AEE667AA67 B459A251BD1FA576 BF0BCEA180F47A5D 2EF7DF13A2A9655F E05990BEEF2DF77E FE1655EA0933B00B F5D8D2946DD067DD F2B35EE020C3BFD9 5901F075E706177D 91F4401DE94DA243 BE79769C603E2E5A 24B72A28D6473E16 05E256E9EFBFCD5C 2B97BEB97F0FDA0A D72EF80C44D3D505 7B8455C66EB51EEA B9EAB1C63BD325F6 FB7D2F98FA681C7B 1BE8701009A8DD22 EA4947443353B2FA 244932BF15B09473 C9E3260B571E5B4E 27C5D7BB477E05FD C0EB8DF4650EEE97 BC5F3B7B33DD0DA8 E41D061639A292D3 77AC580A2E211E1D 69723059E2BEBD44 2AAFDE45FA6AFF7F F9DEE77BFCBD7527 C45554502A0CE5B2 6CA37683E4B8A5FD C31FF3569B5C612C 4704EE62E25132BF A75548A4713AEEEA 2CE24A4F63BD5521 C94E35B866C80A62 2BBF20D0A160D651 A65BD2D78DA69267 150439049A1FB69B 8733ECCFD185964B 5E94927B1574533A ECEE50FAAC7FC4B2 1DDF16499715B9DC E75E8CDE06145ECC E196CF61DB857B20 6133CCCCCA9B99DD F9E3CF09718AC6F6 CBB5259C220EECBF 7803F54A1D7D779A DD83AA5E2851931D 2C9EDEFB617E63F1 B84B89260203E505 A478637110215804 6245DD757B14A17B FA0D7602B2F3D383 B528975248D115BF 34C7B66B61264387 A2F95243D0D3BBDC 8A1FD6427A909A6D 886D9ABCDEC7D196 697348C0C302ADCD 6D867030C8DACC23 5AC81ECE1887866B EFD646584EC1447C A4595065BE55D540 7C40779EC43AD236 065125301F835BE4 D50C8CA573D89A5E 5636C53D35905813 909B34FA25858661 7841C0E5CC255D53 1FC41F024720D7E5 DD39893E92A31DF4 DCFCB121F33E780B 4780B15028E2C0D5 C2A17965366FEDD6 3EC8931CE9186BBB 08174069E76537D3 6770B63CF327C52F 56E94A5595ACAF86
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201309131059(name+title). Key = MD5(password) =ff160db7db3f8103aa6398791efeeeb7, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 66d7dcf8-ddb5-0971-9af8-961b578df0a1 2 50d35283-1390-84cb-8be6-18f44f176a15 3 3433a04f-85ae-2e95-b44d-750103217e40 4 2df196b0-f255-56ec-ac7c-620b2e0e3aab 5 a919f072-8553-3786-b8fb-2ec13f88d9e0 6 710def08-5c06-5c80-858d-257d87b3fc53 7 0fcabfe1-9c96-6b5b-ac1e-e21c2b800c6e 8 0c7ff003-c661-5bc9-b3d9-740039cdb99f 9 9289e9a6-8f51-5c9d-b87e-340f59b7e0e9 10 a964e13d-b60e-7da2-b1b7-1315b4e1ade1 11 2e448ddf-bb1f-59dc-9b95-09fcc8ebecf9 12 6a8cd764-50ea-5dfa-940e-a6438ded19d8 13 dadcb5a5-51de-8d76-923a-7252f74bfa27 14 356597a1-e730-61df-b151-a34827bb75e3 15 3172fee8-3844-4893-a379-24ca215e83bb 16 00f42c67-e696-85e1-8a4b-772e010b4905 17 9194e60e-3992-6d99-a553-b044c6e3eea0 18 30202e38-e8b2-46b7-961a-fdc4d8dd14a0 19 ae031769-a03c-0565-951f-a3f91160f0a6 20 f68a607f-1028-75b8-8382-46ee928be30c 21 e273d0ac-0b06-35cf-b694-457f84359ac7 22 205df0b8-773f-0859-910b-71552ed36726 23 7a0e8840-54dd-606a-81ab-df7a541258c9 24 2c3a2dc8-d469-54a3-b777-ac6eb483e060 25 d5c740a9-35ae-2d40-ba78-251f98b0bc3a 26 63c5dc3d-9d9a-50df-af20-6eb6b91ee3d9 27 62ecfad2-4d64-1c7f-a942-ca631e20a339 28 370d7ec4-c460-710d-b612-217b78d3850c 29 6c936158-bd44-779b-8d08-0c42b7b5cd9a 30 0933d9c4-df30-2034-bb10-3a5a1e85f41b 31 1ba0afc6-a699-1590-9687-1cd070b4bac4 32 af5cadd0-8810-21dc-bede-55af574636df 33 dfb25ef6-b26b-363a-b56a-b5a680a782b9 34 cf8de63f-2cd6-3021-8873-73ca892ec0c9 35 247499cb-a750-0f22-bc0a-2789652d7419 36 06bbcba4-b01c-0a8d-b408-761205a21a10 37 22c976c4-126f-61b3-b891-5c315c9f92d8 38 c292e09f-c7f1-7354-8204-ca4ea8ae79b2 39 c2ac6dd9-2a2b-202a-b250-c3a19042661e 40 706f4c2a-8329-51dc-8f0e-83b7e39d8321 41 aca1e5ee-f8c1-0734-a383-241b3ed04297 42 b42dc33e-3594-5390-ba43-d1a64e2c5b9e 43 f9fd78c8-ddbe-8a88-bc68-1d4c50b289d9 44 ed45006c-7d2c-5adc-a8db-9159123dc6e0
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
08253565575586486407306525177212330067250585. Exactly this sequence comes out ofnew Random(975).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 22 of Run 53 (seed 26,950,390):
new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30). - Conclusion. Filler. The content is fully explained by the two RNGs.