201309142159 1mesw3
explained decrypted filler
seed 120
From the post to its content
As posted (encrypted)
189EEA45F77F90EA 2A0181EFC418EEA5 AC692BC7B371F781 1BAA5FE51EA3BC33 F190051F24717F17 59E005A6C936FC88 3729882172CAD9FC 1DC626674209D32F A680DE5C4C59CE4F D3C854F1A11957E9 B080933DF6F16C9C A485A9D705501063 BC5D67DD069735AF EE90938B245D0964 5196A9BAF7277D74 7E7E09583D145BFF A5197683457DAAFC 8C8FAFF5A363BFD0 401F34453E97702E D322B36410A4F52B 709E45BE4F13A96A 6C6E9F90929A93EB 151D75E5E1F888E4 925FE43E50718E65 EEB64BDB12F09D50 7BCC03F66F427419 E319B98BEC2FA468 347512BF1DC482C2 22A7E61B438B0DF3 5C8913B1C0D0D996 A98C62F92DE276B1 257F0D1758743750 228B20B5800B24DF 8F18F90BD1B261E5 F6291559815965C6 654CD0028141CB88 353D4F57B5BB0E61 160BCBE43C3580A1 4F32858281261C96 0FABD598128593A2 E87FA17C1912CBDC D692DF144373754D 7309227B9F73256C 4714B7BB53A81D8A AB1FEE2F43EA6C8E 2252876F3FE0A338 C9EAFFE4202A6353 63102F2AFA47F695 BF39AE041533783B 21E8AA3C068DE441 F093E801976D3BC4 210BDF1BB2581726 D55D98787FDDE3B7 9A3D70E0A9690C57 C078A90E489E2FDF B1CE7C94F067AABE BBD0FB4EA3C8108A 24E64B070D04E170 5954F58165870603 42F6E31E0E6152C8 A8FC42EC35E9371D 95543143653F14FD 78B1E31D52521CA0 CD4C2C14403B4A24 773E54D65C30C533 FCDFE7D5A5F6EDDB 4CE8FF72A36CD8DD C694E6E77859E56D 943A85971BD62608 9ACE5884C77C01D7 F0B9D6D29B517834 35EFF1C407195560 527B203C6AAC3BD7 E5A9A69CEAEF0CF3 CF9BA1E1F3372780 23B5454D1D5AAF4A 597FACD8678FEB12 6C6617EE94B8DBAE 1C76BA82374AD17C CD59054A62ADC0A0 3FAAC9FD53BF4656 FEF8B9F8AD43EA1A 5B87C566E54FBFA8 604B718BADC9F010 0B661B716AF2CDD0 BBDFEA490CA874D2 E0C18FF107E193F6 EEC2298568A8362B 6022C648BDD189E3 25F2012B93BCA0C2 9F8805A07D179DE5 9FF80DDEFE81C496 8196742C35B624E7 7ECCF342B092B3B7 7BC7D8968EFA03DA 91EA87A196C7FB99 1EB60AF04B59FF21 DB0C4E3C8B1495D5 284552069433EAF6 7A42553DC5AE4F90 C02C3068C2DBBF24 C065F242F7D0F170 9F2BFB5A7DB4F87E C13BBCEE70BDEB73 EDF14ED267FB459A E855991B49EAEF98 A6447BBC877192C9 EEEED31E4C5CB0F5 6B8D28F8905B78BD 97FD252C0D2BFC86 2A8FD2FDDEA20400 9C265DECEDDCE2E5 71B72CC4F723A200 C1316BB90AEAE7E8 845EFF9389146CDE 06054C5577522981 F465A9D11F34B897 7D8ED81FB60535E5 469C21A307731744 B44889ECF0A90B63 65DD4C6C9A5ED725 FDEED6D95C770FF6 38F24750861728A3 E0C1521794DE5C10 08D07CCC6C470397 DC9A46CDC4C4343E 449A3489C30B5DF2 34BA15339551C5CB D066A7C054D59D38 4706F494FF01517D 08D107CC5A8D5B33 650A66042DE09CCA 3E74FBB86E24595B 246EC451EABF68F5 9A8ECA05E309C4FD 761EEB4A667C4CA7 C937DE1148C99CD5 4D4860ABAC6C00C4 F593F7DE610888F5 2D0931AA3A1473E3 1557225AE0655B7A 512770CEFC6F8EF5 FEE8A6E0CF4FD088 15C87345AB4E1677 9F313A2A629D5D7B D653A3D5154C0007 542ED8AB388D4639 2783A5D61D440463 EC48DB7D4D8B4364 A76A3865F65D56C2 A6EF6AC7EDBF518F 421BC664BD84AD95 14689D80F198651E 788C7193B73C9EE7 C21E934BFB7BF2D6 0C698203461DF042 8A4AF3744998AE82 A59E0793CB5CDD87 79167FE50046D10B 8CB1CD97B3079921 1388DB12165A920E D1FD25C8B8D93D0E 02737D298C97FEA8 F24759E60F9BB025 3B616F20F9CE4B12 3EACEC5040B4ECDB 74AC315CDBEE1C2E AC67012110FAFCF1 796D1AC8583AB92F D90C11B125082E43 5E41DB18C6EA5BC3 59A01924859329ED CBA0C33AF12CC58F C4D44A9449F1C37F 7C582016CFF9CFBD DFF82CB3AC33FB3D B48948BC147208FC
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201309142159(name+title). Key = MD5(password) =7f226cdde73c4dd4cdf95b119e24c3a6, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 05ac6963-b713-35d2-be33-0489a12321d8 2 074ac0f1-e951-0315-914f-1f542344d73c 3 6c187cd0-5432-5fd6-82c7-e6824ee7d41a 4 1d20999a-0d46-113e-95ad-9574790b3511 5 5825d91b-a9eb-3904-a803-3ddb7f07fcff 6 37c3952b-47b0-33b6-85d4-e50bcf273dbf 7 e8d3c090-29dc-6e83-9c06-72851bffe95b 8 063ce0c6-6acf-535f-b33d-fe4785b73fbc 9 4b3d7b91-b89c-7a4e-9b89-517d57377ff0 10 892d67f1-ff27-4418-80dd-5f563117e383 11 b8606f59-fdec-62d2-a33e-a07f0f603068 12 917a52cd-068a-1ba7-b72d-2deff28f4684 13 b425f803-ae31-15bc-ac21-f0e1af78b223 14 d4f21b9c-6c31-8019-91ca-4ee807c566d1 15 63b7a57c-1547-892d-81f1-0db17b3e5b30 16 527c91c0-9c01-8d73-8da9-8b844d4c63e8 17 329e7a72-1610-2d55-9d60-64d2d8599500 18 e004d095-4167-30c7-b4f5-b90aa2d3a63c 19 4df13a45-aeee-8cb8-ac8f-6648fd7a1a10 20 32e72acb-bf49-706d-bfa5-953c2d95b01b 21 514132dd-7c24-6a1d-a2a1-903f9199c80c 22 513b2e98-c447-29c8-959c-c5b3ed5adee0 23 508bf72e-b670-25a6-a698-f8e5c0867e62 24 a3611f36-f98b-8d21-aa57-873afb414661 25 a7ff15c2-d532-4e8a-aa46-d73b6404f217 26 6be1a2fd-8def-6c9a-9ecb-ff1d99589b1c 27 89ae0079-d24b-006c-b694-20755e542a57 28 1d5bc5ee-d217-0e30-8167-4f760f0ff400 29 7bfe24a7-8cad-61f4-9373-8010c9281627 30 31bd3f2b-8e1a-66e8-9da2-c8cf498bd534 31 95bde875-f8df-4926-94d5-f497da18ae3e 32 8f234620-2c88-0566-b435-f9603f9760c8 33 07c15071-1488-49ae-b80a-dfce8e298f76 34 172c7444-5dc2-89e7-be7d-1decf52f9120 35 e170887c-b85a-422f-84f6-f70a5896940b 36 d8ab2aa5-91b0-832f-b663-7ba4ca012ed2 37 2494af9c-b375-3b14-8ef3-0a08f1141c33 38 a3e415f2-634a-19b7-83ec-b29b66483b02 39 7eb8d2c4-7f2d-85db-9902-6d916009414e 40 c51f58aa-379f-0076-a81e-a5228024ba02 41 853712f5-b4bb-515c-9648-1482534ddb75 42 5b767806-9b3b-0e32-9e4e-2e91db5f43f9 43 98a15e69-3c30-6972-83a1-41e004f23374 44 883fdeb0-6d2d-7d34-b383-ada170fce202
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
30513365746118882387622846006640484831805067. Exactly this sequence comes out ofnew Random(120).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 57 of Run 53 (seed 26,950,390):
new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30). - Conclusion. Filler. The content is fully explained by the two RNGs.