201309221232 1mwf46
explained decrypted filler
seed 698
From the post to its content
As posted (encrypted)
D61519D27325ACBD E32E8298426D1258 9BB7FE8250B9D53A 16364FF46CBEA146 1889BAD97E05D468 3B59314AB898A790 1B3CBA9B9DAA1BA9 EDD1C97856450282 FD254D3128954271 689DED83DF3F821D EF917271BB12C0D9 5DBE03E34BA9365B 4166AA33B31781E8 111711B2DE044F2C 2753E4875CC91626 DD0D049529052811 545B898A14DAE37F 4A7027B21662A48B AEDFAB9E0B8E4E44 DE411DF6CA014FAE A49C246DD6EDD0AD 77D1D83EB500406C F12C49AFE01C6D2A 0D2F8C3850545FF1 0BCF04A079B3D775 08408F69B7779996 8EADFD966018AB4E 2EBF66AD97336E47 E1D3A695B63EA920 99D6026395D7EF66 9437D8C3614D17A5 2CB34D7D4E97C852 CE206502F9DFA9AD 73300CA6AB79012D 1D3C59AA2A8340B5 B6E248E88D007610 99EE4CEBA5DC1877 C47CE188EDC2F533 032F93F242388B80 D4C00E14D038ED6B 9C50CBCD81AD6DC5 CA3764B08800039C 00580A092307A9ED 72E418CDED9BCE9B 1F605CFE434C69FF 030102B8D6E785BB CFD2E12F51EF5E37 2EFD2AFE297954FF 4F533DA3FA58323B 928B6EF89970A227 8EEB9B2A68B73218 4035E1784ADD5FB5 9B2375A16C81262C 22E3CEFAC2E1DEA0 E37B42249B5C828A B451C12391201D1E 4326BF2D94F0D095 BDA1A4C8C1538EDA 7C2532F377A46ABE 07AE16CD1FD1AD65 DAF264726D69582E 25F4219AD8392574 C3FDDCF3E80D0AFC 4A75561F8901BC40 389C24E591A512AB 6C5DD642B28246E1 21892C7E9E22AEC0 1EEFE36AE4C5844C F7A2A67080DD572A 2993890904C27DED 4EC304206634E312 F32B15A31EE166CF DA4951002E9F1F8F 26E5EA6839777093 931CA1C32E6145DF 90F96554702099D5 63FCFDABE8ED626D 61505D2E1E2A7E77 8DF93B89E2BFAF89 9A8F7A24BBB9A767 1D5EBD5B8075C636 72AC8E864E24DC02 886A11EEE78D8D0B 4C74993B012DD9A8 330CF8625E92E4AD 2649EF3209CC8ED0 9804C32AFF3FBF4C 9D85E3D727263403 46547BFCA095FDCC 6FE993BDDF5B7AB4 6391F87EB8439DB6 E7F07DEC816357BF 9BC200AB81F06E4F 184FD8A842B3AC07 2E4F6347FD5DEF92 52FE81C5F63D74DE C34C8750FF54D368 9ABAA2C737DCDD29 8E7F60822A50AC14 BC28362D3152A2FF 416F16A45C77A705 786E24EF1C9D3A27 7904CAB0165D714E 74EAD7FA80796E4E AF64811596C33E08 C0A201FE47790756 F5E9C52E1A8438C1 D553A5DBF510CB34 02A6687CAB4FC807 925C351D3A4B82AE CE3343C4396BF5A7 9DB20AE01FA44F33 18E315EF7A36BAF6 1263AB78EE79D5CE 391C9C4B3D819C18 4DD6EA0D001C496E CA11532F322FCFAC 4E6FA033A94F9EE4 32E392F4E05FF9B3 C5C6D3E124A334D9 5D88EC2BC9DE6857 AADD62AA754676EA E53DCE71A3BD7258 749CBE7EA75DE537 4BCB4DDA9EB52D42 7F6A284341083903 754466003D912614 7B25DE2CCCBE3110 C6535C263D15BD45 29A9670EF9F0ADDD 0524C58995F5133E 8D366E1546533709 0E394EE663C7B1F4 F7D3D67E46337C3D C75D81621DB21209 C56EC095EFC97F6D 7DA7C6AC361315DF 0040F2F889B5CFE7 379B8F625FDE00BA 0C84D5710A9500BA 3883B5E025FA9FEA AD626E8F11A457C1 1C7A463999A5A0F0 23869A798454C50D 6FCE852A9C83DBBD 0E70E1FFB0EDFA4B 85AF5B306995F25C 4E58D284571FCFC1 A1AE9B1345125C61 A8A2D5B10B62D418 784E54CCB0D226E5 746ED20EC0127F2A 78E96B082B1B575C 3366F6552A63B1BF CDB368ACDFE653C7 61A3579F93F3C949 EBA7C57BD8444DD0 55C82E699B8EDF4D 7A31F95903433C91 229692473DD97906 5FC33E0050D7295D 9E44A137D87BFA5E 5901ACC345C1DA68 BE679425F0EC1013 144C4AE63C91FE15 E6078A031091EA08 E77DA64EF88246E0 08650E4F61BD1318 A47B6D3981882ACF BFBDD256A6FD96B0 D19D73CB72693803 F3D6B2F161AC183D 8F9787FFC61DAC71 D2CDDC60A7772AE9 D12A6A22ADEE21F1 70F9A71D69190DA1 CEF08C3B15DD95C8
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201309221232(name+title). Key = MD5(password) =bd2db4cc81fc7551512c897f849b34ee, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 0e06f855-b139-3c94-a4cb-6c5e88c0df81 2 c14ef2f2-0338-5d07-937e-4d8b490f5c55 3 0b1ceb2d-0f12-560c-a484-d12f65b99861 4 666e4316-4006-4424-85d6-e79c672265e4 5 08c7a651-249f-3236-8f1e-a2c31b5e000c 6 d713d1be-d2f9-4bb4-a59f-78cba94354d2 7 168d76ed-4ce9-521d-a0f3-97b630657c06 8 d6ff70fd-07e2-53b9-91a6-8c666fa86f00 9 0a85ef51-66cc-2896-94f0-397d29a0e8f4 10 1a983519-5412-5a93-9e96-c2b92bde5d51 11 ec0ae38e-f92b-4ec0-bd42-e8c138756659 12 71eb4a42-7138-395a-8216-5696cdc3ccc5 13 da96a214-bcff-419e-9a82-66551d7b06f2 14 4e8caf76-46d1-56eb-b60f-aa36f88486e3 15 09757e81-18dc-5b1e-9821-c1e6bc5125d3 16 38fd1feb-ebef-851f-8443-ab4dd75d5377 17 c4d8b859-17ac-22f7-8429-35e90489d69c 18 c77df3d1-84cb-661e-8e38-973255fa1fae 19 22e506f1-04cb-59f5-8c61-7d0756d63f1f 20 15bfcb9a-2e3c-5986-98b1-65f619cced9b 21 31b00eb4-f804-51d6-be5e-c2e7f2b1b46a 22 65b9bbda-79f7-095a-a48d-acaa521df29a 23 9b0d9673-8844-8983-902f-30906cb66cf6 24 4c55edf1-4329-7769-9d4a-0e4b82258782 25 5622dc92-fa78-0e4e-b345-f5d43130fb3e 26 3dc8c459-c041-4508-a594-d4e2616ebbb3 27 9b615491-9b4c-0799-bfa9-96f802f66e43 28 7be218c2-c093-1354-b41d-5a87bf6d9a77 29 862e6fbe-8cda-3986-b559-9e3a8e313cb2 30 ee5997f8-b7b7-12e8-a63e-7955009e9f4f 31 2d820609-a815-7fa1-b466-e22e62f3d212 32 c3f5859d-5d76-2301-8700-a22498f2c278 33 d3f72ef0-1443-8c14-9907-e380635dc7fc 34 f971aace-e659-4163-a7c1-e309e7ae2683 35 2ac3d846-0745-3fda-b690-dfbcbcc247a6 36 05bb54d8-acff-0dc0-aae9-ac1206c9adf9 37 833e4965-1cc7-1069-aa27-50cc7e8e5a8a 38 7f49d5e0-1959-0eb4-b5ad-e862610e09c6 39 44c4b81b-239a-7068-bb81-122c6bc86ed1 40 66580636-4030-2d4d-b7c9-db8d41f91d8e 41 dc6f6cdf-a4e4-392f-9ce1-f7025a2b4913 42 ea994407-e3a2-58ae-8c68-3afeeff5c7d3 43 9bbcb373-8b6d-4d6a-91d5-098bb63116dc 44 8b40ce2f-cc10-22e6-961f-64a2dd20c5a6
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
35543455254345582655508704013172843010723542. Exactly this sequence comes out ofnew Random(698).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 125 of Run 53 (seed 26,950,390):
new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30). - Conclusion. Filler. The content is fully explained by the two RNGs.