201310010714 1ni5ir
explained decrypted filler
seed 17
From the post to its content
As posted (encrypted)
67D284371CD07242 A7F55D4F05414124 E3442553DBA3ADE5 3D3CA8C8F712D07E 896CC947A79961DD 0519435BB72D8746 933198C6E7ADDB2D 65F81A0B1060B9FD F94D5B4CEC38EA64 A23933AB9CCCD17E 0993ACDD67D7AAA3 240B6FD569C43848 7FA54F3C746AB756 D56FBDFCF71CB32A 069FF9AC87E7F055 D094369DF44636C7 57257D79D0F8DB9B 8ADDC96506F17102 F37E04D6494E8624 2AC86382E93CF630 D6941933982639D3 EBC5D97842815623 4D6356C7416D7694 8A4636F19AB032BE 3FAF8630F2DC8FBD 06B1F2D91EB63CD0 62FAA0712ACFB907 81933143228B5327 D7B86C83C010432C 8358218A47E5B445 7BC692C665442E16 1C60FF89B561C0DF FD9E782C432FCCD2 FB24C310B67717C0 AE2646827BA48207 A5882A4805E2D045 42B2ED9B6E1681C1 4395298CE823BA03 31B9761B41EBF22C 0DECF1164A547B3C 841AEEBCEA66F8DA F0C52E810B26B8EB 473B6E6EA51E4EDD 2DDD79BBDA123DAD E01322DACFC20C81 1F55D67122EF7E0A 217D68175D1248C6 D62982E905CF53FD 0C313CA4D372B1C1 47BAD2890845058B CE9DCAC3788FDDE5 2BE9FF966C98B9B5 AEEC78CA54223CFA D5ADB9A24F45CCBE EFA8C3689759ABB8 22F4A5BD8313AB0D 0CB3F94F4FB4350E 2790B9C085F68371 4554D301E31C61C1 D6CB87225D95B42F 22C19D4AAF2E41DC 038CA7626330DD96 FF07C59308003C28 C80C96741F41C479 29BFF67891127493 3F3C4F01610EE6D8 3238C15275D3FF1A DD616E3E5862A7C0 547968EB973FD4EA 8503EF03A7B6C01C 685FFBF34EF8BE75 CC763E6AC052B360 F4FC16B9B491F92A C359F0C3E832664E 04A659EEE2B518C3 39CC403EE9D19707 E14A8B03A5ADDD77 A46F20FF12E13AEE 1FD415C89C051651 826BF44A0FD32B16 CB35CB1D2C7CD4B0 9C42D84A39943E14 73274E8A804C2656 0C243961C85D8622 81B5AB513A1FEE54 ABA9A65A38DF87E2 E75144D64C5FE193 3B39882B4CBED94A DE839E3849B5E66B 3F9A6E35FEB5A0A8 A6A05AF18D71F538 DFB60F308068BB43 C075DC41E686156F B629EDC71FE37A2B 932BC3807EF807C6 799A954C1AA8EEBF C1A7270DEC8C8BD4 F623BDF5461C92D0 970B06A1876F249E DC10B8E14C21DD12 010A82D1705514B5 C000069460F11004 82FD4759983FE4EF CCB19D50B57F4C17 DC4A7CA9C5A1C988 960200C4725E23CD 95DC8D5C11532F94 6E5C78141917B6AC 6DF42D25260FBAE5 6EA632C5401BA87F 5838674130A4E947 C2ED54E86D9B34BE 13E1FE34FDE25E8A 6285850EC29BD301 327ED35670CFC20D EAD90B8162A2E7FC AABB58944C9910AF 799E408AAAF35915 B4894C33DE8288F7 C32C524BB70FEECE 22D5678017178339 456D7381E3665A69 597D8E9DDEB21FEC 3BEAFAE1578BA85F BFC8A2AA2B5150C3 1B8E3E9E0C6609A8 CA5936D89E699066 2463286604885B66 B6CF2DA90C9D739F 5B61EF908F780229 F97C679D9DAD6B99 E89CBC1E32DF4DD5 B3F354C91CD7DCFD 2F1F659AD9EF4D68 E705A82E0CECC146 BA45A2197223870B 9FA16FD43849B3ED 5560A992C4DF91A5 D8942D80E42E13CB 98E982C5FBA3872A AAF1ECA6D1FC7F44 2F71B408FE9B10EA DB25FAA734454EEB 0E6D0B3A5A288E85 D833E623601C999F F2AC2237307376F7 E59FE49B46371A55 32BF4C77C7431584 2AE6CF81F9AF10E0 4939B45D41B49766 2CBD9D971576D744 9EB61E6E47E35A04 7D6ACBAE2BC750A6 FF86D3A7776513C3 0DF49AE28749350F D772AA7F41CFF5E2 59D2E21162BE1D5C B83B49941070C252 11DFC1969D07D165 E51DFBB92B2EC2B4 C8A5B551F12241C9 4ED5686C691A734E 05A6B34F842B8C4F D8615C3A2B3D6847 85558CF9AE43A00B 4C36AA7E4958C517 A203B6CB4BAAECD0 304181B710E502CB 47EAAB77E006213A B350E52050044DBD 8406E31B07920BDF CE6697E98323348C A4B7C18CB46C6FF7 9813194795EA1661 A6E0A2F67E357FC7 D4192A1287E0D43D A36A3EFD947F35B9
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201310010714(name+title). Key = MD5(password) =bfbd8f2e71e262569bcf77f11b56bb34, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 f0fab7ab-1c46-5a0e-8c58-f9a299ce71fc 2 4ed52533-de97-7061-aa7c-820d7a2f19ce 3 ab22fa20-61aa-5704-a97c-59fbd577db1d 4 0545557c-5049-1e5d-b59f-78ab8d06dbaf 5 14f3a1f0-fa6e-74f4-9f95-f618c8fe8076 6 54336e32-4e7b-3c7d-8d6a-384324ab2588 7 72d8bc87-df3d-44e1-a42b-2087c285bb35 8 6acca3a2-cc5c-82bc-8ada-ec3e23c3f861 9 2275e91d-d576-0a92-b931-ac6cd113d727 10 293115b4-fd6e-405e-ac59-c1b4cdf7f384 11 1493570b-f742-7046-b539-b557d381239c 12 1612356c-eaeb-6f75-b1c7-98ffc38048c5 13 08ca458d-eaeb-2709-8907-6f5ae9c9f629 14 8e61b6ff-32ba-2181-88f4-f3dac1a14180 15 449113d5-9349-7c8a-9950-1f30600be331 16 5e685c3d-d37d-5210-8c0c-35909f2c3d44 17 bd5dce98-cae1-05bd-9d2c-e608e556fcd8 18 f44f4708-46cf-410c-8a1f-2b374bf99269 19 dc4c5da7-eec4-1b4f-aeaf-be417f674ee8 20 e2302cb1-e504-8a4b-a874-464a0db8db84 21 5eddcd2b-4a50-0c79-a361-9a2be509df45 22 a3a1d1f8-c67b-0ce0-92c1-d295f18ac801 23 07610c65-b745-7176-ae4b-e5333dfe1673 24 ad63ec56-7d0c-8d41-925c-f17b1764edae 25 d8c1feef-b06c-388f-9b06-2872912af0d6 26 27ec5100-446c-4d7b-bc95-43a27d3bd2c0 27 88df19f5-7684-43f8-a387-6a0ec8d44ecb 28 69da0cbd-5ad9-1bf2-bf9e-cd9162ccf4b2 29 665eb051-663b-2907-b614-14b3915abd1f 30 5bec0c47-301b-69f2-9c4f-20a20581634c 31 611f680a-07ba-4e73-92a2-0d989497aea1 32 1eb82ff7-d33c-856b-abeb-b8dee69d96ce 33 60e65a88-a8c0-1208-a075-79e262548e64 34 f291d89d-c19b-3136-8452-85f3d8be3112 35 73bf8e3f-90c6-51a6-bcc6-4296aaae8a4d 36 c7697389-552a-481b-a3f8-4df99e18804c 37 5bc069f9-d535-12a3-b719-dc68cb19e95e 38 4eb26dd5-4f14-8121-bc1e-18a50af56440 39 a668fe78-039b-2db2-b54f-5fae36eae7ed 40 59d446f6-ca54-547b-b24f-b0dc90f03caf 41 805fd212-cf6b-5a44-986e-5d28ff0a990c 42 245a9e00-1524-3856-8f3b-87f57064f50c 43 3b96acb1-a35d-7163-a8bd-469f6013960d 44 7664947e-33ac-18b8-a084-1fbb18ca224d
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
57517348047622750418007834412648135418255371. Exactly this sequence comes out ofnew Random(17).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 147 of Run 53 (seed 26,950,390):
new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30). - Conclusion. Filler. The content is fully explained by the two RNGs.