201206261141 vn4m8
explained decrypted filler
3DES(name) ECB, 21 GUIDs, seed 812
From the post to its content
As posted (encrypted)
1ACC6F5FEC82E2D8 02A3AA9EE430AEB1 ABEA0E1E23BF47E2 68A1CD4D496D6057 483E7844CD2FE683 50C6C5AE74D73F5B 1CB6BE8FC684E1B6 C1978208E22AEEB9 DF3271243DE06DCD B9EE7B555E04DC00 575E23D4D4BCD938 E312CA25DD56D255 7106211547C054E7 A2846B5AF604E554 FBD4D4CB0DDE92DA CED1BACB4549C34D 05C433072DE88DAE E41A2A46AD34E8A1 E6FE701CA4FEE21D F91728103DC16FCF 81B1B2A7CA49B0E5 5237A7DC82760E46 8A7515FC79F6C317 505246926E8E5E42 F35FD409E34B9B94 CA5005B7D4D3CBB8 C1ACF9514B788DAC D590779D3C8729E6 E0D1297568A060C2 ADB807C5D15715E9 C521BCF58C8BE03E 714F9396CD5993F6 2015FD015EA0BB38 99832E66A415CD9F 9FEB0ED2A9E93DC1 1643C370F7ED55AC BBCE3DD6D6E72F7B 375E4154D56E7DC8 736140583C4CE284 48384524DF87082F C1001D2AE363846E FB4D0278771FE27D 480FF085D569AB17 CBDEF765798F192E 4A9E461EE2B8705B 3DB635517AEC221F 5535DE556F675F37 E2DFF240C15EA233 1FD99D56E43E9805 B9F8C85B6B95B366 1518B1B0A07AC6B4 1F6DAA64EDA8921F 90BEA4CC2CC5746F 27CC7806B63E169E FB9491D44DE98570 A96CECF414E71F82 2E2B4CB6AB5F76F8 0840FB8ECA7D15E3 DD5275F0C896E82A ED9BAAEEDD244422 6E2052596D0D52F5 78F6E1E660CA300A 69012B0CD09693A5 5BAA2DC590803FEB 18C98FBDD0EFC279 F700C087E62AA6AC 65A1B448BD86B4DC FC99953C915381CC 6095AE5091193F9B 444FA06BDCA05CE9 41FF980888EDAB47 C2E31E5AF5422A93 9D4853901AF9DCD1 B687CCAC040E74BA D2782F72AC713F31 E79C1EC6D943FE83 646E92C820BCB294 E98846B333D7B21B 16BCD71FD4ED3889 A6B953C084D26F79 F6E6EC641C8B8E0E F31EE9C9DE09CDDC C197AE7DA57EE728 4B6B047D3D9C2705 5DACFFBA8FF64DBD
- Read the ciphertext. Strip whitespace: 1,360 hex characters = 680 bytes = 85 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9(name). Key = MD5(password) =34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 21 GUIDs as hex (shown below).
Decrypted: GUID list
1 fb073ceb-1510-8a7f-9a8d-5efcd2a19c0d 2 76965e5f-92b6-09aa-aae1-e29551a8016c 3 73dca3de-5b18-3b9a-8c0c-28134b8825d0 4 45d437c9-705c-7dd6-b026-fea58e342864 5 07b67998-ab10-7fdc-bfda-4c5bd42db5e3 6 d4223632-de13-1d63-85fa-6439f00c624e 7 6f02bbb5-287b-61eb-b6ed-298434d89c4b 8 6b822c34-9892-7e9c-8665-ba9fe38a9423 9 22674994-91cf-3cac-9e08-bf926ab680db 10 249629ff-5e6d-6774-a21c-a467b9dc4ac1 11 2c6a31ea-2ca7-4962-a143-5af756e30e09 12 d3be90fb-25f5-395f-a271-a5fc630620f6 13 79b78ced-ac56-7bfe-be4d-5f558065c4a6 14 0f8249c6-d1c6-8b58-8e28-27b8a7cd70b5 15 f3d6eb79-df84-336b-ab83-2992bce12d30 16 1ba0cfb7-62ce-1344-99fb-c4669749df16 17 9fd111f7-5a93-1166-ba45-6a451d1f9315 18 380f68d4-3ade-3174-8358-5d13a83c5fa7 19 9b4de769-b0af-55f0-b4e6-6f85f915ab42 20 cfbd56ca-f180-6e05-a67b-7c312bb10929 21 050bdbae-425c-60b6-9f55-b31deacf3be2
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
803771673643783113566. Exactly this sequence comes out ofnew Random(812).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 53 of Run 3 (seed 1,063,142,882):
new Random(1063142882), Next(8,24) per post. The RNG predicts N = 21; the post has N = 21 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-06-14 10:25–10:26). - Conclusion. Filler. The content is fully explained by the two RNGs.