201206261141 vn4oh
explained decrypted filler
3DES(name) ECB, 23 GUIDs, seed 338
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 1,488 hex characters = 744 bytes = 93 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9(name). Key = MD5(password) =34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 23 GUIDs as hex (shown below).
Decrypted: GUID list
1 a12d5169-c17c-2830-9f55-17e394930894 2 c876d8f6-3c69-889a-b5d0-fc8e4353be49 3 03ea2c46-7bb3-06bb-b872-5077f8f1fea7 4 8f71e779-9d7b-60aa-8023-a9cddda19ccc 5 a7630336-68e4-78b4-8c67-c52d167c29ac 6 efaa1a2e-c8dd-887c-91f2-2dbb8f64d0e4 7 d25957df-8482-34ec-a32e-1edb800ad7fd 8 328548b8-965f-0ac0-a150-15828bc0653b 9 16b00bc9-a52c-77e3-b3ca-c157d532f952 10 73905733-d6ed-8ac9-b78c-61040c193ea5 11 3d76ffb8-954e-26fc-a72d-1162688fa0e0 12 a3d9c06b-cab7-3f8e-9116-142cfdd6447d 13 604dff83-c66c-89bd-8555-3cf2dee7465c 14 018ce0fb-0258-27d7-8afc-8f155d902b68 15 3dde84a5-c4e1-5501-8f2e-d1fef2b3fe4a 16 00720cea-b583-19db-b576-e05c50fab132 17 f2fd48f4-e950-88a2-9ffd-82b64b306c3e 18 e0a72e24-2559-42ce-a6f2-1125b6ea503e 19 5720f036-8a3d-7e18-b0c7-368dc885893f 20 4b97b039-20c2-1a2c-b356-d950fbbe5edd 21 1ceda391-bab1-621d-a9d2-b7f1ed007dae 22 a3ba0911-6c0f-6b89-8f7b-5a263a4b29b9 23 fd777c12-811c-1db7-ba8f-3db7928b466a
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
28067830782382518471661. Exactly this sequence comes out ofnew Random(338).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 60 of Run 3 (seed 1,063,142,882):
new Random(1063142882), Next(8,24) per post. The RNG predicts N = 23; the post has N = 23 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-06-14 10:25–10:26). - Conclusion. Filler. The content is fully explained by the two RNGs.