201206261148 vn53u
explained decrypted filler
3DES(name) ECB, 17 GUIDs, seed 703
From the post to its content
As posted (encrypted)
A14265282936E9D1 2A41E7F6D9BBF15A 876FC15D5FB26C60 2605ED523FE22005 402E2541D07253C6 98F6F4B6B37D47A7 AA4A4148D1C0EEEA 5F33C37B39616B62 E05BDF102F5A1C60 E38727F7D2F3ABD4 83152ED762376861 9BC33057AD5E6F0F F8C930BD70B67336 CAB1AC118E8B5C62 0D1AE0FEB1F18110 E634AD638BFFFF45 5A5E2E3DA80525B2 AE02511DF920BCF0 FBCE02DFB5A7C756 E908CDFCC028C001 F4FFFEE1BBC3A1E3 7E5E012DF19FED84 F45F934AFDF7BB00 3CA224C3778999C5 3BEBFF7287D8D6CB 2F2A7FD17C4DCDC9 857F8E7C1F23D4F7 D752C4B2D2C99A6F 85B36CE51C6D0DB4 AF45E55447E73EB1 A9451563BE4AF067 743EF9C0263C7BC4 905248DD6390FE3A 02B5FB24FC22DF7F 286FD5C9686524A2 1C4E4E2553E80979 A31D04FDF039E7ED 02B2644A95231F1F EDEFFAA76F2940FB FA9C009A68989F73 BCF151D2899EBDC1 C52FB9C7689D1DFB 09DE23F0067EB0CD F4A76A89E9247B4D D362A40E907BBB02 A7B1C67673C8B79E BF3A1DDC7A66490F B1A0F4AF0462C9E9 3A9AE2E4953E7001 D21BFCE60EAD29CE A548A1C8A66406BE 97BB943021AED0E1 6CA076497A419A02 42D92D5A6B1D2F2B F6725FE45E24B2D8 5D809B9A666C4354 E021478B87897A89 F91FFF01A47CB19C F37CA9AEA851BA1C 887E77181917F833 5B9ACDB6763EC39C 5FB01B0D5900C0E6 474245F199399D1B AF29B83B4ED6D21F FBB03216B8854117 312C633BE1E14049 D099512BB50807A4 4910C9F04CDC4F38 5DACFFBA8FF64DBD
- Read the ciphertext. Strip whitespace: 1,104 hex characters = 552 bytes = 69 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9(name). Key = MD5(password) =34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 17 GUIDs as hex (shown below).
Decrypted: GUID list
1 06cdfcee-fbbc-8ab5-b754-3cb93986df64 2 b8a10982-4830-02e7-9525-4118884374fc 3 e60e12df-4489-1a86-a8b3-5b88799eefd8 4 ffa10549-32ac-524f-9d5c-c8a35095899c 5 ac778b3c-6919-54e0-af04-ff56457829d8 6 ff57d545-f0ee-88d2-b8cc-07a98984126e 7 3862a27b-8986-8cb5-911d-99bbd23d2149 8 9110d077-8451-1882-ac3e-db4bb22a3c54 9 035bb6b6-7647-8eea-a1d9-277c5446a28e 10 8e5d9bcd-bd4b-4fe8-b703-321686a6083e 11 3940883c-1724-1d71-a663-3d17529586e2 12 0ad18a9c-b95d-2d32-81dd-0698b6fc2465 13 24fb9520-cb0d-8adb-85ec-e467ec7abc66 14 7195c84e-92db-1c61-9e5e-f02eee32e63e 15 bc867f7a-d16b-0436-a9e9-58cc3e7fff66 16 571d8d05-3e27-0ff4-bb02-d7177c521e92 17 ebd86dae-564a-3d4d-bb49-c2e3f4b1ac94
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
80155881841281003. Exactly this sequence comes out ofnew Random(703).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 65 of Run 3 (seed 1,063,142,882):
new Random(1063142882), Next(8,24) per post. The RNG predicts N = 17; the post has N = 17 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-06-14 10:25–10:26). - Conclusion. Filler. The content is fully explained by the two RNGs.