201206261254 vn9fu
explained decrypted filler
3DES(name) ECB, 22 GUIDs, seed 662
From the post to its content
As posted (encrypted)
CFB8553B525179A2 DFC1C16C620CA37A 0734A5154470184B 91B8B099A14650F3 316587DF17C2A90D 06D5FE8FA57010F3 77F5FA202B0EB457 7DA6C2E32D91F64D 56489894587ACA2A 70160FC4FBCE1772 4467C455D6AC0E73 3C5CC288451960CA C7E0058AE7E1A2DD 99B886E4D0513EB8 61117B63EBB91018 7D383E63BF9E2B21 1A09CF7E5F7AD7EB 70B934692C7EA46F 99436E29945D4153 CC8F18691D1CDEFE 6F9EBC04038B98E2 5F3E4DB566AC879D D355B068081A0E3A CF5EE9C250760F66 2FB00620F0F865B4 E8019D7DEB713AC9 BAB6D38ED1576D12 942BE963AFFD63F5 E8CF228B432C177B 697585D3153C5AE2 CB01CCC2A936338B 84DEA37E12A976A4 E654CE910CA63C25 DB433D5BAC356815 A8C797D350577864 929720CBEAA61EB3 99878A46C232BA12 08322EA8C0444349 6AE90AA97FB38CD5 19DC61C8B45B2E59 AC3C0EB98457A2A2 9F316B3F3F1F906C 742372287DEC42D0 295B21E72B10A5AF 766D78718F0B1481 9F36FBB3F9D1E63B 55FFB4934873A7EA 8AC0F66B2658E786 F70EDE8EC0852DBD C78F105712397609 16C6A9FFA1BDBC56 E04FA69C25DBC337 B9047B6D575165E3 A8B7F932C2C2E159 487A2583B5B633D1 33A35B86FF9C4CE8 EA5F0CA830E96C62 7A06AC4958056E11 DD3266A0F391F1E5 542B16EB9F6BC68C DEB305BD0F2940EF 0F94A3E16B161C2B C482C050F0EAC430 2340B9A64EED094B E1B5B85C7AE47A10 40DFEEA253128001 40E7A1B13853E707 CA6DBCA8738839D3 E37ABC9ED11264DB 460AB5E3AFA1C3C6 B8DEE852B784B07C 953F8DADECD7967D 56172BE76F9CDD16 0B52AAEA5969EA9B F13D6A142E8F8B2F 7DADBB7F8C13DE6C AC697B453C8534F0 89B43D694CB60D92 A51BFF311C36BBF7 84951C96C7E3170A 3513DF151F25869F 92F7815516405777 31757DCC45C3987C 66F56F5A9742DA56 266583B7B93236DA 23B6FF0F1E87CB7B 9C7BC2C8EF6EE52B 6DAEBE2D25250C28 5DACFFBA8FF64DBD
- Read the ciphertext. Strip whitespace: 1,424 hex characters = 712 bytes = 89 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9(name). Key = MD5(password) =34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 22 GUIDs as hex (shown below).
Decrypted: GUID list
1 79e71420-c534-5d4d-843c-2059e0906cc6 2 acf0e4c8-ad26-0d30-ab48-a04481812ff7 3 4fd530a8-bbb1-4e76-9d07-6f1ea07aee96 4 f0280feb-0c50-797a-9ec1-aab63bddb14e 5 15290ca7-9e43-0cfd-82bd-6daeb9cbc093 6 b10ab953-129c-0713-8f64-c5208477b720 7 3aafb96e-b4b3-4d3b-bb12-e5e19c92c657 8 d48558ee-599e-5a54-a9bd-0044cdd9b958 9 cfbebbf9-dfe5-7de6-9efc-721584accae9 10 636d4274-3401-3939-a9d1-6cf11d68798c 11 f7f46133-23ca-01fc-8ec1-5f3479a4e0fe 12 a25cf6f8-30aa-2eca-a4b1-5917267cb2bb 13 7e2f55b9-1f3e-6504-b5db-34e995765607 14 5ec0750d-228f-7d30-9715-c735925da007 15 e2177dfa-3e39-3450-98c1-49db3b142a7e 16 455e69ee-109f-40ee-a674-559591fbf18d 17 548eb72f-3117-17f1-b89d-047d86862ff5 18 7f714341-b4b4-34ff-9ea9-c413e86d818e 19 08e7f2f3-8520-5039-81cc-352620e0f633 20 e19107b5-58fe-50e9-8a29-b822971a3f88 21 eba62766-b411-601b-b582-93093748714f 22 5b4e455f-27d0-22cb-96ff-5750571de631
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
5047004573026734135562. Exactly this sequence comes out ofnew Random(662).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 1 of Run 4 (seed 664,106,302):
new Random(664106302), Next(8,24) per post. The RNG predicts N = 22; the post has N = 22 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:07–19:12). - Conclusion. Filler. The content is fully explained by the two RNGs.