201206271136 vo140
explained decrypted filler
3DES(name) ECB, 19 GUIDs, seed 668
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 1,232 hex characters = 616 bytes = 77 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9(name). Key = MD5(password) =34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 19 GUIDs as hex (shown below).
Decrypted: GUID list
1 b269e98e-d076-6981-ab06-d4d1df1167b9 2 29940308-e357-7070-84b9-2317ce7514b7 3 34191354-04a2-6796-8ea3-8309ddfb6260 4 2126ed6d-5051-1230-8285-b93e49f683dd 5 19b755b4-905f-7592-a0da-4ab2d3b3d406 6 331664e1-8c12-2201-bcd7-3fe0e5237b2b 7 44dd17d0-a20f-10e6-8a74-4a470d9fff46 8 752b0cbf-98d0-56fb-8400-096a32dd0395 9 c772ef1c-a4a0-599b-bb82-ead4d1836d2b 10 e4bffcb3-b892-5ba6-8b07-91a02e7dd02d 11 441b894a-bae6-3192-9611-00db8cc75d0a 12 5999d6d9-6544-82cd-8ba0-d9f573905ce2 13 cf71463c-3db6-7b25-b902-4e3573153ff1 14 4104f740-1349-0fff-b494-9d6d88037aee 15 fcab641e-4bcd-5e9c-84ab-547d989dc242 16 17cf696e-7b03-158f-92ec-bc238f6f3072 17 4c11a5e6-a1c1-5fba-aea3-ae6d2963f38f 18 2b5cf1c7-2409-116b-8b23-6478ea5ebd05 19 7e9b2fdf-9b05-6082-adba-7933ca94f23d
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
6761721555387051516. Exactly this sequence comes out ofnew Random(668).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 31 of Run 6 (seed 652,173,660):
new Random(652173660), Next(8,24) per post. The RNG predicts N = 19; the post has N = 19 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:06–19:16). - Conclusion. Filler. The content is fully explained by the two RNGs.