201206290021 vsb20
explained decrypted filler
3DES(name) ECB, 39 GUIDs, seed 472
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9(name). Key = MD5(password) =34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).
Decrypted: GUID list
1 33ec1467-b83b-24ef-b97b-129e84058341 2 6eaa0ea3-654b-2018-949b-b92a50650325 3 f729b7c0-e9f4-68c1-83ec-9b87f1a29d5b 4 2cd64606-b27c-2dab-ae27-988c45d74ed6 5 8c64d7c3-303e-2e3f-ac03-3af9708df612 6 c0dcd64c-0867-06af-85d6-0bc314dc6717 7 95e0d2f4-e61e-3224-94eb-1189b9f3cd9f 8 3a7418c9-2b42-2794-8838-754dfa44ed93 9 441248f3-1003-33c7-9d75-ad198c38861c 10 fe2384d9-a207-2075-bd2f-5c829c2b1efc 11 1686e507-4818-0573-9446-cb9c3b11254c 12 7fac3eb7-dc53-837f-8065-45d0c420b1f9 13 cf8f4bf0-79c9-0b11-908b-997649ab1900 14 20cfab9b-b76b-0358-91ad-39c12684b81b 15 ec5561a4-9be1-389d-8273-77a2288c6491 16 38ddef4d-bd58-7691-b684-4008618b0cc6 17 56d96512-a1cf-2902-9ecf-853f97dcd404 18 3c4673b2-dfc3-564c-baa0-3ea6cea28017 19 c11b627f-013e-4ed1-9cd8-90bef31159d5 20 a9a0311a-e150-03ed-a736-b4f4649e4d33 21 31f24d8b-b10f-4d32-8fb7-282d447d3050 22 091158bb-b9a7-5299-808d-2f8bbf5cf972 23 c7c5371c-5e7b-6fb8-b4e3-5f207fb0b240 24 20bfcf65-bf36-8f26-838d-a6f21548a460 25 23e5973c-2392-82e4-a855-80d80360cd57 26 4e739ddf-a9f9-0972-b5b5-e7d16631bbc3 27 41c96576-5203-6534-b93f-b05cb57106f4 28 421aaf3c-0401-1831-b3b4-87ed8e2afd62 29 0ea8f56f-738d-8b15-b016-081b1927334c 30 5261ff5f-674d-1e26-8ea5-12da356e5c1c 31 7eeb7570-8501-38a7-b142-5a29c10eaaf0 32 429fcac5-2649-7d73-8ba4-b10ff8e235c5 33 79c079ec-62fb-0099-8817-f45000769d2d 34 f167e5a1-5775-7ecc-a779-44f270b8d80f 35 2c8d9b6a-c8d1-4b5c-bca7-daf6ddddeccf 36 d0d998e9-d1fd-1818-9f4c-f4620f69f0c5 37 a678afd1-0f50-0f88-9981-4ab08865b9f8 38 e3799eab-d1a8-000a-9842-00825da27f2e 39 748a3c8c-ae82-1ee7-ae58-6b769ea36402
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
226220323208003725404568806181370741001. Exactly this sequence comes out ofnew Random(472).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 0 of Run 9 (seed 449,725,219):
new Random(449725219), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:12–19:12). - Conclusion. Filler. The content is fully explained by the two RNGs.