201206290023 vsb4b
explained decrypted filler
3DES(name) ECB, 56 GUIDs, seed 541
From the post to its content
As posted (encrypted)
D0967129B79EA7E2 39878BEA1B6145B2 369ECA8C19957024 A9651D6816BA485B C88F3B058528DF04 6820C0918E09EB46 B0CE224EA54172D5 4F479C515588CE8C C562775AA52D79DC E867ACBCA42DA6A5 2FEA9824BFC9C05A ED8C3604679DE468 AA0C109DB6189415 5064356C360ED7C3 FA4DCF07AB64EE56 E0200DDC0D280E8A 021FDF517B2A0CF9 A2ABDCAF8DDB8BC2 F4C3F0C6793AF9FC 180F8AED4400ADF5 4D1CEE3D54ED6FB0 DBF8F92571370DE6 9CD7BECF15A8996E 4339EA065DE6DD42 5D9DCCF247DB5786 EAF95EC760AA0248 52515A245DD3E064 0BF6978747481DB5 A5EFACADEFFF9D1A 4CB0DE5A6495ABF2 6C13349DCC4358A8 B78ED1CEB581BC60 11E19781E6544108 D7AE365CFCC773C0 2B56EDCC92BBF899 60A8C8AD898D3588 C8827E1AA8F353EE B97B6605A271FBB4 13DD0C9B6C6AB08C E2232116E6AB7BB6 1745468F13EE2558 91F2ABE743BEA96F 1282AE8B0F6EE719 571A837EB1140A74 4369B772EE4FF977 9DD0FEA3F5584C47 402EA8C451E74A5A C3DA90310C2BA311 C0B41B4ACCD58257 FB59538B2FF22EA9 5AEA10D15B111394 6D412DE3B6D173A9 79897375499C2FCE 231824EEE7C52F47 2EF672307A78E9BB D2AE60BC00531770 FB37F3786999379C A281ABE03F61ED83 D3C01A0325DE31F1 3DDCE9E2989467AE 37C2EC85B09A13C7 B838C01D24EA74A8 BA7A3572A61F32B3 B6FF33679D04615C EB11875C8348BB8E 284CD770B68257AE FE7EB072FCA356C8 A2040CBCE2654C1A 56264F5798465894 6DE9B31816737D05 33BC362FEEF6BDB2 5E3A7A178E6F964C 63FF00E1FE631940 662C10F4B7DB6861 5C60894193895E18 5AF56C805CDA2B51 7BF0B44DD242A3AE B4C11DB7C4A4E0EB 32739EB9CE196EE5 089D930C4A1E700E ED975C90B8261F29 DBF82073FE39FF97 98A8B6C7D6E47DF0 287E8940E3565F3F 03DC0EEAF86561B5 864782B87A8B5660 831253D0084606C4 E9233CE07AE94DE8 6CC3E833911C4D4E EA4F2C0162313A68 979FC67F033393B4 140B2E450666DA9F 7F9BBE5E0460AC27 049378725A3086D5 DA2A0EBF7601D533 5FA24DC279E25AAB 3AB2AA437E10FCAA D4FBEBB1ED6B21B0 A28BBB6B89863025 711F3732A5CAA9E9 BABDC959C7989655 8585D8B80FD67BCE 839ED65161108C83 C3DEF4C8A94539C1 65700DC2A8F7FED5 71FB3AE9CE08BFC5 A91769D00A021862 1AC61C66D4DE0C2B 1534D215B19CFE2C 46C488ACC86FAF12 DE34F7AC65F8566B F01D67C74A428CED B1E7FADE6CB60FAF DDFC932E9A061934 0011BBED90113EBB 90EF3A191C45D19D 42F1EC032E5404A0 4B4128AEB2DD4FE2 1B66B470E665FB66 42B5E09C3C81A378 87E3DC3D7D89FDFF 8603520894B773A8 155D053A610F429F FA85560A51CED1F2 85D08336EA0B6891 6F6425CCC9D2F99A 49A1C1DFAF262004 97D11F248C8E5164 E0E914F40BA6BFC3 D2421B1767042E38 C0C5CBC93F20B834 6974EB6F8B8CC781 C488554C6F67E034 09A3C364FFF77CBA 79D0D81896FB5CFA 925D65F490674287 30B6C7BE5F3235AB 2FF681979D32C711 F3A3DCB653D4AEDA 9BEE3073A29B5877 60087D499FF39F92 C5D3F6EAFB1687BC 1F3F3297D480A23E 2DED826E01757A10 E12929309FB3248B D5E656F9BCB6A72C 747CB0D0911D9F93 C1E4A75A649C1DF1 15204E0A1E8FC206 5D411759C9C8728B B2B4134CED130357 B2E5DFDAB96E0835 F2AE908713060A63 8CF4EEB1DFF3AB91 E668BF2D59EB61C0 FEA96F3ED6205531 D0446F8F0E13964E FD9235709FB761D0 0BEE6BE115ECC4D7 E62475883547E0A1 120E7ADE4B97E342 CE4D59DF48FC831B 1457A5B30431F748 79BBD23C5542A8FF CF4C7927CD08C976 040AF49EF8ABA712 729B9DDDABB9CE9F 42522A85A469BB41 81E5FA5D86EA4551 C0CEDFF4465C89CF D4895FF4F07DDCD1 84E5FC61C19CDDA5 F938B669F8DF1DF0 7857F53BA7F4BDA6 CCFECEAE5D042F38 77509371EDE83F86 364880C081B0702C F54404319BCC56B7 F57DBAB232943F17 E8E67A5FB0638822 57F5C161654B0E49 0489888E6E0DA1EA 2C5A88761DC8E56D BA41DFB52ABEB767 C987D8A0AD605E5C 9D73660760D7E143 CAAD832627C8FC10 732A1E57D3F149A7 2732C8447D32C636 3BD3D53F1B8D819E 8B57DD223AADD607 01623902065A33FA 1544A0DB96A127AB C87AB8502FE0382D D974AE8582660ED4 26CE2308C27814F8 B055F73C56B19E8E 6AE19AFFC0578938 9825ED9E3D9DB6A4 C3A7583A74819245 58E5BB11560925CD 90A118567EA0F503 22E3DD905BA1B9ED 17A1DFD2EA3D5789 8042F0104CDDF844 108CC9820EFE7CA9 0AA0A00FAAD0EAF9 06500ED2E6F5A5CF 2F0B176863CFE594 285EA498713C1D50 F06615CC01E22508 9DCF7D2CCA715BBF EBABF0D8BCDE307E 968641255A851FA0 C97195AF4419138A 5155F2586A7F8F24 A469317B43A686CF 7AB4C63FC7D32157 85C90F12AD2C899F 8E399E5FF987754C 2BF5D7DBD2C1E8BF D8355679D1D7C2C6 BA0CE8235718D3D8 1B0FE708B06D11C8 5DACFFBA8FF64DBD
- Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9(name). Key = MD5(password) =34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).
Decrypted: GUID list
1 9a5d967b-ab08-3e89-b801-4c1d69a9a280 2 4ea80bc3-28be-5440-bfa9-0a9a37631234 3 2a48ff2c-afff-815f-a8bd-e31d6c56b290 4 7b32f840-ac42-076a-b277-eaeccc22fec6 5 eb7f84b3-bd3e-4322-94d8-71bae1196162 6 edca9e3e-db2a-3040-bcc2-38b2af0680e2 7 35eae46a-d89b-27c1-882d-7990a13050f2 8 3434089c-20e8-7918-b1ba-f01a7512c436 9 b56222af-9b67-8e5a-b1d1-9c60a73b9a6c 10 3ba81101-39f1-6dd0-b0c9-f24b9562ef04 11 cc1dd56d-cf6e-7ce5-b230-951e8583a8ff 12 cdabba1c-0c0b-75a1-b405-896bf02edf79 13 f64c23ce-8310-4c8c-8ce6-4874d4dfda7d 14 749bf1e1-e9a9-8e86-af3a-cb105e49ab16 15 3b82ceaf-30db-685e-9746-1359bc49237a 16 1f8d609e-53f5-88e4-aad8-7efbad74981a 17 c3c8cef2-3171-2c73-ac4a-7cfdf1e6b38c 18 10021c01-3d01-343d-afc0-1d865ff056b4 19 3cb1424c-53a5-2e9e-b594-803af9feee85 20 ebdddcf5-b193-7fdb-a688-769f7258afc7 21 3e475df2-ed7e-6b64-b578-49b4ea826371 22 00058bed-548f-57ec-ac90-d5064ba05b95 23 caae13b0-c3c9-3730-b5fa-2a5862122f4e 24 788e1c58-9670-08d3-ab39-47bb2ec474b1 25 abaf7cd1-1001-6d6e-a931-b158d14e39d5 26 bc9d23df-de23-4509-919e-9f490adaa98d 27 5c60b563-d834-0776-adf8-b7d6247281aa 28 25b3f6d4-f522-89ec-b689-7bdc9327f70b 29 002b1dcb-a2c0-8dad-98b5-9a17e4907ef6 30 991e3b6f-918a-7d00-a65d-3413a7dd100b 31 1cd0b91e-d238-8163-8145-e80e949e6007 32 666f58e0-c144-8cc0-8753-9c85ee284eff 33 8680b304-3b5e-733c-b7ae-0e3ab15f060a 34 66ccb45a-2edd-48ab-96ad-af90972d5abd 35 7deabf4f-748b-4cbe-8de2-65447c70dc0f 36 e6a31c9b-aa15-120c-911f-94cb1f967c23 37 a7fee0ff-0b07-1d77-be3d-828b01a88b25 38 8c5c5b77-4345-0c29-a2f8-dbea6286cf6e 39 11be403a-f84e-852e-a060-8b325c5420a2 40 ddb0baef-b1eb-1de0-b570-c16140cf95ca 41 154c0612-28f9-766d-9ee9-d310cc816ddd 42 93d8b70f-98f2-00f7-add5-f3062824b042 43 693f6647-891b-598a-a891-6626b989c4a8 44 75a61618-4153-4c08-a647-77f803aea91e 45 ddfbc99c-dc14-1e95-ab13-9d77bfc14d38 46 0d3100c3-5abf-1c0d-9afd-462ee9f65b97 47 b218276b-7ccb-318f-8cca-aaa6a9b882dc 48 689c902a-0a31-821e-906f-815a200b9200 49 420eba5a-ede1-88bc-b4d2-f0cd64ad0dc3 50 4a798092-765d-66e1-9e9e-a1b4132c1df4 51 9b18e474-b21a-2a88-898a-fca666253090 52 e1dc1bb2-1832-44b5-a50d-62fd7e34cb35 53 2915b545-8bca-7ffe-a5f6-4be7240c7e99 54 0f27a967-fc8c-680c-9d75-164f5770a19f 55 b2bd67c3-57bc-482a-9e2e-6adcb870d55d 56 0e7b587d-b0e1-7145-95e7-8419a8ce605b
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
35804327867748682327653064088788744110817054113886247647. Exactly this sequence comes out ofnew Random(541).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 2 of Run 9 (seed 449,725,219):
new Random(449725219), Next(8,64) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:12–19:12). - Conclusion. Filler. The content is fully explained by the two RNGs.