201206290024 vsb4w
explained decrypted filler
3DES(name) ECB, 31 GUIDs, seed 229
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9(name). Key = MD5(password) =34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).
Decrypted: GUID list
1 80f25393-9998-3355-a08e-98a86d062958 2 3991ffb7-f035-04a9-8ff6-6b6b673f5ded 3 c5636ea8-6436-770e-9535-641f52153c57 4 7d2b5aa3-9ac8-3e79-bb47-2911f1aa59a3 5 aaac11dc-cd15-5d23-a569-368585a07e01 6 9909590c-1acd-6144-a16b-8be140e0689d 7 e482fc29-cb80-4f98-b56a-3a0e789702e7 8 25f27c8d-1a2c-228b-9ed8-a2752c7593ec 9 2dd2d97d-9258-265c-8228-760929dde423 10 658843cd-d3a8-687d-aab6-ecb110c6b0c9 11 2ab79bc4-f73b-0958-a71e-a185460af064 12 0a9593ed-19e8-2723-9410-01aae2378034 13 836c38fa-6b81-0d17-aee7-42edf9f66419 14 f9e7bfc0-6a95-5cb8-b917-31ec6628c7e0 15 8003ef01-405c-28a1-97e4-1cb4502a5af3 16 6e74c71b-ca87-09c1-8695-f7288723d9a6 17 d3025588-5cd1-1097-a540-cfcd1d3399fb 18 b0826305-5d2d-83eb-a1bc-d1d5f4ebdc22 19 101f3085-63d1-7e6c-854f-55378be05a72 20 faab771e-42e3-8265-b345-049f266c0de8 21 de4a406b-708d-2008-8998-ca53993a8b94 22 facc21b5-1015-047e-984c-02fc2a77bccb 23 d9790f34-2ba5-6095-a1c8-4b3724523d6c 24 d7ffffc2-cd63-081a-bab7-3b92c021120d 25 6f3e2ec1-98c3-1483-8f54-0305b5f5fab4 26 d6eca0a2-0ef5-7114-843a-fd6d6fd0e8b5 27 066aacba-ce30-79a4-bbfe-096b76b9f8e4 28 14df9469-ec66-5a4d-8a6c-0403f744a2d5 29 f51a24ae-3bfe-7b7b-8f90-2fe55b09a6cb 30 fcbf10f8-7da4-4baa-ad44-1a6263aae46d 31 9de57f7a-f626-68b9-a255-d82c16554c23
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
3073564226020520187820601775746. Exactly this sequence comes out ofnew Random(229).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 9 of Run 9 (seed 449,725,219):
new Random(449725219), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:12–19:12). - Conclusion. Filler. The content is fully explained by the two RNGs.