201206290024 vsb57
explained decrypted filler
3DES(name) ECB, 43 GUIDs, seed 417
From the post to its content
As posted (encrypted)
1F3EED8ABAAB5B13 4EDFB274FBAB6098 8ADF022ED8019EB3 715322AF10B762DE D3580902DB0A0532 72FF3FAACB2F9A3A D6B114FEE656E2BF 4E8C05EFCD91711D D9AB0148CEED9876 9CDE4BCE063DAF19 FD91D5BB81C748B1 BF308126B7A2325D 7C70A839D4693629 B952DCDFF90D4279 E0F9D74C95121751 2A43D11576783C60 2ABE34D41B85C9B9 EB101FEA407EF1D9 43624536E8DE96F5 B7D262F6CC8039C8 E13AA2C467479C07 FE3287B05C6D20C2 144879B7BD0489EC D67D980DEEBAD5BB ECB96E347593F0A0 27A4A5B2E022D00F 4494E7B7D5ED7385 DD0C05E653383221 7434C880D422714D 516C8BAAF65C381C D293A39320191265 B9414FE07FEBA0D9 DD8FC7938711D0DA 031BDC6797A82EEB F1E9A07A3E44E0BA A5D5DAD9C1B39990 CD1078705B17C7B3 66BD839BCD86220B 08EF4608D749F72F 635C645BA2C5541E 1A36E6FE367B2FE4 683C8975AAE673F2 E494711FC74A442A 7FA14D7531C81495 A6943736D8187824 E712CCA11FF68BC2 C1D8AC3BAB2DAFEA A668E1E0A8DCD716 924A0E9088177D4C C585B86C49B9BB1D FA3BF38D1E315583 2A8466DEC633AEBD F43C4C1561615C15 6A4D4CC721081D4D 596F2D5BF6744165 5E56906969DDB221 57C56B97437888FA 2815F17493D1E7EA 3FA098D9A60AA7FF 50B0B83BEB43C33F F5022D3CB41A5493 6317E46E88E46DF2 91024042C4F8ACB9 EC6B132BAE09912E 82A6A4F1C8894862 3E9618C7B7865094 C4F1528A1DF8E36D F129363A5AC03CEF F7D89AD6495CC13B 3F10898F69F93B9D 31B6867768BB65C6 5E12F3C02CE67341 2D20B8456AED0C58 E83953F86D4E051B 19AD51F091E81700 B0066B44FCA08267 C7F36E639518B8EC 68C816BB0618A79F CB2527DF6FBD5189 6DE1E82724912C79 8A5D48A1C3E71391 D64FFDD03B1EC79A 7FB59CAA67DD7784 0A3FBF00979487DF D64674F914339B94 852ACBE6DE722A30 48B8694E15908AF8 38361782AEAECA78 3AE8ADA9CA4867D4 639905F18C619BA5 97499975296BEBB5 6D02D661950C4AC7 81943A9E4D87664D 5F6BFA8230A55964 A3A2228E28594B19 03B62595E211FBAE D0306EFC1B71E54E 250C2E7FBDBBCEFA F5BEA0DDD621868B 32C9A950D8F630BC FAE4CA8201E5F9C5 7BCA0D09ABEE49BB C9AE7E2FCBED7B7D 02431F8FCB3489F5 A8A24CCD167A487B 4FA4D55FFA4EDDEC 9FF489BD3FBB16D8 36469EBC51B8B1E1 0FD154A15B433C10 B03683E069B94A50 07BFFAEE366E97E8 1285B64594A02C4A 3E888C5B1649156A D66EDC9F66D8AD2A 522B48D50C0B51AE 190CAF236238B694 E3F6865C0A8B77FB 03A91291C5C9C303 A2634F4A485FC3FB DECC61878CF9341B 30F004AF871B745C B8EFCD594C72E7D7 AA219C9D5EE745A2 DFFA3AD3D9D18A96 139FCC3B3C6FB3B6 27EA1994789508C4 8DCC937350299B0B 74F1AC747C2A2D62 B2679A0D564EC1A0 D36337899D9F3FA5 7E0FD0B8154DFB55 CB4CEF017EED2102 FF07836CAC75014B F4E31C9FD688462E 6776677AB954E69D 34E8869BA23477C7 AE211C96622A724D 858C138025C41637 4B4F144A4BF91176 FBC0FA25A7CC8EAD 6026DA774EB273A5 B7DA587FF28249D5 F8B5558F54B461D6 B9C72B2CE480C4D8 FFD78CC503B65D75 2E2CF8A0C8ECCD82 8099768AEC1C0FC0 7D2B289E46568B13 F9175B20F5C6BDDF 4168071087442747 EE5B37DA569EEC1C A77AD71A046720D6 571B0049950A2653 B56C312E16E33476 7F1465C037A125B0 B4FC3B873E3D81E2 A27064B8793223C5 3C5F90890AA2D518 7A4AE675D74A7F8C 66053DC401CBAE43 B61337988FC4B3B3 97A641D5B7DA11A4 5453458346C40C2A 4AA89E3DD8899C52 EEA7165A7503441B 8D53AAB62DF2853A 745EDB5F86DC7AEA E79EC86F0099DE05 970ADC305A7A9199 1C4C8C3044C8C0CF C0E7A860282591DB 2DC5BA72BBA6C570 5DACFFBA8FF64DBD
- Read the ciphertext. Strip whitespace: 2,768 hex characters = 1,384 bytes = 173 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9(name). Key = MD5(password) =34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 43 GUIDs as hex (shown below).
Decrypted: GUID list
1 a558c8b7-346e-5325-a50b-e1557ac9f1df 2 89ba08ce-0239-1724-b7d5-9c6abbabf62a 3 16145987-cb3f-2fd5-931e-e359000adc09 4 901059aa-9414-5899-b8ef-21c6c7387635 5 a0742de9-e1a2-4b8c-a748-97f9121da2ef 6 ef8c8dd7-539a-8b28-ac3e-d93255f8b4a6 7 b5077fe8-68f1-6acf-8e5a-dbc8e27e860d 8 e28347ec-26fd-5295-8413-eb6c1584b614 9 1d076266-32d6-5f3c-90fa-2d8565475f51 10 3d885d97-9ff5-0595-9dc7-7d6aa09d1de9 11 152c4c7a-3515-4f08-8d39-62c27a54b3c6 12 144be87b-9c8d-0ea9-b182-bddadd37b9cf 13 14f9e2f1-aa93-2628-9ef1-c5eced77f25e 14 7d7faa83-dbd1-3d06-9812-68d300f8f94d 15 2b6a6f1b-0c20-754d-aa91-8bdb89607e93 16 6ae87832-e144-4d69-af23-e07c2ee0c168 17 89937da3-e65f-1f36-91aa-0a1f664aa948 18 d97193a7-2230-4fbc-ae18-d6bc432bed40 19 e7c84eee-d0f0-8fdb-811d-7917d5db23fe 20 bba75043-4179-7d22-b6c2-a7c1dbf61af2 21 a8610818-556f-26d1-b334-30ebe34e3338 22 002cee0e-a9b8-1218-a09e-fcbf2cb66dba 23 9fe81239-0827-440c-a4f8-a939c71b11a1 24 f9515a87-3de4-6593-a9e6-5f03a6ba1d5f 25 13ffabb0-1e0a-5fb5-980c-e7507862a5c7 26 0705062d-246e-641a-a616-1f134c4b709f 27 72bc6678-a208-4be8-ae67-5cc09cc97416 28 127bdc6a-8e5b-0bf5-ace8-039ab07c23a5 29 65c2ee88-69f2-623f-9a77-f02b346711b8 30 a6ce1751-0c5d-8cd1-805e-4fe5add77754 31 410ba734-3623-1695-be1f-95d1e3069f08 32 d2f03604-38d3-2e9f-855c-d3fba1b2ce27 33 f2b104b9-0526-8dc3-8382-b0afea6278dd 34 1e434e81-dd21-376c-bf3f-c707f5c39099 35 50212834-92a9-208a-9e69-0c699ce6b0e8 36 424b5030-1769-7c9d-8c87-f8ffcdcc9c56 37 50e1b890-16ec-44fd-bfd2-1f130d106a9f 38 11fdb687-c4ff-526d-a6db-583929e8ce36 39 44bf7de3-4419-6ae5-9599-14b2f3fe82b8 40 5dbde687-2aef-6474-bcd9-ba339497480a 41 ec5e9645-ad9a-5748-85e2-3b14b2f029e8 42 6ccbda00-b60d-55d5-bb2d-86f5b36b6c74 43 3d7121e6-85bc-6bcc-90d9-afdd02d8f824
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
5125486550402374148721465640681283274566556. Exactly this sequence comes out ofnew Random(417).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 12 of Run 9 (seed 449,725,219):
new Random(449725219), Next(8,64) per post. The RNG predicts N = 43; the post has N = 43 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:12–19:12). - Conclusion. Filler. The content is fully explained by the two RNGs.