201206290025 vsb6e
explained decrypted filler
3DES(name) ECB, 44 GUIDs, seed 16
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9(name). Key = MD5(password) =34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 38c9313a-dd8c-001d-93c6-3173d940b960 2 eafee8dc-fd5f-4043-8c8a-a2606cde566d 3 fc0f5230-6b6f-848f-afdc-2e6ad7b0e161 4 8be5d48c-4e7e-8fe8-a58a-565f62324296 5 eda2a26d-6bca-39a2-a62d-a297f19a2d76 6 20b564ec-c9ea-4d70-93d3-8e33a2289424 7 d1c667f9-23f6-01d3-829d-218b81768737 8 f810a532-9f09-499f-aba2-4544423f3cc7 9 df797b76-16eb-8c96-bfda-f67e6e4b8120 10 c6887b06-a8b5-1473-98b2-52e7e31d23df 11 d95afe4f-57d9-0a00-a4ae-69933fdc0ef8 12 ddda01f7-4dec-84ec-aa72-44934fab1ce4 13 2df71986-c0e5-5728-8e52-fbf35d8bf28f 14 85a2e7d3-4372-7881-bb34-c1d53d7a8e8f 15 0feafb8e-a92d-19ea-83e6-9df1c3514175 16 ea2887e3-5515-02d7-8c64-abba11bb0a40 17 db9f6163-b655-5657-8353-04344d1b6c6d 18 473058f5-7dd8-8c7d-87a6-c933bf3df30f 19 dc4e33d4-a2fe-0c40-8d6f-97432d949294 20 9b0f30ad-a90b-4ebf-b35b-b04037134e2f 21 a3e570e1-41e7-80eb-b4a6-94de95a8c24e 22 bf819367-1494-6b82-84c3-ea08f60ab997 23 e3ba1868-b4b0-695d-b80a-f5a542d15674 24 6ccaa734-21f7-517c-8e47-5db8572b74ff 25 22c0a49d-4718-2dec-8275-95a6904e4e31 26 004c5c7e-c70e-7f37-8668-5c17c7f70bc4 27 c75533d8-a341-6a4d-b9e8-389428a91929 28 477bc28d-cf76-57b8-9c48-2d861a6cb77a 29 d29dac09-9bb9-8f90-8d29-66a8895c7ea2 30 b188507b-a237-8e3a-a184-cd031001cf01 31 7433a40d-75c3-0431-966f-3d7d36763e41 32 b288ee08-dfc9-64b2-a949-04e3c4e4ec3c 33 a54366e1-1498-6cd0-9d70-906ecbc52ffc 34 92f05036-ddb8-393b-8942-98ab56b7a47a 35 694d3621-21b6-2a23-88ea-2e5f089cdac3 36 6a73ec48-7abe-4572-b5a3-2695460e97d3 37 04d63737-a427-2b95-999b-0b7511766fec 38 aed02304-c058-278b-8a68-e5da9add7f85 39 cebb9b6c-8886-07d6-9201-fa3718ac7cf5 40 b2a3d121-592a-0102-8931-a3e59eea3dcc 41 367467c4-3393-7cea-a7c1-dd2e89ac80af 42 658ce8f0-2031-15f9-9fa4-d768dd1409a8 43 ac10f62a-4939-229a-9ba6-7823e23a4709 44 c53de98c-033d-0791-89a1-7f8f6883d5c3
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
04883404810857105804866527658806632422007120. Exactly this sequence comes out ofnew Random(16).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 24 of Run 9 (seed 449,725,219):
new Random(449725219), Next(8,64) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:12–19:12). - Conclusion. Filler. The content is fully explained by the two RNGs.