201206291041 vsyk2
explained decrypted filler
seed 951
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9(name). Key = MD5(password) =34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).
Decrypted: GUID list
1 a1e7be88-c25d-4fd3-aa15-97d296659fd8 2 a19b19f5-3ce1-741a-87af-e07ede4ba7ba 3 8f6c9637-6b88-4d4c-9c09-0c0d9731782a 4 51ab355a-5187-40c5-8208-6c826fde9383 5 ab96e1c9-65e7-5da5-a9fc-c9a8c51fc169 6 9fc0b79b-c8ea-526f-8437-74d26214dab0 7 36b8006c-a409-03be-809c-c0258e29f084 8 adab31ed-8550-42f8-a5b4-08a05b3539b5 9 c92d179f-253d-594e-8cb5-87c10de39689 10 2c2659dc-478f-8b70-8927-0897a490a9cb 11 0790d809-985c-878c-acef-9f25323289d7 12 debe312e-4c02-844a-a160-294dcd3b5916 13 41721e2c-abf6-38ab-83b1-e75fa52049d3 14 12116e33-1d28-238c-bd14-a0b579a5944c 15 64230f58-61f2-5444-8309-eaf700e2cb0e 16 7cc5d164-2740-88b4-854b-7ec65080fe52 17 f77abb53-5cec-56f9-b577-4eac50ebe459 18 4307989d-855e-5e12-9d79-c9c3b82759f8 19 bfcdd463-f359-3345-8276-65619461d92e 20 391fbd1c-1f9c-4768-a0ce-498ba5d4bd6f 21 419fdfb5-9970-1373-a1f1-3bd859203b32 22 fa0f2279-1a65-1dbd-b83c-a1bafff5ddd1 23 93928afa-6bba-6f92-a3bd-273f3e33b40c 24 ee37dca5-d90b-263e-a4d8-9478c1c5c757 25 784add06-9c72-8683-8fbf-68098aa0e9ae 26 226ad6e1-2ab8-1ec7-b9f0-fc5eaca42431 27 7d826d1f-3186-58db-a1ae-e2dc7f107f76 28 9e969908-dc9e-85c5-a4cf-f18e077890af 29 a4ccd0ce-33c5-2926-9ef8-159de65133f5 30 eda3302f-675e-815c-8736-06a91e446f23 31 b9e09162-da30-2d89-839f-0fbad86dfee7 32 e6027e0d-0012-80ea-9a55-632e82274810 33 fa6e24aa-10b4-66b6-a816-4c30ece612e1 34 a696b66b-bd9c-73e1-9063-c2f3dac8310a 35 acfd8538-3b42-6d12-a17e-abaed706487f 36 e8660b3e-dac3-8da3-bde4-9ccf275b965d 37 5e865c08-fa26-7dfb-b496-d705bf961dd3 38 27a88c37-12a1-426d-8ef3-42708e57b111 39 2449d0cc-c1d0-19c1-8e56-fdd4fe4a668c 40 105ebad1-d12c-8922-9a08-9de90b09c488 41 f882a3d9-1be9-598c-a4ec-0814cae5f166
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
47445504588832585534116281582828676874185. Exactly this sequence comes out ofnew Random(951).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 38 of Run 9 (seed 449,725,219):
new Random(449725219), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot F 2012-05-15 19:12–19:12). - Conclusion. Filler. The content is fully explained by the two RNGs.