201207060705 w3j24
explained decrypted filler
3DES(name) ECB, 51 GUIDs, seed 454
From the post to its content
As posted (encrypted)
ED6B30B2BBC91F85 5911E5657611AB19 30D59152A3B3D655 5A7B065EE31E48C4 A986963D3F50291A 55B06B0248FDAD31 00955C238A6296B1 E0BDA0B37C683D66 C7D7377022AAD11C 43966FE1A45E2935 5113EAFEEDEE6764 18108F39CF8F048F 2B8B1A56366CCF28 C0B6BF7925AE8EF0 A55FC2A4BE8C907F 5DE65EC7954406F0 D8CE49DE5C184745 DDFDF14784D491EA D541CC3F88A8068E E98AF1DA61465083 FA1E8DC4176164C5 618D3E60A10DD34B 16E39F7131B682A5 EEE4BCBD25236C95 9E7C509F89C1E7CE 7F86FFD887E3548C 75BCB87410834996 33F99ADEA238FC30 9620486B41F5A127 C528BD95C3F0EC39 6A19FF13FC01CC16 A55E83958AF4FC17 FC97728F5E600914 5AF97DAE18C5CE23 BBCFF66329C650EB B74251AEFD60B79E F999C0FDEB7BD574 BD2BA8142730DE0A 1924C4806E43AA3D 0FEF61DD6001EB53 248FDDC09936636B CB5041A57D8A3FF4 023C82C75CB36C58 DAEDC5FB9B2EFB6F 652854217A641FD0 5DA5DBA412EC5533 559FE09CABC15D98 8032902287CE5790 0F05CBB5060CF2D4 34C91F3E6D31B1E7 1FE73883A02F4D71 4530B5EF876B3602 E17BE7E1329F994C ABE3638F426F8E8F 8470B82AB1255479 AC7E00BBA053090F CDBBA50CB8522B4F B43A18F6C1B8C645 218080534042BB7C 503E0E5AD0C6E524 F54FAABBA8D538BC B82BC773B70B3003 656B90B5FE4BBDF3 AEAF8B8205AA8B49 FD59027791B30392 3C97C6BDF10CDAF6 90068D1E09CFDC65 C800E4AF7A1635F7 FE5EAF2934DEFED1 BCA4E921149C77B4 3B1E48C9A40898FA 0181261E203D3077 677619BDC8114D95 F83B4ABC6EADF853 D3B8B427F36A6A1A F9DA54ED5542D70B BA0221DDAB50DCA9 6618C32996FB7BBC F374962F0159DEE3 B65C90C8B4DCB056 DFDBD7DA6BB666EE F5A27392A51D522F EBD132F91AB9A1E0 39034867CEB3097A 8808F6788D2322F4 E92A77261C97E41B 8FBE059D192C4527 56813BBED5D24ADC 1623B7CB8F721331 FC1EAF4484F520EC 03734EF1CB8A75BD F877F98BA4C12E08 7DD2C30A3A5A5E03 163B8F9F07B4A0D4 007455C55CAB4920 5358202FA14F2544 F59E2A6EC28E1123 37B1F8344909FB89 BDC93E84FD75E176 F5AB2781A09C6E1B 7DABD54B2047E7FA B9D7097AFFDB0453 3C6BE5CA01B0DEA9 4A179D4A9BC3EED1 F922745EF766D6B7 5F3B92808D935F23 6D35B3F553649D60 502DFCB96286834E 6C7327359939B3A7 F5474FBC161BB51B BB6FED0895C3ED46 E08F37C5E8504A71 41B259B53FAEB68C E28AA8B795B93CB7 4CB1C7C66012B13A A8EE03319B22CBF0 45505643CDABD3E6 E2CF560DD32941B0 E23C9BC5E39507A8 9A7604075390D0BD C59CD135AC01F986 78BAC7A3A599FE49 A5BD5E2E5ED0C6FA 4EA6E71ABCE565D2 60A7D0B6E15CEF97 95E4551036FEC94F CE879CDE916E9A3C 120A509AA9677CFA 4ECA82088FB073ED 9A1ABFD56D686A9E B5433F23AA3D2DC9 D640F95296FE8168 6945FC9D9F41A7C1 1C25B5AB6A305D3D D1DB5CBFF0B75D1C 83F8CD331A352989 ADA1C1CFD408CCD1 7E088CA2542FAB4C F100888A646D0251 44FF27AA31C712AB 0744BE70535F9C9B F39608398BFF276E 9A496B6AA6499744 491DB806019A818A F7E79C30C5BBF608 5CFC5FB4C14AB053 119424BEEE32D252 A77D21061C78625B 86E913F180E4029A 13E2306A8081CF77 0F908A2BACC2209B 2B04DCBA9AD71F9C 3980AB171E4F5BFF C4CFC69345F09F75 482BCAC7E38258AB B4AB69604D095BC5 6C2540AB51C90ADA 4A24A0B0B5C1E5B0 39227152352C82FC A800322A4CE3F1BC 68BB009EA09EE2DC B8677C42CD65BC2E 8342580969F1CF30 756A583BB700637C 1FDCC5D195CF2497 376C4BDC28A6304D D3CF924B3F186D3D 70D236B139F22B72 4F1D5C051BC2DB89 D445B215DE014520 779C4AD7755C71B3 CAE22651278BFF2E 8856B7556F524B1C E88A7DE1582C4A50 0D6843931D753CED D224C7900E7F6697 AB07E04AE3989CD1 01A1BA919167286E CE69B2DF8CC15074 691DA0AD96804BFD 43826DC6004A2B01 6E8ACDBA1A203B23 69A62C940A917DB4 6CD25B9F817260EE E10EE34744933D11 AECF9F5FD872B070 FA9E9B6E3A862354 0D941C50126823C8 2957C07D490F1862 81F7C7CC38F8C7A4 4C13E90511B79433 6B699ABBDE24E834 BA2D1F1D9DCFA133 A9388E41E80FDBE4 B5EFE3E787DAE1C7 BF3E348CC1BC83F5 328D3250F043B681 AD44C3C89B8CEACA B7AD6628000DC157 C9EA5D2FC06575C7 8EF61A85DC1F99A3 BE7C280464C8E75F CC10CE7E0111A8A6 556C52A2CE2E9803 5DACFFBA8FF64DBD
- Read the ciphertext. Strip whitespace: 3,280 hex characters = 1,640 bytes = 205 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9(name). Key = MD5(password) =34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 51 GUIDs as hex (shown below).
Decrypted: GUID list
1 4428afc1-9d71-8c7a-ad1f-b4e998622a91 2 1dfde55a-35a0-0670-baea-7c84d2784d91 3 a7117de0-a8da-06a5-b94f-f0a4c0f780d5 4 1b0ecb18-d173-45c7-a9ef-03b6bf8f1504 5 b93ddf21-e170-1d64-b0d7-dc29649e8b49 6 b6c694f5-097e-2611-8def-aa55ec10ffed 7 f1cb029f-9d02-20d1-95d5-5450ea15605e 8 801b1009-9d85-1b5f-ba95-e0b8f8a22bf6 9 8b222ae7-4d62-1685-b71d-093ef36f4b66 10 3be5883a-f59b-67c7-8ade-1cf5ff1894a5 11 33ed1bc6-12f8-64b6-bd14-a35f2ce6a53b 12 2f489e7a-17c3-8b3d-8ba1-136bef823efa 13 61367b9e-bbaa-6cc6-b2fd-87e66156ec5b 14 6c53b689-b3ea-5c1f-8e92-588f0c5a1b25 15 b120b1b1-7375-626c-8e68-7306483e5670 16 130bb63f-cd5c-56ee-9295-50a6aa60c686 17 bb56f884-878b-6370-a3f2-b30934ac6e4d 18 d5dd4bcf-cfaf-43f0-90b9-7b308382da68 19 33bd733a-d0c6-8cf7-97eb-c48ae2dbc8a5 20 c7f0ad3c-1ce3-0b29-964e-20a7648959bc 21 2e2e7bcb-bdf9-18fc-a5ef-ff6f81af64c7 22 9637a8e8-71a7-2f5f-9ca5-01ecb32e7f74 23 871a3b5f-5de5-6d75-b72f-8b9610c18372 24 4164cba8-565c-5871-84f3-a9ba755ca811 25 4977a45f-39f3-16fa-91a8-ab229d0320ee 26 f9831448-57bb-457c-b98b-943f1665e8b1 27 bac9dfeb-b902-2db8-8672-64f430e61484 28 e474ceea-414b-878a-b0f9-5729de611b3a 29 767d213c-a406-8fa8-94fa-075d3c4a04c8 30 c4ae5091-6fef-6d58-a76a-7eef1b0e6d7f 31 cd7aa3fc-ee89-778a-9645-bdbd77e7074b 32 4dda043c-6f53-097e-9038-07527fbcd89e 33 5f0b116c-37a9-75b2-939b-f7095c5d9e37 34 69ff7701-45c8-3b3b-82df-bcf62a6f8333 35 01954e02-66a5-170b-89ce-e78f8c8a7fba 36 ec77ebfe-b9be-3345-8801-8d6446983dd1 37 fa784599-b6e1-0103-85a2-d3a1814d1630 38 e1e3cb80-a988-7e39-9aa4-ea7d7c10416d 39 e092b76e-3940-02de-811e-aa9ec0394978 40 fba41d5c-9ec9-691a-901e-af00d66f6034 41 da1653f6-8861-030e-b6b5-243a91a6da96 42 6000c1de-6b68-742f-bcee-cce297b29b2d 43 cf6413a5-d781-70c1-b621-768159461666 44 bcf68ce1-4fa4-555a-a828-b51b74668706 45 7947491a-e8d0-2ec3-8729-7d6ea3624c01 46 f27fa375-274e-53c8-960d-5495d25b211d 47 e0201f95-1048-7d61-9071-15f0947c62be 48 6efcc953-7c58-5aa3-ada0-95c2dcfdbc05 49 3118495e-d0ea-4cbb-82d2-e362b7619d45 50 780c12a0-baf2-213c-ad24-b823e139a804 51 b2e3e805-89de-14ed-ac78-dada8ebc6b23
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
800412211668656564801265142886707313070607752575421. Exactly this sequence comes out ofnew Random(454).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 2 of Run 11 (seed 37,057,156):
new Random(37057156), Next(8,64) per post. The RNG predicts N = 51; the post has N = 51 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-05 09:16–10:46). - Conclusion. Filler. The content is fully explained by the two RNGs.