201207051936 w3oa1
explained decrypted filler
seed 933
From the post to its content
As posted (encrypted)
4780F3C49460F16C 1782A1A50D96D69A 1FC08A72F390A603 809BBBB805EC54F9 BEE8D16A904A4AC9 210D77F7B6BF7AF3 792B85C69E5ECEA0 AA469BEF9C54A39E 787C2281C4FC95F0 7924108D041B0AF1 7C8554F14566BBBF 3AC68C6B403BD591 4CF0A2F6986D647E 360704DD88ED33E7 0654408E3C37D8F9 D105605C9EA23956 1D2FF1451B993F1E 78C4CC159C85BA1C 6CBC479D5ACCD372 3E1169D4E4AA809E 0D6AE62C140E7045 B0CED6BC84E84811 F968A59EAAD2F37D 30F7C1230136D35E 0B444D8A17521E9F 52B968DD912B7E18 5580CA2925E496D5 DA66308306060FC0 9CF9F8DC3D875051 0FCC6824B92F97AE 01242875D706FA82 94E525034C822477 D5351844681C2D66 E0BA37CEB94A8A6C 3E33225B5006F139 56794D77B46D46BD 31096890F5DAFA4C 6FF488146354BE5E 3056F7A2FEA8E9DC F9F2D2FF19AEBFAC CF22C8975681F644 32AAEDC0754A2B2E DEB91825DBC641C6 B8B99C8234512744 4E9D09A7EF8486DE B2C9C78D994373FD 9A4033E3A9A1DBEF B334E4E13F4909BB 31BFFCC88EB34831 A708BF4817E7D38D 44C94865C2EDC636 C31A0482BAA665A7 F7118A2FAD779304 E7B08FD3534EC4F2 4D7D571546FCE8C9 160CD321B7399A27 363B505E06E7B459 267CAE71FBE89E88 3F183D5B650216EC 05A5FDF10297D3E3 CBECEFAB8093F3B1 D19B072121812FD5 663D273D9D5DE4BD 7ECA63A24A988600 561617A6F7869EF9 D9DBA5A108C816B6 3613E8CBDE9FA042 6BBF2C3668C4D855 F588E28533566950 66BDF7A955A372C9 2448977244BEA339 EFF5EAD995E34314 6CA3767C1852E037 43B7A65B9B0DB939 7F8646DBFED7D712 D2644078B0FF9D67 8673B017DD7009D3 4AD36DD16235B3CC 9A8012EF019959F7 3011604A8AE8B70E D85A1FCA0D8AD4F2 DD3B47CCAA4888D5 99025B8C92545726 557331D713BEC0F2 38A187A71A0792A5 EA35ECD7306F636D 314F09E9012EE0E3 6273095029B77019 83F86C7ED24E71D6 D8DD6FC224DC90B7 071F2C4FB7DBA17E A6132DC18281DAD3 1273AA7DF44C1CC4 26F6BC33129BB6E0 52AE25D0B55A3896 3A768F525D97E66C CA270A308388318A DC0933EC42F84263 F7EF48E33776142B 2AC56E64148AB737 3AADA714C3DBBBEC 816DC915B28EFFA5 119984903431F84B A0E252112F15D415 7B67EB43239412ED FF0838CE668F08B4 BDE98641BB6D75B7 78AF4CEC37DE7E44 9D69AACB56B5AC8B 65F39C15B010808E 20FD0E55920E99AD D308ACE8F442533C BEF930D69ED90CF6 8FD0F6A6C427FC96 246D5DABCAC2FDC0 3F79F20A36E05C9D AEBB9EAF86C7BCF3 6BF86B0D85F50C04 6573F14348CF93C4 07BD6B0D02677C12 97AA5F617C0A7A18 6E60ED382F1A7855 7D910ECDB9736512 E2EDEE53C3D35F0F 626F3C0A23909C21 192C4910EA34634B FCDA4D4CB4CA0FE8 D8C1D691AB910A8F 51E98B49DFDADCF6 DF2F7BC7853BE007 5B50522E26276818 9DDEE6508C825FA8 9D9CA6A0C5137D11 A9B8DF05F5169045 1A276E80D4F21126 3FE6B4AC52A4DFE1 A1D09A6CCA0CE8A4 70205D9943687F00 9B10E9DDC413EAB8 DEEE39A539357B72 EF80CF1C9D430EF2 F26E18B7D6C0ED95 6D505DE1C7597077 58CE40467528CCE4 7BC62F5AFE16BCA7 84BCCE41C73C34E0 955BEF64FD905915 680EB3E0F260EB3E FF871704DA2844D9 9F13C5B7F8B868D1 F7A2DF61054F90D4 DD5CD0B2B6FA89CC 768E905B2BE9230F 79C241DBA735F39C F15F74D6D5F4CE68 183058081C6D3D96 FBC55A6C40FC259E E65830415B5ED4ED 41AB02176ED44685 05ACD70C3F843A60 1E6CD42F6069A5EB 0CA5A6BB710EEDC2 385C715A5EBE37D6 9C7AD8C770492269 BF25DDEAAFCD6196 1CE963678B6AD767 B128F093B4724E3D 8EB8DD8A76618A6B EB91BE49EB63C222 A803D1FA573C1040 3F1E7CA485C54B87 F88755863D46FF46 9BBE9C751A05696E 3C561A26827B8089 AC44255A92E7ADF9 1E447011194D8B33 C5165D810B046FD0 FD80264FD282C709 E58AB1AFDEDA835F C08F6CE99F623B7C F5958231D8B78545 5F41425882BA655C 8D19831F91426126 CBDFA904CC10F809 EED3C7F4E31E015C 7ED85596F8CBB7B2 9092E1F21BB2BA70 95EFE27B9D1BF0CB 5DACFFBA8FF64DBD
- Read the ciphertext. Strip whitespace: 3,024 hex characters = 1,512 bytes = 189 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9(name). Key = MD5(password) =34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 47 GUIDs as hex (shown below).
Decrypted: GUID list
1 dadb98ad-f4b9-1032-99c8-1d504a860301 2 dc9bcd35-a763-5512-b8f6-64e47ad19514 3 3723d673-d0fc-8b81-8985-0744e99e2662 4 65675a80-0fb2-67ad-9f38-7147d3b9d7bb 5 10dc2c6d-6bf9-3a38-be9d-03220dc7fb8a 6 1886a7bf-8d00-8be4-afe2-2423b4ff11f4 7 4d2197eb-7aee-8e43-9a1f-10db28b06d98 8 6c4b1f91-e3d7-454f-9999-56068ef57876 9 203b8f5b-d73b-3926-a19d-671a4fdef176 10 8edf9335-4946-2b01-bbc5-b62af2d342d7 11 e42c06e9-4423-5474-a01c-585708a6bb2c 12 39576638-2e17-7dea-9ce0-5a1208634d3f 13 0cb5a9a6-2abf-056f-899a-9a32e12658e4 14 088b7d8e-bff1-751b-b121-c6d349d32b09 15 7d9d0d92-7cf1-0771-a126-32d5d82374ab 16 3c1c4c28-ffe4-63aa-9bd1-356eaf41ac28 17 3a276305-9b5f-0605-8585-76fa0c4ec9fc 18 a158b12a-8bb7-41b0-aaac-d1e0aae07e82 19 d4889819-cd19-8128-8f55-d6d2e6af6616 20 3dc97784-52aa-580f-9998-3439a5cafbff 21 a3c4bb8d-7799-7fa8-8382-067cbdf452d4 22 39e08580-170d-6ef4-939c-c1b5c3ab462b 23 c2481cdb-9ccc-6021-bac2-c1985be0466f 24 85fe7e66-68b0-884a-8f05-98e87f9ce70d 25 c2cd0b5a-2360-1719-bb80-9c3fd0fbf360 26 f0f86d89-5ac9-5d71-9be4-9c9215a16eaf 27 240998f0-1671-0c81-b40a-b105c286cf87 28 1e56cd2c-5571-70c0-bbc4-69ccff94fa34 29 7bc01a8d-c619-2764-b3f8-47b6bada7546 30 2457f873-bd09-4f6e-badb-6d1960317819 31 df3e8724-fd9d-5881-b1f8-dc754e43da96 32 7b85f034-25a8-1a82-8d98-8733ee7365e1 33 f6cb28a9-7fb8-487f-b24b-36d347f6881e 34 fb85c955-5a6a-37ff-8ea4-4d1b1471a0a0 35 8947f667-22a7-38ee-b03a-4f3721db433e 36 6fd52c68-fa98-1166-bee5-1cded4cd9230 37 85579581-c015-7871-a25c-024c2ed8943d 38 d24604d5-338b-10d3-846f-9dfe246c01df 39 8c9c5a9c-d98e-12be-9bf1-80689f5cfb4b 40 9b2b3c92-238e-6ecd-8d19-a5411c2219ab 41 7c179267-91c3-61c8-ab62-221ceb204178 42 c1b77859-d30c-843e-bbab-5796af80c296 43 f7360711-588a-82a2-92f9-e26be811fe04 44 b61c7419-a38d-74f3-93d8-94f0fdf92976 45 87a1dcd1-da42-7fe0-b6fe-5afbf694e043 46 6c3af851-e580-3fdb-854b-2c6f0b4100f6 47 292a2bf8-43be-648a-9720-d896cfea7175
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
15863884325707060485766815072451433171166887736. Exactly this sequence comes out ofnew Random(933).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 5 of Run 12 (seed 36,542,234):
new Random(36542234), Next(8,64) per post. The RNG predicts N = 47; the post has N = 47 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-05 10:25–10:55). - Conclusion. Filler. The content is fully explained by the two RNGs.