201207060905 w3pvv
explained decrypted filler
seed 642
From the post to its content
As posted (encrypted)
6D0C23C27B6DB8EA 84C908C2FB28E92B 8B7B3B592C7B88D2 7D0597121B959FD6 83ADEBCE92FEBC6F 56A46FF46448CA38 CF5F8BC5A31FF5E9 7F2DEB829D9E93E1 AA85DDBF455C6B48 604E193128DA6A97 5AF1E63827E7245A D6F33F9579F5DA6D 9028C72E3774E560 C0E59499646AAE84 641DAB4185653770 24F288781B74C6AF 20F666E2342265F1 FCC96C91A9431B6C 59C4C5910FBB8363 0AF5EF34F4E90E04 45F6D3D5086743C5 DC6C5CFB94E49092 2C084502125650EF 54AB83C5BCABF2BB D6D7CF68B0C75C05 67639E2ED45D6538 2B59FCA31051F5AB 500641FC4F0528ED 15313EA79E34A65B 24485225ACC1DA26 E4039A5A48D3F9B3 68105B9B63EA7B06 E0EBBF607B444B40 0F5ACFB30CED8525 53CB6EACD62C5EBF 9D3E2DEA36379CC0 52F29AE1A7E00738 055521364EB90147 70E74E2FD3029848 81DBCCEE41F8B4E0 FD4FA8F249A053E1 8776D71ABC8BF12F 31E0452C032EED70 F2341A5AF8DBFF28 9B453B0FCBE8D5D5 A6A3AA3605B06E1D 065DEADC89651AAB D36EC1EFE292F2FA 4145271DDC8C9C13 66ADCB28DBAD42BF 6735C1653154172B 785AF03FF9D1952C 7A696B1385EE245F CCC063C35DF91FD6 01FEA50E205EABC4 B1D23C24E19364B6 0945948CB9616C51 997CFEB53012EDFA C11404F62707AE5E 7A7C1E332DF38747 519B2F8BDA9E1277 3E78A5A5818C935E F4A02316CB71F8AC 5569FE5C2670E7E9 8BFCD80697563197 32CA64C0A9FFA983 AF95923FD45E0E1C DAD7FD3FFE264F2C 804B505AB0F3B6DC D640D89940BC1428 7974C0227323EF9B 8CA5B609ABA7FFBE 2A837733DD7F2208 3A7C3FD63A79EF15 CE61A5AAE985A66A 9CED570C98F67C6C 2FD922E65C1E2C24 B9CB4E6B5ACCCB8F A1CA5DA756EDA846 3A1409F50C5BB689 ABEFDCE077601835 6BA471034F6C1C1D 4F4858FF269CB9E5 4751A453E422A7A6 E0B929592C9EC356 B8532EEF4E80D203 72BAEF12DCB5931C E4DA2569E1982BE2 36B3F3F71224CCA4 7B42A5DAD236B65F 101800E6C6AB3B9D B1D9A8F6FA204050 369A5D6C8811BEED 4E1EAB1E1044BE01 2E60DAAAA4986C37 C6DBE192E3A33532 75062DC023C68DA7 0714C9415D6FB124 F3E834FE9C1DCB3B 532D13C4EBB2351C F91C9323F55E2BB7 A15A5C8CFD0A245D 31EA7C00E47908D8 E493F4535E79B711 23EC579BAAECC7EE 364AE06CDA80B9D5 D99E6901551F6EDC 5E52082C0C374490 C892C6528A1834F4 D7D6F6FD61A8A15E 71EB20C195367036 C75EC5E1CEC88F35 5183D8F912C31489 94FE5ECAE94B7E5F 9FC6820DCA8F988A 849C4FE0ABF36477 8F02DCE70943D615 61A5436BEB4DADA5 D8DCA864B3827111 FAFA7443E43F6C40 EF5840F8C059A788 E8441A6E48E79CB9 BF9FACE6FC4F2412 EB77E98524A5007E B82AE9298EFD25F1 6A4CB48A9A0F7C7E 9F4839277C56EC68 48E892859A57127C FB9E794A068F6552 21FACAEBE5F48448 1CD49DA87ECD00A8 32772C3A37F6C85B 11228683A7927FEC 8B6D14CC18F79A0B B4205E5628D42539 326B277151E013E2 B1B590E821F9EB2D 45E066D0810442A3 446A1EBAFBBB1EBF F2749D5001D930B5 8C06FDE08DC79EEF 0DFCCA8E891EA1A7 CFBD2FB1F03D759F 485F78FA9AA33304 DFDE3232A4A79A9E C667AAAF32E93FAB 2591E8464BD2E1B8 D8D9084E647C9D56 63C18E5904130265 3D01D3B40BCA2A77 38D7431EE22E5383 FF81BC811CE68BE5 113CAC2E26FD7711 B8EDBEAA7AB7FE34 F40DE4376283FCA7 2A195366F19F3267 F09182CFD688914D 1BA726830BCCEBDD 8D5C6939C86A85C3 BFDD8541C6C4DF5E 556835AE48812F4D 309DCB26FC8B4496 1A7329C70F4E7218 5D765A2905FCAF97 5235CA0B30A3F3DA 1242CC4724EF48E6 415258E019A2997A 7B620C28245C653B 3D1A570F0688B0BB F694B3461A9ED9D1 4939A57A53CDB60A 5D18ABF6EEA96C2C 46877B96BE46FAD7 3D6293CC38429AE7 1CB78DF0504CCAB2 8559AA2AB991092A 124E18305FDE7B10 81D383B63D71C416 C952567DC787F909 D80D16A33275BCFF 85ECD4BECFCD2B72 5908069D19A8A6CA 0A52CF829684A6F1 6E3C33CA880DBC11 D61759096E1E9BCC 55D672071D82570D F7D061F8D0354C17 84B711E8F9FE4288 1A06D38A7164BAC8 BFAAE650D4451D66 645066F68E547A85 D5E09936242E64A5 6B5A6BF2B8DBA471 3F3AA0E59D82A8FB 240B854276AB0AAA C49E329BD76A14EF 08654325D6E78483 0AA1FC4C616EBB3E C24F01531E481414 86E022F6D3B28A82 C9001B6BED661625 D73512BD9232B73E 32ED8E64ADE12ED6 59221F89392E96AC 3ACEFDB5F086D38D B302F4B6E1C85053 0C3CD32D833EA62C 7947E75CF8256F20 548340FE57D4608A F2A7BD36438C69FA 402169185C3F770A F75647FE2605EC0D 288862D698F5D91A 2A8B12F4793AE9AE A6049B0919FE1B80 328D162931E6C74B 74B0C23A79B00D89 10F9328581E1F9D9 C2425930D035A1FF 2C8693950CA81E66 5DACFFBA8FF64DBD
- Read the ciphertext. Strip whitespace: 3,536 hex characters = 1,768 bytes = 221 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9(name). Key = MD5(password) =34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 55 GUIDs as hex (shown below).
Decrypted: GUID list
1 d3fbd97c-b593-162f-8359-565304af575d 2 a2fec1d0-9052-1172-8115-11984cc85508 3 1c55b7fe-f733-4952-b4a3-69852107e28b 4 f832b3ae-a614-57ff-b7d4-8687b2636046 5 48ee2025-5dd8-04ee-98fc-f03dde826352 6 51455ef9-518a-5bc8-b1c8-3048eaffaf60 7 1c85de82-2135-59e1-8406-4c96a89d1afd 8 f6981d83-6d9d-4617-9c74-356c6b9dddb3 9 1ee2eace-2e8b-3916-a03c-48b5abb9f40d 10 fcb33013-14d3-0d64-9160-513addb45bd6 11 29751ac4-e750-2d6b-b974-caa501a3a5e6 12 7fe6695a-b119-6b55-8b7c-85147cdd0b26 13 6140e15c-0526-896e-82b8-3183efe6da9c 14 d096b7ba-9d06-48d1-b816-f31b98a685b0 15 93e11ea1-90fc-3bc8-81f8-1cd9375a4a15 16 c014a1bb-8c05-82f4-991c-005da9f89777 17 f7edf3c0-1f74-6392-9fd3-13fef8c6a97d 18 cfb544a8-115d-0e5c-ad21-0375196e87c8 19 492f0776-3ee0-0026-b5b1-74d291aa16ce 20 1127bc0f-ffff-8baa-975d-da9b36c0b6f3 21 c0c9ecc4-1429-17dd-9087-1a4abfab6e4c 22 d0e19b67-8a7f-31f7-b7a0-c7b54ba58d0e 23 4d768917-0f47-46e1-9a8f-b06188fc62fc 24 a0e68acc-9985-2dcc-a167-42f10e68e559 25 7efac31b-1aae-5a46-ad43-646837190d48 26 778de79b-356e-4073-94c9-ceaecd8c31c1 27 6f0c4690-61bc-8824-8921-7904a99c7a59 28 f92a976f-dd79-4154-834d-849a62f7612f 29 531ed64b-227d-736e-8190-cb55c4ede0e9 30 243301fb-2538-12af-87cc-ff9acf5d2c8d 31 3be78e03-d671-100f-85fe-e13e4648c25b 32 1112cc92-bffa-524d-8899-6016ecc49952 33 f0f4b545-4e23-421e-a178-82584e59a775 34 a21d636a-bb38-0cbf-8b28-a3d748172d54 35 c25bae84-2ea6-7d2a-b20b-2fcb2e5782bd 36 81857dee-d207-5e6b-8165-6c56f7ec5d3b 37 ed37169e-94a6-7e7e-b001-b1bfa07bc4f6 38 74ec64c2-2279-8a59-8475-4ecf289793a3 39 3f0b87b9-d6dc-2c89-88e1-1feed026b859 40 b4f79219-b086-4435-b55f-a35d0d90b702 41 aa96284b-3f13-356f-b97e-bbd4eb9a91a8 42 5e19b8ff-3656-0af2-94b2-21c7f2aeb58f 43 4fe81c38-68ca-353a-93d8-23858dd80130 44 b5457acc-dfe5-885a-b5fe-cc16f6f0fd60 45 f083a3b3-eaf2-34b0-bf80-08ab63a142b3 46 ec57fbae-eaf1-1035-8d22-df30ba14a616 47 d05b1639-6ea5-6286-8604-4ba70aecf545 48 9fcca61a-f790-4bab-a0bf-cdc8d1195b90 49 7061ea9e-b499-78d6-964e-07c03314585e 50 a96f80f7-a5db-0800-ad31-406b629cbea2 51 e46b6f64-c873-8cc7-882b-f9104af24e44 52 baca8fcd-5816-0c29-a083-abe32866d154 53 56230542-1a48-134c-b4bd-1ae788b22896 54 4369f9e0-56c4-2dba-b790-d1fedea79b35 55 c996968c-86f2-679e-89b4-014306f9cca8
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
1145055430268438600813425484711540757824303831647080126. Exactly this sequence comes out ofnew Random(642).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 6 of Run 11 (seed 37,057,156):
new Random(37057156), Next(8,64) per post. The RNG predicts N = 55; the post has N = 55 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-05 09:16–10:46). - Conclusion. Filler. The content is fully explained by the two RNGs.