201207061205 w3ztj
explained decrypted filler
seed 954
From the post to its content
As posted (encrypted)
DA1AA543A38ED71B 01E3141453302DC5 92ED949D6DA4A96B 5EDE125AA0066EEA 021F31C898E93DF3 7C01650AB3970E9A FCC8AEB42EF12E4C 991F9EF216C44B00 C9A67174CCBB6A9E 98D8D55301D91230 6BC074B1DE6912D9 BA95B42B261A93B8 CFE3DE923C140596 4ED869B168850408 91804AFE01D465D2 6B2DA494C914BFC4 202E9EE0A364EC4C 3C0F7FF3EF4934FC 63B4541545F509E2 FF5D35DA4314BEA7 40C7CDB5D02F349B DC99067138DC3F5A 6B03D6E321F2BB4D E4117F198B368A3A 3706331028C1DD32 8139184A6E4DBA6A 926719BE56A2C091 86893BAB06BD3C7C 638931F5F5B685D6 408AAD2240B4BC22 5C028C31D7D20B8F 262A6EBF4EA0B395 919AB19765AB82CF D6CC611B6DF06445 4A8ACD2975E4DF73 2C9EBE7A6FF0E698 633DFC29E58472B2 FD0B6E629B8A1D5C 84595B43A7956E75 B6CA8CAC86EDE496 96B5511057224CE0 2183438899C80CA7 63C6BAB4AC747FE3 EE21535A92754C0B EA89742B51664FD7 9742D8B2FFD08DE6 A5589288331D3F96 F0D82C4A0C2BCE2A AA47B5C79F0DC420 AA77EE34A2E7FDB3 781BAA7C02738A2A 226C4B35DE064909 C0C6FAEAD3FC5345 5DEF88A796321FD5 42847E8D0C97C098 0199FD5FEBB173CC B85C8AB70E492EA5 54A1DC84E3624E91 1E34BB6956C3DA14 98BDC0B9A4B889BD 9A1BB986080C240D 4F7BC6EB223E1C97 DF258DEE7F73D92A 0A683BF67EE6726D F3EC1A590F2B1AAF 9D38A64A3E70617E 83106E786EABC642 3D14F85228A43C61 E0675E7102A6F4FB 38B7D25107EAEEE3 9DCCBB9AA8C094BC DB2257EC393813DB 531C3A396C95E4C1 433913638A2357E6 6BF1D2B7B491E957 14C2455C45C9DF54 EA6CAF59AED994FE DBE16BCA2B272396 7E7802B3F9F9789B 48DEAC7B69DE2F22 9A02595620B6E40D A2FE603421B54073 1532436D3E1B5A03 24B80CDFF1D19E4F 2D054AF65B888D24 AFBBA6F898F323B4 8352E09C78A260DD 002C6640F7CA47DA 7F13169097781E70 C418EDE06ED9F647 7D7E324F59F1DA68 E49FEC10FC973C5F B4EE86D40E91CAC7 478B8EC9BB083EC4 05FC9C64E017E26F 1CC8253B749FEE78 177E178C80A26FDF 7939C757D34BEE92 296DA10F4E846825 5ECFD9C2846AC6A1 738DD0344B6D6317 35981676BC9732AC 350107D36E7CCC22 1252D062A0D434AB BC25C427551712D6 B305C7FE4F0BD55E 36C5F5737E95E8B0 2B5D33E89AFB8221 908A10561E013CC5 CF4008BE52BE2B5B 2627EC539218A200 964EE96F0F779DF0 8D603DCE8D142FA0 0015206B28AFA704 1BA1420D487BD43F 4314F8CF1D8D9B15 F671AD52D44FF442 7C24C77B58EDAA27 F56BA5E1E9173834 81B5BCD9EF458212 F2C219923F833D48 4B3D2AA44DFE9F18 0119D429BFAA5E1A A24428AFBE8C0042 4CA44181F6583EB1 DA3B61264E9E213C 9102DC0C24083055 5678FF079B82FE8C 1FE36D68A3DA1F21 D99656B24BED3A68 F7254F3151371F53 53D13917D76DCF7C 92DC456F2EE5CC12 A7EFE34C717E156F 37F099D0C0E71AF9 B26D36CA5B9ECB1D 6668B267CBA1EBAF 4347937E57E4FD90 A6187FFAEA4B9817 C787A99EDA5A30F0 C3AE8A9020D7D95E E18B433F497B7C51 8AE7758C5D8CFE4F 8E6DA8092C94E1ED 310DF3E45FE1D232 C8B61FCE7952A080 0A45B658060BECEA 16424BBDD1F8EBB0 8F371EECF0CE49CB 893B9EC6AB94B39F 93190949BE13C291 90320D62C1713F4B 7838863944C2EA69 3B691063131006C4 7F1C4561125F4897 14C3A2775C45B822 B3F6460FC8A454D1 3BCEC48B655A1172 2047D462B2BE5E0C 61A65D265D34F280 D2861A95E6450BD8 6401D8E46EC03F9F 72C672A5AD4C061E 09129EB70BAC42BA ACBC13C40781B1EE B103B9D0F9EBB518 F9929558CEDD12EF 59D45B38CFE0A9A0 C9146F7E2EFE756B 09CAF9C3FEA20F20 B640444EFF1A8BB8 D55673A8E40F78B4 F163B97441DC16E7 ADE78FE6E63BEB9A 8BD649D8946FC891 295E905A6E86DB43 F7DC23B504A1E3EB D39A95E7AF427BD7 2F312FBB8B089E14 1A88FFB78AAEAC38 9C6BDBE90AD1DD56 CE6673C309F69825 BE4B65EE36CD67ED 91F745BF537A5F39 294267216D176ED5 BF2DE8AF106A14BD 57C42B3D56FEDE68 FC53E7D821909429 6CF57EEC898FC5EB 4C5C6EB6E9D61C86 DAC7324BF10EE675 F1AF829B01D467F9 E32AB8D048D77B3A D9923482278C2A4E A1728504E44A5B5E EBF39291C3384591 2AF8A39433AC346B 909BE9052DC4A3FD 8EFD123C17032749 68522C349FEB85B0 5DACFFBA8FF64DBD
- Read the ciphertext. Strip whitespace: 3,216 hex characters = 1,608 bytes = 201 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9(name). Key = MD5(password) =34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 50 GUIDs as hex (shown below).
Decrypted: GUID list
1 2e7cb34a-32b8-1e49-90d9-8207cfeb9477 2 08af68a9-4031-644d-a72c-9309c7f93e24 3 4eb53c86-79cf-53a3-b546-9a8641d06ba3 4 6b2da7f0-b47a-10f3-a352-7404bb256623 5 89f582d5-9b83-8ed9-add7-8a9f11203c74 6 1e90a968-adb2-2ce8-8e38-93188a035e40 7 8effebc7-00af-3625-8a65-ed098e586a66 8 aadb8cbc-c644-075b-aa81-54f9fc99bce8 9 2cf42018-bba0-0f45-b19b-efe2c43def0a 10 7a68b8c3-0395-078c-80d7-6ef48c7ec5e1 11 a5683c8e-1f5b-1cbf-90f6-2196899897ae 12 e01e9781-2e7f-2d1b-b677-2089602c1c5f 13 30cd1dd5-467e-44fe-bc1c-616e0fae01d4 14 e72be55a-b1ce-7376-a266-c18d7a2283fe 15 8f39e858-6786-6662-9c83-16c28cf8f899 16 bc563356-d719-7365-b6b5-99fedd0ebd3c 17 d450d5a5-b458-7dfc-8742-b4042df8b955 18 5e9f2a55-1044-44e6-8c07-5f5e7b22dedf 19 0aae252c-8f11-4405-adf8-a79205b43648 20 85a18fd5-93f6-61f0-8647-65ad45826e24 21 8ba6d384-af0a-5a82-8797-820470ba3939 22 a55a767c-566a-89fc-b267-3f61ab839c2d 23 20d8dae3-0742-24e6-97d6-617858e4e34b 24 5e1d6d90-13ab-2b02-b5c7-52ae9e8bdb35 25 c643258e-cc04-1e76-a039-0c3c99625630 26 4703f7af-e7c9-1252-a44f-671c57e346d2 27 5c6a1fb2-1160-1d98-b1f0-9b8eab100e60 28 c50d2d63-eba8-7111-9d1c-c6e7199c065d 29 49be6eba-7712-0f3b-bdce-38fa0459c417 30 baf99885-e949-30d7-9a06-3f7f00b12cc2 31 a660b40e-02c0-325a-949f-8635a4cfa1ab 32 0c92f3da-50ab-6d76-b7f8-ce6781c1db66 33 92bf0567-d026-8b89-8189-80b33cf73795 34 dee6e167-87e5-85c6-91e4-71c7110cf8a3 35 149d97e8-faff-6d92-a7cb-d0f2c7d86c71 36 457ac5df-4090-0bcb-b8d1-d0bd5dcd13b7 37 e3895835-9f1a-257a-9629-7ba1bb35b748 38 7704dbab-26c7-4ab1-9282-3d8eca1b4495 39 66a7db8a-0164-63c0-b1df-2bddd7c4ba38 40 c9b312ab-f522-5c4f-bf19-14ebbea08b34 41 17e85b71-77a4-7ab1-943b-81a8792bfe34 42 31d3d70a-77ed-6429-ba4c-4d9f8551cf79 43 3cdfecc4-842c-8de0-8aaa-1c537496b5ab 44 2827c380-6bbe-2d70-966f-efea36dc762c 45 87e2a7bd-6ef3-823a-b7b2-d65ac024e5f2 46 cc68064b-87be-8a64-8c07-286bc4277531 47 0f1df356-e396-8bcf-8627-55d74c37f5ff 48 5a86c923-76af-33d2-a9b7-23f78c77ae87 49 97bcb324-9b88-3372-ac60-37e065d1e54d 50 59852278-f21f-2b72-9cc7-c236da3e78da
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
16518230001247677446582211170336886024657682888332. Exactly this sequence comes out ofnew Random(954).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 12 of Run 11 (seed 37,057,156):
new Random(37057156), Next(8,64) per post. The RNG predicts N = 50; the post has N = 50 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-05 09:16–10:46). - Conclusion. Filler. The content is fully explained by the two RNGs.