201207060036 w44qe
explained decrypted filler
seed 161
From the post to its content
As posted (encrypted)
A81B1961F27D0C39 3B407C3C657F1888 01DEDB3785EC8DD4 54D0CF701E160F7F 04621E9FEBD2C7DA 9EF2EA2224C5B3F5 0F9FFBE056F8C9B0 CA794CCD7EF2ED13 19612DDCDFC2CF93 494BD720FB3E53C8 2653B4CE296A30F5 7898DFA9E5512E1C F7CAC107535B79A0 0692B68E4A98B313 C50D83152FD532CA A3EC317C88463B74 5823CF926972D590 014E0BC5D74ED197 58E5865F92A1CF1D 55F21A230A1A4EA4 9AAE4B7291883E3E 8BCF2E5817E1733F A4DD694602A4B577 797A168D391AC2BF EFFD14A64912099D C1C202640C2AE063 12041D4B06A2D0EE 706732354BBF3785 D949038B2D21FE42 A5B65736448DE20B 9EA1844011DCEE09 DC03558CA364190D 7E3CA9DE1A0BE667 0AE4ACEB86B29A08 879C016865974E66 785291C5148B7DD0 70DAA0379B2D31AD E8BBB2D9F904824F C9BEA5EB107AC29E 7DC519BDC345A5D2 FAB5CCE38BADEFD6 DF95928B27CCDCA5 45510B0F125AAD74 F2F6FEA0217F09FD A7D5F603854045E7 D5CD03A713AB188C 58984BC891A874F3 84E159AB48384C1B E707B57E53DC5B69 6528CE49C9286F6E 288181DE6677FC22 673DCDFB9EA7FD3C 5E9B1B0F9F4486DD 12EDAFBED797ADBC DC10522924FD890F 881A01CCF6BDD00B 0751459EDDBE72B3 65FB0A43551271F1 126058995B272C39 D0F2D3B9956CFBEA 6D09F918A6208A6A 5CC62A33042432A3 A8121373FA219A80 971866EFC67D19AD 49D5A4B011DAC42A 935FE9FFAA04EF37 4065F072FA3CAFBE 5F85360AA585B8CE 00814E6956622401 91959E8B6AAE9B36 B2CFD2B71E17567C 47A813DB9A126A0D 1B44B59AB4026E48 B3F38010ED4D2540 03FCEED00B3774B8 9A9949B0BE6B841D 1F91A0D8EFAFA101 1BB66AADA8D9CBA9 27F37955C59F588C 34928DF1CA66255C CF14951331A6C4A0 5B137CC7AD24B40D 9DE0241B21487D15 0A1A487169CBAA54 E3825F8FF06CCF1A 2D6C1A71545A3F97 953A21F7B0E0CC20 B9712F55EBE40A02 E2547AC1F59EBCB6 4C8135CBA2B81F0A B4FEF9D696B125A4 97D52D095A04DC82 C655BE07BFF6263E 6664DB7E0AA6F1AB 3ED6694416C73242 F12A1B42B5A7D2E2 0EDE12B93A3361B1 AC77AC58BD06B7A1 476584616B99300B C27245F14473E3E1 643E11CF6661A48F 02362E0EAB13DED6 61D5E359C6471E40 82BB404CC706C7A9 883F1845F54CF653 A2DE4D594CB0CCD4 E89B270C76267EE3 C732DE790575F20E 309D2BAF253F4556 CECDDD5FF6305733 8C3CF00E31C08AEA 23322D7E9C411FD0 D6077C22270C717B 741FDA9B97CEC200 2D28C99B570315B5 22001A9707B4ADD4 A2022EC9A2C215BC 371B6F2A76717A3D 68A3126B1B17731A 0BBE5089386B1F17 504E8A053ECF54F9 D77D39472B5F9B67 698815A5ACB472EB DC9EC7D9E972E45C 4ED930B4ECA572AE DADEA99E17ADA5E5 B12AC67E14339EA0 089C2AA45BD3AF99 BA73ECC8BDBE8F31 E35B4D4B7A4C3F9D 872A13C389D4971B 94ED4649B8B067D3 64A1AFF6D99B2B39 A1238FD3EB3E9A9B A7C9FED9079DF0D2 EAD5E9EBA701F44B 71F426FD8C90382D E41A3A0B97B7B1DB 7D9337089835875C 91ABA9785DE9CD25 53B132FD04F4BF90 3A3316954E43F53C 349D2712C398E53F 1E7393ABC40C17E4 EC3BC1AD09CB4A61 A364B5AA52392BBA E2324275BCEB2FB1 839A9E802AF13C9B 205EEB1417DE12A0 B743CD1DE7D2E58B 467C6211FD2C0981 2635A128E7891D1F 6548018998794D06 618C54A1FD90200C 996E517A38B291AB 461D5A1A2C67B3B7 32702AF62DCDF2FB 5979BF3F39C8D130 C50DC597126BB2C4 22167BB492EDF976 BB85F278FFF20DAD E8BE84CCA6A9538D 5343194C9DAAE9B7 A03D1469A4F1E211 930A73D7E592CE67 6E850BB92325F4F4 6CE6669D14F58E37 0156013FE0C8C108 E646769878D70A74 7117F1D3782DD702 336878CA739C90F3 CD39EFC7A934FCD3 3CE1853B68371404 A65616462054193C 4C2883833310C1AD C578196CBFE3AF67 437F07240EC5A36A 37F47F8103466D29 E040063011BB0C75 56BCEC14599FD780 1474DD2D3C1B6FA6 70F1162F116070F5 4D338427A9A00209 025343F01583556E 204F1EB57EB38397 21C62E3297768332 7CDFDE3F4115DC37 E7E7DD7C9808B964 7A94D57A2DD96CAC CAA044005BF251E2 2B13CD49E2CA0959 CBE397494E26E4AB A2380434F512780F 21AD86B30FAA99CD F684DA800B4E3A18 8352239126C83002 22F3CD8E3A343324 37C41E6B03701002 F335EECA19A220A7 2FBB57CCB04FD2E7 5DACFFBA8FF64DBD
- Read the ciphertext. Strip whitespace: 3,216 hex characters = 1,608 bytes = 201 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9(name). Key = MD5(password) =34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 50 GUIDs as hex (shown below).
Decrypted: GUID list
1 378a936c-66a3-7bef-930c-4c782dbcf565 2 94fbe113-17a5-014a-b152-25eb36ce204e 3 36806f0d-c34e-2cfe-ad5a-858db40635ce 4 8c838b67-3b69-8989-aa87-68c0f3380a8e 5 b770bc95-0e33-8df5-ad45-582e5b85d416 6 b4c87577-16cb-236e-945d-3b1a46549c91 7 380d7d51-9e56-0459-aa69-d7bfd3238d86 8 ca0fdfbe-018a-19ca-b336-62431cc25904 9 06729b14-9521-8a71-9fed-6f74f16dd9a6 10 23e977ad-27ff-534b-8e78-5e833f40c7f5 11 e2faef17-c74d-8424-a9fe-aa845b0c5771 12 370d7b15-d4de-1237-9256-f2d2669f4dc2 13 57d08d93-739c-2752-a667-c3546acd1dad 14 b586020c-62dc-245b-967b-62feac1e92f7 15 b6fa177d-eb6c-620a-aad4-b69c9585da19 16 48b91c1e-a127-5816-bbda-6bf431c7b137 17 7a184a9c-da31-444e-a2dc-885cdec31df2 18 60be15ad-f155-7ab6-8cd6-6560292ffaa5 19 34d9504b-25cb-0ec3-aad0-e90c77bdd102 20 14657705-fb16-52c0-8cbe-d6afec198408 21 14ac7c74-64f1-1bfe-9c5d-06dd9af06069 22 e7a462f0-c6f6-39be-a4f5-3307752e0de0 23 25b63845-d4b4-1588-8899-0eed44363eaa 24 f0ec1ac8-ef17-2fd9-a955-e49c7ca9a675 25 93b80fbb-f09e-4b75-b665-dcd1e19c7d96 26 05ab3e95-9f3e-05ec-8fc8-c9f8f49ba622 27 dbfc44ae-e9c1-3670-b2de-2ec8ae4c4fd7 28 673208d1-016e-4f27-bd54-f6e002ac193f 29 f5500a52-126d-0818-b04c-e84a8ce390f8 30 8cb594f7-b1f1-6df4-82eb-6bf017ca1686 31 3e19794c-d6bc-5ae4-8a83-bc36d44dc86a 32 352db764-d1bb-70d2-8857-1f5876bedf90 33 4ec7a564-1c3c-0cfb-9251-522ca7ce1ce0 34 da02b8e6-76ef-0cfb-80f6-9de087bbbcbf 35 2e39eb3b-05c3-79d7-80b8-8961ad0691a6 36 e8d16274-2760-6aac-abea-72cd04e742eb 37 c6d1525a-09ba-3125-9a1c-b4e07783c103 38 e7f4aeff-16ed-0dbe-a3a4-83f0de4b2cef 39 8d308e47-b1f8-8290-9ac8-f64cf6766d7d 40 0b8abbe0-e2f8-3214-aeb5-fc02e62fb97c 41 d0308c25-2ad8-0d17-b28c-6f26c48d91a2 42 fd125d91-0e55-4e1c-a983-649c719c02da 43 d8f5f935-0daa-2fcf-8f8f-f176608a54b9 44 6991ebb5-5b3a-4407-be09-6338d240fc95 45 7e52b6e8-c3f7-77e9-bb7b-3ff5d36df56f 46 6156e1b3-148d-57be-8992-2b36854f80ed 47 1ceb3d9e-410e-17a8-b624-48cf28f4e41e 48 3ed2ca76-eb4f-8c71-9409-29271d474cdc 49 204fe467-5221-7e21-9d70-ae146c5ffca6 50 5b44c85f-64d5-4a41-9097-498076273640
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
70288201858122654705131240340657007630830424751874. Exactly this sequence comes out ofnew Random(161).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 15 of Run 12 (seed 36,542,234):
new Random(36542234), Next(8,64) per post. The RNG predicts N = 50; the post has N = 50 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-05 10:25–10:55). - Conclusion. Filler. The content is fully explained by the two RNGs.