201207070136 w4vfq
explained decrypted filler
3DES(name) ECB, 51 GUIDs, seed 767
From the post to its content
As posted (encrypted)
DB59BCF60D86B276 560EA0D7AF537B14 1E76251DB26A26E1 FF025CC7236B1748 37D4F47AC25CCF7C 30B9FB459DC6A7B6 660BCEBCCA97582B 03EB6B82520989D7 D196697E34A1E87E 464B86912EB27FF0 F0BCA7D7A90AD2C7 A424483633036A18 57AC89D1F9EAFC77 36E923C5E5316E89 0C3874A6F158A5CF 39097DA130ED685A 8838157C4066967A 660BAC9851F6676E CAD2A064A333A15F 8F1152A46A297A57 EC637A9F29E8B559 CBA2E21B22AF71E3 9D6F72BE3F7F62AE 9E93A9FAC5E77F34 32A76F63BB6188F5 09C311F8AF9EC2B5 B71CD186C51EC7FE 9E61974D004E15C3 826C5B79A3775203 69D26D072B526F4E 26A42544E2026BB1 76B982614D6C89F1 336FAD27EF20D39C EF387B0FD3DA92C3 0A864D1A30A4EB34 7AD70AE806AA0D1B 007E9C6F66BDC733 C65BB3214E61BE21 EFB92897F5FF9183 418C8DF5DECF8D75 E92676FC7D6C0B3D A920CB8D8C161903 61572A550BDEA8AA BC53B210E97E7876 7AB859742D5A6365 FC734C80FDFE5784 0B6C4FEF13ED52F8 2253CC13A3F84BA3 494EB0D4371B4870 AEE76757FB0174D6 FFE1455B9E7AC1E4 CF8C0C98C46E1D0D 530004FB570A7ECE 2E8B345C490BFC97 C0D5AA0B6CDA87D9 4F76A16DD02856CA 4051DB324A3D0C9A CC7093D3F585A15B 98A4618EFEC791B6 439F5D3D5E746A49 D31D9EF0A910C411 7B467CB363025F46 7244CC614F3C1BD1 544D0E9508505FBF 1B90A587828070ED F0DA68E7C9F338F2 77F04A1F9C6AF78A 233BEA1981509E15 03AD8E8F6B485414 7AE9D711DB4296E4 25490BAD5F69AE67 2FBB3B4FC400E838 305EAFA1BAEC876C 92294B84817DE58F 4BD2614E11720654 680DC2347D48AB68 E528BA1E29B44561 B1F1A24F34D72E83 023FC35B99A67D30 D57760B81A303339 ED34F26138411F44 7679D0B4486CC298 F23249DBA05C7296 2D6C8043148F6E37 8B7275E263B56D45 FFB4D9F8E0733A8C 08FFAD8416985972 0AA9C9D18A037CC2 A8EBC8979AA1810B 172158EADC361FB4 ECE46589DCDB8089 58759198F178356E 748B200B80BC3955 D5BE2C0F1F2E0616 C13BC91F4A4ECC32 7A954EACD2A690E0 370CE6A1075F6656 1679836F3B9ED2A9 83A75B53DB3F02D1 EBBCDB29FB3E73C1 EF91D676B08076AC 0CB3CC7E3ACCFA0D F517F6F5BF5B75CD 71DF5D4C235A117A E58C59BA90206297 59214323AD42DC5E 0FD8AEACBD2BC6A7 E86932DBAA3035D5 F7A5FE050288E024 9AB2AE2B9CE13A2C 2F8B877C09E47593 ABB2ADD5E61990B5 03A6535EA82414CF D8FB638CA72F14D7 3388D49CFDAD685E BB8C6E0C31C55501 564BC2E1C4DE3906 9BE46398527284B3 6720008A21819796 3DCD68F8F481C3FE 49D8DF86ABAF78CF CDD8A1A3ABEB82AA 4A169B79A86D609B 84AD19FF9391E2B2 BAC24FE62F6042C7 B58B7251C5D27061 738E1C47D3162D15 4CE3F1A4F9B989E6 ED5C87EE7FEBFA48 BE581B41CD5E31A4 EB3727B16C3CB6C7 0CF0B04F9B2DEF0C C8FBD2021452A5B1 96316AC5EC6E7F03 C79DAE88CB7E8639 CDBEDB1E6F201871 0A8126EC8D04BD68 569EC9E62538D2FA B0B5C8424AFE2202 B3B2DB3FDAACBF79 BB3BA04A744FA370 314472B654A3E325 FFFF6E85B396F6A3 590440510269B5B7 3019DE34E458860D 20BCFF73B0CF0437 FE2E1C02F5703313 F60BAC423C6CF2A1 B9C322DCB21A3E8B D55B14DA51682750 0AC77C2EDC6D43C4 A4478F08B1E09116 5677AC7BBB667C33 4DC70428C7D314C1 C35498E9FE103A43 01193BFA03481941 ABE79395D9781FBF 54814FFA1B5950BD D315AC4F8DCB2171 58D80F4D9E7D9DC6 75FA975E7CFDE30F EAA4E407134DA400 A4028D63D7822B62 86D4D80F79C00F2B 4FE9C9B3A5C75E70 203C939DE8446ACD CBEF336123C67398 134D266A498EA16D 66C51A5A1F7A1D30 93A8748547E8EB4C 7E2F844A841852B1 C6C2513B648F4BCD E9D99439F380A954 59FB7992BEC63F21 9450BD458A0EC152 51D7FAA8BA458944 7DD552B2FADE2F54 BA8563AAE6642DDE 9DA81E64897529E9 C0C64755D181E5E8 139AA2C95F22EDF6 8F0B434A83AC48D5 D2D2EBFA4AE16AC1 FC122C5C9EFF00F8 439BCEF1DB3059F0 1E479B105D26B2D9 1498CBCB2C17F8B6 1D94D1076EF776DD 25C91B99F180E7E2 37A8F6998890B9AE 2436CAC6DB42C467 610644D7637B2EE0 6E18D09891C9A19A B170022ADD2B5C59 307B3E98077A120B 9291C5D5EA762C53 641A1E68642890E7 5C6F775F439D853E 8AFB77BC07F5F824 01A3792D831FCB1D F2287DE46752E6EA C44B9AC117CE9FA7 884FB0806BB80985 647C4D5A073637E6 5DACFFBA8FF64DBD
- Read the ciphertext. Strip whitespace: 3,280 hex characters = 1,640 bytes = 205 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9(name). Key = MD5(password) =34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 51 GUIDs as hex (shown below).
Decrypted: GUID list
1 2fecfcf9-072b-3eb4-b3b8-72719417d8a8 2 c9e1f4a7-d54f-7752-a6f4-71b1d5ce88fc 3 92a5633d-d72f-8da9-922d-f252736e275e 4 68c21ce9-2c25-2ed9-b380-c0d4aa3a36c0 5 35d233ec-5d43-4b26-9923-47a743af2e38 6 032cfb18-7f69-705c-a807-a748eb96ca3d 7 5e68e13e-9b79-555c-980b-abd26d2485b8 8 e8449b25-c79c-269b-a0d3-aed091f9bd86 9 e5713d99-e243-7a67-888d-256361fcc9b7 10 d39c681e-c156-03ca-8ed8-42bcc5f43e83 11 57a9402c-93b1-3f77-b39c-8a4aaabce862 12 ccc6c7b6-5a5f-2d56-a2dc-68ee4020a374 13 bac6d5bc-a06f-8693-a3d4-66632c12601a 14 053cca67-98d0-4b8e-96a5-937407cb8bc5 15 3cbb2384-6c19-75b0-9b3f-4c8d98915a99 16 7ccb60b3-d760-088f-adcb-44fb8058b005 17 a21c8b21-273f-2ca8-b76c-b65bada2d4de 18 61e34328-0de9-4b30-b060-e2949aa28c5e 19 1e152373-e446-39d9-a933-96276039729a 20 a6933603-784a-2d8c-ba70-1d085138203f 21 8f9f41b6-2c43-60c5-8313-52ee9807e447 22 b3851061-4048-077e-83f3-e625592df809 23 28073a8b-54d6-56ec-911e-432cacd48385 24 72f31a47-3dd8-8bd8-88ff-9ee4e309aede 25 5c285112-6203-74ce-90d0-517f390343d0 26 31c2e250-b286-7a0e-9206-d87fd3f9d597 27 314c3835-be5c-385b-9a17-60875caf1ad0 28 0004ee20-70c9-8ecc-99b6-5f65dec9228c 29 9127d075-ffea-3ac7-b798-59b4cd537464 30 d8d3d1a8-62b3-7b91-a94f-e0334cfc1d1d 31 ccac0de6-63d7-30c0-8020-b3ebb984bf9a 32 72a64758-83e7-4605-bc11-cf96ff48356f 33 e0504e72-7d50-6236-b6e4-0631c993f114 34 02572636-eee0-12c0-86be-ec5d55e4abdd 35 fc4d9dab-5607-4ad2-97a7-f565af2cd9ee 36 75a634a4-3142-07d3-9e9a-b2ce8522817b 37 7e72a118-373e-3fed-ae1a-8fc56fe3db57 38 f9a384a4-d28f-05b4-b2b6-aeb951b63cb2 39 03396610-0806-6cc2-b2bd-c3536cb54ad1 40 3b27787d-d18d-45b2-8ce9-dd2a50a91227 41 c930a7a1-52e3-26da-9314-62b98d96c637 42 6c6d4084-58c6-7157-811b-032b34944491 43 5aec8210-0a92-81a2-8e64-34e4830a4b8b 44 9d98b5e6-b820-02e0-868e-e4d9f90ae7b1 45 1bf5a028-a6fb-21b2-8fe6-c3f368f9e3b0 46 e17cd2e6-76b5-2bcf-99ad-f0d6173c6e14 47 da9edf22-1382-2ee1-9f0d-e73647aae5ed 48 22a2ea58-f9c9-4e46-bb12-78ca3882116b 49 5948f848-8483-05e0-8627-29d91976255e 50 286b206a-5f4f-5568-a28e-0a60b2747b4b 51 37a00ad3-2117-4af5-a50f-d0ea0db72e1d
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
378247527032847024326058773837346140306427802224054. Exactly this sequence comes out ofnew Random(767).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 23 of Run 11 (seed 37,057,156):
new Random(37057156), Next(8,64) per post. The RNG predicts N = 51; the post has N = 51 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-05 09:16–10:46). - Conclusion. Filler. The content is fully explained by the two RNGs.