201207101708 wcjrw
explained decrypted filler
3DES(name+name) ECB, 62 GUIDs, seed 141
From the post to its content
As posted (encrypted)
DB5D50494AEA2588 AC7BBE32995F0430 4E674D4B138FA485 338BD305740E71A4 914F4AB1E302FF74 7837F00A6204260D 6DC80C91D39C8AC7 CE1120B03ADA3A72 9B621293FFF0AE98 B01F2BAEBB3DD45A 73C532B57AD7BF2E E4AD97F7BB617055 B2DAA4618D7873B6 03AF302CC8D34947 108C3D3250FE99C8 0EBA34402B92DD19 3DFA482F5676CD14 BD6BB366DEA784A4 0E32A16EA5A7FF00 4F71CD3FBECCDFC3 8F1AFF3130F93C67 1176F66382E1ABC3 ABC8C2EC28112C93 BC4E24A9ADF712D6 B872F8E5F2A095FA 3E1271C5910E7060 5A951F203ADF8248 B5648840AECA8F5F 6F4810E557D4EBB3 5EB8CFE3C4D86E3E 35A698DBD3EB5364 1609416E02585314 67D5C5DB6155AC25 E589ED5F42310724 78E50ADB3AB9B85E 6EF78FAD94885FCA 9F9228DEC4BFA573 D14D263B1AF6437F F8E74001C16DB553 5E93B94561190B62 802C835DF974D084 852D5CA631360636 87D101CE4905DF84 79F98A55AF9606C8 C8B774EAE820F9AA CB0838A6889AF1A8 496FBB3F160184AF AAC8FFFA9BD1F433 21E84E09F15BEE01 55DF475905B17B84 4C2DEAB845697250 85C31003F420354F D4A944F762AEEEE3 478F97CE21BBEF37 2FAEEE09C964B704 13C71FA8986113CC C509C21DAAAFBCC6 CB8EA09187E61D31 324CEE6E3F90991F 72255B1A232CC06A E899F91F83909417 9232B90C8230026A DE6B33470B3BE675 4743601262D1E80C CAB11F85A77A4774 51D7030FC2247ED8 32370CD558E76EE3 C87BEA6953F1518E 8A0227854F2AE687 83F1DF24FF546721 33A19B8DFDBF8C2E 7F96B15FEFCADBB5 5FFD2859D1674860 9E6DBA0A23BDE058 E779EBDC282CD7CB 6E53A54089DFD8CD 7501EE3662E36289 1DDDF2985ED5ED0C AD37A28B401C18B1 C41330858C9A4B1F 4CCED9132E628F8B CEB9211AAB70BACC 12A6309906BCF058 7D3D61CA9A3A77DF 2DDF1A9BA2E91186 C9FC84CFDD1422C8 5BA9182907CFC510 30FAE225163A156D B1059EE99DB4295A E4A1BD0DED05FE3F 3AD0A8142FB9C954 3F91C30A83457B86 D797B0CECF5A13E0 5623071BD210CC78 68A6EAF71CFE3394 236BA34A683A8611 6CCD10BB46012B18 2F604491CC99ADB7 34B85202F6252C2D 26B886E04ECDA5D9 46720B6F338B3E2F BED249EE85451530 825CA36AF67319FB 2D340DD6BD8703E7 B15C9DC1825FF1C3 21067A8900A22959 B146A5A5C2F083AB AB6D7B3B9F36E273 EB832B2B005F9731 2787C38BF40AE360 2D79393D0A29607C C7CD1526E199781A 0D3B14C3C02594CF D8F39EEF627D00F3 7C45D30C3559C0FF 9378D8A4E48A0E2E 17B2B6CC2459E4B1 069F66713231AADB ADAE08D69BCFF958 049719251303105C 32C863656ACF220C 71E413E403988651 ACD777A23686D8FC 4DE8D1B051D39BB7 F1A40972E4A35590 1081E0D62C62DDE5 F7CC0A55F0726C81 9C9010F9BBD0A44C AE7B325E33B933DC 41DB90FE04AB75FF 051EA9A923316D07 E8BD6C5F32D88822 ACB152FE61226993 816A375BB51A2073 A2A3D4B3B29F4778 2DD45C8EA7058A49 51B663E026BB07A6 6DAA40B890309269 E79DD8224F575D45 0E5B597C3A83B458 504227FF5C1BC1FD 52B50F1FDF1C2921 C1D605317C38EA8B F594DAD01FB1BDDB F0A035D34F2780C9 7373042BFB86F3A9 AE930F1C08724304 06DEC208296433C2 66035873B17574C3 B32FE80738AA4B2D 7875866F5BDF8CDF 2A505575E80ED39A C178B555203F1E13 086E45B8FFCDA8CF 80E56F880BEFEAB8 FAEEDF3DB3681C4B BAECC30855B1AC90 6FCA438327D35384 C69123F0C14A45DB CD0DA1B4DD8ADD3C 54B6F5F46791824E F02616A19DCE51F0 DCB69770322626D8 B8A3939825BBFE51 2D3FD14F75B90971 AA0C4DCF12E29F62 5C55F3AB4AE50839 06937F73602F2CEA FF36500EE2AAD4B6 590D5BC7C19D1779 126C4256277AD9BF C61CBE9B8DCF3423 666B48F8156FDEFF 032C279217DFDE6E 315D4FC6B003A86E BED9FDCF914808A8 23D1741F9709F536 1D975CBE9164E0D4 BE0E8CEA82377109 F9DE800DEF91006F 3132BCC683481F3B CD35999BE3BF89FB DD3490F92F98FDF2 85CBF3FDA0E9DA1F F4ACF852930C326D 73CD9F3F7AEDC2DB D9D296CBFD56AB63 D5DBB8843F16B3B2 6EED8B984DF8715C 603D75D977F485B5 8F66F1AD7F3E01FF C696E05BA8734BF5 941C442400105533 32F7CB7E9A14B365 4CCD8581D48ABD61 5FE1E6B715C0A110 43E4A1027E7DD70E 19A1E2AB982941D0 73A87A3A16DECD03 A255A6B28B126403 E7C070EA11543A15 AFBA13D6E0F2780F 9750EC1893627598 EEAA18E8C658D3DC 029E3F997AE01ABB 1A12195A7E6B91C0 464D64FBE292191B C4B6EC6A6C9490E0 A97C699E0ADF4524 4184F02D5B4DC740 A4F47E3FB49C4858 9D69F6BCEC4CEBAE 5AE9A1496DA219AE E6A6DCADE870D26C 3DBD60716C886A80 9FF8068338F261E0 E4E0BF309E7A8F53 9D8FA17830627B4D F1C17F0C90B943C1 7AD463E507761FE9 CF0F973AB47BEA47 9A1B0C534C0FE902 32FD683E91F111D1 1A0F04701DFC46FC 841C9008EFAEB8EC 5C598455BBAC1CA9 1827938771E29A40 30BB97D7B90873D8 0D1213B8B2F317D6 EDC248935AC6AEE3 40E3B53D8B32F3B2 E6764DA32905188D 8E3FA772A10B808D F8C635BED81F1956 43E1D732E6B89865 11ADE39DB67950D6 84F4F22B653A9D0B 2C2431644C831D56 3425181DB7BE0F58 15717DE8C9662605 FEF41AA32EA3FC24 FB7F8D784848B211 495BFB368ED8AAF0 9C8D2B01922627C5 004D8353551AD2E5 E930A0E4D02F5F58 4D4AF6BE334A15A0 E13454B1BB287D7A 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 3,984 hex characters = 1,992 bytes = 249 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 62 GUIDs as hex (shown below).
Decrypted: GUID list
1 4561c2d3-ab16-3af4-8bf8-358018ac0466 2 ec62ed57-5005-1c60-ab91-9d7613cc204b 3 f33ddc7f-2cb5-2086-82fe-3ee8c9841f94 4 1dffc349-0fe0-55fc-bb4e-04bc895fad6f 5 d8af8792-c4ca-7d99-b4de-340736d2b8ef 6 dad6cb74-e2f6-7499-a6dc-4c7a9a03666d 7 6402befd-0986-051c-a3b8-650c7c6ae542 8 b3e87495-e3cf-1043-9503-9624d23e3cf5 9 744eadc4-5913-3f74-87e6-36c8f1f3d795 10 ed6f921f-8921-2c9a-a77e-602250dab4f2 11 42502e09-b152-1455-adbe-91c40c45183a 12 4d4d22e5-11a1-4fb5-9a9d-a18cbfa748ae 13 0c641a46-e11d-5e8e-bac1-76f166b986bd 14 cd5161d2-b253-7003-81cb-b4bbb6b2b8bb 15 3fa0f91c-9ef8-65a6-9967-10c4b6d21bc8 16 e758006c-ba69-0eae-a4e1-5e6de96fd7e1 17 d185d3d9-5175-179f-805b-fc7b0488cc7a 18 8cd6b016-0478-3d1b-93b7-08861464a009 19 71466760-8faa-4ab6-9918-93768b3107d7 20 a4f8f705-7ede-8921-808f-49c780d5f641 21 d6ac318c-03d6-454b-bf6e-6b794d7c3a11 22 f0692ec5-d935-3957-b959-ccada29585f0 23 736b5a05-e220-71a1-9e27-cd09c12e35b4 24 2573957c-b2b4-2de3-a963-97debb7bfa3d 25 2a6b062b-1e7e-4137-97cb-57a27bec5024 26 8781f0e6-2064-15ab-ad1e-82ffdaf19091 27 aebf9676-0584-19c0-a3d9-ab31ced04767 28 1904fa50-f0f4-0a64-9a18-f1eb2ded65b8 29 23c79615-2ce8-4834-9ac3-04f95d57cc98 30 f9cb3033-6259-5e5e-8136-2be33ddebd3e 31 326f5b86-ce2e-26ff-8675-1fe6a9be5563 32 0cef89c1-8ed4-5cd3-b810-4dbff0873bea 33 d9ff2646-fa07-8d2a-809d-47245fd7885f 34 584ae790-a149-49aa-8ba4-b73cae00e303 35 d66f5edb-b9bc-7478-b0d4-3e1b698648b5 36 3b652685-24fb-79d4-a40f-3fb30408e68e 37 06fb322a-70d1-72ab-9412-035951ecc3e5 38 acecbe4f-b441-4c22-b18f-2100698ea555 39 63f7f0ec-8446-4ec7-812e-3da60fff798f 40 c7c23311-1c5c-09a3-b2d9-a2170a3dfc27 41 018998ee-cc7c-60b7-a04c-961d9bf3bab7 42 5fa6cede-ce84-8c62-aee8-ba8e2beba51f 43 adcd830b-63dd-7da7-ab9a-e02fcb7ecc9b 44 72ce832c-5c49-2083-8164-a7cf622293fd 45 3fbd4567-213f-2873-9b51-2104549f7303 46 3e3fffae-55db-881a-89aa-d0262fe2f3ee 47 7c610218-043b-2589-85cc-c0ffe4a606d9 48 7c7e626f-664a-5f0c-89c1-493e913113f9 49 1d442a1c-9d14-86b0-b52f-6655d5c1373a 50 c7d25043-5167-73ce-bf7d-afdff3beab41 51 3904c970-ed83-742c-98a6-b27b48453e6d 52 9377af23-12f0-22e1-bc7d-16882559b0d1 53 4c00a23c-8fc5-06f2-b4f0-ab990714152e 54 6329b518-723a-1eda-a90e-fee303ede986 55 8fc9bec7-e42c-3905-8ddb-2d1165970e91 56 bc655932-ec86-8422-9771-480708e4ad17 57 9a6add39-ffba-3618-8cec-573cf150db4f 58 44a6650f-9500-0c64-99da-44da6b386a9b 59 10a7664b-49ef-1828-ac97-ad69154e71b6 60 1a529fd2-ad75-5baa-b882-742d4ff8712e 61 eb569dc8-1efd-5f7a-afe2-a6941ec131ec 62 dc628504-dbee-0ebc-a3d7-568328dafba4
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
31257701321457601348437241104525847774406872282587720138301550. Exactly this sequence comes out ofnew Random(141).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 19 of Run 14 (seed 205,976,312):
new Random(205976312), Next(8,64) per post. The RNG predicts N = 62; the post has N = 62 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-05 08:28–12:28). - Conclusion. Filler. The content is fully explained by the two RNGs.