201207122330 whb3q
explained decrypted filler
seed 17
From the post to its content
As posted (encrypted)
EB34F41A1DED26E9 A9FD19EF4A20D92F 8F34C4D1D1F1DA15 6E26A6E3B6C2F4F1 1EBDD65AC5FCF9A5 4C9C871C14BC810B 1F9E14106C79B19F 26CC641ECF233A33 8CBBF2FAFB5707CB 93B2C57A8907CA84 CED6C16957EB91CB E593E427B85CE703 A490EB252428391D 7AC34F4B3965B1F8 6F822A901E03F134 73A517930607B95F E083708919642412 76C76A705E342EB6 C8736D1ED9B25DDF 49F2AA14A440E0AD F9DE9895F0A16439 AE4C300AA08C19F5 7AA8BE10509097D8 FF10CA6EFE26B9C0 BF97E1DE600D7D44 D72150E1A22C0FC6 F7DC147470EB470E 6F7D51F50FBA6EF4 789D16F9B8B7F1F1 2186DDE190D64823 19287EF35E2D2FFD 6B4EBF1370C0D61A E62C969AE56BBE22 48BEDE433C9287AA 19AA7B1FEBD3B9FF 1BAFCEC57A938F17 25F3E2DC5DF1250F 10B534D5495554C1 CD4F948FAE8BD913 16180C8C92AC6416 FED0DFAA4CCE1FBE F5AE0ACE31BBA421 A55F20FEEE750BB3 AE06397A8834EAFD 0580E4FEA78C6B8E 58DC3A53C5D6F54D 45FE9F2B44694CAD E8B73AADF2510F17 59AC2383C3EA5DAA 3004A77194B33E9E AF14E027FFC58C45 0941A8471D3CD1CB A300C130D8161240 5EAD9711BF2E57D1 5AF3B66D4E2EC7E1 1A38668C9053F363 EB6D921789C5C93D FC82011838B40027 A6804C13B5E409CD BEFCD8C7CC61E5B0 A3780FA056731974 EA6A12FF992E5FC8 818BAC4EF4A466C8 282CC62624B3E97E 436F61F57C98C760 9FBE40C3149B888D ECD1ACBA478AAB11 0917651E24C97A78 A3FA066A71D2CDFA 1AB2BC45742F3C21 A2A71488870EB155 0F60BCF4A2052EBB 78860A53438E3DB8 D73175C605B2B7BB B0EA92200CAB849A C66E9F08C3FDB834 815A17A26EA248F0 D5D667EEFB57A0CC CC79A272CE1FC004 AA61520CBD5EA1A8 5F78B2435C07E7F2 6ACC5285EE5632C4 24F53C7A9623B68F CCB3B39DB88C0F9A 8F7E00258349A497 5662B9AAE0F7236C 6FCAF722381ABA86 CA87DFB0EF70FCBE 245A0D7CBA6C5048 33147D50ED744B89 8DDA6FD884BFE44D A2E44BFA5952D66F AEDF1E3401904555 06858D97E8097725 5DFFDCF415FAF69F ACAB22BF94203CF4 0B342AA61FBCA874 1F14DDF7257035DA 7388128E6AA29C42 B17858B729585C02 EF1E9A9A4207E508 B5E4758D22140454 EA3DEE12A83874CF 05BC3AB4DBFA8D7B 8A7FE1D7AE79D761 C629FC41737FB111 2AA5C03D53CD4356 C1291EDBB2E046D1 4EBE5699BDF7CAD7 68C1DD4EB96FCDA4 869D6EF6DBE9DC93 23AC7D9398A62808 704E139DA003F7FB B22FA7AC3F25EEED A788F1D6B1B76B2E 314CD9936FB29BE8 05212D0A2944C3CD 1BA777AB8A3D3F6D 514B59B5205DF524 AE6A9EBDD505123E 5186E16367EE01B5 757D23332F8AB852 4AF5D518790AFBE1 F5C7B812FFC9E377 48E3EF6F95FB35DE BD17B7F754C089F6 81B70461E7F8E0D0 2DE3715B689E1CC1 B6D0D9C5B5316786 4A32B92284CAA68E C941900C34CB6653 B13FDEC543974A34 55502AFAC9E46F5F DD7EE50725F6E9FF 54104A3CCE535A51 0F7DDC095CDD48A9 FE4F1970563E8795 36530F66ED6B7C3C 4A8BC5825119EDEC 7FAAC4C93970ACC6 DE25622A87E3F4C2 7B990064865E40CF 1D353D0171A5B532 0E60DC02D965D354 237EE54CAE6D5AF0 0552541224F65600 20C75FBE98FAE556 E6037E3441C96B06 DC6F83327859F150 5C22E5DE89E80CF0 B0F5BA2F0ACA11C7 487EB7ECAC41B08B BE0BDEFB0F5842E5 1661F6D43AB84D07 1D18534976EE8B0F D16215FA10DDAB07 7626A736B341508D 093D50BE089860D8 8C264DB53C7BDB3D 67003B0CA398CA5D A11DB54443BBA047 FAD4B603BDD92E54 9CA5F5D42DB9E2B4 6FDF406886DCF856 54B198EA216B7F59 178C7DDF31AB1B50 86C1CC25022FDA05 B4C911DD7E4C6CDC 9615A46611D4ABC9 41B3E13DEC7F3217 2F09F4ED0C38C41C 1205D9DF30BF08A4 4523A17F7F17D728 79881D9B1AADC195 011C3E59AEE1B801 3EE4D8C75DAEDC4D 35D7B2A32913BEAA 2475BE553CFAF594 65BAB7DB5C8ABB7E 3755B6A313E10C50 297860638F61070C D56397289331F349 07046353DC33D787 78BACEA6D8F42D71 2BA4F7DA4822F14E A1AF0FA90D20FC90 93672AD665C5B745 2B28AAC0AFD7A683 E8535BAD7124C69D 558EDAC0B7359098 5153706BF5352D21 8ECE12DE7BE6FC33 FDBEF29B5EEA78EB 0336746FB9B5301A 65BB6B9BB94ED016 044CA88E3C8A71FC 1AE9D2DE56ABF8BA 6C8DFB388BD23F35 A0AAA718BFBC48EC F7BAE914AEE49891 7B7E60B4CFD43A36 DCA2C6E07A955CD0 643475622D0BEC72 E4F18305BE2A5FB4 B3D4D9E7D9C9B082 4FD552FF7FDA269B 7755A85852A01799 0E67596845A437A8 1E454D75CC490985 CFDDD5D33C2A142E 75C94E920598B258 2F80757D24AB726E ECC1514B09046FBA 1AD453FDCDFD928F C6D81B7BD2431C82 C9F67AA6AF299B69 636E36990911B06C 301F29F39722639F 1369D15FA558F721 EB113968940CA453 6E5A54F4D8EEF712 95CD3C86E4821A70 B3B36143030D14E9 34B8827B028ABAF1 AC0C1C4A9C22148D 73C5D0418A0E083E B5F60508EB2F04D4 F25DC693EA972C93 9EB195E0DA1A424E D5C6DDCEA31929C8 8EFF5BCA914C10BB E21DD792360A2857 4B768C6601041606 E47943A96E788B67 79B7C70AE881839E B5D0224C45FA4BDF D0F37779090479C5 43DF9AE0E77833F9 4658A571E45BDA04 8E132645AC453A9F 3204F8155D9CF722 2E01B6A4D167AEDA 489C0EF8A31853CE F17633E5E1BF590B 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 3,920 hex characters = 1,960 bytes = 245 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 61 GUIDs as hex (shown below).
Decrypted: GUID list
1 d629614a-f826-565b-acec-797812548f82 2 1c1329c2-2bcc-741b-9ec5-fdb69a5e9d80 3 c5c3bc37-a8dc-5d52-aeb6-426d3b0eea0a 4 bc8934f2-fe92-1051-8375-7d57af1f45bd 5 e991eb35-73a3-7b4e-84c0-50a2c922229a 6 621b28cf-0de3-3fbc-b0ed-c236f8611b3a 7 2cbaa235-41f7-48db-878e-af9a3ade66e4 8 fc36fba3-3aa3-8321-8444-c93d8084f027 9 1d5a3a1d-fed1-0eb9-ba93-3d72ecf13e01 10 54327775-d68e-464f-af72-dafc96151093 11 64150156-95ed-7d0d-8468-6e1200c4de30 12 4dd2981b-cd69-6f0d-8aae-8e44f2e9106f 13 65c09743-0f9a-2230-a843-67de10835a0f 14 d42031e4-a50d-2cf7-94c9-7866c29d8280 15 002623ae-b76d-7ac3-872a-83e7b6f2eb48 16 586d7a78-d503-5bd2-85a6-5328cf53d9e6 17 bac8514d-c163-0e5b-80b9-1e4818bb556a 18 3a0e02a4-7af1-45b1-953c-788998207922 19 f0f7b95a-fc7d-14f5-ba1a-f167b5b63fdb 20 865cc71e-1c6d-8028-974c-29b490da9480 21 1f22caac-c59f-0b42-8cb1-8668061d0cc8 22 c94862b5-1832-084a-a3a1-d7f79d7c99c6 23 beb5f32a-7e30-70c0-8bb3-00b8d011a5ef 24 926bfa7c-4dd0-8b4a-bd4a-525e02e95a66 25 58b33683-3bd6-3ad8-be8c-97b2e6c18a10 26 e6a1a73c-5d16-458e-a113-d07a94528d5f 27 2b6ea46c-d49f-45f2-b890-e144c440b5bb 28 6f32be63-2959-1c6b-8f1c-e8d82979ad2d 29 5027b772-8d6e-242e-93eb-f234879e9d33 30 e25fe7e4-ae47-6b6d-a205-3135f363bcda 31 173bfe8f-139b-45cc-8c41-494598b96b14 32 0b30a316-4661-871a-b639-86471d1194a0 33 61ac2879-3682-13bb-a856-b7674bf745d1 34 1b62fd7d-d715-3317-b589-df0402388b65 35 714289b7-8d31-5547-bba4-1618fc716de4 36 7709d16b-123d-4244-ac0d-ec418898dee8 37 dee23819-a877-1cf5-b98d-ddf157c8d67c 38 44805f55-94d7-8153-8d97-0839fe99bd67 39 868e4805-074a-2693-8f86-1b314b39118e 40 cb5d52ee-e650-5905-a422-3025711a1047 41 3208e4f0-7c4f-5ae9-bf3b-b07f6f5e05c5 42 eb877dcd-f56b-3dc3-8cb2-133b68d4613a 43 a84519ec-cfbe-70be-b802-468fb1a3a248 44 a2d3960f-11aa-106a-8274-15d424b823b8 45 9040c357-cf19-7f52-86c5-6ad3c1c4a2ac 46 d79cb1ba-ed76-6d18-8f80-21e6248262a4 47 75b7fd3d-7ca7-111d-af6b-0a1d6d5e4e1b 48 46c938e2-9c54-649e-bcf1-787bf5b51137 49 75e91763-4946-75c5-832f-af1752b0bb78 50 001049d7-c2fd-4137-83a7-3112e775267d 51 2dfb7f2a-74f5-3317-95ec-8ece3dc7597d 52 fb3a7f66-7d74-3e97-bdb5-49e7d77b6183 53 95ddfdc4-f0ae-82df-8670-e48fd1a2386b 54 2702a43a-88f4-8885-a5b9-f28389b6f18d 55 773b8054-be37-5246-be2f-f1c772c03596 56 f57d554b-1236-5e46-8998-9e95fe8a349c 57 424ef1f7-99df-88b7-b4da-f003b741b5b5 58 c4280ed4-81c2-621e-81bd-08af3c039f65 59 81777b7e-49a8-7772-b97a-24ec29273604 60 77c8355d-acdf-30da-8230-f75f10a7e685 61 a10765d1-8b3b-7382-9cd5-27e721ef4912
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
5751734804762275041800783441264813541825537176167433885586737. Exactly this sequence comes out ofnew Random(17).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 2 of Run 17 (seed 38,757,453):
new Random(38757453), Next(8,64) per post. The RNG predicts N = 61; the post has N = 61 ✓. The seed is the machine's uptime in ms when the app started (boot before 2012-07-11 16:41). - Conclusion. Filler. The content is fully explained by the two RNGs.