201207140102 wi5lf
explained decrypted filler
seed 893
From the post to its content
As posted (encrypted)
D7C72766AD46F1FE D6AEED53DFE08852 1C5A58CB9972B231 A4EA534B3542DAFA A6CC7BE406FD162F 21E34FB519581757 FFB5250A05F4F18C 7B8916FC956C6936 468BB6E21E309249 7DD055E60FD98430 8C614C50020C6CEB 6DA3B87000BE92EE B86AA6393DE68B25 D79453FE02497A76 477AED31C3225871 A32988E7758A220A D3C643E5CA86D6BA 99D9ACF40391E37A C13E076611EC24C4 7E3EDFF96114B42A 496992E5250629F8 5A3FA43915ABEAAE 079715DB62359849 BCAECA8CD1B815EB 923E88021CDA5182 7628D2BA92B6C299 8256F9EFBDBB84A9 FCC0084011651D44 710CB8DF9379DE6D D9D16BE9ED376404 EEA66B9EE7893D94 AF25FA1AE905AFD5 A15B8F3263B83054 35F6ECB77FE6C3C0 3EFA00D55112CBD9 3187C03E3260FAF1 72A9492B9955BFC5 6652C67ACF6D2AF8 DB5851437E90077C FA572D6B6C760755 7DF739C16504C7C3 3D5D966AF746F327 CA3ABF431AC84C4C E144125AB033198F 0697D88E851EF0F8 06D821F58342ED9F A961849EB046B445 695935B935DE2082 A3393988DD3A79FE 7908896E1850501C 044C4882EDF5DB9E C2A207D16FC2087E 48D749C9D6854088 18AB214BD814BF48 CA6E24125C7B094B C4C3451871BF36E2 818FBF99F483376F 15797CBB4C7B96E7 906946A2A0F818AE E18A18B273A429C2 A0E704E4925FD34D FA9266B572CA8F8B CB1EC0426F77E668 09ED4DD2148DF7FA B4A7AC501C955419 035EC40636751C68 A9E77C752CFF44EA 54D471D247C1948B 0F5512BFE573A6EB BB140D6C231E6701 27B76481307FBA28 DF973AAAA3FBCCA9 4978171D35BF166A 084FC5CDE08AD594 384FE8644AE53E27 D172F6AAF97E9D6C 66769A955C7FB6ED 3EC5EA39C9B2B39B A0FAEC52F479376C F32C13690EC9D1ED 87FDF315C0D50341 1C3335A005815EF1 83C41EB7D38B50A1 78FE7A0652EB1B49 C9D668813F866F90 D213E5B83DCF9C6E 375B43879046468C C14DE0FD670F7EA1 4701F29865292220 BE0CC56062EAADD8 E0390883291D1ACD 53F8C64B725221A5 935E8635948D9775 826582205A3EE826 215B78EC759519B8 4111AAAD899F37D7 E2C5D974BCEA1C82 CDEAB788961FD282 4417DBB7B63BDEA3 B73845931863F1AA ECCADCABF21D2360 35FA3B21D85C9EC1 11B861A10DCCF500 DA02B89678013DB8 9FD963EAEA238308 8F40F84C40BCEFCD AA3CB303E26ECA53 AE97C7F8F7AC59CB 5D1CAA3D97944E77 2FA765F79528B857 4CEBA04E93A48FEE A8E0F5F9EA02D5A4 F5DFF7462B555E14 973353AD345D8D41 85DF194D2E0E7BE5 B2C72C30DF77D1AC 23A4EA67E42EC5AF CEEB8E97827AB7F1 568D402ACAD3F9DF 8B0337EA1789A719 05D82EE6C5B56A7B 302C6CF66589CE37 8C406B19C1781AD1 0E1C200DB049CB21 CD3F001DCA94AB05 2B786FCB721671A5 E167AA054924B997 B696083C3CB0586C 4B7E8865C0042083 DAF1CE1ABC375D4D 607805C29ED337DB FE1AB9C148C2C21A A7019A01DC3C6E6B CFCA2EB47F19928D 4A5048B9432422EE 52AACD6634EEFA15 D8F1727D33344A0B F7CA3697F5EAB601 517B8F6A46B9BA14 4822BA95B090B42B 43F7D765010BE200 2DC68E936B257627 77245ECFE212CB89 E976E9E2D591CB86 986EE31940B74795 348CBDE780AD987A 728ACCB84E1B6765 94A226DBB30FD129 C88F4A0EF638B0BA 538402A7EB7BFA08 AC98F6A456A9D132 A5AE7F974368F2A2 700AA95EA261CBED 3EE9A61E03B3BED3 A6AA0A8D41F0C3E4 F247142B9BE4F7BD 78ACDACBADD14A27 4E0FE84B23036556 EC4FF2FD2C189977 78EFDF91E5C2ACE7 5ABB36B162BE7C13 B031D3171ECED6DC 5A033279E6FF2AB4 2D6523635C3E2E7A A6DDE58DB883C689 2A2CDDBCD979F191 B15EF61105A04CD3 D07F99E641E22DAC F209A83AFD49627D 52BDD113B90B6A51 9CDE86C5AE02049E 14C1270CC5FC6153 2B66ABE3320EB54F 153EEEF618BCE07B 83171EEAA053FF02 252D02E2391205A7 94DF7C0D3850E140 4AF8ADDF29F2FBD6 A591CE310B90BCE2 383D78B424995869 54283F345A94F27A AEFCB778B370C34E 0AE09A4EFEC8A17C FCE3FDE5DBD42074 A6C176B24331861C 25E13476E1C6B25D 35257D641A7D7EFB 7B19B5C0CE912C3F 0DDAF578F639AB55 C760A1CBFC303A4A 4D5DA5AE8B7EF59A C59B4EF38F45667F E68DA27686A4FE4C DAF98D153D77CAB9 2FA6CEEA9CB02CC9 D14AEF639F649BC8 C5D7A2401C9BFD50 E3BE714C15FA3681 70589703A8352C1E FD0F01DC967D2E49 7BDDE6FC0467C971 626B84861AE9806A 0601E34D5637B4C0 1994760DFCAA74DF 80CA166682F980F8 0D1E061EF6603BCB 273C29D507EB5447 F1DB733EC39E8B00 4FBAB565CA5301B3 43F5A34D34BF8EF2 4191FC7786691254 8DBED59475D9AF30 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 3,408 hex characters = 1,704 bytes = 213 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 53 GUIDs as hex (shown below).
Decrypted: GUID list
1 b873e953-639b-2060-a227-0fa01d37d34b 2 324b46fd-46e9-73b1-9445-b86c431647d5 3 270bc4f9-2b16-8044-b8db-954cea3457d8 4 546d5db8-b06d-1ba1-b009-c6fddedee7e6 5 167b9ad0-dd40-3cb2-8e4f-e9d72a45830d 6 0816ce72-d61f-84b1-b20e-ad3b943239b6 7 0a687c3a-1dd3-01a7-a2e4-ca1744ba78b2 8 a39cf4cd-b45f-42e5-a701-5c3cba71e2ae 9 6ddb39f2-e4d2-4a6f-b861-b9e79751a461 10 b661c4c1-261d-5f64-9e94-adf842f49175 11 14f88da5-d086-1b52-947c-784d40d6dc07 12 bef09e80-0a26-5405-9d85-eff41ee72bc7 13 912587f4-6290-4e55-9505-78144504c5ec 14 d0733f87-1900-031f-9b7d-4553ce9b9298 15 efa624f0-d56f-04af-b930-999b9c506cd3 16 0aecd928-f63c-65e0-894b-7d8a96f09141 17 43554657-d93f-2675-acd1-4f1c24ebea42 18 6367300f-6141-5cdc-a07e-ea149b906d04 19 0a1d0165-c91d-7cee-842b-285936096845 20 fe456274-0b1b-0f50-a90c-daf5c0cdea34 21 a72a2eda-4384-4c8f-84b3-7e2dbf4200e2 22 fb746295-ec4f-8968-9a49-96a866d0cfb1 23 e9dd074f-9394-825e-b77f-f2f37d982b64 24 ea074507-b617-8e0c-87c8-e42f547cf7b1 25 8340490d-7228-13ef-b9c6-f2a467bb7e26 26 d60aaf69-7225-70a8-898a-6df112cd0cbb 27 dedfdc3b-fbdf-666c-b00c-060916b17dc1 28 6036d51f-512d-874c-b07b-1133b513a290 29 5065df2d-03d3-192c-8e56-babddd900268 30 07e48273-7752-26ff-8a44-c6d048a24c53 31 4ed27288-d491-74a9-b5a5-f033b28fbe9c 32 9cb51565-b29c-6899-b151-34076dab1c97 33 9ed92c07-5e0d-3fa6-b74b-f4f7e0d5093c 34 41ee0bb3-811b-37d5-9093-24b3b53834dd 35 ae00b53a-7738-4263-bb70-cb9ada5ff2b4 36 902a669b-0e6e-4a05-b2d9-bdde576efa0a 37 f663db20-417a-6cd9-a12a-d37917709d99 38 5eeccaf5-dd5b-859c-82bf-c4aeb2c3785f 39 e2ea080d-782e-2b9a-b7a1-2a1161c348d4 40 be9d05fd-f9ef-011c-b766-7ca6f1b30dd7 41 f61182ad-bbae-0997-a1b2-b311787ef3c0 42 6a9a1ab0-423b-74cc-a042-0b1d6d89b9bd 43 12c148ae-5cb8-01bd-b833-0281fded9cfc 44 a3bd0726-e421-2bf5-9f76-680ef30d0612 45 28602ba3-7193-68ed-a9c4-3895f07833fc 46 f7be1b71-b45a-1246-9e4b-b615ee2256c1 47 78042be0-1882-1ebf-b197-048ff966b690 48 dfcda4fd-0284-40b5-8e76-7fc6a7738df3 49 03b38e33-8cf8-3248-ade2-7d576977da64 50 60668eb0-ee09-22c7-bb6b-7a0ba77d3ff2 51 edc106af-5f62-1abe-a2f7-777266093ed4 52 4f2b760f-aead-11c2-baf4-19541947e8b5 53 30c9c0cd-0839-5e57-9a1b-9743f5d93d1c
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
27813804451540062570488817681276334468200702611432115. Exactly this sequence comes out ofnew Random(893).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 3 of Run 16 (seed 39,036,328):
new Random(39036328), Next(8,64) per post. The RNG predicts N = 53; the post has N = 53 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-11 17:05–17:10). - Conclusion. Filler. The content is fully explained by the two RNGs.