201207141130 wjv1n
explained decrypted filler
seed 111
From the post to its content
As posted (encrypted)
9066E4A33CA1FF3E 1A2CFD25BF2F30F7 0DC9EFBA13141E12 EE4A09F4BC881B8B 2BA563A69758A893 C9BBCC2C742367D6 D92B53ECA94A91C8 42458F5934B77647 CFE437DEC6FBA3DF FC54D61A1C30C270 B113D9590AE8F176 836D742F8DEFADF8 BF5F7F5724D26C19 01FAF5FA1BD48AE7 4B7A26C17E115DF9 18D29D6C9E239D5F 23395F94BD1932E2 CC28A966745A5CCB 203F964D4B8C76FF 7C12E081439C92CF 2D9279A22737645D C2A88E1DF42A98FF 736B8C06EBBC1768 4192EAE379E6DAF7 006515A5FE39C49A A3D2298742D956E0 B2B7FAA76DA173E6 F579498B3561E359 BD698E030B97EB52 4DD59E2B388EFD25 9241919F1A33E0AA 832B1FB77D05C69B 9EF546FC9741E997 7595579E85BE7B7F F76A6434C6DAF462 044FAFD116BC5F91 9F8EDABC2FADA2A1 8F7D66A617CEEDEB 7DB6ADD924D7F3E3 859FB0A545C39993 9622BC6BE46AAC5B 617E5795988C60B6 2E8954967BD16859 50B8F8C533F7CC77 D918B9277CFE4B54 598DAE31BBCEA753 277018F4F4F580A0 6606FA8196C2C13E 9C13FF393E53F54B 9D6213FFC99EA8B3 D4FDE75AD9C5BCDA 7BD23636A6E3EB55 FA8C819DA19EA0A2 6CE72CF7B46CDC9C F58808F295149135 09A1288B04476E93 C22BCB6CF0910E6F D280C880A3A58EA2 217FAA23416F1F4B 972E1644FFA92E46 BF2BE202EDF009C2 5835F24226FF67EB 62D136AD99BB7FD9 C19D723EE895143B 48C8D6DD1C355006 9951EF9B9003D376 724342DAFE9E75C0 36BD5291557C6CCA 6AB2793D9C149E93 B52A478CFF2F8719 E156FE3757EB033F 8B84B48BC2E36298 BCD28CC0F87D46D6 DC2BEE11106C14CF 5336A00196852604 51E8C3A4C4D82405 4ED50173922318B1 20B1163446A5256A D8538E49537E4972 FD14E6433C34827D 6B97C291C0D5ACD2 0CE97FD048A47981 0CD170001DCAAC18 723762338E07D2B2 90A1B0E87EF308E7 179AC07B116049D9 8BB9321B6D700BFF DF943F2689E7F782 7B6211D41D34D899 FD322811B9A8FF9E 558FA36A0ADE3BE1 CF41BE7E698921FF DCF406CDC2CE6560 AADA5B9547B7613F 63E8DF10F0782B21 08974BDE882CB149 D38FBEA797BC41EA E4DBC0150F930721 C2E7F8CD3618E42D 9640777715F066C7 2E4D7ABF71CF0308 6DD31016C8411FA4 80FF229FE036EF03 6B0FC9A80F6485C8 6F3F80D031C3F59F 176780C97D26C681 8897FEF45CE8A628 DCC3949091CDD46C 162D62FE4EDA99E6 A198F07839C2D55D 9D97B7255283CB80 2543B30A451DE72A 73B505FB0A29A336 519CCF059BB3B53C DCE234914D9BBE51 169CACCE5710731C 38D465F7E2005458 BE4C7CAA128E0809 1F65E2CC96BD1607 57A157D6CC80DC9A 7D6255ADC8DA0758 4F5ACCFD9C0BDE82 CC9F9B842A5B2D60 3042A60E916508F8 19B92D667FB5FBA7 62593841F06C57AB 76FA091DA4530D29 2E3A9122B6E08990 62D1E4104D76CB3C 0BB5C940F00FE097 9C9745655D6C0BB3 DBC6F04FFC0E044F 5451207FB2B546FF 888180480F6B473E D92CCACBCF0B9502 356FB345C148EB24 C6CA27B3D9905ABC 8E3E274489B75340 120558923901F674 5858743E95692442 FFDE8B429FECD9E8 FEACDB1C9C99134A 81340B53C570F85F A4F56A31CDADC159 5C881BD129CD54B2 B1E62E43B6841E9F 6FF7E4C5602C1A63 DBBDAAE49C60C0BC 5ADEC81FF1CE800D 770305B5A4CAB616 7D5383C4CCE74D28 35D2ED046F2CD5EC A7A2C25BC0F947E5 9F3B5D57031E2A77 5E27A0A8FAD0B6D2 EC2F5796E46CE5EA 04540538AFBBAD3C 59AE0AF9ED786C42 A15F4B2AEB249E28 37631366D3CF6A2B 48BCD68E9D57666E BCD50BF26E7FD200 BA5DFC5C8DB78DA4 334BCFF0A487260E 435B749CB1CE0A1F B0481FD26BCAE148 C558E8FC2E462E06 D47108A7CE8B1CC6 C48135D7654C77A0 1FA401F7C7F90251 EC9E3CC5D873BF00 956C19483251417E 85109D5B8DC89612 E99B72A58D216AAA 3A02DD69D2EB7117 A652735C41AC59BA C4747980D29A3118 4685C39BE8570EDA BD2E44497127D4FE 1D0015D0473C6CBD 942000729C3A32F7 1A2ADB0202401B38 6F62301D3725313E 6ADBEDB5DBC57533 84003FC1B9021C2D 514A12E65EA0EBBE D47D292EE68CB9A5 5B7851A1B8C5E634 BBA7C68964B41DAD AAFE3160152CED3E 3382229EB048BD5A D9CF9302C7AD322D 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 2fa7a3d4-0acd-6820-b4b5-cf96984ac4f6 2 1b1b0ff6-77d1-3c39-bb57-db34275f7080 3 d2dcf779-96a3-3d41-93a8-354106e40c06 4 429f634e-6215-2703-8cc8-a273cabc5585 5 271e4e8c-0711-2946-a410-31cd803fae45 6 5ec1bf4f-44cc-5db8-956a-562c87112ab4 7 b0ca0ea9-622e-522b-ac3b-e88536f2a399 8 ac85bccf-81b7-1046-8924-4b027c355979 9 cb6ecf32-a561-6c86-a549-b0ef7f30de80 10 cc02f24f-70c7-1952-9d63-5b450574b5c0 11 24daaa99-497e-0f12-b358-da9c51c10a9b 12 d415f5f0-774d-168b-9a12-1a83d8e2a450 13 8ee3a048-723e-8e50-8874-31eaed0e4caa 14 1b0bb9a7-942f-18ad-b052-74e57656e6bc 15 99dd9239-c213-6b60-8327-f57f6c8dba7e 16 02b38b05-3fea-3edf-92c3-27f8ec481b85 17 36b12a2b-b151-4fdf-8dfd-bf4b624f44cf 18 b2a5feca-d956-71b9-8c10-7fc80c3c4a88 19 b82acd53-0f53-64b2-a88c-abb59c1885ba 20 3338b1ac-423c-21cf-93c9-f5b142895d03 21 5b28eee0-3dc6-551e-afe9-9ed9540333cc 22 cda73e6a-4024-0591-b856-e51c43a9e206 23 0c3aa22c-6821-6e2d-bcfd-9d87db8a8143 24 438505c9-fc89-7ef2-8e19-2f49ba1cf243 25 1ad7429c-fea9-5c33-82b6-59aca816cab0 26 59ea681d-1b73-8720-b30e-5973e6e2409b 27 04d0fe11-4347-3968-95f9-360b24d47015 28 c9c9f36f-6dcc-45f8-b582-83e442f55ea9 29 80e7c33f-3e2e-1788-9ab4-388ccd7e2ef5 30 398f2701-6db5-48ff-b2e2-13a732a3f935 31 264919d5-170d-1a7f-952e-0c7265165083 32 15e0c184-4919-6108-ad61-a039fcd34180 33 d275387f-5ed8-88ed-8db9-776140918828 34 427d4b22-a18c-637c-ac76-2dedcdd68afb 35 40f92931-2063-3f8c-b569-502d028473df 36 07ac6aca-9239-515c-a3e7-144561f88863 37 2d8aca26-26bd-82aa-8aab-73516367dbbb 38 c480d077-72fd-0b65-ba8b-ab0978881c79 39 c646311e-1d9a-3f60-a47c-f0f8514a8d5e 40 8a19be7c-697a-8ec1-9a00-5a69592bc5a6 41 327f7d14-14df-6f59-8506-103767eeb468 42 aa14eb87-76e7-4d25-be2b-1f592e49d365 43 2b068fd0-4740-5450-a2e5-2c86b7718936 44 860de3c5-a2f6-700a-8243-fab89c7a6ecf 45 d17adce0-c83e-37c6-b264-53da5aebd017 46 4465caa1-b62c-4226-9ae7-e571196a029a 47 705ade40-ea45-06fa-9c4d-342c7472cdc6 48 da9ffbc0-16cf-1624-86ab-6082230d8a10
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
633225516101816347625067583414168635803864573401. Exactly this sequence comes out ofnew Random(111).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 5 of Run 17 (seed 38,757,453):
new Random(38757453), Next(8,64) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot before 2012-07-11 16:41). - Conclusion. Filler. The content is fully explained by the two RNGs.