201207192330 wussq
explained decrypted filler
3DES(name+name) ECB, 50 GUIDs, seed 12
From the post to its content
As posted (encrypted)
ABBB00E830326520 B6570BFE9E3BF9F1 86F36E4843E1D2CB 19AF3F91105B7090 4F458C7400DDA2AC E1C623C1F64D0843 7FF014E9EEEE99C8 94B3E7D9FAC31ABA 40DF37D3B691830C 9D3D2DACA4FFE138 F28055E7F21B7DA2 058AF078E42959E2 1125A1C56C696D10 AF6EB7CB6E32C292 F15392BBAB7A65DC 2B81EB439C3B0DF0 CA541B8F4C6CD1CF C5468C601F4B01B2 E550C9CA75B4826A 65CEB279EA2B369B 402A92E86443DCCF 5F8B8EA802EB84CA 121950C3B58EB9BF 4A4DC7898F9FB687 9F343F65668D86E6 C2146FE5D10C65AA 2821B23A7BEF48CE C471C27D1E54E21F C69BE841BEE2B8D4 112F85AD674366ED 2E1779F8B5ED23A5 B76792079CA647A6 9D1AB927508E6604 27822772CCBB7B91 A82FFA99E107D839 52916A559C82E1E6 5DA3B3396040F437 688FD7F470A74E42 3CB37BE6DA33616C DDE53D4ABCCDE7C1 D0150AD761AA5A2E 9B5866EE82E90DE0 D34C68AEFE75DFDF 74DC06A44F97FF2B 8E1A776195C37197 A8A810F44A037CA6 E342DA1A8F45368B 355C093F2C8DCEF5 6EC91DFDD8FC994B 672DBE0D250F2F94 59707D8B6E4DB8A6 C44CF5EEA6F7FAE1 202A3ACF34236BB5 EA2528ED90E73C49 670A3B6E5E9FD50E 2BD1AC20A4081A9B 5224A1E9914FE71A 8F22C74F205CDC0F B4B9FDDE540478D7 EE84DDBC416321F8 66F4CD3F1D72DF69 0C0B3B41F325152C E78021545DD8384E 11BB702DBDCB9803 433911AFCE256FBE 16ABB8816C78B33F 44F8386CD3230299 2604AD01E84B3F11 57A400C3EB310239 3A9A90498A5D4F21 EA0B0049F1F1BE40 379101C3BBB3DA9A CD49F9A636E43C63 D0D7EC64FA5EA48A 673975C0D526B6C6 9E8E434DC1B6AA2A 38033ECFE389094F 67565C3856DFBABA FCE72AB532D843E8 7BCA50A32F676B92 318700CBFCD0E2B8 1B7A43D4D407AFE4 9D0785636ED4CE2E B05E2C16F27DA433 CACB7C3C1A3299A1 C126E3744993468A 2861D9BAFE697193 5654A58C81DFCE77 3FD97C17860BA125 4ADD301FFFC1F9D3 CED498D7D96BC187 1D085819D7DCFC81 A0851B1246D90F1D 494C7E8C4A27D484 7685B69290779EE5 05E6D9E1024ABBD8 018291EAAFDD26F4 2920EAB97D8A634E 5BC494EEF2FC9841 B6552B3F0D3A48AA 64FBD7C177E34C81 7176BA7F421212DC 428831B47C02DE7C BCA48EA74753217B 3E28873DB2D39BEE C91FF7C4A3F9D4E3 9F8A8E2F26B4ADCD E67BC1A1613A5403 944F084364D5B9B6 ABAB7EF3A650A5A5 9E884EED83818F0C 95A807721C1073C7 718D9E74A5BF0FAF E19E6D3DF8764834 2D4B69663438F20A 9139785ADC8900A2 558EB8AEDD5348A9 33D1F7363470DF39 7DDACBC6E783F412 3F4F07119506135C 96A8153D0A1AE2B1 9EB22A3FBCD41C11 B9A9617A61652BD8 F0575C9EE73F9D83 A9E99EB6E214F3A9 17553B474C2E429E F7076A8AAC80E7A3 F2BE9C0AE216C0B0 BB7A535AF8CE4AD8 13B0E4FAB4FA7277 58BBD3E6DC66A4FB CBD1B59CDBC47EBE 19152C185AEF1AD4 2BEB4D43FACBD6EA 4796CB1E56E7F305 6A40BC803709144B 1E39D5BCBABFCC52 4A74A2EDF7B686B6 ECC725802E6B52AF 94E110BEDFE1A58F A3CFE5AC99191AFB 9D09BAE62012393B 4CF31EBC99CB560F DBFFBAF5765D7084 63D42938A7D7394E E4293026FE320330 A7CEA773007D01C2 4A6BDA542FD80596 335EAFE7B0FC3147 4A3CCB8658767FF0 0D8C40DCAAAF1125 432EFC1F41E6CB37 AE8D7DBFC88DB89B 4C7C99EE386CA5C1 48E6E5AC1E041653 BBA5A74201F5B783 5AC6C56029A5DCA6 653AA56D5BE88CD4 F3F0D03672EEA3D6 23DD8FCC8F25FE9A 143DD6584F5BEEA5 A50CE344DE030588 91D38B68392764D8 964C206B84A05E46 3E60D4AE97B8FEE6 90F521DA8BD8921B ED6536A18730772D FC803F426B992C5F 870C3C8BF9F8C935 C494AC3EE5223A4C 9B450752B78BB911 5FDD894AFC2D6C95 953AB02F77DAEF5B E784FEF24107C829 4615F25DF71D9603 BB07F56166A549FE 85445B8BEF58805E 8FC2A7D756EDDD54 FA9F0283C7BD2DE9 546E2C13EAB978B1 189D695B3D0FC077 622E7069A4ADCC83 60EC4C64C5F63042 1181B93A57073369 687B9F5C7D79C371 14E4C2CFA343FF2F 83365EE2AA5479BF 00D09101A8270251 5063B0CD86BEB58E 73F2314D60253B46 87CD57BCF27E889C 2B2BBBF59CA9A801 158815853726513A 7992D6AD2B7C8E59 75C46BA31755E66D 7289327CEF3A46A6 5E7CD8162CF7B7EC 9E982E457D5F6CBA 302D02FC6F6618B5 C905D34B82899901 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 3,216 hex characters = 1,608 bytes = 201 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 50 GUIDs as hex (shown below).
Decrypted: GUID list
1 4e847ef8-754f-85c4-ada6-f36ecc332f1d 2 968eab52-55aa-37b0-8905-80bf6c51a99b 3 23f7ce89-5996-1063-bce9-8ac47e27f655 4 f1838112-0c15-1c79-896f-cc2ef29ec57c 5 3a9fea84-07f9-5c56-ac8a-cb34a41dc9dc 6 82d7ee81-8253-0e79-826f-45a806cf841d 7 a6b5c4c8-e3d9-2d71-8bf7-ed194be38216 8 c96064ff-ce04-472e-ac6b-008f9e6e89ea 9 d7bf3e6e-84b5-48d7-a6fd-51a8205afd26 10 7c0bd64b-4dbc-66b8-8f20-5ff23c8cc87e 11 281ffed9-941d-1d19-a377-41048e2efcba 12 ae7964a2-73b2-7132-84b1-40a19ee382c5 13 0bdc4055-6766-7445-9db3-b487090779bd 14 ac68d987-acbf-6d91-a0e2-50d99cefe024 15 a3e5c9a7-b1a2-306e-97a5-5ac4725660b2 16 31fe17c2-81c9-4c63-8f66-fc6d41c47e81 17 8c7df6b0-ebab-8a46-ada0-ab0323a76e91 18 6f031b7c-49c7-3ae3-8452-7ada198ec4a9 19 9ef80000-f4ba-0e05-8061-7883b50f3a1b 20 974f3e0e-6c52-8168-9d81-1d4481070f0a 21 63ef4229-43b5-3365-9adc-580e7e278602 22 048f5410-28f7-7d01-a7a4-53f5fa16d7c1 23 d09214bd-c7a8-0dc2-9b6f-15eee6145dde 24 67b34cb3-7b80-2a67-8b86-c9571b64cf5e 25 bec48f2a-242f-78cc-8bed-cac2c149308e 26 0a5cf51a-848c-2291-b4b3-716c7329b4a2 27 59ff348f-8bb4-23a9-9924-3074eafe693a 28 0b3bafc9-6b79-1959-bed7-76e8bad9680d 29 c42ebdbb-3a76-77c0-98a5-8fd606f78b21 30 4c45cab7-2d78-66f0-b639-037d23ad8be4 31 cf0181b2-e8cd-5488-8183-ae17240eb33b 32 9140ced2-d2ea-5493-a38d-60c281d8d0e8 33 6f5cca87-691b-1e5a-811b-0c4b87076d4d 34 d33d79d2-1ec9-2e09-8cd5-455f9dbb98ac 35 d5cfb85e-606f-7cd5-83e0-51c9f3f9e7ae 36 6708b0d6-d1f2-2eaf-84cd-9923df688fba 37 7fa3290c-aae2-8743-93c5-23670f533ffb 38 b77b1d66-9842-5f9d-bfd7-367b85cf115a 39 b3ebcd76-21c8-3a7c-ac37-33a2fec29841 40 a53fc977-fe21-6843-8fab-110cf79ab72a 41 b4110db7-9345-6742-8c3c-ec41aa6dd6e4 42 810434ce-81f0-0620-96dc-ddf59ca1a841 43 7c764c5b-32bd-8f99-878c-e33ac422b79e 44 65b88419-a248-57fd-991a-3829a38969ae 45 ab8dfd02-6051-2ef1-a393-d75d497a52fb 46 430442b2-bc5d-3b26-9b91-f4bc7d329319 47 dade9232-a7c0-3a2e-ae0d-570802cb4ea4 48 3d31b882-e5ad-558e-913b-41427d2a9a80 49 cc36646d-5d24-2252-91ee-f4f22ddf47ad 50 34ef3d77-c8b6-778d-aec4-a3be2196a81d
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
83115024461776348308370272217655127285366085233527. Exactly this sequence comes out ofnew Random(12).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 16 of Run 17 (seed 38,757,453):
new Random(38757453), Next(8,64) per post. The RNG predicts N = 50; the post has N = 50 ✓. The seed is the machine's uptime in ms when the app started (boot before 2012-07-11 16:41). - Conclusion. Filler. The content is fully explained by the two RNGs.