201207211214 wwp9i
explained decrypted filler
seed 44
From the post to its content
As posted (encrypted)
E9BFA56EA9524E3C A679478095C11C32 25F718EE2A172324 DBDFE8B672E4F6A6 988B38CDB8F1A5F0 570FB3D194D6DE19 66255AE084D406A6 A59B7EC8055D670C 17C55C820DADB2E8 F36A547C24C403B4 6BD8F8BFFEA3BD60 BDB54C174879E376 6850658C2829A98D 6260BEC3E6E25DBF A676679355B87B46 831C8D70752494BA A2F07BBE0BD07AD0 BE28076D1CE3FFA3 17AA78C653C72092 16B0B01B0191DCF9 C735F99029DD212B E082A61E40A84EDA C30B6EB016C16D68 F963016C3AB9421F AA87DA0496DFFE76 EF8F0A70F65C7F09 BD79AA89E930D389 E3A6EC6BD5D48C92 DA46D83694710EBF 0C36E59ED8D74763 F4F0F81C4CFBA24F A781F16FAB510BB3 1C95E8C97020B747 E0B7BBDEC81E3F6B 056E6C1EE797E8B5 4F784BAE81C2C799 52DD005F03F10110 B177BC13A30788A0 A4D989FC8FA8B7C2 D5FF99D17DF2C5C2 003F1C2D92A3B54D BE41FF9EF4890A6F 917A2DC4F39CF1C5 D9B2D199DD0D1AF2 5626E770724A0A09 55594D0BA85C4514 7A8A6498C4B24C2F E1E36F95D99A9F2E 14A15DDD1D4EB91D 90EE995D5318FBFD C1F18C968AE34E7C 159132AFFDFB2018 7104277DE86D56C7 F3FDB9600DBE17F4 4E1374EEB5BE1C24 903CCB2C7C006308 7C7AF24A9694EA78 18E9F420284D9D82 55337BECE3EB5CF4 93B0B9AA0222C11F 43ADE2BBD5EC153D 55490BA3DEA7C1C3 E5027459B9D35848 306C7A6F0CE92C38 A57E8F1A49FC0EDB A5DCACBE3797345A 0927CF222F1784FC 9805283E656B4663 0E909A80DA7DB925 D5E1AA539FB2B90C 9EE88E1FD2515109 8F048F6621D1710D 562044815A42742D EB4B792425D117EE 1904A7992D14EDB3 8F76C778A3D8A011 A1E1F1293C3EFABB FB666CA4F571D949 4B4A22D91A0CE6AD 6B9166698AE73242 624FA8E28F9200D0 2F02B29E0A7DDFB8 C1411D85D0416863 8EE16265337EDC2E F0CB45DADC605CE4 C75E0DCA13299B78 B9FCC000ACB2AF8A AC6D57A03F0E8756 599954CB02D3F989 6642EC7971F547B0 956FBD405CECBD63 B8C983E1EAC25713 9175705E450C7AF4 EB8EB1CFDC075001 5F077AF2DCAD1FBB 8C0A6DC8F62F1530 21CF8FE3399A93BA DAB2EF2A938000D9 F1B18F621670D311 116C3772F8B47BFE 6B64B29C9CA7B85D 8F8D606CD6B0E361 D8D0BA644E92EBFB 838892FAF6C8097A 43C87ABE495667F3 D4E4042B7F2DCA28 488F626329959C7E E4117498E02D850E 693A1E51678F48D6 BDEF04941756EA00 F1B8A0EC9F0F5E06 473A168AD909F623 8B6FEA3C88F4D4B0 3AA04C33D794B51E 68E77BDE827F7F22 AA1321743E5148F1 04269D48D87BE0FA C91045BFA99234EB 4083C8B84D60BEB3 031183D1BEDABFF7 BE76900D32780362 E9F47E2F83C28AFB 6F32C2CBB89527FC 79792D12EDA67074 658E2E3F49466A32 392FC7757857D2BF 28FB1496F06931BA 29059A322A108107 870B4ABA7D2226BE 26EC8A4AECFE1016 22584A27E9C056BB 0811CC702E76775F 9B789C7D0992A6F5 128099F05513FB49 9CA1FACBB934DFE0 90CBAA8BFCA8FC4E E621BF1D5A827CA8 EB443B0E39BF8DF7 5EA2733A23408BC0 5922072D254D4902 7460ED996CDD5B09 E00F597893216D9A 0C7898D28135295C DEB3B8B902C52B4F A9BC83FA225951B0 A5229496CF717644 4808C767F3F46CED 472D72AEDD9F4B9B 104F0796BF0F6809 EF7DA54129AA97CF 6EED3AEB5C0549EC DEB24D06C432F0CE EBDFFE583B969AB0 1679746EFDECD254 66113C4261B86209 40F9D0CDF5FE905F 7FED8068FF4A4ED2 3593932D0080AE82 664D0094B848D5D7 098AA85FF0F10008 0AD612C9A956580F CC14212C5054215D 9725115DDAB6CD6A 5FF97C3D1587F8C9 59765F4ABC5ECDD3 63F313085C5A4E7C 51A8D6ECDAB3D665 A52ECE508EC1B8F5 EA4E7936CDB58672 1146DE1CA21FC627 87CB4BDC997BE479 08B88512553AAFEA 8835202A48D1549A 887D72D199FD9AAF 22B911D0F5E85B65 902845CAEDD2D6B8 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 bdf3d285-fda9-6734-b173-febf3cc93a24 2 196017e9-f772-6608-9880-233e4d4a6a41 3 20c8b528-9931-4b2d-ab73-ce8bdfa1caf4 4 9f64e8a8-6582-8cb2-9578-b7ac5c4edf8e 5 96581366-d8c5-08a1-84b0-f9a9a56253fd 6 247e16f2-7ded-08fd-add0-b8c70492c859 7 fb181587-1f50-5252-9f2a-0115f57cd85a 8 b0617be1-1920-452f-9e79-8b4db20dafb7 9 38bd34e8-4311-3901-8023-99368e4fee7f 10 e2b17c57-6f45-4f96-bea6-c3d66c23d717 11 75e48c9b-cf42-64cd-a6bb-3c2795684c25 12 e138e8fe-2fa4-73da-bb5f-31ee303a5491 13 4e1c1475-05fb-7f5f-802b-97dd56b27a35 14 3923fb74-f187-30ad-9267-2e18d5fe04a3 15 a5372a07-e1ab-7c79-9eb1-3fd19792095f 16 2d82bf73-8de4-4456-b9fe-668edd42517f 17 9a6d6177-c935-3ed5-b066-ca6e76962feb 18 560fbb4e-cbb3-2609-b149-157755f80bdf 19 7981a79a-1a06-7ef6-a327-c195e795dc72 20 df7fe635-283b-3216-9ca4-f8ce3e34ea9c 21 9b657ef0-c8bd-5bf1-86c5-835f2565fe43 22 738f4015-fa5b-5ab4-a5e7-2d56552386f9 23 f52c3dfd-5f4d-35d8-ab69-9864d11aa194 24 d6301cd1-4d96-30ca-9810-0e871cb2f6ec 25 7988f44c-0e1b-012a-8c71-920ba5ef1bf6 26 07bad64f-2d4e-7e79-823c-b3c391a059a7 27 588dbc84-8d79-66c4-ada5-b3a33fd810da 28 1d1c4d05-da23-8bda-ba6f-986b638ad501 29 0410f64f-0c69-65b0-82bc-bae4b2edbb4a 30 875a869c-0ec9-4ea2-9b07-d51514ad4478 31 7b65ed1a-089d-3bf1-8e26-9224740ed48a 32 e5622558-798b-06a0-b3f8-f6e610833335 33 6bd5d999-e0ed-877d-8ce8-28692058acda 34 b3d888f1-dd30-0923-803a-e42a41177db2 35 8ff3ad26-0600-09ba-a851-80adc3650c19 36 264d1e08-23eb-6633-8699-e4fcc652d123 37 f6909093-8986-498f-b539-e89cd0d6b4c8 38 14e5644e-9c70-3d98-8bb0-b5cfc911a0aa 39 0fb2e2db-f6d7-7618-80cf-273e6ffffdcb 40 e23df5f8-b072-889b-9422-da788a4080a2 41 0a3f4408-5cf8-240c-895a-4b590e65ebc5 42 734d3343-18c2-8e56-81aa-3e5cad5218b1 43 7fe25d9d-bfa4-2e11-a953-d120f3292000 44 b0a20501-3e89-2bb2-a53e-9b5efe819d3b
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
66480054346773743273553307686430800643782822. Exactly this sequence comes out ofnew Random(44).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 21 of Run 16 (seed 39,036,328):
new Random(39036328), Next(8,64) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-11 17:05–17:10). - Conclusion. Filler. The content is fully explained by the two RNGs.