201207211249 wwqzf
explained decrypted filler
3DES(name+name) ECB, 44 GUIDs, seed 820
From the post to its content
As posted (encrypted)
42FEAE6E4843E839 1204317D01127B53 DF81F5D1DD829F74 BED5C0784E3D03CB C25BD8E78CEBA298 01506A2A0AC575AE 10BE68BE582F0BF3 8EA84764FF99C9B4 860B9D6BF86A136C 183F9E3DE0C667B0 91C026C7E3B375EA 54713C0FF16BF10F 3D94A65BD61EA077 E1E284E247047A8F 9F41CA30BF34ADB3 DB42A1C8362C0390 17F7A9C606485C38 9DC0DFEA4BCB18AB FCF4CC0AB3F1FBD4 F29F988B269F8FA0 90C380B8306472DA 0E18825FCF0E0597 CB65442915402446 D33799F258555BF6 F1751776C105BE66 9AB569B009DCEAFF 1F5C519A90BBFCFB 6291CC072537A963 25933166790BFC64 45F1AC2978A4CEC4 4363B75AFD62E0BD F1355B2098349DF0 8919DFD44A5F186F 64CFBF50CA37DFAC 983AAB5B0D3236D9 DC49664B516B08FC 2615D363C900E8A4 66BC42DD7253770E 927D486C9E137840 C5E4ABD8617711AC 92B09FC0625B24A1 A73028E235145F2F 645FB85107E3CC4F 069B207FE469AD1D 6FAF6E94F34B7AB2 C6A76C7BA17B9664 5D4026801E0C6622 35B7D00B90D9D9F4 915EE8E612F436A1 7F2E47725E2BB67F FAB700003D573FAB 0BE33854AD0CDF0B 5AA480D9147C7F68 60263F6AE610D0D8 270AE643D8ABD43B D48C6F9D1A2B11CD 9808F267ABA39CC6 347543C2BD121E22 B569B34860AC96AF CB758540C471F58E 951B56421CF5294E F97164E219B52F4F 344AFA58F8708978 2D84BA9543EFE332 AE2AC11E70DDB9CD B7CD233F68C6CE07 5A0A89EE65D9D0AE ED1F821ABC8FC86C 2655C5747554AEB5 C3CD94F97A58580C 4C464E765EC7D09F C186104AB0282139 655DA8E4BC6AB0C9 EF2C27E170B51284 43FA1F69A990FBEE EC62B0B2A349A8C8 C660793CAEDF9204 85C9F30A6F9AD7BA 89E4DDEB7F543A6B 3C2C28300AE72429 1E4474E6580539F9 99AC9D9586797B5D 64EA08C2CFDD03E4 77413691E4F090BA 0FE72C4A40928D18 45FC7B189B26801D 29528C3887222053 EF4F561954B7E688 BFEFB72DA47E0866 9B49A63AA3CC135C CC87F3E8A761BF81 BC066592E5494D90 A156237083916CB6 4B016AAC9558F8AD 3E99FAA57A8DE616 2844A7A4D3A96DC6 420249A4D1CF2DE7 A2E006EA1770E6E9 5474D927B617395E E68C40F43FDCA6A7 94CF2ACBA0242B9A 93970B0F78FF33B7 C6B037651168BDCD E717A1C805367E07 23FACA685BD4E711 FE40D95529A9B87C A319AE7593BBB5C1 F73B9A9971E30084 08203B51447147D2 68D0F51822085104 9D9083B07C94D21A 89754BF552488402 5D11DF3FB7E3ADD1 E037602FED5C2C06 56D2C9D90339B22E EFDD992D5A2E254E 6D693DD2A596A73B D89E53E26AA3CDDC 0F29E15775BB2510 B7FA198AAB0D0932 38F46BF2A35AD670 61F1016D24929378 BEFC8D042D978DA8 DDAC4627E65C38AB CFE58B0D5DFE200C 75F6DD33C5C2152A 086FF6F7EA916B05 ED5002A87200468D F1D63E3817432DAC C8FF3A42DCE06ADF DFC191ED850F43CF 8645EDF37D5E160A AE078AAB54809895 792268D9A0FF5721 74669AC2CF2BD050 712BFD38AFB548BE EF0240D6ADDD4164 7D77BDA75C10BCED 5700B851D665B260 6EF807603309A667 F7E71E941433E0B2 854AC2EB9E04058E D8BE09A86ABD7728 981A4A76F5C5BF95 56F9BC2B925DD837 3F51AA3F51CF7E2B 5DD59DC971802BDC CEBC8B31ACDF4684 539C50D3C74BAEE4 05BDDDCE11CA3812 7FF8CBEE701ECC61 EF91DABD8D77671D E3EF8F7AB63D5F89 58C52E4D0393E872 D02C9A2BDFE6E53C 93B5CD33D56D408B 21211CEE73CB6655 42EF54CB7137A34F 1CD3C1E62FCA7096 AE3875F59C45A0DD B1BCA834C57FC3E1 2348E0C8E05A172B DBFCC853B8BBE5D2 77C081CDA01ACFF2 3F9151BF3A16783B AF7A6F4FF1CBA8AF FCE954D29C0B2073 4D7D3CB372EE7B27 4CEBA7D90454688D 515405FFDF0FB3C6 9B09D510CCB7335E 499F05E207D5D6BA E62EC115E995786F 72A42D3104BEC50A 4A0D382B2C99D3E4 F8DC45DA1AEED871 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 3049fe71-5012-1b21-902b-e5af45d9eef7 2 07293edd-1943-3346-9741-10fbd8b26e71 3 9d222f58-e8bb-859f-9159-9fa317f90c05 4 7051324e-eb19-5d0a-a60c-297b7f554b9a 5 43d627df-4d61-338e-a158-24356edcd616 6 e81bfc4a-9393-16db-a850-cbcca42690fb 7 f1f42cb3-0b6a-26ff-900f-0cbd78bbfcde 8 4f17b83f-e657-7bf0-9829-a8cceb8a3d1e 9 d0a1ec77-e0b2-3b5a-bf4c-eb9f56c389a1 10 b906cd12-84da-55cc-8963-39037e9c5305 11 6ec3785c-1b7a-310a-a95b-4a5c0d08195c 12 95e39a7b-db02-512f-b2eb-2cbb95586502 13 e76e8085-4e28-3ef9-b775-7601b62f8849 14 b34c7de1-23fb-0a40-903b-2081e6190271 15 ff79c8ee-8669-8cc4-b37f-575f91b9980a 16 e1647e45-d3f7-102e-ba40-e087fc8a252e 17 c4164d9c-6670-542d-aaf0-2bac20b13c21 18 885c97d3-03b9-382f-9eba-7db8a07f569d 19 8245553d-bad5-7c9a-8275-25ff0ead16fb 20 7137a927-6092-70e7-b41a-0f1b37cce17f 21 fcd35ef9-3c2d-6e6f-96aa-320c3f705dda 22 2e5ddbcf-d983-054a-ae40-a8b765284bff 23 d1503c43-4199-5e9c-9bed-859627d59906 24 bbf58893-7ff5-4a69-b247-26d02d009a1c 25 86c6c384-b636-0062-8b65-16d0d43f67bb 26 6c2ac200-3ef9-8fff-a5c6-9881893e4084 27 a43864a7-6267-8102-a1b2-fb0e430ad4bb 28 d4228d65-6380-6fca-aecb-0ebc27f4409e 29 72886979-c608-0eba-9b7c-91c2e59230bd 30 31c63bf7-5fd9-4db8-923e-a93f41a40d66 31 4cf4124e-976a-8c4b-a463-dfaea743e63b 32 6aa69e50-114c-4b7f-82b4-13872a394422 33 559e34ff-0950-08d0-98f9-1074d56ae305 34 a2345ab4-0c79-40a8-9d42-b1f26b50d5d0 35 e47bfc5f-0096-8d20-ab67-10dabf8b1848 36 6e1c757e-c0de-2ded-a9b5-2e3dafa4cd21 37 d17c936a-7027-29b4-a4d5-a3457805aeaf 38 ca4cc22b-e29d-1f0a-8a07-6e01d96d7030 39 23639b78-817c-60b0-860b-2127b52d0515 40 7337bbe1-376d-5197-979f-d11b5c4f23ba 41 63812637-9286-0b27-983e-392b667bb564 42 108d9f37-c95a-48de-8756-09937545cbe8 43 86c0a947-e96e-2c40-9b42-9c8e4ffd34d9 44 6261fe30-dd82-04c4-a475-4932b793f5b4
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
13853127353530815377605408860484048221650420. Exactly this sequence comes out ofnew Random(820).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 28 of Run 16 (seed 39,036,328):
new Random(39036328), Next(8,64) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-11 17:05–17:10). - Conclusion. Filler. The content is fully explained by the two RNGs.