201207210012 wws1j
explained decrypted filler
3DES(name+name) ECB, 49 GUIDs, seed 268
From the post to its content
As posted (encrypted)
985A1C1DF82DFA92 DE084CE80F4D85AA 3430DAC23DCC2549 B6972B1F373321FC 60358B170DDEFEBB 59F887034CC69B06 0EE5AA7B7FCB5F08 84278A8E173AACC7 84517EB16EF0F7CF BB06E85C5B6EB287 445149D0814E6D27 C0C6F8953713B8D0 4814C8C1710448F5 4C3C42E8ECF237E0 725C04046EA26C41 B88384651A6D6F6F 5668F0936550A3FB 2E8C03C8BD1D9D34 5A8E5A81A92A3D0B 99873CB01773C470 CDF889C7377BC622 E46130D6641F7D9C DE825C23258B7595 ED83CE903FF9556D FBEC97FDC18FF6FE 05325434D9C96AD5 2DA6609B2B6D049F BD8F23C0C8109D08 358DA4165443A038 D1DAAC8DD23DB717 0284E0AC157CD3E4 88CD3BD3A2D0AE24 D60D253CEF7F6C00 31163678B35D59B8 667668832FA02F4B FAE05916EACB85DC EDDACBD312392C7F 73C2C7AA1572F645 75904E0C59D6CF90 610AC5951A40C4DD 834626EADBC0FAA6 F9E83865F1DA17A7 06DAD553C2E3C9B5 0C86AB14615D2199 820350F92F350A4A 4E0234906C426468 8582A1FA4AF61C5E 3A415253465B28C8 F7FC4C77DCCCB311 1564A0E149D24D5B B22EFDCFE8D6B499 94D08F8D2C6E1E65 832322EB94142C73 6BDCEA0D46344FC7 A84973077020D388 2FE1582DF3B29600 D597907FB2E54624 3C77F482C41F0F31 DA8B398BF727312F C76783CCC6B71022 86BBA56EABE5244B EA1C7112A3EE8F2D 7D1DB8EE84A3417F 8CC472A99D2B85F6 02ADB0BE091C56A0 B3CF47C30F21F6C4 6A16DEE5157B6FF3 CF4E5EA7B68A470F B08D676E1DCC36CA 2DE0EAB97F618FB0 41EE19C6D9F770C3 D2681FCFE4F4ABB0 C9CE704E7DD7458A 6F8A03E1DCBE69AE 5873AA1995BC8157 B308D7BAF3D47320 A05608FEBFCC2335 98AC872FD8A62CC0 A99AF653495FB00E F13CC96217A8A981 44145EE624CCADF6 BD756C2F9384E610 D664B9458F6476F1 F82571280CFC5587 3849C69954C06D26 D0FF2ECC562C6E88 1298084837CFBBF6 3E33F48B5CA8CD4E FFEEE063DFD542B1 1219B3F18DC18E11 D105FA276FA6AC1C D62C6FF8FD5C02FA 28DDFE9F2679A310 9371D77CB087F98F E91850DF3690A70A 7E67380C85A3646C 00ED16F99830F962 D27892DCB47E0685 B23BD94A8BE63DBC 9E84CAED2813C565 1C28DBBF3551634F FCC4BD92420DB53A C919878CFE93F764 81D8452C4D4A3E98 26DC6DB62D7CC5BF FC68C801F976CB43 445790C81513F4F4 FDEA8876D79DDAD6 F3984209C8893BA8 126CB9FC2A83E4DD 7B95F7C576178CAE E334FD7FF9F28E45 BE87178584EAF1A6 329A653F7D7A014F 1B3F8FD81BD13A72 B8403E3094605866 F5ECF57A31523DBC 00C80CBDC9546D1E F966FDDF52649E85 30C25876FF0019B8 71C1AFBE6031B307 E553FDE9C768DB46 432AD506B2E7C897 F593B96B85F5BA97 7B52DE9217396E7C 3159DEE83210C3A8 682018A108C3AFA3 D85743489DD3B773 A4AE67C2A33C40FA 810B3C01F3B7E7D4 3EBEA69432E97186 B372A055227F4FC1 7FB84DE9F568DCF6 341E004A1B1814A5 0323BE0068017E0A 3A09121AC0B07984 25F445689D799987 99DD13F252C7FF3C 663252FBA3B27BE3 AA2885B29CDFB0D7 E610A4E5E0D0E7BE 80DA4B2D2671F5F8 0C10A3BCF961DA88 C9B900C04488985C 787276312D0CB17A C535EE4614727915 6DFE994FD8345B76 9B749032BF2B9B6F B0576CB359930F67 5DD011394CB15018 54DB202F53FF1AF4 1A001E65BF5F61C5 677318668CB1E005 CE47804C708FDC94 875B7D3C338CA5E4 C4A67F9D9F89E9F9 2A68DA9D2C93B18E C676A35CAB563C1C CD58B90307B5F5C2 2DA372C77622F61C D0D9BEF2E38D2DD2 95FC0ABDBAC13C99 A196A2462E5BC909 DA7F68953717B734 BC4C0A7CD7863856 C9C55320FE4733BD C6F679E0E2E011FB 3DAAEAE2A8C9C884 A86AC5916F7DEC8A 22DE6350B19868A9 807AC7F9891F91BF 8760B73A45ABB689 B697B16A4B4A9D5A 6A3DD5FD50A21086 DFD0890EE4E282BE BE2A19917750A96A B2BB91157E865A6B 19BA0D59E597F765 975B39EE841042E8 2297BEF6E5825802 0310F22128D4C4E4 DD4A74604AEA5C17 CECDCBC12BAAF9BD FB29520D0DB88127 0EED47527C235882 6BBB2292C39830C6 485F790BD25AA130 8E24FF3A89814114 F1CC539D303028A7 B5815068A1454A73 1AE697AFCF04ED7C 116952C9441A0E79 F83A75E9E7C9582B AABAA2A3B6A9EE36 05B0328E593BC6D0 EE1B3AEA6559EBF5 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 3,152 hex characters = 1,576 bytes = 197 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 49 GUIDs as hex (shown below).
Decrypted: GUID list
1 59c01dce-2f53-61c1-80ae-64d53e08af65 2 635fd101-96b1-49e3-b9cf-2f9c4f971ff8 3 01b92a12-4412-0956-bf50-ada20af6fefb 4 95bd1c2f-b02a-6cdb-89f2-85e9d0383e8e 5 c8041e75-86aa-1623-b028-e3d39c6b7c3f 6 6ec83fa1-bd20-61ff-8fef-462155e2799b 7 cd6739a9-4771-8465-8815-4ba971acb459 8 b719231e-2e5b-80e9-8846-8b59ca0bf308 9 067cf478-7257-1533-8af0-3681468e3e92 10 d8d423d1-fdd4-095f-a594-40a8adf2558d 11 1e621ca9-42ba-6a61-879d-9266f43f550c 12 f846f1a1-7368-6e99-b7f3-8df0fe5eccba 13 a110a431-6551-7320-b94b-e50ea399db4a 14 4385d7d6-7599-80bf-880d-3f623db79b86 15 e9b6ef5c-73ad-51f6-abda-a68c85aeba24 16 eca31501-fc40-33a2-b2ac-d70916d1cf26 17 d2dbdb8a-5c28-4a9c-b218-f10998efc64e 18 4f96b278-d3b9-173f-9438-5b22b43d5b51 19 aa563f41-449b-81d3-8fe7-b1282a4e5e7d 20 18b68cd2-eea4-0587-8b55-50360a215e7a 21 5cdd7a9a-5ccf-3beb-b0ad-a2fbfde9c94f 22 be0bfff7-4ef5-5348-be59-ea8a9127904e 23 1b26d46e-bf63-2613-8341-66813072a4d9 24 9a372f80-4be0-561f-bcbc-54a1fc39cd18 25 2159949c-5544-89c7-9598-64cf7cf13ba9 26 d3f0f47f-6f20-8324-ad70-7cbe44432ce8 27 09ffd14b-c92b-3283-853e-15ce6ed7a8ae 28 2aefdb64-5a6a-6b0b-8136-14567e38a93b 29 cf3c9279-5886-518b-9703-19b1690d15cb 30 f0b9d52e-34c0-8fff-b8f8-c1af170543b8 31 a141a253-daa5-1de9-ba64-7656aa2344af 32 7998b7e6-e56a-05bb-8bac-deb73fc8dca4 33 080ee47e-00f7-0dd1-a7b8-c4cf0001a731 34 e7126b41-2b2b-6fad-938f-e845a6d5d951 35 a92d1ee9-51bc-2e67-ad3a-bcb3faf6e09f 36 edd7e763-46e3-351f-a02a-64e0297541b4 37 86ca3be7-9390-0e96-b41d-ed4619a3d341 38 c2056173-eca2-0eea-9bea-237bcc2f3118 39 10bbfb5d-32d8-258b-92a2-8d1a25903580 40 ef844e7a-e32d-105f-899b-0f558b0a1520 41 3232178e-3833-28e9-9faf-58b98728406a 42 acea4a9d-2dfa-1b12-bca1-7f262b7a9d9e 43 44233ef6-d2a1-495d-b982-9cfb12c6eabb 44 5031f914-0642-53c4-abac-eeed9b437a8f 45 1e012c87-f74a-14db-97b1-0abf519f2c0e 46 7b612cd0-a2bd-72bd-be2a-8769c213e61d 47 399b2b31-2c0b-46e6-ade9-6b3a2165a2a7 48 333083e2-58d6-5dad-8bc4-9f257cba3f8b 49 6eaae7d7-ae12-2d39-b390-fd1c4eabcd3d
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
6406168810667853418035258836581006230021214517452. Exactly this sequence comes out ofnew Random(268).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 34 of Run 17 (seed 38,757,453):
new Random(38757453), Next(8,64) per post. The RNG predicts N = 49; the post has N = 49 ✓. The seed is the machine's uptime in ms when the app started (boot before 2012-07-11 16:41). - Conclusion. Filler. The content is fully explained by the two RNGs.