201207210018 wwscr
explained decrypted filler
3DES(name+name) ECB, 58 GUIDs, seed 393
From the post to its content
As posted (encrypted)
DAB3A64E64B1EE42 5D4D919F7C71C116 9134D3B5388B9B88 4322D3FD2E41E323 6614D11EBE6941A5 3CF240A3DCF85BC8 82C0219B14AC6B18 9812946C7D7170FF ADF525A199869368 451827769E976BE4 EAAF32C44D812723 18996A15F1A52BFB 3E5E47A9DF31AC5A 175B77EC1F732F6D E4E9572A8331BE2B D051A557E3580F04 98F73C721C1AFAF4 3B7E5557409D1E08 0F5F2D27D9DFC557 E2AE0EAA267EAF91 37DF1D392BAB3E4F 2EF1EC6863081605 D87E81FDEE6BDCF3 C79E90AD4527F331 DAC3F7C1ACD73844 F14797D04E7937D3 147FF6F800D4C324 CF74CAB61E981085 953CB913C9A09018 C4E4C39DBB8B0209 3F05A2F605149512 3D5D6791F0760AD0 29465CB4F330CBD0 E29FBCCABE049CD6 DF3465C9C7BA42C3 FB2592995728FA9B 585AE82296B20CF8 F468CA12C5959DA7 499A0B4C654CD90F 458059F4495E4F88 CD231FCE7D9FEF6B 3279F3E8E413CEF3 FFDB81ABCADECE72 99B6C7F29B455849 F47530DC65437E92 AABB319479AA7916 09E4558172A03502 5CF1A70E08555256 1F0335D3B2270A1A 4181AA64D8143543 0324F6DD1514CC3E F5B1C20F077D8720 AD5015BDC6EDB31A FA5577403C46C34C EDF5F1349BEB7667 DA6D270AEC56F445 357D76BBA1E8E132 04454B275DAED6F6 99801C770C8C9F2C 959294D4E76DF4D4 5198F88978E7E7EE F0C9842E2E92C680 175CA0F40CA092DF AEF96413AE6D2B1D 2659178F06C7F153 1C2A03C72E44F086 77BBAC02ABE73EA9 E4045AAB3163E2D1 283C4221611968A3 3C1E30909525AB17 23D5B24F9FBF1C56 3F9FE52CF47B41C9 5B5712DEE7E3FCF9 D7E2FEDCC9EB55D9 1E7B499633C3AF1B 8428E8C7F13997C6 D6E34804389AE89F 4D2E9F2B21A62998 5075A53C3BE26141 5172923F8EC9587C B252F5871A98BB2B 19D15773F45CC08A 4547F5FADCE435F9 088E572748539F1F 13FA4ACAFC06CCD4 02ABCBE282687D70 2B01645D48121BDD CA2EF7B31ED80AA5 CFD31383012BFD21 E96ECABB7FD00DD0 B0F86E2A7398B9BF 900B1DBA182D4121 49ACE718CC955CB7 5D1C47AF76126486 C7112D1A4ECA79BA 3354284E85A803C2 1743961C83612858 936E7BAE7F7D6C9E 35C3AFC8795CDC1D 5C115E0B4F6B5717 1ECED15133F6C5E2 97D26CBA2F053CA0 D668A4FE0DA9A301 E41ACCD5A3361C42 A7A5EA049D2E9F2E 71802B3C8783EE1F 339235F65890FAF7 7F9CCAF0551D361D 97773CE3BD825B14 BE76783C862192D9 0C42BAD813786408 B4C06A5A81FF2407 B5239E1BC16698CD 9EC04B38908E5833 2F3BD11B0F2E8711 3E040B33FA633C4D 67193E98C9D40F7A 521DC48720738BD1 CCE47EA41FFFAE05 2B28E60312C880C1 B6BB082B6A2C0316 326363F7568FFF7D 730ADC94B46A40E3 8B4FA338E85222EF 7723048BC6AD88E5 D56F6C2D77C875EC 61D2F06E3695A923 336D63A73B435009 9E8245A52DACF761 03B4B8C90E5AAB82 09A910EF88C3085E 36C50C988CF81F44 109BA2832F5EB68D D5F81392307186A0 D6AC64CCFE89EB0F E56A04080E9C6CF7 1D3933D37C748FED 1F92DF4BE7002B53 16B83732E17FE53F 5F3E885FB96F1322 79D2C268D7F4F7BD FF507326C3354AAF B61E3773789F4033 624E246E3D2C7C22 45C035FC95E876BA 9AC2A6D9FA217428 E3E1C639BE66B4CE F8E27DB028B14936 44ECBC1C4339CA89 0F489F24E403F83A E8698CBB8C976CAB F6E4E38DD5280737 BD2C9E0035AA4740 8AD817E41F7DAECA 6E0CD7D768C83692 58AA40EA3B45A527 7836C2132F799333 2E566D89F12D2DB5 985E4734C735B628 8652B435E42F3FC9 C868AB90AB848AF4 70063001EAE5BBD6 893C8ACD5C419EB9 A52EE8D8399DFECB 0C305082701440D0 D4136AB0A088DB45 3A55F5836CB4A101 11B2D865C2D4D5FB 2460FBF815584C0F C5027A8F5858EDC9 1744A0D71F73CC2D FF602439C9970858 EF6FEA2B42107727 C7CF2EC50F394685 2CA75AC27A7D0A7E 6530476E1E1D656A 7D72A6A33B49022A 0789E99A3F85488F 1A0AAE226E2B35EF DF6B9DD647284616 85A9EDFEFB040F55 5A6861EC4F8C0EA5 AA9BF11D71FD9A46 56F0072E1E42C3FE 0DB730B50E4C72F8 D646762CEF994EE7 4BA5AC91D8CA23DA 807E1526A66672F2 BF94DE8D164B82BF 259F244B4CACB022 857F8677B49B3DDE 641F406C00AF6A83 FB18B341368BF68F 5DD234C5B5D6CE5C 4C62259B52E0707B DB8FD401262917CD 3708B89A297E35E6 0B7ABA5B2AE6AD69 6C5987FA85DAB3C4 C800F58CF408A423 A686292DB2F246AA 1732C67F7CB49C1E 14F3EAB35A125F4F 2448FA942358469F 1169C265371697FF D96DEAF43CD25459 AB725360005217B8 B4D2A324FB0F2B74 935C4077817460C8 62400EC8634E673F 59069EEA30CF8671 7CAE69707A495972 0D19C15391E40FAC 7FADB0DA718A0082 D34CDF4917991FB6 A1BECA8A4F5D93F8 6C8A69137F6FF88D 7D2B959A1DC6BB5D 048F747D4571DB5C 0B7AC14A76C92753 25ECB5F7EB5A37D4 400FF3A242073046 82E57C44AAC84FDD 310A4CCCBA504994 78215EF809652516 BDC11F5B0981A395 4DA211D696D8B68F 744B9A231FF1C6B0 DF154EB7F595E970 3F62E24A80710619 59D2843926B64502 D905F810E4E1273A 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 3,728 hex characters = 1,864 bytes = 233 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 58 GUIDs as hex (shown below).
Decrypted: GUID list
1 e357b1fd-4402-06e1-a1a8-cb7d7c70798d 2 b7ff6653-1412-1297-a0d7-a9b5615a9662 3 9cf3466e-e1ad-4016-8718-a78e51cc1531 4 80fc293e-60b0-3eda-887e-74c8a9051986 5 82092cc7-5542-5f30-a2b6-7a7908f2e872 6 52b6d9c9-a081-0a5c-8879-d37f3278f4d5 7 ce0f9856-f9cd-834d-9e8b-d4eb9e3a7d00 8 04cb9dfb-a585-54f0-82fe-6ad11326794c 9 2b785a3a-5655-57ad-bc67-92e787814287 10 f87f8c46-c7c5-1a10-ad12-cff65ffb7e9d 11 a188877c-cc59-76e9-9691-8f1217852b34 12 0d442654-42e3-2ebd-960f-a397aa292001 13 dc52db27-6ed1-753e-b159-299d02a72f08 14 10d5624c-7418-8816-93fb-e9f7ef74c7cf 15 edf7f2ff-853b-07c3-86b5-e3f63d7eb6ec 16 6881dbdf-b539-44ef-91fe-0483a1086d76 17 ec02d953-25ed-0b59-b316-c7f0309e80d2 18 68efbebe-1d70-5eec-9113-9807360fc181 19 60f9b55f-c62e-2e88-bda5-40d1290b6945 20 6920eecd-a6f1-4022-b203-7589370be0a7 21 5b4e5192-9715-043b-88b6-b2c7deef1c43 22 99f1abe8-6d06-25b2-8f18-22a3e8422800 23 bb8b25a2-8a86-36b9-9140-bba1de73a1ff 24 4ec7c1fb-3808-2dad-8485-acb9d71657cc 25 bc5cd7e6-7d17-10bc-876a-bab62771c505 26 af07a46a-04f7-2093-8571-18610874b4ca 27 35ddaa1f-ca6c-770a-b3ac-b63aa3ba1517 28 230ea980-538a-19f1-bb58-680db48e7c6e 29 15bfd488-ce9f-0a2d-8051-5a244a1de376 30 58448632-eabd-5938-95f5-399b2f6eb958 31 3c81643e-3e30-2b53-8277-a1bdefe58560 32 4b25e1c2-40f9-835a-822c-2c2a15be4a18 33 3d9c3367-df55-25d6-96e3-f85d7fa18f61 34 a1ac9cbd-59a7-7e97-bfd4-36889f2ee2c9 35 577f7db0-f81f-71dd-a920-4c51fe998ad7 36 a1ad6564-4a0f-7fbb-95ba-82474cceb912 37 7b9ac435-441c-5100-a1c0-89e3f28ec56a 38 2af3c518-8bd9-18a2-8d52-c9ee0e1ae84e 39 9465b599-f029-5600-83ba-4059bc5b750a 40 6f0a1e9a-1e22-078a-8c4b-c047b41f0c0c 41 df337a65-6bfa-17db-ab09-cebd0553b34a 42 9b472b58-5495-846c-a611-4acc915df0e1 43 f8558a01-39b6-8fe6-b572-483e4dc47110 44 6f16b6d5-5c67-6e2e-8eec-f3b7f85d1cae 45 d4fb8014-940d-0a07-a509-0324d0e63bc5 46 0e1f67f5-5f9c-7b20-ae73-536b69fed72b 47 476747b7-7588-0772-a970-7ade07981096 48 0792ec8c-94e9-541c-91f3-fc839c9d3dcc 49 f7f32f27-101b-44d8-b21c-126aa68586f6 50 927daa07-ed20-1335-bbf0-9ba7e5a96b78 51 5c2f85f0-6643-04d6-ae80-99e5fdc046f6 52 04416413-a580-7a51-a561-bae105386422 53 cc57880d-10c8-259b-9b6e-081c44b7f410 54 a72eb8a7-b133-4bea-a49c-765f3815c96a 55 aa6934fe-5b3e-77bd-9bd6-c410917dfb52 56 06fc847e-e35a-6f91-bfb9-e14d2fa2e298 57 abef381b-7b4b-675a-966d-09e77ec587fe 58 bb709936-1489-16c2-8dcc-d3ef52e45cea
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
0143508551727804052402321271052827775150188607054107247661. Exactly this sequence comes out ofnew Random(393).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 35 of Run 17 (seed 38,757,453):
new Random(38757453), Next(8,64) per post. The RNG predicts N = 58; the post has N = 58 ✓. The seed is the machine's uptime in ms when the app started (boot before 2012-07-11 16:41). - Conclusion. Filler. The content is fully explained by the two RNGs.