201207211324 wwsmb
explained decrypted filler
3DES(name+name) ECB, 52 GUIDs, seed 26
From the post to its content
As posted (encrypted)
2C02D0D89074E649 EC31CFB0CF5FB96A 6A9FD894FE8933C4 150CA7BCC936A5C4 7E560D8DA51FFC99 609FF092ACF8147B 1A2E46BABD0C9737 FD1B5DBC3FBA2832 F29B7E06ED0B3B4B C3A57CD1B6E3BD29 F4B0C142E4C513DD B63CC7185AEE28E2 6FB33E7A35DF7EC1 875AFE3B7DE5205B AFED20E8D28FB836 0A30C262D8434E63 080D7243FAD590B6 BFB2CCB4DD4B7334 08118A0E9277ED88 36708176F45315E3 5A95F101A57D442F 57696A79F0270571 C336A85D250811EB A15B6263F125FCD0 511A6A43691318A5 F2A05EEBED0A5E9B D046A5CDB69ABE7F 7B6929FC2B461474 004C867F45AACCF1 7A9D2830504C2542 AD7191BAB7222209 721ADD13725378D2 0118EDA0F980123A A47D427FB9A166D6 11E47E4748249E7D 5144798FBB2CBD0A E05C42E1F2E35AA2 61CC714F36AC4063 37ADA3EC954C086D 3F53E39141223809 1F3A892DE5B1C70F 5C81B029621FE869 F409C536F851A448 05A0EFB40413473D 029D8F5D0E33A8F9 B01411C61001AD0D 54587941D32BBE86 140998C52F638A63 38917D0AFD3367C9 A0C56011CC56892F 7E523C241B76CC47 C9C01B5B833F250A 78F3195076696756 0486B3B15EACD243 EAD0786C09192F19 F265FA14FB0B9AA2 91B776D6E165ED95 0AA79333C2017195 29DCBEEEE38B0641 D40398116DDCB04C BCBAFB8174551006 89B9758D9B96E603 F2975ECD001B3121 FDC52595467E4ABA ED72EDFB2263E14E 9E845F67D2C0110D 5373293909EE652B 2788A13D62E56899 F3C7FF09D65F6346 B04A5685EFE5B63E 15EB068C1B5883D1 4D7EA621D40DC90C BA61FBEBC99687DE 42331C4D33BF6C47 DAB13B577C974A84 8E4575E2018BB56E 794D8543560C49D0 9FD5894C83BD17B3 E6D1FCD4F397C336 FD8005F958CA658C 9CFF93A985B281DB 1222D4DE29A887D7 CFF1BEC05B4CF82A 5945340C7B5D9102 D7B98BC5CFCC554C 04D38D43C37A7448 3BB42BADA3DE51A8 719156A8FDA1D25B B1FBB1CB80191398 0F04265D42BD072D 0B864BEEC0D72C92 40513FF9F3A2D161 655D7F5EB6B37E88 E501D3F9CA714C16 24166E422BB19EF9 69E672D75C138C0A 3477BECA4529B79F 389E083614DB556F 81F01EFCDF596B07 AB7A4AB968EE557C 0F064DB0353CDAA2 2D92467E57D91391 FCD484FF1C11FAF5 4D0430C9242DE682 1C5ED91C3AB98FFB 923E789A15FA064E 8BEAD4BA25B735F8 9F352C598A505591 5FC8AAFD5E018D76 80B47ED23DC43BF0 B330E5819E6AB6C1 F12CFF2A38007166 52E19B0D86FD6D7E D7AD642AA35CE432 3AC92D2230B5043D F1E0F9365BF85F47 40D7BD3625871E60 0BECDB98DE0DD468 217543DA0283370B 55DC3ED57B53A60B 5FC79D4112822847 3E6BA71A6048B030 FC11510738CA4D5E 992E10D8C2B246B5 A3B17030E517EF8A E33CBC98EA94B63A E9035E8660726A5E 9BEDCC4968C19DD1 3C5644C0E7353B91 E7F9397C643D3691 440063D0B8551AFB C3913471DAD00206 9E83958FA1756D6C 8470A7BCFBC2A86B 0922EB8E8E4B93E3 6652E1A704792801 4E67A1F34A06A0A2 1BCE7BD0A61AACA1 ED3F5F5DD948089A 2EEC346C5FFD4F6D 3B7665184DC3F949 CE818FD61034CBE4 798FD39A8C3BC968 AD730F9A1DC570FA F781DB1C5EE68487 E4D962478B893CD3 83E0F5418928BE1D E10DEF4492C77A83 FC1FE909ABB70CEE 988B2CA68B507685 078DAB7E83F5E7E4 FD586B7C546A6B2E D143AAFBB69A6059 0D99D975E4D6632E 26A1AFBFCC39D2BB ADB2694104690584 BD9B5AAA3763A6DD CB1D3763488A9AA1 6E5433CA9C1BDFBA F91ED355D1A1F038 AF4E42C2FCE610FB E99036CE76321EDA 1332FAC3E915652F 260EDD56799987FC 866A6DF71BF67D9E 14A4287045ECE72B EAA8F9589B14ACFC 34D8BEB79CBF6758 7ADE1EFE6E219476 E4948929BC7787C1 CF9B7CF55685523A 80D752F5E224558C 25C1166A183525AD 6F1A4BAAC652B803 FA4E23A34C5E0BB1 DDFB62087ED0FCD0 0E2EED33993A53E7 D4146F44E570F771 8617EE0282CC0E84 7F50C925AB3D5EA4 FB63B458BF899ED3 6FBCD01CC664929D 2D197147E2C349FE D79E74C2B6902C31 606DE59F650C1087 73878F9DA4A340C6 77AB53886AD59F33 DF8B7D0D7CC3485B 0233625647689BAA 7DB19CD9A086F0D9 BDF741C6CE701D7D 1F09886E45039D22 4737C7E58F1C52F4 80C43B7B2E588E3E 9688113B65BE5E89 5F645066330C037F 5C49727A9CDA843E 2C8B0F0E2B072C9A 83527FE709EE5FC6 95FD5A4CF5245257 1FA01BEF280A1481 E94C02A6C08E8812 8783448E747CE013 048D83B220320338 2C4C4BE3EEE15E08 0E6E2330A7FE60EE 8A94BB192840B426 4B40EBD0515C409D 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 3,344 hex characters = 1,672 bytes = 209 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 52 GUIDs as hex (shown below).
Decrypted: GUID list
1 adc9f86d-3098-256c-bf6d-5f277d9a3e43 2 ebe39d3f-fbb7-4a91-97e4-c8a92b6cb39b 3 60ff3bcb-3ae1-895a-89a9-dd72e10f3123 4 481234d5-95ed-0ffb-b3fe-78dbe5a7df9f 5 371efc02-2195-8bbd-8573-9980d3e12dba 6 dfd1a66d-c28d-2f62-97e4-8db2e1a4324e 7 f11b476d-ccd6-4f2b-ba26-3b08531b4635 8 46e4a9d9-7e43-4606-80b4-04b5f9e69f23 9 7653d9fb-80ae-1a7b-b14e-26e9c01a1896 10 2107a901-d0c7-7f56-ad23-91bf804dd378 11 e1b46c2b-2e8a-48ea-97b4-138cfb362ce5 12 273a662a-c179-6fe1-a5f1-e165932d122e 13 ca31c95c-0747-4d61-a388-4c4b243d2c52 14 96e22351-ff5a-86ad-8291-89b1553fef40 15 30c1f56c-1c85-1292-a7ec-3cc6a817cea3 16 6fceb03e-862d-2699-bc44-1cb960054445 17 00c86b95-67c1-726c-8a15-db67e3acb45b 18 68ba0d13-bcbf-1451-9e29-3c33139425c6 19 5b98a065-cd5b-3530-9ea5-7b22b1d24eed 20 c74e0c86-4932-332b-8ecf-40fc025f7263 21 70a78910-fb9e-2c92-8ec6-48c1a6bc2cb2 22 fc15e80c-0477-2052-90a0-b0e7d9f65468 23 8cf50c04-3dff-3dcd-bd89-7e40998ea968 24 35c7172e-4373-1cfc-adb4-1d5a83f62172 25 3d68cbd1-67d6-237c-a77c-987d83653233 26 b320fd00-5036-2fcc-9dd3-9fe1cd709ce9 27 bb0ec073-c06d-28c1-a87b-e50f0bf59ce4 28 baa6e98b-aed3-7bba-a12f-37547a3a1795 29 358856aa-93fa-6967-9198-6495220becd3 30 5e4f8bf2-9818-06b8-bbb7-96acbb5b7ae0 31 50384f68-baef-7d2d-a496-09e5a8fb1aa0 32 6893f8b5-fd45-2b0b-b7ea-75ccd9410312 33 0370a0fe-f5db-676a-ac0c-e7dcb6a82e2b 34 372fc90a-d261-5e57-8cf4-a498109b82e6 35 7b2a54b1-32a4-6d40-8d5b-a61c9086a080 36 6c98dbf3-7008-8b5a-88ff-57d3cb329f78 37 867fc4c3-6ae6-5813-b1b4-f3964565adf0 38 c2c1a0b4-c73d-03e8-a754-202c50ca61d5 39 f43922b4-eabb-7745-a30b-b46093fe1f2d 40 f8791f0d-5800-654b-b1c7-984ff0eac9c9 41 2a8942d0-abff-412e-99d3-9e8ff59a1154 42 7ea57a9f-fab9-8f85-a9a6-5095bd8e8474 43 ce806d96-518c-868f-b091-cdd616277067 44 943b77b7-f2a5-159b-8ea3-e827c51f56ee 45 42f90b14-095d-5079-8b82-0f06003124f7 46 f74030d1-5db1-64f6-a840-e5c3090a92ee 47 15f9cb8e-a789-1b9e-8d17-2bf5810a7287 48 faf4a0c4-cdf1-7522-bc61-53d1785ed01a 49 785734fe-7e81-6b24-bbb3-d8525b78dc0b 50 cf785813-c971-55e9-9df0-1b27c077cf46 51 590f06bc-de2f-3188-a7c4-1079dbc6d617 52 da502bfe-6ee7-3caf-84c3-5303cf4e5b5b
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
2480824417464812713322312227607265685076488156176533. Exactly this sequence comes out ofnew Random(26).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 35 of Run 16 (seed 39,036,328):
new Random(39036328), Next(8,64) per post. The RNG predicts N = 52; the post has N = 52 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-11 17:05–17:10). - Conclusion. Filler. The content is fully explained by the two RNGs.