201207271400 x9md9
explained decrypted filler
3DES(name+name) ECB, 25 GUIDs, seed 16
From the post to its content
As posted (encrypted)
80ABB19605DC6295 DAE028B2AA7BA75F 3628B4275F0179BF AE257F8743824A17 D3CEAB97109FD6D7 D38C7940694280F2 F764126631EA952B 69D1BCCE71FC422B 0C3F8913EBAE488D 1C0804F7ED49A0B4 9A449FCE729C25D6 9F3A3081218D7B46 EFA081DB61D04B6E 845A07AAD7036443 0163EB9A0CB9A5F1 A54DCD274D9180B2 DF2C5875DBCBFDE5 10E0CFF95E046FF4 F30258507B24EC68 CC8404D062A34BF1 44E2CAAEBA909951 B0DDBEF81A51244F D6C7A5E9FDF89AAF 955961C2C13D8817 9F3F418A4D987BBA 27F82895CA7BA982 1EC3ADCFD105E4F4 CF9E75E3C3D58313 44EE394AA0E5178F FE517DDE7CDDF4D4 F121F0529B4F4372 D3EE14A018BB5D26 D9A6DE82FB104D7C 311098756EEF225E 61F132FD2AD272B4 18F662788E4239A9 97854723CED22C88 FF1399107F57571B 5B2944A29984B908 1085D756F2F30433 0598DEBE77909348 BE9960DDDD7CFC10 679C9D3438064D72 3E32BCE27AE1A942 F29AA2040AEF790A ED3291626BE26FAB ED98C64BAE04C511 ADC20B2B7496084F 8A5EE896B12BEA2D A9AC2E999766E49D BC2413BC02971815 53DDA5B42D96A3AD 1CFF2FCD3FB40E52 3A309E438112BE3C 2FA383F95AF27CBE 07AC5559F10EE72E D59C30175FD621A1 4EEE34DC21FC7AA7 E71675F7EECBE5F7 133D595E89200757 BC3E3268E15AF436 EC3B1772D342732E 943BFDD6C4E5039D E700083A98DD1180 F361E84DB1609F46 38BA6050C0C1ADBA 802CEBB611D2F7D2 3378E3ED58ED2363 43910B1F34E23EB6 AA8E9BBD23603816 BF818AB65FD71B31 3144961F6A5247A2 C781D1B2EA287996 2DC69652C00D18F0 F13863A7A93F1DB0 8CCB196EAE66A1D3 031B62BD0A39CBAF 14D6CE06E1CE6AE7 09C101E377EB0B4B 0FFE3A5413177A78 0682041F79915756 29DD47FB1454B513 9D986352FDE4EEA4 551578296949A0E8 F0BEB54CE9FDE8E4 571EA2B384789071 D9F12E0153BA5150 BF4FC69F001B5A94 7907397BB358DC6B 4E32F75B17D92370 7217CDB96C1A84B9 1F7197AA7D1CFA4F A7482DFE3F7336F9 FF52EED3AFB12902 87B570289E1B198F 0815D38117B04AA0 C268C4370680574E 52F810C9D3E40464 4E95D932BE91608F 0A49EF90332C09C1 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 1,616 hex characters = 808 bytes = 101 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 25 GUIDs as hex (shown below).
Decrypted: GUID list
1 fb6e7654-bc80-02e2-8a7d-bf4c64b81d79 2 179c404c-0d0c-4302-af10-fbbf8e8a6c1c 3 265de2f6-a662-86c5-8e66-a880c6d698ae 4 b99b0aca-0369-8e69-afcd-edd3e6bf2553 5 b5d1b783-d3b5-3009-8d3e-15e29672e175 6 ce7cb2cc-64b9-4355-8d2e-c9453174774d 7 ff7f80dc-16dc-0fff-8a84-c95f3289de56 8 c57784e3-e149-4b45-ae98-786dfb834da8 9 10818f7d-e141-8cce-b380-68f99b79adfb 10 5fa6ee36-5da6-16f2-a8f8-422e20096df6 11 48474ff7-7693-08b0-a1af-cceb94a2fb8f 12 97ddc0a2-dce9-8854-8c1a-c9b7b9bf6914 13 3f39650e-f222-5606-a9bb-1159537e241e 14 e64580f0-5d47-730a-919e-50f72a33d9db 15 22dfc950-c08d-11dd-916e-0020aa91a072 16 2ec94336-edea-0417-a187-5e01efe88def 17 1dcb20ac-614a-5c79-8745-03a0b510b11b 18 4dbcf1bc-f000-8e22-bb8c-db10b6f7d657 19 c14c2bf7-528d-09cd-8857-a2eb210e5c96 20 769ef1ba-7ebe-44d2-bf65-7adfb4af2dd2 21 3f6e1721-0393-81e5-a0bf-35874972d1b1 22 4f83f352-c8fe-6d6a-ab40-bc57ff761830 23 c5e0786a-1496-6e77-a0cf-3e8366731a1a 24 3edef1fd-5dc4-5642-8d4e-6f29ce5d7bde 25 e33fcba0-dcc0-2bb6-a534-cefb33072b5c
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
0488340481085710580486652. Exactly this sequence comes out ofnew Random(16).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 0 of Run 18 (seed 6,051,781):
new Random(6051781), Next(8,64) per post. The RNG predicts N = 25; the post has N = 25 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:15–19:16). - Conclusion. Filler. The content is fully explained by the two RNGs.