201207271405 x9mom
explained decrypted filler
3DES(name+name) ECB, 47 GUIDs, seed 594
From the post to its content
As posted (encrypted)
775164BD5E9411D5 C1C3DB1CFC5FCCB1 7F04C09A4602FDB9 92542A8179BB016F AD55496B1E39C9CF D69CD853141C4178 090043BA227975E0 822241BA6F2B1B02 317C5741BC62C830 960DDED39B708E08 C9E49CB2ECFA3488 C87A6E3934CA2EA2 2CA2C5E64B06D453 0CC624D43ECFF4F3 7DBDD2C013D34AC8 DB9AFC8FBCA6FEA0 6AD0D2EC31CA4B2F EF3115D32DB02D97 0D3A3209D0CFCAAE 21205BB3E16F0D2C F2E31D8D5AC0D151 8A5F25F99817722C 06D8A285D9A94574 488CC2B12A2E7CD8 8E26C8893BD5DB50 F69FAA6BA2167CD0 E417F8FA63AF7DA5 F078D2E4B6F48147 11BFCA4A75963AFC 4410C0913E9F08CF 6AB980528074AA46 CAEC8D513B910F52 1EC14087B0072EC2 C35F07C0DA94272C 7AAD26BB5F66EDB7 5E1DBBB7E32C6EC8 68B53D761D345288 0F70420C3DA55819 5AC612512B62F8FD 70AD43D2A2BFBF52 5B223882D80C59DB 30AF49E7D08EDD6D 7F924A92F1D9089A 7197D5F64D964D29 0C512EDA27D76321 68D2C17A21B44B83 99EAD8002CC3B9EA 439A265CCEDCE2DE 90A2A32896251E3C A9107D5D745070A0 D93C75F4E9C14F41 AE737AF6E8EA1CB1 F3A8137E90E29749 C5E310C60B7D4116 AA773D7F7368E38D 9D6BA9854771FEE7 8BB58AE949287AE5 0EC010435CA2EB4C 219EA9380FD6DD73 EE68CDA0D1E40C27 917CF1BAB4D1F68B 691A0D08317807BD A0D899877A4CE982 7368922A877E5382 B0E019EAB80A8638 06B598C1AB20CCA8 BF33A567AA5F9ACE 9CC5316FC53C54C3 6D5F7C7F25DBC0BD D7CEB7A1EA551BAD 477DDF07FD39C85D F0DCC4C879186CB7 B422DC56855379E4 0A63B1A60ABF1258 B95C5E3AD75EB982 8095183DD4FFFF94 FD28FE390A354B85 17D266AA8EF0632A 4ADE7D34B3BB7ADF C7D7B26FDA200B5F 7A7B0D3242CDB1A5 2C6F8537E3E79F76 BE41BC073BBA6DD7 B75A076D2AE32165 87F1E96ADB8D02B2 3CCE46EE199869D1 E3C5E829A2074703 C3B18F3A9C6CA3A2 01DE5D7765522034 AA10D604612BD741 4C05EBE9A1ACD809 7CC07DB8F8B8D513 6A162EF24A97FB6E 117B5C0DDAF776C6 E1B2F52D1717F30E BD407D739EC17906 F6E5CE9CC172EB54 CBBC385CBC2B34CA 9CF35E3D56B5B332 40CB03E13CAD548D 10594FE72C007E0C 6032222017997E78 020BDFB86194C15D D63381C52BAB96BB C0941ED2F60219DA 551CE01E49B1EF36 CD3EDEAC13A91832 1A089A57C71848A2 A2332FF2788A8935 AA5D5F3C72C729C2 2F566F12A0367ADA 0EEAD8D2C69C8F7C F57CDDA6759528CA 70D433E99F9BB375 382FB4A3082AA056 4105F41DAD8B0622 47750B4E29E51459 A204654B29F6DAC8 93609E4AD4659AA7 BF59D7E82C5C32C4 1E7B61E257D5E030 07458B020FF2CCC4 D3188B16496C76A2 4118EF71E17334F6 FA93D815C4946449 70F820E53FAD2A33 63AE44C7C39BFA74 833E735D03D21CD1 DC8AC1A229CFDBE4 8282EB6CFF3988E5 1B16CDEDD523BAF2 F992862AF249FECB 56FB644647354840 B66EC6A581B606B4 63473C618E38E9A2 DBB1D31573C7BBA4 BB3DFA0A077AFC8E 6D6C8B48F6401888 9F9BD0D26E28D0C8 2340C923BE58DC1E B4F5D5EAA9C3FBBF 8C19000363D00ED3 C110AF53F7F53FFB 49D1BC94D5C1AAEE 4608B77AD2202260 5ADFF154AF534725 C7F5545258EA7090 EA8081DBE0324C70 6596B77C29176696 744328018E236C1E BEA8D95D3DD094F6 260ECFE863104CF7 A521AE867B482931 61A58B6170BE6C9E 42BB2E5203E8CE52 676C7EF674B322A9 5AE957FA0E493426 83CB01DFD0961489 7C6300EE2E0E283B D7D90422FBBD3042 963CE9BAA65F2FF4 94833A7F04D9A58A 49B48C74807F4172 96F2823EA648797C 60C3AD8C6619D7AD 34EEB22C84181177 E85FA3E3F930F5CD 40EDB83F48B67784 9B5C421E9DFB2AFA C11A2005EBA37B97 D69D3EEC53B9B936 A80AC4A1E2168047 67602C2B0723ABB0 87836894BFA8F695 6182E9DCDEC45D9E FC87066985A0E72E EC0DB696A61A7A18 A646620877B0390F 28C62083E8EDAF8C 4D46EB431A45EB39 905B170EB8757D24 E2E306128BD35143 0564C89539F7F739 5A9CD244690CE0BD DB6103590035F1DC 2EC7CADD415F74E1 DCFA5FF6CF98C94C 38EFE2649874B4C9 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 3,024 hex characters = 1,512 bytes = 189 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 47 GUIDs as hex (shown below).
Decrypted: GUID list
1 900aff17-f127-02b7-b849-b42db42ae7b2 2 540a1959-0052-0cd3-aca6-b265d7449fa1 3 942eb894-c2fa-883f-9405-d2c484cddaf6 4 e3398978-0221-3310-a8ba-da0fb5040b4b 5 7e272c99-de85-3b1f-99fb-589d4b74bc8c 6 1e5df762-39d8-5769-b057-da6596a3f8c7 7 f0f220b1-de7f-0dd1-b0a1-518523e21a84 8 2d273db3-7fac-3f2a-8f70-c2c90b1915ef 9 29fc07a4-c10f-40e5-a8d7-dcd966230620 10 709638d7-2e6d-2d08-af23-963bb2184487 11 1fd60a71-bd18-87d0-ac9d-b1a9db2cb98c 12 85359b28-2191-1e9d-a271-ac1f62666f6a 13 3e1cd042-2410-8092-907f-587c6489c48a 14 979b198a-5032-4b20-b08a-1b2700789fab 15 347890ca-6d2b-6851-82b5-4ae1c3eb1f8f 16 4fd57181-fbf2-82f5-9f73-6b6e852ab122 17 9997065e-8244-5b83-b1ec-37f0d42ded7f 18 6b7a1ba6-8d17-27af-a6e0-61c4d196fe1d 19 82b985aa-1721-69e6-9b83-dbb43a4b7201 20 fee91175-43c6-21a4-ba5f-62ee48c76bfe 21 6b53ab26-fab5-632b-87ad-dfd4501e1179 22 f4b9f4a4-1bfb-5a67-9a32-48dc4b10e32d 23 b1af215e-e5be-357a-a310-1759b114b871 24 4371fbd4-bff2-40bf-98cf-5a4c1db90543 25 2f181362-2c3d-864e-b2bc-fa219acce4e8 26 34848223-88d4-52bf-b036-377c1d70db0a 27 77f8f80e-ecc7-5b4f-bf77-ef86c536bb93 28 40286450-7a4b-6150-a3b9-1c7376195dcd 29 b574f9a0-4739-5f59-ad2c-9a314f9911d2 30 50f6ad7e-cd6d-4bdb-a2b3-01eddb40c0ee 31 4444bdea-bd81-4abf-b1da-c2d710656592 32 0ef8da7e-f3bf-8926-9760-cb065161fd1a 33 39e79fc1-1569-1de6-8265-35adcdf826dc 34 0ca5b4df-c8c5-76d3-acf4-d93479fe1c11 35 9d0273cf-81d6-07a1-b7af-ac302042cfd5 36 e15b9110-2775-4554-9503-488b0f03f126 37 05b03f2d-fc68-0bb2-bd17-539026bba989 38 df001848-0208-13af-86be-0dde72f0edd7 39 2335fcb6-1d99-02fa-baec-bdfb559130a2 40 b58de4a8-c362-2e43-8b53-605c6ec046ff 41 19058ea6-6e14-4f49-aeff-f83648672bdf 42 f9cb297c-b340-61cf-bad1-65013c7d5321 43 747baf9d-d88c-84d9-b7c9-73fb75a247ac 44 e568ae52-41d7-4999-8b48-64a5803bd5ab 45 849f56d0-71ac-04bb-9b70-52b45346f140 46 d1ef1fc9-33fa-8de1-9ea5-80b061aa4321 47 722af1a5-763b-3fa2-8c91-a41407ff632c
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
00833503428184685262653485565448170401024684083. Exactly this sequence comes out ofnew Random(594).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 5 of Run 18 (seed 6,051,781):
new Random(6051781), Next(8,64) per post. The RNG predicts N = 47; the post has N = 47 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:15–19:16). - Conclusion. Filler. The content is fully explained by the two RNGs.