201207271415 x9nai
explained decrypted filler
3DES(name+name) ECB, 48 GUIDs, seed 688
From the post to its content
As posted (encrypted)
171EAC04688E742B 3F1E3E30165623C4 F7899571107E8167 F89C13C12EDB256F 5FF8C0F4C44832E8 5A3BAA3844DF0F4E 03020E1CF2CE6C63 B6537B332E09DC3D E37A37E2EB60B981 4FF552A0E51CB62C 6E0D0D45F843E1CC 6D1E0E07C158A8EB C0047C8E04199F85 EFA8571BB0032363 73D50567B2FABD96 40FF55DCC16D7FE9 FF89A4AAE3CBD3C1 8F87471B7399BFA4 F3FEB59F893459E7 4BA78C47903E132B 1F7051C811E29B36 5ED4292047A29122 2A489ABACF9621AE ED52DB5AB28E4A3E 41AF425F45254BB1 C39D221126EF505D F482F8F761752ED8 384A81B078CEFF13 A4BADCF53A24A386 D0ABB3B0F09C8A7A C92A77CEC1E313FE A4C9B4B7A3BEE644 700F321E3EE13B90 04EFE22C3055199D 50BB90FD0A5BC1E1 B48DCBBFA22E6A76 6FCDBAAC218BCAC6 BA5F5320EB105A61 E5D2923F0FA8A6D5 0A5F0A25E8B733B2 73A501DC248B2D3D F13DC9F28D5E79BF 94C76C9251196C1B 6B098F8ECA3863A1 1F17D0CFFCDFF350 4C220E2468750E35 EF3EE4EADDFE6774 D844A081562DAF79 BC352B78C725A6CD 657B57AA644D9B00 043203F76E524F97 3A16720209B0844D 0D8F7B5AC7068F32 2076465AF82930AF 2D1F548BE6FCB338 C2E91C890C7EEBD9 E2965D6E93685985 937A9DE5FBD4963C BC18893ED042CC5E 3E96429430169B1D 43FE479C8CC76CD8 1BC5404484F5B666 7CD229C5077318EA 2C32323A0522A0B7 2B9FCC29CD39BCF3 EEBC754A75A164FF 880D356FFEFFF4CF 8A86F5EBB2F9648B 1213078D22818F53 1ED0326DD822113B 909678542CCDBEFE 2A4D2B463869520B 3AADF15A69C35252 AC3B38C820A17F1E 8A17348D174DBE12 7928C6FAE70BB40A 25D5E74B60753073 CDD713E9194CD32E 913E07CADA762FD2 9E674E060C94EDEB 8F74E121CFE68D03 C124592034B6B40C B3FC1F8C03CFCA06 A6661826D39A28E6 F062AE6F82898493 C6FEEA80818A48CC AC7FEFB0F6A2EF3D 8222CAF0C0662297 F4A95DF9DA5E2BE0 6E18B559507EB684 EAF0887E6DE56810 5C40D0376F60A0CE BE48057547B054A1 AFCD2E856FA428BF AE60B55CBBFD8936 AC13A2FDC0D48061 94C125F3B90782CD B53A415D7D3B1F7F C6EAC3D21048A8BE 967C2AB239397E14 8231D93C111B6A72 F71A7FAA2B41A932 4103E3D3194BA277 C4C76FB85A6500BE 42323CDF3345F1F8 36A3F6E2D7C09B12 E1186DBCF4E89FC1 83474B02C3B0F08F CFA1DF7F24A518C9 AB5FDE016D96B30F E31A33D9F4EF0A7A 5C7580A01AAC1EB6 F483A73BDEAD2798 AF7AA23C6D0B1467 2160D465BFA4D3AA 33BE576D50B54B05 AAA7C9CA6B2490B0 9DD697278D261C13 199FACAE415652A4 5E201BAFC1FD8E6B 4DA3004FE1C0E572 4A669E6902603224 A537E64D8FF6545C 091718161375DAE7 B2D90589441C5369 C2EE409842AB1DBF BB3C1828BF3EA947 90BAEAB7CA41E208 251781820D11E0F6 8A6BAB4FE136C4FD 383A5BE8D682E978 A0DF26CF4B91B477 F5A34FF42783845E 034E4CFA45863757 D5CC452A8FD618D6 31EDF2B2BA2C9641 57941986CCA37586 37B0FA7EE88B7E71 B5AD3C9EEE797BE2 468E389E27D6DECF A9658BA9B9105F21 B6A200EEEC56102E 3CBEE68525D3A589 C13FE3CB4AE395FB 09D29E4A4945CC5A EC08FD784A746880 8BA44645B83480D0 95E1C07FBE74213C 45D245AB5FF59DAE 7C4B442B4C9B65D7 049FCB809B41BD5D C1628D0F239F5AB7 7332EB5DA51E36BF 156D3C5DB51F0D5B 209CC34E354AEE8F ED701B32E8EC064F 71E2188E518F4990 777BE85464323F87 4BE0FB4E58B96C7C 78B57D87AB112F82 27CE622B3BA252F5 5A85B9B2ADB4167A 1FA4C57582CC20B8 CE872DBA654279E3 9CD85C2FB3F22DBE EB14031DB96E4ECA E5B02E5AF4B488F9 181B221E42FD79E1 A0A2E8F50F77591F E47BF9F0819A1A20 C54AFD0479067C00 138A80D074173CAE 02AAB232672F575E 7ACDF38B7C67B79F 6C1A46B2F26FD46D FCF52D65C14F80A3 37A35F65D08A0474 C949D72A83BA1605 A17CDE127F14C0BB 6D8FED8F86B6955E 9FB7BC2588EA9CF9 A30330B983623FE8 C4B6D53F6109B45B 7DD8CFC592B0C99F 55D45F7809AC6593 802D013C506DEC89 5857676F83A42CA4 4FA81149158180DD DA7447CE88C3DEF8 36E83E1F28FB8E5D 100A9A9F11C92CAB 67A2CB1AF84C1826 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 a6670d5d-8484-1d09-94c1-0c7fd5ccfc00 2 066020a3-8bb5-6b85-89ff-9b3d48b0fb2d 3 380352f9-60c0-6dc3-b529-63fb991c8fee 4 ad95888d-1f8d-30ab-b9bc-a955132e2bf3 5 f7a8f49d-0607-70e5-94a6-aa3fc880daa4 6 837c21a7-bbb4-7d57-a273-1fd2fc9f05d9 7 02cdda43-e933-131c-9de1-e26584698644 8 34c32856-aa9d-51ed-88dd-aefc3ca12071 9 1c18ed41-70d1-06f7-9c2f-3296339bed1d 10 eb0d53be-9e18-8cb8-b9bd-cd4829094604 11 49f3e703-63cd-131d-8942-4ec747beed1c 12 1a0ab6cf-1cc5-5eb9-8b03-f5e5795cd71c 13 018cc3e5-0704-509a-9732-5bda76aca302 14 9f5c901a-d42f-35e0-91f1-99484579ec4d 15 9371c3a5-1b19-5a44-a952-2d18dc56b030 16 d2cdc702-11a5-614c-9106-a3fa81d3a754 17 5ae360e8-59d3-0378-98e7-0a7405684fb6 18 d72679ef-d605-4fce-a342-3002d32b7197 19 5167e56b-9149-215b-941f-51fdc4a9e0ed 20 d37006df-d0f4-6830-afc7-89f69a98e4c1 21 adfe7312-a421-2f4b-9e29-293d0b57ce30 22 1a97ec77-8807-5cb2-8055-6a8489354e6a 23 5179fa3b-0bc8-246a-8f28-ab8b316751d5 24 f47597d5-0b72-3017-85ca-19e0d440806c 25 6f7af47e-c8eb-127f-b533-9d233df6d902 26 23a3e9d7-b20f-05c8-8a8c-124b9e4ae8e7 27 701d177b-fa7f-481e-8976-54de5c356eca 28 7f1592e3-3bf3-8b64-b405-6598e24f9358 29 1d4f771b-fad2-5e8a-8755-2dc3b555128a 30 8ed5313a-1c64-1442-973d-ca71b0a02d6f 31 158bf2cb-c196-1c3a-9092-da17c2e6c631 32 d504836d-013a-6bdf-872b-b5a2019412ea 33 26063342-b862-885d-89ef-014e2f2e0915 34 831aeff7-5bba-2c9b-b9d2-0a73d86db2f1 35 3345403c-5f2a-7895-92f4-ce3b30bf842c 36 a88ddfcd-b51c-5d74-b2c6-4ac1d9ad82d4 37 b969747e-792b-8803-aaa2-fd6dec25a0fc 38 4ef92fe2-6574-2cd5-9745-69a02f37dae3 39 63952fc8-354e-1568-ad74-ed244bc57c45 40 1feb0612-c29c-52a3-b5d9-da9af66ac20b 41 5096aab5-8567-63f6-a341-cccdd382d70b 42 3097209f-f2e3-7bff-acfc-9b1271f3f2d9 43 4c7d95bc-f89f-6d5d-9e94-023281b157dc 44 00708ac4-f64a-17f3-a933-72c04ccc9c37 45 3f55cdc4-cdb1-5c4f-a9f9-df80eb9c3c54 46 440adf01-3db3-6722-a995-7f72889b5a85 47 60ad25c5-ef58-35c7-94c2-846ca763f327 48 654ca02e-bf38-285a-a77b-1ce1c8360b6a
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
166377150815535604262523104851168275821567615632. Exactly this sequence comes out ofnew Random(688).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 15 of Run 18 (seed 6,051,781):
new Random(6051781), Next(8,64) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:15–19:16). - Conclusion. Filler. The content is fully explained by the two RNGs.