201207271431 x9oak
explained decrypted filler
3DES(name+name) ECB, 55 GUIDs, seed 828
From the post to its content
As posted (encrypted)
435F33C5111128F4 0BD02BCA709474DE 4DC9E4C12E325411 DDE10B80975409E7 62665E13611674EB BAAA014E6D96293B A683DD8244207B9E 9A42EB3BC22C478C 7618AFAD6FD8BDB7 011624C1FD91E0BB 43189416CE8FC9FF 55533E55A07EB7B1 277C8AD490E79391 9378AA2803BBE5A9 35B539920C1A7F7A EEED7D8D4D652B57 A0A7D6DCDAEA830C CE3A5746B771E980 083D9CA4D4D40DFB 9EA8D3A98F2E1EAD 33E9A547973A3A08 68DDDF11D3165E6D 2B745636B8A3A4A9 432A0A7CAEBE4245 04DDD01812CB7A9E D5CED701368DD0F2 461222D7D56CBC6C C43F4956978870B8 2E3362FEBD78B4EC 6567D2FD495D4230 F540EF5489DF96BD 5D9A083E52C05E25 91E40ADA50545FE4 2290E370F78C6641 49BBF4508AEA6CC5 CA14DAE2ABF875C6 61E7D8051190F2E8 95135964A6AAD64B BB7C864BC22F1892 35EBFEE602AEA1CE 2188C4FBA68443CC 57E6B4ACA9A89AE1 393E81F77FDDE50A DB716DFCD65623A4 A4C04792F916E840 B42EA6C0590188D1 B798B4B94A350DEE D9EC248232F385AD F1E14BE260AB6483 A0616556A70614C5 1D19EBAC76C3B449 4E804E336CCBC42A 9385A065E2F9DC55 84E0EFD0E61BDEE1 2C1CEB1A21AE71AA 5696FB365A13A195 D19DF28B8128B395 63579C760EAB9B79 BD229403497177E0 8BB40FEEE2611EF2 15E14EF41C5FBE76 CBB31BE81F7BD91A A49B9AD8FA32BF8D 9BBAD1F1BE3F6423 C073C429008A0AFD FF93E84F5540616B 31F0E60B75FC0723 09D5AD3A99F99A75 666CB63544577C62 FFF8DF6793A72E0C 9F741EA3BAFAA972 F7EF2058BC6B3C91 30C3B5B0A2BEEF72 88361602D4947A1C A0EF282A6BF4EF2D D564CF08C05667B3 0B9B1280E24FE047 E99112A731E492CA DB6D90B6A6D85C5E 888202F90C34B9E0 9ECAD148577FC8DC ED4371B418C02F11 5FB153B995269A43 CB5B5B7B897DD795 1CBDAB0A8F599F40 3A81BE699AB90061 76D583AD60B5D9A2 35955ACE7FDF5458 7AD10F2B6AE2D862 8265B3ED60C14E36 3C5B83F791EF8878 F76661D0AA2CFA0E AFBBDC3084D34CDE 3A393D70FE31EA7D AC2925AE9066D8C2 23F7B73221698460 08F1C8D7E4D81F0C 62A7031CF2399DC8 ECCD06C99D5CB67F 30734843573EFDBB D721F075970AC413 DA70D50982891166 6AE206126FDDFB63 CCD31EE73883EC88 011E390F9A721FB3 CE257BE19330D00B A3D4311E7A967957 537BE00CB35E79C6 C79090D7B2730678 17E791F46D9142B8 1AB4DA1D7A9B0992 D49363D65DE15906 EF389C44C6D8FF7B C967F93C11950EE9 60B3225D918DE66C F7FA0C7BBB11A3CE 432360E1B23305CA 2D658C5A839CADB0 433ED752788CB193 61A0615780D190C2 D923262AC3305BCE 3E07A6047CD2C2F9 172FED31A1F7CF57 22D2B3A03B5AEAD1 13303CA2BEAB6A91 0C0CF29216FC837E D964AE665F9EE19A 46E74617D962C538 A7178FF17A1E2C45 915A80C59EEF6F84 8FD6A1393D00D0CC E7D7E3F3DAEAB206 A304278329D18B7F 34522A4A6AE8C114 15E9712014FA50F0 7AE67B023AA8C97C 8F676DD2270237A2 45EE41C647295D1E AC74E329A2A0B633 B819B140EE81B49B 9B953D8757A12370 0CF9643320A80F34 F32AB88814FA7565 6E03C1136AD07ACF F87C4990729383FF 1A5C51E81F5C958F D3564C932904D751 8B74310B03EA9FEA 900CDE2E5EB7FD3E BC4598E825D49D34 68EDD0BAC7A9AA83 D60E67E726E1E774 6F89CD9B66AD426F 650C49A3B2A11E36 EDAD01140CB766A1 C5984889F6B81750 E5A27BC3AE1CC1BC BAE9E2A242E49957 E0C6EB4DA1B01725 14E8B3F8DBFB66ED 6377D769FDA31268 486BEEC2DB73C976 A00691841A936DEF 3A025E5F581D9A5F E745D2D2F7638B94 825A159ABE80EC70 8DF4364951FC47EF 2361755E349D5624 B755BB2035129853 B8623D81D8E3B4F3 87C02B694525E6F8 C35BFC908C937C2A 24154DA50DBC66CC C5B9BF08A1E56FF0 CF050FA834C8F68C B83912D54EB6CBD6 0C547DD59FEACFBD 05797EF75D1DB6D0 2C84BC8F61471862 7C28245C3193D99F EB6BDA88CAB9A29E 8FB00AC8228F580F 382CE96EB455B99D A67A8D0E7286708C C9510C7AC2DF78FF A3517ABD531F7A8F 208A3A99A9827075 503C33083AC03E5F C5759E5C062FCA54 480249747025D387 1518A04C765E1CD4 B4B869DF9FACC4D7 FC1BDFC0E8710D08 54E688B7C506B3DA 1F6D1CAF74B7807D 5A94A2B5D8A4CB5A 9C66964FEE771E02 C610C78E5964FC90 49625D465E5BE465 CC6DD21B9795D3BA 0CCB1B2F7AE4481E D901ADE28F4274FF EBA6071E230D297A 76CF00FA649A63C4 408953587DAAC660 5752360F25CC6C12 37E00B5D29389EAE A5D0BA939DA85DA4 248F121BFCD8C2D6 323272BD673925DD F105974BAF8932A5 7E1900D9DA5C83CB CE0D6C6C0A30C4B6 4E5983B201A1E338 372167549F6A9A0E 840B5411CCE64E6F 027EB5A2BAFA0D79 A9850611258CBF65 87AFBE57077BF1A5 05F2A6E1EA136B5E 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 3,536 hex characters = 1,768 bytes = 221 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 55 GUIDs as hex (shown below).
Decrypted: GUID list
1 e8548da4-6013-20c3-943e-35f0fdd66f6f 2 ab15298c-cb1a-6dfc-ad59-f6c9f3b7c574 3 476cd9c1-61a8-4a38-a713-095de6ca587a 4 1a2439c1-3d8b-23e3-a82d-ed6c558f4f9c 5 2c65d3fa-20f5-03fe-9ab9-e8f9e3a3af22 6 fc2e71ef-2a43-1475-92d3-be3efa1a3fe9 7 fd9a12a2-20ba-8ff1-9e6b-eaf208bdf94c 8 d970429a-9fc3-7dc1-8430-90f3ec55102a 9 754f1175-305e-3865-98ef-236b31c7f50f 10 ca750497-9bf2-52ba-be3f-84602cb87af6 11 06a4c80c-c480-24ea-85b3-d19af8dd6f0b 12 0304e65a-af59-83a7-bb63-e6a1c8a0ab38 13 d0e7c7fe-d792-7448-8d24-76b6c8c3a901 14 4be2ad0a-6ae7-2936-913a-e439f29e5b8f 15 397999f6-c35d-5146-a4fb-0620d0066bb9 16 263122bd-7ac0-1295-8854-5010f2ea809f 17 efe640d5-1af4-8263-89cc-7d2db2e26e33 18 b3e1ad39-38de-362c-8dd3-647f5d8d5593 19 b0d361e9-589f-014e-b450-469d8cc2420d 20 fb1e2a3f-8efe-8d9e-b1cf-54b9f5e729ff 21 41324411-95c3-7f55-9848-fa0c92b287a8 22 7ed4540c-9fb7-878e-b213-f6d229f00303 23 349e5fd0-9b67-81c5-b009-73bf6168fa5b 24 a25867ff-9b5c-28f7-940d-ce4006c4d80d 25 cb50f417-d0d1-7af4-a339-7edc154466f8 26 b1b0fe73-d79d-0328-8ce9-05b02cdfcfa6 27 183e9a68-165f-743d-a421-007596a9235c 28 bdb0e26f-57eb-63a5-acef-a1c4d12d009d 29 2f3278e3-a404-2790-8b07-7698215fea25 30 51f42622-16aa-89e8-a6cd-528b2c3c9b0a 31 27d52038-787e-742a-9c54-ae5f8b8d55ff 32 e701f826-d513-4da1-99b4-ed3ead65f89b 33 205634dd-52db-26f6-be6e-35ef3057c46e 34 9ffa83c7-e32e-6340-9a55-e826f3f1b74a 35 d324d176-d06e-6331-9a04-98c16c0c1024 36 a66b37b3-b04c-54ad-beff-3c99ad2b1743 37 4f4b12c1-1c4c-8a36-8589-030c2dce05b3 38 4702c8ba-13e7-5362-ad55-40b19a01a48c 39 fb9cbd30-e8bf-19c6-8282-309bab7edd09 40 60a21a72-f216-09dd-8c6e-8f668afc3cb9 41 2319e62a-9e8b-119c-a470-557b54a07163 42 db2dd422-a5d7-684a-a49e-2c8e4ded9e50 43 8126e520-e121-7f1a-bdb5-356b46f77230 44 acdc65a8-3ee0-81bf-b59b-ca092f17b8c0 45 c6201733-5b48-45a9-90bf-8af098fb2982 46 23c66cc3-55a5-8b93-b539-88954729c3ce 47 167bf150-e193-0794-9c8c-990dc76c6f56 48 0459d741-3f85-36c5-a82c-bb31276655e0 49 c27c2033-da2c-09d8-84fa-c927741fc1d5 50 659f744a-3333-5d16-8c93-79f096dbc4a9 51 743f28e9-6c25-5d18-8a77-673bcc47e6e9 52 03a2efd1-1ff3-8b7c-8acc-f26b11bc13a0 53 d6202bab-8c0a-3db1-918e-c56644a4b01a 54 13b78ac1-9bbb-100d-ac85-f4135c50e367 55 7279391e-3c8d-8375-aaa6-b5cac587abf8
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
2642018735287251830878827076287426658510167848030558318. Exactly this sequence comes out ofnew Random(828).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 31 of Run 18 (seed 6,051,781):
new Random(6051781), Next(8,64) per post. The RNG predicts N = 55; the post has N = 55 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:15–19:16). - Conclusion. Filler. The content is fully explained by the two RNGs.