201207271441 x9owa
explained decrypted filler
3DES(name+name) ECB, 49 GUIDs, seed 234
From the post to its content
As posted (encrypted)
04443FFD9C6BAEF1 8B52AE226B6D435C 6AB1462DE63CF07C 68BB385B8194E023 FE34ADAF457EDBCB 12EBB87D04666A7B C963524C90B953A9 4CEA36D555ADE0CB C5135920A663EEAC B631166824D7C960 8E31E31ED576D82B 15ED903B755C6F8C 96B374396F37B771 5A4D1766125948BB 63DA63406B152F82 2E28F82D4A61F0FD 681DD638365D2877 19E17BF9E276B0DE C73E7825BBC6E80B 75A45CEA5AD239D2 1A08CCE561275413 177D4F8007571E7E 229C4DE731EF5F61 D1849859C17DC325 C30DEBAA4502BF1B BCA60AFD35EC69A0 9A53D3554D6F39CD 82B53A5D5FAAED3F 17C5D970262E933D B9A2C7412AB72C1D 11AA16B8A112B6A5 7B5E48AF1B914040 4FAA0599E22BAFB8 44C80F234305EE74 32F51D557E6D3112 562A9B7429E17680 25EF825C9D470624 935E94F7EF844991 8C7B898F32DB3184 0F0E792FB935F0ED 643085C8CAB883AC 1BAD7E85BBFFDCC9 65CB1CED4A6140F2 67A9804E91F6A6E7 9F6AB0464556E4D1 10713AB1AF0CB050 41D60292B638EF10 EFF9CBF7219944FE 2E7ABB8F09C440E5 0B102631ED216FA4 1BC640FD1C7286C5 DEAC29A74EF60E25 C6EBA0B37BE3041F AF421A2F70D9BB6A F86F17043E7410C8 225CF550141BB8A8 37F8DD4E82C44F29 4B9AE201F611A490 610F6C7FF2128758 6DA29705A7B500E0 1FF73E68F0868888 36530B7CC8C3E685 E6C6F4D2ABF3C945 9E9E699A78EBC70F 92EC7D1C80DF5D91 984429839683316D 036B40136B0B1944 6B052F623449047D 5C92455F852B9509 3471236D0E6C7003 B4683270C32B2E92 7C98FE021D781541 B1471A6046FF2290 A4BFD25C274E2327 D673A78A3C4706D5 97A9694B4E094CD2 5CC6BC6B797FB472 C1F2B2CCCAE69A7E 912040C254826F3F 744E9FB7E23AE119 8E59B635A7510721 AC63CCA6BD126F5A 3C2B2B0C4CDF07D7 192826C536214656 60E63320C268593A 060B7EA25CE78CE8 498C07D1D71A94C9 8218ACECEB9F8DA6 6AE68F84C74516F1 31100791FFD2C541 A4DAC0CE34CCAE6F 71C44D18AED2546F 3A5F70FD9B71EF1E CE463D40AC31895C 5F4CF27AE881D616 EA9E7901149B22EF BDDFCF525D993DA0 77F9DD786C72D60B F763CCFA1BAD7101 C3F29DCF1C4B7F0F DDF6056BCAF90575 9377CA19AAB00BA3 AD6AE8FAB8D2550E B044DCDF2DC803F5 2457F0BDAD355CB5 11C882B652F331D4 E77B03D3CD1501B2 0F176236D17BACD6 095A5ACE752F65FB 365DF2A3598D43B1 182C40D1BD45166D 3FA0D075F8CB3E27 24DB5EA3E05451F8 00D77EC32FBBD02F 078B1D3095F8B85D 75ABD8C0E41C050F 7E18FF856A84F1FF 3870B8CE82569463 A1C75BE8D9C47533 0FAA45B1B47DBA87 F154F0F68B3E31A7 A1F53601D51EDDB2 6A164B551261DC08 4F6828905A5A194A 0D35A0929C72A46D 9616ACCA9C977E68 8C96B4004301D1CA AE7921E79F88991C D1711FB2CB1603C6 0501177028EC8EFA 9BCF132A5E2DF4A6 75E2093549CE40D2 2273E98B45A5AE01 C3D875B99853CB25 B0FAC4FF42ADEDED 5C2617ED92B95ED1 C2979D1C6E9E0089 0E9A86BC0DF436AF EDFEEB0D896122FE 9534C587CFD3C297 815A6E38AC64C10F 497417AA7668B725 D0385734B0461CE9 C4B7210F68E6645B 4A1F016C3D10F1C5 A7A06043D7A8C533 031D2A4502AC354A 69BAF1D122495A13 3F0352C173E14CED 3643A338CB56697B 8ACF891D68A0E973 2EE4D0627D06DDEB 47605A3DA36BE3D8 79469A18D7C8F7EA EA18A4A1FF2FB319 6EF6940A662A03E3 78F1505B9BCBAC4E 6B4596366A0D20E7 E884F6D75A2766EC F83914048A9551F4 EE7F04BC7E3C7B0C 26418E79BFC84A50 82945CA2EE43FB22 F5B9E0CDF16F4831 AD65EAAA736A9ACD 80A033FCE74AD70C 5C0F212F9362E2EE 6C31DCBBB05FE957 2052B255D26E673A BB5953EB28A74591 559DC366CC4BFEF8 77D8F20BFDAF4B8C E46EAB97B9C84EF2 52A42E64350BBB1F 794CB116D6F5195F 10993D4E705A3A50 1C680167123A26EA 04A96C9235C729B2 C8508705BE23C685 E0D92862D3AF8ED2 7C5F7D74039074AD 36F67335439B6EBF D63091143A0D1969 70FF9BB2D1263CEA E5706989670D44DA 9D965477F70BF332 E0F30D38ABC77EA6 FB25705DAC31A58A 5476EB9EBFAAD97C 93898AAB0E8DF42D 3CB95DDE3A5D0541 90178A53561EB08B 1341190D2BC874B2 B93DE9865F9A3175 CB35ABB84695CBAA B326C9F28180ED1B 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 3,152 hex characters = 1,576 bytes = 197 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 49 GUIDs as hex (shown below).
Decrypted: GUID list
1 325f5f9f-0554-8279-9e2a-3a9bb2e78c91 2 5af4e302-b3b1-4a85-a74d-3e358707c956 3 2b9795fe-30fc-2357-a059-a91160dd8db1 4 d633710e-e18b-4e40-9c77-2b71746e6cca 5 8e903d94-7cf7-7547-9360-a96cfae69b5d 6 e0dfcb7a-7778-0a24-a458-9627bb754fd7 7 e1bacd2f-b6a2-620c-9c8f-8da2c2363a9d 8 aaaf374f-66d0-7dfa-9ea2-8e84e651444f 9 52ee4db7-d85d-8a7d-ad7c-6f639b6fa2fc 10 228e2539-aa3a-5909-a535-6724bca2ca34 11 ad9646b7-7607-66c4-b062-f39b79116aae 12 8a84ab4f-ba74-1ea6-9046-984483fd8cd2 13 4f1b6d18-7479-44f4-8d00-b413520570da 14 ae4deeda-6c21-1d52-9be0-07edb191193e 15 94d3b6b8-ce7c-67dd-951e-08edb74bdb7b 16 b76eb056-4351-1928-9e1f-fe0ad0c2f18d 17 794b3d75-1023-2a8f-baac-8585d50b6e9d 18 f94da575-3acf-0b7c-969e-5a5274b74f8b 19 c49e449d-6c05-064d-a5c7-008b6cea2b21 20 2797ee6c-5a81-8e0d-8eec-76e62daf8536 21 3f070a6e-64cc-844b-966b-c5544d69d9ce 22 ad9c147d-0ee7-22b8-979b-949c05d33a24 23 f6608e96-c82c-4499-9aa3-ced7abc56b60 24 28ab4ee2-1ef8-7b80-8792-bdfda9cdcccc 25 103a7d1f-a0a5-5fee-bb6e-ec5dcb6d6358 26 eb8c16a4-3c59-0d1b-867a-0671bc21e420 27 c222c895-62e5-1cca-b18d-9b159090a85b 28 22df98b9-6dff-6ae3-9a69-7c9fa9d646bb 29 c40bd9ec-0376-1caf-9447-eb1bbc0ed202 30 888e1700-5888-4cff-ad78-7b2830d83567 31 6124644f-55f0-56da-be4a-51486ae0c107 32 a145c9cc-660b-0f64-8167-c9fece1a410f 33 63839029-4df2-3a72-8451-797c909e079b 34 197c61df-be35-7040-b927-1e6c2bf4c545 35 3bf77f7c-470c-3b55-a304-45e632b62f65 36 3cb2dfbf-e364-847f-adda-d4914320afd8 37 59d4babf-5116-7b23-8846-a676fd903b43 38 5f16bf5f-a323-7230-b51f-97c66279df74 39 db7b3017-bf7b-3132-9909-a3506bf7f350 40 c5f44e09-301a-7c75-b117-2b6e9355baae 41 3910754e-4e12-15a1-b59a-6245b546a966 42 bb128eef-7687-644d-b526-3f3fe727462e 43 194192d3-ba05-0853-86b5-a49909c03f6e 44 29e5f769-4d28-675c-95c8-01a6541eca9e 45 76266b12-a7e7-23c0-83ed-b801384db193 46 2abd8172-274c-7b8e-8349-2290bd413056 47 94f1607d-0ffc-824e-ae26-360fcb137145 48 24f43f89-d931-17cc-be1c-f39bcf6815d5 49 bf395c6b-51e7-0a77-9dfa-9da117f2ca97
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
8424706785614161200882475016145037387737160627810. Exactly this sequence comes out ofnew Random(234).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 41 of Run 18 (seed 6,051,781):
new Random(6051781), Next(8,64) per post. The RNG predicts N = 49; the post has N = 49 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:15–19:16). - Conclusion. Filler. The content is fully explained by the two RNGs.