201207310604 xetbw
explained decrypted filler
3DES(name+name) ECB, 57 GUIDs, seed 599
From the post to its content
As posted (encrypted)
BF03D0C12CB82D05 954AE3CA83E710CA CD03A6F2EC60AD6D E0C9E2B825914655 25B25E341319B2BD 9B6BCECBC336A6A2 206BE9B430D9634C 90C00DF87D0C808A 2D06CCD7A062E699 7B58A5814033C13B 443DA1936CD7AD01 4FE4CA65030CAEAD 51D70471434B2E46 77F78B1A9BE36B64 B9D9CB28CE20AA77 E9731657887ECA03 3472F2E424B5F498 DCCE831FABA23F8C 13A5FC4868CD43FA 2ECC4561C202F634 AC36B5421628D765 F99EDE3DB6A6A4C0 8EDC3D47C330C056 AD2023EDD91021CF D2759C46A98A2FEC 3D8B93CE941F97FC 6FAACF001B637E2A 23B277CD836CB2C1 D22C6583412E0D6E 135B889BA8F0154B 4631DB2DB0098D3B 44A3DECAEF1FD9C4 4AB4FDD70A6B4B4B E5A1FFC7C6390D85 2E613BDC2C436943 98FC169CF77919AF 421FA2267B67D0C1 B8EADC59C678B334 08C50FAE7945EDDE 02011D57CEF63FB1 26397789478C2B3F 0A5E89EE93110FEE 44ADF730E39C2C43 D5F1715CC229A7CE 82C6BAFC02C14D82 09B058B36630C991 9B8A62F30F4586CC CE7CC168567B17B3 9E907D41F71DEBC5 51358B3F0EA93744 C1D347AED8B34EEF 831B305A7A01B777 16588EF8F64DFE6F E554E6299F2FD637 48511F2669E71FF4 61DE8296B3F9EEB6 C00183E1F465B1F8 8E25CA722237FED5 55A18BF355A98613 5F893208A68C36CD C130854DCB55E24A 30388FFFABFB64FD 9221EC7746D3BF0E BC26B474A0814DE7 40F3CE01A1166962 83E61124169764F9 CE66A10AA4AD5933 48170A418E3F0B91 D054A49D9C80130E 50D3DFFB461A8A08 D89E20F3759A291A 07CF7F019B24A7FE AA724476D80D0709 FA9883C0C940E271 33F16409D8CB851D 13CD05B921425B50 E2B6EB346FEA0247 F96EF96A40BEBE4D 14C1B4A04B6ED7C6 CF983362F545F3BB 231E4479B5D67D7F A3853D3C784F7E84 4F7DF05145C94678 1EE8F65F12F33097 3740F70BE39C9EF8 933B0C886395D69A A4B1FFCA7D57D157 490C905C2B59F504 2431F1E0D1F815D3 23F5E4BAFF700358 87D38272A1A38B1F DF876AF6363926B5 557685F32748B29A 01EE725F0224B0CA 90C9228654D91BBA A69524897F42BE50 0F811324AA156A3F B38596BB61E93275 89F8713894126AF1 9E106BBCD6264D33 E8BEB5B0E3E37839 72E04FB60559ED5C FFA60206A4982636 438DFA515B215308 43A0191354EF523D 39B4A676D8EB5D8C E02E38A8E88BC3F4 07249D8B64948CEE 84FFEF1F16959543 7A3E5EA5A850B84A 0F781E8CACFA75B6 D7BE508B973394DA 4C09F6B310505C8B FED985023CAAF4DB C64F4590A5937679 BE458A43B676627E 8B95732AE42A3DC6 2006220D83AF5709 007BFFE5DF774173 DEAE53EC03071B7E 2D0BDE37E86AAF93 6A809589A5E548F8 2126AF45354AF095 780EE6B8A216D0D6 BCBDDFE8E2F45B6F 428197724A39C67C 9B692CDC72CC76D1 0156C2FEEDD28352 0E13C9C8FE63B41C 40C72BC494AD32F2 E6D59D377FAFBB35 38307C4C13394F7A 4FE1CBEC1E70FE38 5CE49A71BDEF3664 8152FCBC27A01AF0 BAA320A8F16D4BC6 F82011BA3EB2501B 548A03560191C391 D654EF95B42AC8FA 6E2C895F634409C0 C1FD29BE8170ACE1 C13738504C4661CC 779906BA685ED54C 90CB564E0AF995FC EB5134F411EF32EE 6ADA35D2EBB0AB08 C24AF3040795D3DB 7A45F6663F49143B C7A4BD171487210C 58D80EFFECC1E991 367ABE883FB77F77 A6ABD3929198287B E17F911095D6A613 8392722F5E16A5C8 D83DCC955E73D1FE C9939B1E117AB18C BE23A6DE6556271C B40D168B6D5C4842 8DC7416FA2B98DD4 F117BD10D0F79958 E097F49101FA1D35 DF3BD119CB09B027 1C664F284E822FB4 24512DB005380E51 63FB1E4AFDA3727C 15F6AE802B7D4E0F 4D1B70E3611EAA3B 6E8A41B125994763 A55189CEAA14F39B 9DC5B7860545B326 B798DCD32CFAEF48 9F1C546376603F70 EF5DDF3F6B7DA46E AB581CB3C7E58582 A6A8032BE480A719 539E31ED12C394BB 5B058B064DDEBA94 B76D83339134CF16 BD9BF6FE3D7AAB22 8CE79357919C3F6E 3E7C63ABA013BC2F 66C761DA0BBB4021 BF0032F3AA8A683E 84203B4910003720 53FFCD3E286E831A 9D526D84646148B6 FA989B5F557C953F AA1FC22B4F05E7F9 7C6DB87FEFE19ADD AABA4B49F359B8DF CEB488F295B1251C 61E40132EB404246 D8050602012964D6 9EDF1E9F1E81CD22 33DEFF64B28E950C 2750206EBCD4B607 572343F89868E48E 1594307F8CB4C00D CE4BBE0D53C29791 565BC82D096C5477 378B282FE9234E4F CBB283A6FA74DA3F EDB05A9E1310989D 9C2932B72FA611AD 0107FA8D1828066B E266A77D91A3C618 79F1B49837D5BF0F 66A83C9551A96371 543F9CB8A1486ECF EB148585B1D87759 308BBA1D80C20ED5 B1ED2D958FE45823 30B516C834E13468 76D85B565A95BC86 41DA3ADE984551C8 D8EF792547EBA0ED D198FEE8237D6C0C 9EAE1AF2C9DA60E2 C0D2E463DE2CA171 340F676C2366AA5F CF1D780C99768795 66E6CC39CEE513BC 2D21E07CB293FD20 82E63D578A846F43 B2705B05BCFE3ECC 35D3C9C7C344DF1A AD0ADD2E53EE66A4 4A272A8FF801C459 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 3,664 hex characters = 1,832 bytes = 229 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 57 GUIDs as hex (shown below).
Decrypted: GUID list
1 a7e0e7df-a98d-5623-b7d7-27988a15bab5 2 fee9df7a-2e96-5946-a940-9cec58db5edc 3 2c43e8ba-b36e-402a-aec2-c0e50a8fdfd7 4 7945b4ae-d6c4-3b3a-bee1-90de5fadaa3c 5 d09fe5c9-0d2c-5b00-a8a5-5b0fd0a89aab 6 f2f45a33-d51a-0eaf-a23c-c873da701405 7 5a444c59-411e-28d8-b4f8-6e837f598afe 8 643cca71-3094-8541-ab0b-35b6b4d76f06 9 dd887bed-4ed0-07e8-bb67-ba0ae86498fd 10 f76b7934-6901-10a4-a228-0be8c96da6b6 11 1979470e-bcd0-5d42-b440-066f70bf7de5 12 f71a9e4c-f66d-13de-b7b1-d51fe1554c50 13 085fcaef-19ce-3c0a-bf41-bbe46883321b 14 8db1e718-64c9-0e6b-96cc-b7e805949f72 15 95748f9e-8da2-2e56-a0b7-b62c2557be17 16 e1097ae5-397f-1ed2-bb2f-cd5bdf21430b 17 f4df663f-f359-53a3-9078-a34934845683 18 b3f40883-cd5c-3076-9f94-c458e7422524 19 903da143-9bad-8451-ae37-09215e7ca274 20 51cda757-a0b9-27f8-9c35-14dc3c71b45d 21 ea2929ee-012a-34b6-ba19-e18efed6eebd 22 e156357e-d75e-7110-94e0-5c470fbbfced 23 da68abf9-75d8-2a60-a8c4-5b3192484b4f 24 df7b1424-7c1b-20e5-93ee-5acc9598f95d 25 8f3dc8b7-f844-34f8-af47-8c5ae41cfa70 26 01b94295-d2df-7f01-9a0c-f37a451f39b8 27 609b687a-5fc2-8e4b-8871-6cce1195979d 28 087791a4-7891-7d38-863c-876ddbba4de4 29 366c1487-ef30-8729-bb68-5b5b01d78379 30 ae801ae5-c545-45f4-86b3-393d426f9c7f 31 44802882-9f74-2051-8741-98aba0e19ce6 32 31cf2eb5-83e8-2b99-8f6c-7dd3c3ddc58b 33 bcb5a53b-1326-16f8-aa40-4088ee7cfacc 34 dfa1d767-7ec7-0f50-8a39-35abe0d8431c 35 7662bdea-c830-7a79-bc2d-15010d80ad4e 36 db2c6a4d-0340-694c-957d-d18efd7c855c 37 257c2946-fa25-17ac-85bb-72ddb7a26083 38 e7842b56-89da-5531-8fe9-3221ab6282c8 39 2e12730b-525a-8fb5-ac89-321788953196 40 e8d77c05-8376-04f2-b7ab-c06d1a12ca33 41 7bce12b2-ab16-3512-8ee3-5943cd328a14 42 010ebd8f-3a19-172c-8452-9ad67e5b828d 43 6fca5911-0d0b-7051-9240-f11cb2aa82b5 44 a268080d-bd47-0ded-a4ac-29faa87a3928 45 7a9f9608-8ee5-6fd3-9d35-3b30d44dd1aa 46 952610fe-21e2-290f-a47f-3d9cc62cb843 47 938b8e8e-1835-1457-b2b5-d642a520134d 48 415cf4f4-45a8-7947-99b2-12b35e921e8b 49 9700ca32-9f56-56a8-b5c8-3d1307e8ab99 50 0bfa7b56-edeb-3bad-9775-4de1ad8cc942 51 0a91f4e2-8877-05fb-812b-9d4c8268e84c 52 a43b339d-36d8-6071-9ae6-66db8979d654 53 67b3553a-5057-8993-ac1c-e48745918c3f 54 281a6bdc-5257-40aa-9c61-4ac4edc68d04 55 1ee8862b-e9ba-1ba7-91c2-82fda3469e2f 56 21c2a0f1-e527-7016-a94d-2c8e10d6f4c9 57 4de8b9cc-df90-3f87-af8f-8a16d97cd606
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
554350280151302153823722378784221076158031706217530684173. Exactly this sequence comes out ofnew Random(599).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 1 of Run 19 (seed 257,878,531):
new Random(257878531), Next(8,64) per post. The RNG predicts N = 57; the post has N = 57 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 21:17–21:20). - Conclusion. Filler. The content is fully explained by the two RNGs.