201207310607 xetio
explained decrypted filler
3DES(name+name) ECB, 60 GUIDs, seed 267
From the post to its content
As posted (encrypted)
AA815B081AA4DD42 2245DA585B51D1E0 C7B92F1B397A6D1F 6F5B92972A188D4C 1334F6C3F76A95B3 C1BA254FCFF1A06C 7304D526C3EB2040 B8C8B2CE7AE803A1 F93AAF3A5E401C9A 8CCEC8870FA8607C F37061DC30412652 AC7579A995A9B0C4 D92D02958D1235FF 8F4E4887F284459F 47D38A935457A6A5 1FD5C0AB0E14949B DB8B190D69F6DE17 1B751D1D98507126 1A59C2BF3656CA12 677533C1FD95812A 96A9DFA775E6ED5E E904CD3EAE324CDC 33B4306EC876FFAF 54A8BFE4113D44B5 421472999FF1F1C4 AE6BF35F47B2D731 5C18CC94DF323A8D AC9A637A788FA9AC F62C22640B979547 80E8073FF71D7DB3 089B4ECD90F5F98E 1E11C9F105B19914 A570C8C583706F6A 655480B7B964DFFF F5FE6818733F769D 57317E4A2C604B94 1687051473517F33 51B3DAE8F15BE896 501D34C6329005E2 B50EA614F473675D 019E3E5BFD90F8BA 955487A6D05DAF35 8DCF025A75BDC943 EE8664D8E27F0137 9C1D39953EEA0A5F 2BAFE3C200F4EEB2 1AAB5B443EE87721 7ED6BE00411AF4F3 B69BEE4B6A878CF6 7394D78A67783F2A C18804D47D7A9B8F 31E28185F782BA43 FA493FE6E725313F 04E17ACDFDAC8111 9D988800BFA1EE47 B7DCA75202481B52 8396E8A7CA4C8CDD DEE542E202FC04AB E7E1B14EF8A2FC12 66368FD4BFA57D8D 36227A207197F6EA 864B070B604A66B1 7D0C3DEF1429BEB2 48FA4CC086D7419B 7CF85E52E1970502 E38C8049E1E8D6C7 C838D2448542D83F 0058F42C9786E030 0BE1F68351298196 35FC5475879AE14A A5C2A43CC221B83C 3E2A71D396C22880 F5953FCB06132F48 108D9122AB4A8D2B 68735F771A79D0CC AF873DD476857BFE 5A6C75659F1FF13A A682506A24C869A4 830B4038BEE35061 EE4506F883C5B79C 2F1CB42076597328 C6A7546F16CDA3CE 8254AA79E3284708 280ED5C3F66867DD C32893CF189E7D5F 1F0AB169BC1E3BCD 6CA016D355CA51EB 9A441FA7E6D7C475 18BB5EAD27583A3C DCAF027CEF195565 86E8CFF0B7EB3776 7584F659C101EFD8 623E368B93A6A04C 7534D35513993FAC 0FE0BB69D184AD50 E0775F864E3DFE5A 4170EF7DF36F2A92 F0923E5F6B5DBD4E 473CE5A8FF5E5625 BD0FA2BA78F3A497 B75BBBE7B33A7A3D CEC0464D569C6B5E 40DFDFEA4D30B813 FBA9963AD8FA2149 0760AF3850150035 BE0C769B3846FE98 D643CCF1748CAE09 7153229CC9CEDAFB FF4CBB3EB1047CEA 78F3490190FD1449 3E51BF60F134A2F7 14C1397BAF667B58 2F6EE360826C601A FCEE58F86B982006 479D206BE5DA9181 FDC53B1813D496D2 27B6633DEB1D6745 269289B84053F1B3 4783BC995C02F008 A70FD2EB68E8F8A4 EE60EE1D02F6DF3A 3510D326D2CC2445 E39771044F818BC2 2EC5299C397E4E99 38BDDE66DF12483A 85FA5B48277303BD F4AD45C537B7C7A7 9659B4493CB21502 388A8AA014B2C7DD EF0DA32ABE5F506B 206BA793C657442A BEF89E29073B6D10 240993419A53486F 151748FF670F8E7B 5613426C0D08C765 D157AC7B2A6B5E25 542573C2B8C28340 1A2E7875FDF61967 2B4E3B1E239904AA A489C5B3E25A8844 A2F239B21CF0B866 66D04C1F8D037D53 E112CC82D242F7EA 5A1FFAC011C5CACE B86DEEAD1E3E52EA 818562C9D0DF47F1 88FC691B6C2D4004 92AD79A1E49DF1D0 842705BF3F3C292A 41F5DC0B97062FB0 1C60F6136839F628 EB6919C92AE50379 426A621F8D068114 C85C4F714E8E8833 55AE2FC5BDF894C2 83DC50C322F8F1B1 231C555C0A7F4685 A573ED6212ADE7CE DC6B43FC22E1FD54 BC9C57618C2104DE 45BA2BC38781B4E0 AE24FA54CBF477AB B83076A90AEDB264 7271ADBE38143D00 6933474DB185D586 8DAF1314299EFD53 3CBF371604FDC3E3 6E13F2450E5F20E4 3B4B8A9E4084B525 378F1CF90AEBDC88 DB2A11D812FD7A5D D4B3238E9EF043E8 6FFA8282573A5B75 F2379C2592285B08 7F60FA91BBE1361D 0913F65A25FC7FF9 51C41DC803ADA1D9 5507927BE7CAFEE7 CA30465ED1E93AE7 EA69AB56C0F6249A 31EBBEA4E67E1103 01E51C3EA38C3A99 E11C9A2473A30CC8 EADCF7EC416B1FC3 26AD6748944B8151 36727FBD3AF955AA 78DD0F66EF9B6E32 ADE854EFFAF265F0 0A2CD6F6BABAEF15 BF2B268A60888899 17A571576C951CCE CF486A366D472471 EE5EDA802984ADD6 110ECBA2CF1CC0FB 76F5F8ECA47EEE3E 1CC86E6DB66B75CF 02B278E1504B06D3 98BEB484329AD709 12B5E11AE4049E4B C0269FB2A1D7C785 24860C7CFE0707BA C7D1F99EF5DDB4D7 DBAE73D4CAFADB20 2CE3D6511ACCD75F B3AC73A4B80271BB 29BBCB4E3608E2DB 2E541EA82A8ED825 C6122DEF78E9A94A 4755AB63852B77E6 222B7795337A792B 35E25B8D16D496F1 A2C1BFAF2D95D87F 70DA3B948A33B729 5E8C36DFEC1940B4 9F310F32179DE474 AA8A20A5F29220A8 63221A7E16827288 094AC8AAAA1825BE F39B3277D5CD0FB7 98BE49A429F4D7DC 14F13BFED4794EE2 AA2285D23AB9467D 932A74AAA539065B 17CB1B79ED2BBC73 5828E79F1DAFC199 BBD2BE6111675812 04E5A3060ADA6935 FDC6EFBA7E0A4B51 1E70F49528A01F0A 74F28EC331726C34 D97A33B3343DE5EA 295E2CA340BD2174 0BC7E21B489E3542 570DF623B852B2D2 F2C9B2DD0D44FCE1 AA88659BE26297E3 05DBA08F5EEBA18A D0B14418D0CC38FA 08EB0BFD3DBD0C45 10766BE23E21FF1F 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 3,856 hex characters = 1,928 bytes = 241 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 60 GUIDs as hex (shown below).
Decrypted: GUID list
1 7c7eadba-ae36-1800-91d3-0a2bfe4d979c 2 e323e8f9-8f13-1445-9442-66092f42dbba 3 0d5cc8e7-ad6a-3439-86df-c0e446b1376c 4 93aafd9c-ce64-4f04-b600-494b242d7b66 5 2dba824d-a8ef-6416-90f9-098fc5ccb77a 6 548d8b67-4cd7-8ad1-abee-1cf4272c16dd 7 cfa6e5f2-c9bb-4165-87bd-453473080a6e 8 1559fcaf-d9be-3668-bafb-d19c4f29fb38 9 258fd975-f0c4-0f83-8ab9-2a141f2d727e 10 4be652d9-4cea-6a33-9cc6-56fea75c1d3e 11 c882d70d-775d-8977-bfde-a9afa1dff693 12 ed2d7bda-91d9-80f4-952c-c9731c1f8c25 13 1179992a-7b85-13ef-b2b9-386f9c9873f1 14 fdda45c1-0de8-3af9-a712-c56f755fea73 15 466e1bf5-7d00-7ddf-86c9-3ad74c2c760a 16 d8013ba1-f2ad-6b95-a78c-bba91cb33d33 17 d1b09cdf-eac4-062e-a05c-ff93eb933f67 18 6740d23f-6700-46b0-aba5-f3b17e10adff 19 223c041e-b40f-8519-bba4-2f44afad010c 20 ddcabfb1-2dd5-63e4-b59c-d2f94eed4ce9 21 37639e0f-9c35-2b89-b030-4326b699e5f9 22 f582f166-4e08-3183-9e09-317264aca0b4 23 240880d7-6f37-1a31-90e3-a912742f812c 24 c1a4e3c1-9650-2872-be72-b1f0c4458dcf 25 d3057cc2-4711-72f1-8a80-ecb6f2fb550f 26 2e305610-c9ad-23c1-a83f-9d2c5305a88a 27 3b7198dc-22dd-4443-8e47-deff35768496 28 dec3f4d2-a836-1148-94da-0f80fc98b07c 29 f1a7658c-1c1c-2c35-bee7-e05f64740bb8 30 1590f830-07be-196e-84f5-b28b913f2015 31 100e769d-54a4-694b-a4c0-2d988522cad4 32 3ff94fc4-a40f-7619-8843-e047ef74a283 33 4d915013-f7c7-5a4b-b3d4-1f5f68bc665a 34 c98273a1-a084-6d48-bfae-316a63c4c3ee 35 8744bb09-43fb-745e-a3c8-092a9590ec0e 36 5211646a-2602-3e2b-b0e5-704c1ec310ba 37 796e2c14-7e0d-118a-8921-f1b90712ee00 38 80739665-df9a-3532-939c-fbd6efb43cf8 39 8aeb0237-361a-0570-9c81-c45a6f2e0918 40 9ea95bac-6999-5e83-b0c4-a427e091e4a5 41 e3c57fa0-439c-4094-9432-b72f71435549 42 7ee98414-c557-80e2-a5a3-25fbb887107e 43 9db07bc5-442a-7aef-a60c-099be47fdeba 44 6356237c-01b9-49dc-8a0a-22e31f0055cb 45 4064c934-4537-69c6-8cf5-c84dc8d5ad7d 46 5e6bbd12-2304-8500-a10e-24cafba1c074 47 55243738-96cd-1186-8f41-8f6c032cf1de 48 29601454-155e-5cdc-9cd2-3b6e6bd92723 49 13d4e6e8-a7c1-2189-8ea3-d7ec51ea1eee 50 77117823-be01-497b-a11c-e85c061b6585 51 cb89f78c-5698-3b9e-992d-572f3689ce91 52 dd1dc7a4-4f62-0328-af1b-a19bf499eef6 53 19866dc6-a89b-54e1-8e05-0b9c3f352eb4 54 041a8378-2afa-7f48-926b-68d46746e5c8 55 ae3de717-aedf-51fc-81ad-24df17591d82 56 78085174-bbce-710c-bebc-b439a79b0efa 57 1539a981-0d8c-073f-aad2-c3244127b34d 58 e5498fda-c7b8-06de-a11a-19a4b7c1af88 59 4cb643b9-f93b-642f-90c0-d352f6937aa5 60 5cca3de8-4531-4f92-a271-b9d08a568c99
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
113468430688137604862312724121675673130548746815243057570064. Exactly this sequence comes out ofnew Random(267).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 2 of Run 19 (seed 257,878,531):
new Random(257878531), Next(8,64) per post. The RNG predicts N = 60; the post has N = 60 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 21:17–21:20). - Conclusion. Filler. The content is fully explained by the two RNGs.