201207310014 xfk99
explained decrypted filler
3DES(name+name) ECB, 49 GUIDs, seed 214
From the post to its content
As posted (encrypted)
EB5FA44B4FF3B73E 6C5EED0A2598F601 4ACEE6868379F8D9 CC605CAFFE64B296 330391BAFEFC0B37 45D816B00536512F F8A5DE47C6408F7D 2C4D38E0E8DC3C7A B9B752CED5FF75B9 54B3B30E8010B1E9 04AEBC9BE6554B40 5385854A8F01C603 433D38DA1D47B9E9 28A71B66371BCB22 0F3AE189DAF5C219 8E5BB3201635617F 0D1662A451DE6D47 D93D800F96B68117 906B9F1D19D33C9C 646C2F790036C9A3 EC02E2CDC1AFC09D 4E485AF5A55D73A8 416D8E43D21D8FDE 3B02D7C8E5EC807D 4D7FD257503CF638 3885D92B9087CA37 CCB0DE8DF6EC35A2 6C5E97892726C2F6 8D78D44C8A9C8DA5 6E5EF16D3A7A11A0 51AB45EDEDB6B114 F355435B8D4ED628 7D5CCB37C5A9581D 5D3E7F3A54A8AE6D A0A2433E1B2A304E 867ED2F0FDAAF0EB AD20B0C87F232D77 949614916296139F ECE932DBB54DBC3D 7F7C178A5FD7E73D F8629D8AF7DE8170 15F6C69E8EE2F1EB 8E966732F97BA32D F15BF862EAB1CFA2 DBB797C4290BFE43 8B1FA6E062FEC9B4 5B3B5AB5282FA3D9 32689B6E09D60D7A FDE545599C83C56E 44B28336A591A197 F3B52D251D7BAB80 2CBBB08139833942 2C52EDD84C78D43E 5264D07297A6F4F5 6FC7CECF636A2B7D AE04CF134A7A6F4F 40F32843E24A0FE2 70E7C62B48D526F1 2B8766711F6D57F5 D20FFB3B7D6E5ED4 5F57C647426A7B60 55BA5B07707D00E3 7678C8009C8C819C 042613485D6B5302 8FD92201BB5362B7 6F708B796D1853A4 9DF5053AA100B823 C53CCE2D4DCCB21F F55BE7D2F643AFE4 5F371303C5177F9A DF041CAD68D869FE A73383A444FE19A2 4FA52157EC915437 B627919EAA10172B 98AEF4ACFE5B372B 927F6F96126BBE49 1D92628186209445 DD66575354341798 6D98A161C23C8A7E 05BB761E48C450CF 98A73DAC8E30DFF6 9FDE5DDA49946599 B692D74DC77C0D5B 467B6F5B25A1DC81 B45DC23AB16D16E1 58366399061A5C43 F349D79E0EF2944A 17C29A9AC2649C2A 1594434E4CFF464E 5E5A4C563A570599 FED26AF358EE583E 75502A0E91CF04DC 2C35FD69659632C9 B97857D1C8863177 C5463F8ADED75764 837B6FEA51CDFDA5 3274C01438561E07 6E86BFE1C8C6A02C 3EAD1A588CE6FEB4 F449D659EACFEDE5 ED622EE617011398 3615ABA12F9A58AA BB2C690FEF74B41F 058F861B74C4961E 650760C6974B79ED 8C48BD573ED64E6B B2FB70DBBF92B243 4C9D92653613C907 1BBBBC479C1A62CC DD3BC5F54685943C 905E3BC94FC9D749 6489F0C870F987B2 2F9B6DEF2305E1C4 F419720F0D3C101C D314AF32CF160435 D9A75CDC38A2BD3A D0441423A5929D7E 4F0935B10669D3C4 87378729EEA99D13 D3D5D08CD2ED5089 D7C6B402B5529537 2BB35970447A0CFD BB443AFDC524E4C0 4A2427D7D09C1E8C 0BCAFFE6DBC47CC5 15A2EE93AA97F39F 87D77E261764E444 4C5F9F637EF7904E 448B0A26801A35E3 D1A1533166334D88 3DCF1BC2D8494A5C 624FCD774E0A41DB 1F365DD74D17B799 2FFD99AAC30CB21B 80D2C64600387866 C0665337B92615A7 6DF3B3C3A347FA11 CC435BEF0A0A2BBF 72FB4AEBD2986025 94A9BE36CA3AA87B 8E4E1AD8922C960B 600D96390168442B D41AFD22F239CD70 F96ADE0386F1903E A7AFDBD5F3FB1F92 EA73C614520DB137 3DE65EDC39394CC8 E322741AF8476F6D E9A025F34D7A5EB6 01E3F3C1A7A06AB9 308A0CE7F1A4C9DE 0E1237B4B2AF6649 CE3FEC176ADD8919 7087FA13B7815CA9 1559172B184EE695 370A917DB072F3AC 27DB47EEA9549B29 3416DF9B7F19747E 61FCD745EAD116CB 7448F5639CCDC912 325C3632013102DC 354BC5E393AB79F1 BFD7F02867ADFCB4 6550E2F8851BDB35 07854A7CB7BC04B9 3B3522761331B75D 1BC0F4B81B0C3B5F 1899798D26F586DD 77D3D551561FE04F 7B76825970D6B198 CD1D7F3FF19565D8 55C54488A4640D63 47A712C81C65D0D9 3509D8C7F539E896 34B21D6F62EF1A8C 845748EEA340BB5D 31BC683535CA344C 4F208CB4C3DFDD58 4B3687F8B0C5EF7C 3F46FCC432C0F0F1 EC0EC8AA2BD3A79A 6833BC7629E3AF68 33C79CF0E431F030 DA502A8146138622 ED082A36A9377E0D 0BA1964C8D44928C B9217B8CCA5A1089 9F50A9EF93951B60 EC3780AC1D88F070 BB4071068D44B7AD 38C9DDF08024B0EC E0EC283661F2BDA1 0966B5762F0CC659 7D675BA2D253B3D6 1F4F20B3899920CE 6B25D1FEFADFB05F 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 3,152 hex characters = 1,576 bytes = 197 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 49 GUIDs as hex (shown below).
Decrypted: GUID list
1 71b6300a-25ce-4b44-afa3-697c3728eb70 2 8ee2163d-fb40-5778-bc43-907108c71546 3 8f19a4c9-76bf-3ae1-8f26-3ae9aaf2d8d3 4 19bda081-d3fa-2a19-843b-632a03c84db3 5 73b1ead1-6334-7d5f-b25e-2bde041c939c 6 e12d5af5-8407-50bb-95d1-57ab1b601148 7 5abb1a6c-8e8b-7773-964e-4d248c7eddf5 8 69ddc626-6584-7759-8f66-e782bc75d226 9 5c62d393-faee-4da8-bcda-d793c07e18cb 10 7bbb9878-b8e6-1bae-a8b1-c4ccd9e43c07 11 ce32a2f2-3df6-8b97-a4c0-65885dbaedce 12 0c8b3316-783d-45fe-acca-5f44c855daa3 13 cd8170ff-2c3b-65fd-b787-04af4fc51dce 14 cb6018d1-d0cf-7635-a058-d66f75d6db5f 15 511705d4-b9ce-630a-baef-19b4e1737bb9 16 c643d3ff-1c20-6fc4-821a-1e577f998193 17 3385b5ad-7975-735b-a52c-9d6e610316e9 18 24dd1a52-ea8d-6d6d-ad1a-bdcb9ec53401 19 021e9874-48be-4216-a00d-963ed85100b8 20 6aa7f1fe-7b3f-16b6-8587-4be006b75a83 21 70cb1bf3-c38b-2a7c-95fc-6135fd269b4b 22 a28a4d06-5a03-398a-9a8a-f2d9241d3bcf 23 93d74c5c-a78d-18c3-878b-b8b84d54bdf9 24 b8ab4ecd-b495-7245-b4e9-4f37cfdc6360 25 f8b483ec-5544-6da5-b688-5e3a201f9d87 26 a3a16f90-03ac-12aa-b7df-90800eaa9d74 27 ed1e4c64-b7e5-8c30-9ca5-d2e8cf10438c 28 386b1842-0649-25a7-a847-11751b8768ae 29 2d9a82ba-dd22-5ad3-9fe0-df68c877a4e9 30 fe5ec923-490b-3e11-9415-699bc29a44c4 31 68a3dac4-9432-1d55-bdfa-6a2944a1a989 32 9033b4ee-f90f-7834-b6f0-809dcbd78eed 33 900c2569-1bd2-3d0a-8a08-0a274c3bd9bc 34 f18c2896-4e90-3afa-a9c6-3bc99128ff47 35 8473f9c1-8c5c-3d79-b102-7742f6e05739 36 461f2c31-c5da-02e2-84fb-5618280e4ba5 37 718db64b-bf9e-215a-adf2-b7dc37360535 38 80cb3f5a-e738-1143-a1fa-fcdd2e804683 39 b0b50631-a158-8f6e-8b10-80bf64cd607f 40 49fa2589-b28a-4ca3-9a4b-e922d29dc2c9 41 8a6c564c-a9f0-7ab0-ab67-1ce58adfb8c0 42 d6f15e75-6e9d-15c3-9add-a9c345a3e239 43 f6ca5f67-5d1c-54c7-a80a-1b704e00d8d4 44 68ed23ea-4ed5-4c58-ba8c-371dbba22b85 45 f35359c5-da40-6578-bddf-42c48bd0dc23 46 32e4e545-a69f-2540-9f18-fc1d38bb7930 47 08ab374c-eca4-1b98-a5c4-4af9e81d93f0 48 4e7cc191-dcd8-70eb-8a3a-cb0a206ec732 49 c00ed115-f093-0eb6-83b6-0bc272eb313a
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
4532757741846766764123176182531733302184715462170. Exactly this sequence comes out ofnew Random(214).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 4 of Run 20 (seed 267,961,078):
new Random(267961078), Next(8,64) per post. The RNG predicts N = 49; the post has N = 49 ✓. The seed is the machine's uptime in ms when the app started (boot ambiguous: 2012-07-27 ~21:13 or F 06-14 12:54 (probable run, 6 posts)). - Conclusion. Filler. The content is fully explained by the two RNGs.