201207310022 xfkot
explained decrypted filler
3DES(name+name) ECB, 58 GUIDs, seed 511
From the post to its content
As posted (encrypted)
D4E395D8DAA00826 CCE0771D0B324AEF EE27FD127F98A318 05EAAD523A981029 7C3E5A0ACBC0A839 E96A5D674D082336 B40E5BF827E1239F 7F8FC524BABC42EA 790ED3F2B32AA434 F7243C8AC3CFB48F E62F3893495F1ADC 216130ABDB88540C 1A948CC8ADB836BA 5FE3B95CF6E5D197 ECB33B7ABC55B4CC 0727D3714894F29F 00720424D4FAE3E9 FCED25E57D431BDC A86A7A4D5F01E8D8 57DC16FCEE64C9B3 B1A997BEE5786F60 DF6C3B38CC93CFDC 40A568CB56D75F65 FF955B310C5E53AE 2FC95BB7FB005492 9CA98D948EE74505 6F7D64AA86B954DC C79AB599249910B3 E31EC57AD3E8E961 0D9E195AF4CDA2C2 391AB2736F81F860 4C598A2FEC61CF7B 4F07A1E1550BDA7A 1ECE691CAF6BD3CC 8760E616564B5E0C 1A2D79506E30F04E 90628AF5F0C02E63 1F25F7653293078A FCA463BE729DEB79 90DBE4852EF9A748 CBF0C95C0DBFCF13 8B6D418AE19BDF46 08ACB3611BF5E71E 33C8BFBF671FE11F FCDF0DBD459F145A 24C9F1F3631BBABE B718EE5CC3A5E76E 2811F7DB14DBFDBE 65BFAE19611713DB B611DC0081CA3780 46B4645C95768EC5 4FE3580036A6B897 D91BEBE531D9D4D3 107275565E4338EC F8FC60DCF6901547 0BB804087909666F 4875E5929295A7B3 A351A7F69DF8CF04 279D3CE9AFCE178C 961141644018E747 845E7A85DFF991A7 0D68273C8F179613 7E37602DFA85373E E426FB8FAAC0B9E0 18191AD741EA1CB9 7507D7C17FA831FB D3AD0104A4BEF359 1BE64F79576BF3AA DBA8539590676D95 4D1722FE01A5B016 1FF9A139CC1D1C1E CA47596C84649CA3 251A192A1ACE3497 9B253FC49C24AF68 363E19EE12138BFB D5E21E041309DAB2 16B24A25A6126781 AC1E9363010111B0 88B1DD5472A9D3BE CD804E1D36E16BFC 255A01C0F9A6AFD2 6E2AC1ED5E437F54 479CF9E3CE9BE038 6FC754DD87B02974 033B2C73925543D7 BE06ED31E3AD588D 6A7B0679682BE741 0E4DA19AE4585EFF A0FEF33108901A71 E70641ECB594A4B6 3288A0981313914B 0DCB6A36B15E3424 35F51D1358A2124D 4DB476F40171D8C9 427508BBAA47248A F0DBAC710503A14E D99F634F5EA7411A 18B1102869A362E3 C9CE8C72E2C64105 FF9E4B5E13893C1E 534F81425AFCB7AE ACC218F1D5153D9B BAAFD71EA922BEFA 0A59C0EA406D4158 126FA333B66D0E77 2FE177CE0028494D 25633D462D5080B5 B41F8C7653E0C226 3BF44F30C6F071DA 9FF04861A861CFD3 CF69EBA0D5078287 9FAB2F58FC989066 3431AF88A23846C9 E5F8E644FAC08D77 C25315C716C5C7E8 DA05C4828C5BD98A 4D8C107AF9ED9806 C6586D20A2932DE3 15FBCCA0464DF398 F9A19AE107980795 0FC3E2E798BD3DEE B048F1F7D64A5830 F12F8A2A97C0864D 66083A9F1DA16484 96E0D09D780B7A0D BBD7DB49AAC37617 CDC949A891B1C5A4 A70E74DB35673D03 BF11B6BAEB7CA04F 8DB4570100E37BE2 2753DF6A17F684F7 28E577B32336218A 7C26B1DA12B858F6 70176C7EB40F9A09 3C6960644FC31FC8 59E0A9E5561E6067 32B0DE79614FF6C4 F96AF6F10A3B2923 49626F1CA725B766 CCD5B721B657006D C115D76866511A0A 04F0C95A072F0F77 DDE4D0D1CB4BE159 2FDC9E377026C449 3DB6778943F035D4 485B5C7CB2E3021D 9E9D4DDA4BC13C8D D63B3B791D5E63C5 132BAB2C30A96F4F 0B240EEB58B796C4 21A674F3D1732657 C8C19AB5DCEF0591 CEDA793CF5C83960 45A8CAC1661581E1 AF1A984D04D3FBB4 B54D4AC861D38191 B1D824819869B3E7 D58B0F0472A75C30 D4377BEB1AC346D9 FB178B9AA6FDB14C FC6904165CC57F92 1D2A294C3AA40946 7FFC13078B55B306 C9EA83895DC50DD8 3A9272C3542CB4FE 3BA1A0C0A7B26722 0A592EF7ECF9B5EC 054CA6D7388A5C3B 314D4457A525F1AA 6BC8F87F70E784D8 C9C1AC18BAE32C95 C899BEA2BF6E1467 C16B6587F7F27534 364C3F2ED6DD3DBC D2FB98DD730FF90B 6844E6F883814137 4F5998A0BF3DF9FA 5316233540CD2133 A15675EE14E82314 A205BF21BAA2B86F A9610B6EFD95B1FA DB35B901530F2E4A 40397C0D4D63CBB9 3DC19F4A88BAE0E7 921526863AAAD35E 4ED73B01F56DA316 115CA98E80AC6B37 9835598497FB7259 49015C6FA169C07E 8CB4725296179A9A DE7C8EC2998D9002 07971F49B6CFF3A7 34EB1DEEC2EB5CBD CC53FF760D7A141B DB29E39D3E291978 012BC7760EBC5A1F 8A8C723A7B890F72 867728280CC95EDC D704A662890EFBF5 FB78271F3FC3183E 50A11A333698189D 7AE932B683FA179B 2783B1D0084388FE 65E46CCBE078C554 14670B15FD90270B 1CF7F65A295F5D64 D2B839FB034B9D2A BE6D24515017041D A98187A5500600C3 95AFC9EADF478B01 F43837EA140BCAB7 6F8CC23C16E9B72A E2FACB052921A223 9795E833916D7DC8 F2808872AD3D0422 0B58BC1B39F72DB3 CDBB1A76DD165C4E 315FEB789C13549A 895260D6AB88B80E E85E1001354B0435 DEC22586D04D8C97 DC2794C9BFA1F26A 96D8B263CC0358A3 4D71BC47A80B0D19 D8ADDD24DF91BF40 9D6E0108C63C3003 F45119FF83D59D04 B678A50817DE82DC B6ECFE06BFD519B0 7D3920C2981D9AC0 7ACE8C2468E6D331 238931C824CC7349 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 3,728 hex characters = 1,864 bytes = 233 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 58 GUIDs as hex (shown below).
Decrypted: GUID list
1 8ae26f12-5885-628d-8c47-f4f9d5743420 2 5a443557-bfb4-67b5-a84f-911511021783 3 4cfd4424-9d8f-845e-8979-3367e03f49ec 4 5adfb6fd-8c70-56e6-b15a-0d6acf67ea20 5 35f853b8-2b67-8a43-a922-d41d0f309614 6 dade0f98-13a7-1217-b99e-cb4252329abc 7 53ca2fdd-c9ca-71e3-9aad-b73152cab311 8 70c55fe5-b0e0-787c-919e-a563b9b6fc07 9 c54e6faf-c3a7-1d2e-88ad-ffccd88a6aa7 10 3d4799a1-f00b-6591-8032-fece00c3e728 11 1a38ee45-4217-6528-a8a7-03433b8bf53a 12 deaf7432-3d27-3441-a510-18c4e74a3b86 13 58444e11-839d-8a83-a23d-78df804f9f58 14 61a7ee43-7300-27e5-9d11-fc7331c72a59 15 e6931977-f985-6bd0-be7a-489f9d1dcc64 16 1f0a583f-c943-19cf-9acb-398d51d4c0f8 17 a2ad997f-a525-52fd-9056-9f341daf7a25 18 4236b739-6011-7ee4-ac72-4f05a7eec5bb 19 e9a13eba-6653-477c-8335-408f8d6d8343 20 4414114d-a5d1-128e-a130-ed65cabf51c0 21 98c9acb0-508e-62d4-9965-fd1a27ffae3e 22 93aa85b9-326b-16a7-9afb-e4bd92365b6a 23 d9a3c897-d6bd-3bac-a7f4-f0e214edda2c 24 43695ae2-7bb1-4606-bbaf-a426884bd07d 25 b640bdcd-6ce2-7e8a-98f5-c816c7d5f709 26 96f2a48b-a867-1c86-a717-73604d61b59f 27 cc5fc654-b682-229d-93cd-14994997dcee 28 6b5c6af4-8e91-2fa0-87f4-91bc638ed5fb 29 11720037-b057-6a7b-899d-26b13e08f72d 30 897d4cfb-1d2d-5540-925f-f181ed8b45f3 31 dda96788-fbc5-78ad-87be-e6345a2950d4 32 118f3522-c229-0752-8795-9311c8db494e 33 7c76809a-e5dd-758c-b108-05d10658d29b 34 fc280000-7a56-7507-b395-d32cf6e56bdd 35 0b81caf3-2f00-06e0-afd5-44e377c0a8ba 36 9e26e34b-44f0-8777-b467-49233f097902 37 0d52c221-0e95-2bfa-a548-6c0f8ad97261 38 07d5401c-ac0b-5378-bb7d-e57a569d0925 39 71223d91-15b2-7d2d-9587-e3d4b5b38f7a 40 4eaf64d7-49c5-0009-919f-ae372d4dc4fb 41 1110a300-856a-7234-85c6-e1c2e8e0926a 42 d314569c-6351-6e49-915a-c1c3943d34e5 43 60d8c671-0654-487d-a304-606241a407ac 44 fd7dd338-d120-0318-9f21-0ac550334014 45 c287ffcb-678c-2ca9-b093-f1053a74e7d3 46 dcf87d6b-9e58-72f5-a24f-849af7c0f460 47 21ac53cc-bb56-157d-8db9-acd7f5877f45 48 7df684cc-f90a-4743-98f3-8b66ff7a1926 49 6fe4af4b-0b39-0a8d-b585-3f124cedbf2b 50 8b3d1426-cb87-6f7b-b583-23343da82adc 51 115144c8-9284-6e1a-b879-272e87d7df18 52 e8183103-3a4a-0faa-9309-05f21b802800 53 7fc84d9b-047f-840a-b965-360c8d933130 54 5701238b-4e2f-5432-857c-0d9d9bc35380 55 1916db8a-d10f-4884-8ada-a3edf16e46da 56 fc692e02-82cf-4f71-bd6d-bf8cf5afe21f 57 5fceabdb-283b-3c7d-b8ca-2448ec51363b 58 a58ac9d1-f756-32ab-9f1e-2f3e2d160379
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
6685817716638261574161347122657077082570764027140660854433. Exactly this sequence comes out ofnew Random(511).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 5 of Run 20 (seed 267,961,078):
new Random(267961078), Next(8,64) per post. The RNG predicts N = 58; the post has N = 58 ✓. The seed is the machine's uptime in ms when the app started (boot ambiguous: 2012-07-27 ~21:13 or F 06-14 12:54 (probable run, 6 posts)). - Conclusion. Filler. The content is fully explained by the two RNGs.