201208011858 xjgj2
explained decrypted filler
3DES(name+name) ECB, 44 GUIDs, seed 742
From the post to its content
As posted (encrypted)
F4FFFD457D9CC947 10735142ADEADDC7 71F3102F8A9E0C0F E09DB6BEFA5BFE5F B6A7182BE8C1E040 A5F7FB50EA80B03D 288CA0D6E5D063D3 7FE8E4D1C51FF4DB FB7CBCBADD75439E 756DD09A187F47D1 A57413D6017B4838 AA6868EBC0E54943 D155990A9F941137 6D7ACD8BAE7E3B7F 5B1131BAA0CB16CC F5D9D66CD111857D A5B70CFA5C2B8FEE 4933CBF150F7E930 A8858F57A0B6AB45 3F67B137221D6A07 50D6768C842BE409 22189C3CC815DB4C CAC81571C455118B FCC186A0F2797D9F B761E02AAD62A51E 663482A12F1D471C 97901B16FC333D4D 9F69DCE6237ADDE2 F18A3A1D3808020A A249EB4571C8A00A 74810A92F5359BE6 1E20CD897A4C98E4 937A4C04D034EB7D 085AC3482CB744E9 6A84A9561AD73FBB 82459EF14626949A 3C1685FCDD661E97 DFD94144025CE839 75F9640BE1142949 66DB338EE6A012EC F1E29B37C47FE054 F262D6C37F0A0E89 E6854EA7C7B93032 D32EC65BC55BDDCC 735370E13F4D1AC9 5938E1AF664FFE1E E4D4172494464FEC 2926798C184B4CA7 2999141A9E39C5F3 F53AFF4F45534421 A87F8AC081A600C6 6FC0983D6D88B239 BEF172DB99BC1C58 ADE398EF2246B160 F1CC1FD2AF575CF9 1B7DC4A0960A7EB4 5D54EE0FD74C727E 1D1FB44B0003DB5E F3F99B09C986C5A7 C9E174EA7A91F1FB 48EE753826EBBC78 9B5A67C88828E597 5BC7447C07160686 28FBEDC6F6CAD650 836E13DEEE905166 A6D05FB39C21F139 5FE8400F341C95C6 84C099F6BF4D4237 7D0E4C879C15423C E149A1DE09E7960F 9CFDF25F63D39411 417C789466D2407D A795E148AFEF1CEF 11EB6133ED245DDD F04F77DCB9102950 28DCF291FDE998B4 E57F1AA926F87A3E 2C22F24DA3C063DA 6C1BE0AAE3303FAE 532D6C51CC88652D 61DF8F9431D19E83 B8002626C98D7048 EBE951FA045D45C0 BC68ACF3B0C37032 2265872495632355 93AA6D8E6ACD06C0 6884BDC7564F4BBF F91D995150A8172D 816B70ED353B4C5A 743A0DD25C7E4357 1B1F35CC17AF3101 C0A89D8ACFC3BC19 72A23D7F0EA93978 25C96DC4429D932B 303DEE1CA928D7BF D5F2E292CBF107B5 932E9BB41AF7ADAB E381CA615EE28D80 693C3E3701268034 7ED40753F7E7823B D59C761517532C12 583541721210883D 037279AC52C9567D 45D1739C62ACF17E 571E80E112E243F4 859DEBD3473E8B36 547662FD1F9CEB0F 0A38E4E6ED1CCA0D A969678A72DC6237 599095B8525A22B7 00545E7330209498 4E1A4C4B076F428E 85069422990CE4CC DCA153474745836A 4B744F1A5D21D073 8F18D6521B6F5CF3 CD492BA94201B648 6965CF0F32E7672C 36F0EAFA28F1B42C B6819B019E1C3E94 D99F429BB400B42F 81A5BCE9FF4713DF D7671D9ED2D2EB75 5B0C424C39F4FCAD 0BF2B214BEE58F92 C818C7188390BC17 12CEE03729D0599B 227F84BB817A480A 119195B884156661 97180A3EB95EDA84 E35058829F1C3F69 A62400F294E0A75A 448A048A2AEC4E4B 80C698532A5E61A3 75589AF6CF99C0A8 7B51449EF6BBE68C C2A218F9FBF492BD 5BB8BF22714A13ED 87AEFE7DB543709C 5503A9F3767EAA46 BA8B7944A82131B4 8EBD4C6174AA8856 9480ADDF29728831 5A6B290512CC6157 6919D5924C0DCE1C 8520B322C5EEFC91 F55084F0CD718A0E C67FB97F1154DA0B 427F1ED090E666DE F104D736A193DDC7 2F948C76D8EB5EE3 CE8D69D8990531DA ACC8C3D331EF7BB0 8F7392469D1B31CF F12651A3F31D4A41 3E7EFCCEE2BADBEF 28E8E6A46C0105AD C8FDDB074BE2ED77 EF94715E7E3203DA AEEED2108E704D75 A3AC179C6C476099 165FF3EC2C4F77B6 21A5B9D24E48A32C 35BAB4C89CC92E34 AA3C9A1F3905E2DB 072B8A71F91CDA60 F0AB615BA2B63682 953D45B113A295E3 AFED91CA737AB37B 5D9C70E3DB71E4F4 15D3707B6280EA9D 0E03D1301812F78C 12033D2942FA3B9F 6BE8A3E5B1A849E9 7FD629314005F928 ADF16CEF6AB9685B 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 96ba30e7-cb3c-378a-9b5f-2b6745f524db 2 4e47744e-d616-4c1d-ad91-54e2ef558d9a 3 4b8deffd-59b8-306f-996c-5b5c10e0ebce 4 f302b24a-e666-80a2-a938-155e54affb5f 5 aa48a90e-6113-1882-b4cd-ce8194f36b73 6 a566a2b9-29cd-81e3-ad49-e7d8cc3158c6 7 76d53185-bb98-30ac-bc17-6922ef43f942 8 742b74ca-7b1e-6f52-b03f-1d9f42152969 9 f060080b-7533-6c11-bda9-8b7b1d27dfa8 10 ad35c95f-c5bf-77a3-b9f5-af8af2909986 11 626677f9-6588-8a76-a3d3-5826d4632583 12 2ccb64da-1ef5-647d-addb-d4338cad2456 13 0e01f959-84a0-6c80-81ea-01177d500d71 14 5ed3ee23-b546-446c-a49d-31f7335080ec 15 55426ead-9589-3924-8df1-bda12d99fceb 16 adc65f3b-f90b-32ac-8860-3bcbb7c95c1a 17 778787c7-1203-67f3-ab82-61e8e2ff0d01 18 fd77ab59-75fb-0b4d-bbe5-cf5230af5bcf 19 63a41778-2b0e-6aaa-abb8-8bad5c901c0c 20 68ca9987-1e19-53ba-b071-94faacd409ef 21 1227be8d-bc38-34e5-a78a-5b98567f385f 22 50cc2ae3-0261-768e-b94d-6c3bbf606292 23 815061e3-73f3-3773-bbc8-d3bee9c9715d 24 512e3953-cd73-201d-a220-8d6e4f5b6bf2 25 858efb9e-8789-31d7-a3a7-90b03f30fc58 26 4235191b-7c01-6ea4-9dcc-edadb77d1cab 27 595eaa7d-1bf2-79b8-a7c5-d628a2825552 28 091473ce-3cf2-3b9e-a8e5-f469388091a6 29 3719a07b-fb59-4d65-9546-142da053ebdb 30 f4cc3419-83da-5b85-8ec8-0ba4820fb2f6 31 2a56e01e-39b3-183b-ac24-b76dbc569f68 32 5debcc31-5609-8694-9e99-91a3dc1f9d5e 33 746b56f7-e07e-6cd5-b411-2e8d2ae8fa0f 34 06a50128-8d84-57a0-bf70-cef4b3c91293 35 926a7631-a052-68e4-8ecf-4b05148e6413 36 e856eb26-a769-8f33-867c-34638031f634 37 f7eb4659-7106-5e3b-bd49-660a3563d283 38 fad5160f-6042-0115-80e0-f8a194a988b1 39 e2a5f59d-53fa-3529-a4b4-0c62741b50fe 40 0630ebe7-9b99-2a05-8c08-554b08b4f154 41 8d509f5f-c260-12ad-b72e-fc8160c5d663 42 d8941cc1-6767-76a1-929d-8c5f1ebfe414 43 6df0def0-08c9-55ef-8567-05c71896b6e1 44 b4cda7da-2a51-2c0d-89ad-0fcfe2ef22b4
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
34381836678664336065373236734518656850321752. Exactly this sequence comes out ofnew Random(742).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 4 of Run 21 (seed 452,527,359):
new Random(452527359), Next(8,64) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 18:58–19:13). - Conclusion. Filler. The content is fully explained by the two RNGs.