201208101624 y0j54
explained decrypted filler
3DES(name+name) ECB, 44 GUIDs, seed 185
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 336db404-3a15-3d6f-a998-88a3dda68e1d 2 a92198fa-edfd-0f0b-9d7f-08dea58a9c08 3 2d094cae-c31e-0e75-93c6-d425ac41cf50 4 a94cdaa3-68e3-0400-b8d3-11463e07393f 5 dc3e2f9a-aa3f-63b4-9eb8-2ac9d0cdc297 6 e712733f-c9fa-2a8e-98a3-2ce5d29a034e 7 dbcb586f-575c-7820-bd13-fb3b4117b31d 8 387337f9-69ed-247b-a365-9b4d8373dbc7 9 80d6311d-0942-77be-ab7c-7852b8655b38 10 39b65b78-5e96-41d8-a65b-d2aa531edfcb 11 5baeb181-6729-50e0-a561-1e441a22d217 12 dc0430ab-f1b4-808e-965e-f22418417d16 13 813cf8c7-32e5-72ec-bd0f-3fa68df63316 14 c318a914-a2a9-6a6a-9af4-37954181e056 15 9077561d-2e91-4392-a1bc-2e25ae07de69 16 af266591-de6f-566f-835c-a87920b16f44 17 03b55379-13ba-5845-ae23-61ae2403e559 18 30e4572d-8839-6039-a87d-bfcb6f0b307e 19 332377b5-d41a-6ba4-9a2b-e7e8565bedde 20 120f4c07-345a-86e7-93b3-3d8a4dc8c306 21 0404e846-62b9-3abd-bc51-65b7ed6e5024 22 ce0e05ac-4e4d-23f6-b622-4a30b7f03952 23 6be0965c-d644-2dff-a76a-afb8bf01b0b4 24 02a4e05a-73d5-5ef3-b438-42ec367e7956 25 e2842189-270e-7ea1-95b6-b915fb746344 26 16b02667-ac07-49e4-a1ab-af01a3f0741e 27 c619a5d7-c0e3-8681-bbbc-a5c5aeae9291 28 298bbcd1-9a87-2a76-b7ca-77c2c3a47537 29 d6c08f4e-c3a1-5bb0-8689-84ee1ddc6326 30 ebfe9273-fcac-0621-93c6-7a87e3bb1661 31 98a775b5-a83b-4c29-b243-10d990dd4b7f 32 7fe4afe6-c8a5-14b3-9b0b-a809c9124eea 33 82b5f236-22a2-6aa5-9f1d-2258a3be4749 34 8eace033-60fb-55b0-bd59-869e8e45870d 35 200cdeab-bc48-2398-80bd-61160e0f408e 36 adb99745-f47c-7308-860b-6cbb2dea852d 37 7baa2260-a342-2ee3-a079-12784ef091ab 38 2f43b62c-de71-4db4-9d20-fe051aa31b72 39 5ff300b6-dace-0c8d-82e8-eff4ac833801 40 86ab21e1-5407-0fe2-92bd-46072993f183 41 3a6b9285-e4a2-4236-bbf4-9276c8d96ab2 42 632343cb-a885-15a4-b963-487216e93d87 43 5ab92979-d53d-8d4c-b0ab-2cdd5c17e33b 44 b421fcdc-193b-1eef-87a4-2a14a0e13648
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
30006272745876455668322574825041652724004181. Exactly this sequence comes out ofnew Random(185).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 31 of Run 22 (seed 528,385,484):
new Random(528385484), Next(8,64) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:02–19:13). - Conclusion. Filler. The content is fully explained by the two RNGs.