201208101706 y0lqb
explained decrypted filler
3DES(name+name) ECB, 44 GUIDs, seed 482
From the post to its content
As posted (encrypted)
A044417FA11AB07A 38375DEE8341DFD0 757F12357E8E4A84 7CE381889AFF12A3 3B114BFE2A5E65F5 2A24970B448790FE 38E47D56A485B8B7 DB95475AB978BADA E3383429D067093F 0EF84CECBD1A3329 483B01607A1BE801 458C7A0F656367BD 06006520A5970290 D8ABE9054870B488 68C77F557AC64072 10576B0ED019AE5B EA998192A283AB2A 9FE3A8EA86210239 966CE77DD6CE311E 565DEDBB322A661B A03D2E78BCC09FC2 452777C945E1F5C3 B6924D2A83DA415A 98EDE7B890B0253B C3079E85720F32D3 360889AC20F5C287 CFD4DB6FFD0ADA40 EBE8F0D3A9A92121 65337E427F95DF30 929166B565D6A80A E22B0C5AB2395F46 F0CF1CD566AC054B 7CAF37447D09865C EFF4A33CA332995E 9CCBBE5D3FD4F72C 1377E93224712EB1 EE6D690BFA1CE1A4 FC69E33D1DCC6BA9 2C7F00136E54D4D3 C652E1652B478599 60272D5EF26393EC 65F513A2F8C827D1 FA60702CC49F55B4 8AB80824870731C7 3202049E1AE99A44 FCE582BD7B7119EE 0671F875C7787EF9 3D2FC852D0D8E2C2 C3451EBC53684276 1B67CA088A83FD7A 1372475154472126 15B510EA92B003AA 5A03670D3F3429B9 A3F9E7AF3360A71B 68724CCE46821780 006D00CBAD13B810 42B144AFAA47F4AC 5E2B2B8E50B33D6E 68FB085156D1ED35 7F554D80CECDEE2E DAFA2B0E55330ECC ACE30848DFE1B874 F2E0B1845600F2E8 4C58237795BC8261 3FEC646A51F3A22F B4C232CA0D02D3FA 160CE5ACD48D4361 8A7E4F6330CDFEA0 2E84CDA35F6E401D DAADFC1E1305ABEE 3C31EFA27C0C3677 6625D2BBDFFC4D96 F5D094F2AFB042AC 8E7BBE143D7E153F 5FA9586026E4C16C CBC25908263B17AA EC194E7E540F22F1 143CAF091DC39734 1D5D8BCE25BFFDC8 ED1468BCB50F8FAA D0E55F21277CD2FC 950FCF31AF97CA02 B85908D99FD10222 2CDEDBF283C6017E 79B1A2F246EAC791 6DE9BD29A6D53A47 50D42E1B0AA5D99C 49F4673F03B74F9E B42B5025F96CE915 C31EE8DF978B2E51 75EA718D15731C32 778FB1C27EF7174E 0BAF9E38A54184DC 64AD4CBE2D2DEDB6 B18BAC634E1CEC4F 540BF34BEA4A9585 A765912629AADF4C 46F3A27D8902949B 7CC8640D5B46B602 8615999BE9EA6967 AE39081453CB626D 35FEB6034E6A0A96 DA3928E7E0EA7BCB E49FAABF736D0C4B 248D0D77ABB1F585 61807456FCF1F512 905169290F95CB61 645AFFBFAA9D2042 12A281332F6022A7 6AC75F59138026EE 8D6D2044E8DAC809 59E7ABF2F4B34090 C8E0B4E37D8090C7 7E08276345BF7A1D BB177E404FA7C038 52C184A92FE6CD3D 20CF5B6FB0FBFA67 4B7DB16C61FD7153 D959D24783533AF5 2B35A6E2ADC2D6DB EDE0AC317FDF296E E4C0F1D29572B11D A13363FD3D87A1A6 48EA98D21B852B7D 2FF3010C618E7B04 351D119C60C1E374 A4EBE326EAD425FF 0C70731D42D67C91 FBA61F1EEB6F7D86 675143D89185494B 6C760F2A06A2E276 FC424E20D6A78DB9 7813DF24B8C7ABB2 C67C6E7D1FE64AE6 8377F4D16C4AC45D 0EE6FB03DAC4E5D5 D1976D185780E67B 10F7E9FBC072E401 6D959597691F20E5 21D0B15EFD08EB82 0FB5AF585E352A32 365320DD6D56CCD1 B819C255D59F6ED7 56DA56C010133A5C 935739F50B0ED7BF AE1126AF6FC12B48 48D07FC4C2DEEBC6 4D648DCC56047B9E AA37168A300AC5BB 70BE7911DFC02242 E4ACF266197F5792 ED5DE9771E14BE0D 6EC0C6E9444A2384 D8AA60FD78A2AD59 E99C19051DA8CC7F 671223BE7B76FD19 9DB1701F37DE0DEE 5F583B7A42FA9629 CC8C02FB4F5867B2 23DC0DD6E95D2036 528D738DC05FE95A 6DFFFBFE597B283C C6C8D4B4C6A2B43D 128A3B5C63D1A334 A70C97D98AE023AB 5D87FC1E70709DD6 12ED9B4749C3EC0D 9A1C88ECFFF09615 BB489DC16D275914 F5B8036DFF520654 04D6B8F6D2832C90 E8440221F8C00EAE A65F7F7D2AEC60C4 7E465863C6785028 C0A7CDFD3AF54A23 1D7AB4871C5C5C25 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 09880477-9d81-406e-92e5-6a4a07e30c9a 2 bb5bde08-6a25-21f6-a603-f009baf1191d 3 92a5247e-12ae-66a8-ae7b-16aa37085ab3 4 47f2043e-8c4f-3f99-afc5-6b02f49d811f 5 6255e0e9-b284-7bf1-b670-0cd967341047 6 614bd884-b410-6325-83f0-f5e2fbfe5ed2 7 b72789a2-059f-762c-913d-513110e42d50 8 ba89570b-b832-25ce-b5fd-5fec47111bab 9 e8b55c90-c569-5c58-a5f7-1a4af0a69187 10 12e39450-0515-049c-9138-b540a103f048 11 33c95998-d661-3c20-bd69-95db976646fa 12 d53a7ebd-d6f7-6b39-a8c0-8a49e28bffde 13 f98013cb-0bdc-89eb-a323-a05b8d66d907 14 d660422f-7955-2cc0-aba7-25cf1c376050 15 62d8bc7c-668b-3b9c-853a-f3bd6c9ccb24 16 b8d772de-ba56-0095-a3ab-6d72202455c0 17 019d7760-882b-40b7-a6c7-5314fdf94f64 18 91438a44-ca94-743a-bd88-8f4ebb595c86 19 f14e70da-9bda-6a39-af16-e82801c3cba3 20 7a47ce66-a2bf-87bf-80dc-8a4f89e6ff27 21 3bad9dce-16e6-70ed-8cb3-e78b636ba3dd 22 7936bf8b-1ba1-05ad-9657-9b64e7d451a8 23 6f5bbf0c-bb20-4fc2-8e84-c6fefeaf7117 24 c299e7f9-d38b-3e05-b2f7-0d489c6d42a9 25 037ab045-71b2-87de-85dd-046f8f6f0857 26 01b903b3-4552-46b0-9e25-8f354030266e 27 527bc82f-32f2-34fb-8729-5cb9f3069549 28 43bffbb3-c1e9-367e-8fea-418e9a95b434 29 4c581790-a4f7-61e0-afc5-5646a2394116 30 340547a7-4164-2154-be53-cea6c935ecd7 31 35cbefa4-7cde-12a9-9fab-8a7f155c12de 32 c5f01255-d4a6-3d3a-8de6-4bc6764441ba 33 f64ec5cf-4a83-14d5-8cd5-fceaf3a19325 34 0885caa3-c24e-0d71-b6a0-45906ad81989 35 c63d37dc-7052-8859-ae96-abfa9ba8a99f 36 753741e2-0402-59c3-96ca-06298c0ea7b3 37 b97e926f-c780-2c60-a2bf-1968a541a7ce 38 440e464a-9447-738a-943d-0d93850e3e70 39 f9e0b3f3-568c-7953-a3f2-2ddcf61a2671 40 bbeab71a-6e5f-5bf9-86d8-149e645ef2a7 41 675ae1b6-5623-43e0-a852-a17ff2da57d3 42 10b547ea-18a1-5154-96ee-03523c2157de 43 01201935-ae66-8ed1-a2f5-ac906a705c30 44 50fa5a0e-4029-7aaa-87d1-729a4b74a3c2
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
42637672503682304768704384336213108527754587. Exactly this sequence comes out ofnew Random(482).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 34 of Run 22 (seed 528,385,484):
new Random(528385484), Next(8,64) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:02–19:13). - Conclusion. Filler. The content is fully explained by the two RNGs.