201208101720 y0mll
explained decrypted filler
3DES(name+name) ECB, 44 GUIDs, seed 217
From the post to its content
As posted (encrypted)
E9C992B6AFEB1CBC AF6E83A92BE43F49 142FF0CEE4CFA529 38EBE1CEC55DD36A DA9D6094FCFFE2B1 67ABA8E31C116483 C2C94214489A85F1 0612F58A62E91927 65F825F7B942F682 99C5D98DDFAC54EE 291DAA02B04BB0CC 0ADC513F882B0AE8 ECCF13E30940FA01 FA0C42FA8A8042F2 1DA762824ED549C7 D922EF75196353A0 FD84F9E152BA0095 506A9D4D08E17CBC 0994D212FC7E8188 00319230C0CCFFA2 27F330D11FDD445A 05CE479C58D4DCD9 24E934ED6F1DF101 311175FA4A98B727 BA22D1F81F2E90FB 28352BFF1378E164 31DF89BD79C8FA19 394D6008ADA64E01 5450CB9381292D01 944B8B6BB07C4E16 6EFB6B6869325501 66BDE06D5600A6A0 F084D8BCC31B4A4B 447509CEDA7787C3 666D620A920E622B D34D894EA685B502 A1761FBF9E10EEE8 9A802AC31BC7F354 C2E1DDB3D5D918BB E61BBFA6E3B75F79 14D505A2271C3403 4C7F62069B1FF853 2C20E37FE4F6C60A 1AFE7AD221D51E2F 38B3478C9CC68060 8742F86B2D5CD731 27C431E0E145136D 7941302C63C4FEC5 5B2D568468E3DA6A 06FE7CA596FEF42C 1F337098B763320E 3A9C057FE516CF74 E9BD46D822F80B0F 060479B8445DD300 1E67A0DF76D10C63 BCAE898E86CD898C 74745E1A92249EDB D24DF91C7205388D E2277BE674E58F02 839C3DB63D5A8211 DCDDDD9842388D9B 712F028C9BC734A4 BBB4AD00F64A1ADE B360107A7D8706C2 0EE27B799CC3F16E F4E28E83A6E557CE FA7B3703FE34473F ACCE4CEC11C4EE12 EC93D54849D2F3F8 4584A55159D04244 D77386B1EADDB120 3F3442DBEAFF017A 15ADD06A3B6ABDB3 F2E1001C47266618 565DE27BCB762315 1AD7D48940AF4F37 478F850ADFE58748 5EE778A27F0FCDEE 4A28AF55EEF6A044 A7D8EFA2B50350F0 0DC413644484788F BEE6F6E708FF12BC 8BE787672701978D C7334C5D1B610CB2 E76DE61C04E7A334 059044D2815E86CA 99190D2740CA0E48 953DA8BD8E27DF8A 65E06BCAA70C455F 760F6F639C04D0F3 323A03AEDF950CC9 6E42B79CC18A2F17 0EB422E1A645B563 9276C0352C88639E 47CC983DE5DABB55 8A975E2EF7F679CF E605E8D63EED93FD D8391B05C10501FE 3903D01072DBE86F 5E9C5B70C05E8204 A865634BB8F13418 86015BAAD858174E C3B2EB1D7D4B666E 7F473840D7600B6E A435C70860F0C8BC 5B80B02F0E7E3437 3CFD73F28E60AC04 99471344BC1B6A85 B099944A8C635F06 19FA17C06DC68F65 D4B944EA947DB515 89EA241E7AB468B5 A52C4DDBF1F690F4 8ABF58D3F8674D9F CAA60A25C2C2A63D EE47899172F7AF1A 1F9202A2C3182D67 51A11D67CCE39410 8877726C1B215456 0B5BA8B65DD70369 77E814BC29457245 E7DADF9B4F6A2300 2D3DBCCA2C6FD85B C25659A1D410AD50 8504A1A311609517 3A131E1ED5EC5815 6D90F88F449A2E14 33E9679CA7C23F9C 56EA1FBFA5D5B5B3 D3F11B3B6B16548D F43E843BBD450B7E 8844F56E04007D74 6B30FE4CDCF0ADEB 7FCDFC0A06D3F7FA 9B577267EC6E7068 70BBD7D70E3B569C BA0DFF71901FB3B4 B8E0A4C88465013D 6B58AC20484D86AD 2468AECCBF609117 20D820ED1805C3E7 AE9987A44E45B311 5405C64090E09093 A8E600571B74D87B DD46AFCEE86357A7 5D4DD6F7140872D7 483FA40DEF0A650A 82F868E5BD60DED8 1CDEDCC5A58AE9D1 6DA94E488EFABBA1 69D4DF93A00C457E 933246C5E72403BD 4053BEB26BC69B4E 521BE709ED6C1E37 C2AF7F2EB87366D6 A7513B6B7AED45DF AFB326BEC87E924E 97D485F0C000A2A2 E2E954396652B2FE DE9B3C0EE3068B1A 14B0EC0F3FBE4693 3EA342ACFAA4C037 6E2747B7D727C675 6ED805954F2CF98F 7192114F6A7EA171 282F922E37CB34AA E7CFC5F1D6B9F890 5C3F10A81541469A 3A2C14DBE2BC48C7 32E2D347ABEC564F 574F577857AB3F42 860158FE0BFDD134 2A97F818642A856B FBAA9AD4995E8256 A8B18048F0435A6D ABC84DEA51FEC936 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 de906839-535c-0714-99d6-e91c0658603e 2 09d41b14-aa19-4884-a3ba-aa61e3adcbe4 3 7fc097a4-b005-422a-aa6a-fa27efae91d8 4 662274bf-9d3e-77a0-b9c6-b34bad8f28ad 5 790fb5c9-ea86-10bd-9f72-a2d2881af264 6 4a0f6a79-5602-10b5-980c-06706e4c43dd 7 114c706f-7bac-1274-b28c-c4a29e5a10eb 8 189fc738-f7bd-2e5e-ad28-771b7bc86ecc 9 2ddd22bd-d450-71bf-aeec-5ecc44c32d52 10 cc3abe10-cd79-205a-b6a0-2e69c37296b8 11 a4aa0b61-8020-1686-ad20-6dc84fe5d31e 12 6f6d0474-30f1-7868-a64c-2fce33734f22 13 1fb39a6b-4098-70ca-b0d9-6509db05aafe 14 c523084d-599f-3400-ba57-2968ec5dc2fd 15 c5606670-7e86-7245-94d1-1487c139d97d 16 c6b339a8-d1b3-42ac-88ce-157ef0a87e49 17 5b624cc2-1491-0b6e-b0d0-cdca50176eaf 18 6b6dcdce-0ee1-48a6-abd6-a4aa1536a60c 19 5fbb55e3-5e0b-44e5-b425-1dedf9b1c249 20 3d333ea4-fe1b-32cd-a35f-1449b73ec8c1 21 5323f7b7-2aa2-5b01-af0e-669393152965 22 64f65e76-fdeb-0cb2-b32a-97e668c0f670 23 32e727a6-59aa-590c-95b2-8d2076bdbe60 24 103d742d-4399-7bb5-adf5-094d09c89ed4 25 9b05641d-4f7d-8f40-a8ea-23aef8a437ba 26 fb738047-6789-0cab-aa1e-1a21390d5c7c 27 d47618c0-3be6-4d93-b9c6-63be6c75e58f 28 1f55153e-5dfd-17e8-b4a4-9f741f756dfb 29 f917282b-e340-4dd7-8a59-780ceb8ceb6b 30 dba4d755-4b4a-70a8-a02d-c9b264e97be4 31 1c17f520-fc01-248c-9e55-5b692e2810af 32 9749210a-bfa1-5eda-9e22-02d05bdccdcb 33 490f45cf-733a-5b90-8650-e493c2eb1266 34 7805412e-d0c7-3c45-9965-6c5abf4d695a 35 de4a5633-3875-31fe-88e2-61ff08a6f98d 36 ad4fcf6b-a58c-1263-81e6-876f05f8fde1 37 43c5b50a-c8ec-7a0a-9a9d-10396debed2a 38 eec35faf-57b1-2bc3-8b4c-1864c84206b1 39 9b0230c8-e0a1-4fc1-8f1c-a267d691a68e 40 eb605302-8a16-1717-8e1f-b0f4d1794bb4 41 0c8dbd3a-26fc-0035-aaad-770a063fee29 42 b35129c7-91bf-05b4-9186-b8b7f4a80779 43 8465d33e-54d4-2d0d-a8c4-3f4f10e2f41c 44 88918b1a-b6f3-78aa-a4fc-035d5b62b35e
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
04471112721773740443505780414725533172410027. Exactly this sequence comes out ofnew Random(217).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 35 of Run 22 (seed 528,385,484):
new Random(528385484), Next(8,64) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:02–19:13). - Conclusion. Filler. The content is fully explained by the two RNGs.