201208111212 y15ax
explained decrypted filler
3DES(name+name) ECB, 49 GUIDs, seed 487
From the post to its content
As posted (encrypted)
79B4ACCB43065969 222263DBA34A701C 38AF2088F0196409 7A700DBA525D3BAB 7875242829685F08 7717C0490701D4CD F0A8D08899B47BD4 C7616E4159C2382E C539A3CC4991E43F 685E1BF21437D41F 7E9DDCEF647A89F7 D24EA81CD93F1491 FC618590495C3DB6 1C6788676A878790 B54E7DD4CDDFC46C B6C992EE5B9EBDAB 2A13C1E8216496AB E09C0B596ED47CA2 151A9F2DEB90A6E9 B5F6451C7F4386F3 5371BADC4A9C3FA9 D0F19D9D7312EE22 F854A998AC019209 7922400891A50E5E 5AEA14040FE9E91A 2BF9A50CE673ACC9 EBDDC069861BB4E2 4DAFB074FD350963 9E299A1FE633EEBA 950E04222B625EB3 A3DCA7295470D6E5 7785C6326ADDA40D BC55B35E98272703 207905F17171D5F2 3A530D6111562267 C61CE3A0FA517FC1 397D9ED417EEF347 DD6C78A971CC946A 846807FEE4635E67 998BD32AADBBA8B4 5BAF256B31564698 C937647FCF8BB5AB 75FB970CDDED2975 8E4A2B1949E63358 2B3F85120C539468 79F6C85CE0144D2E 78D2FE6CD037F696 90E63906422C9944 ECD2E2D37EA5F0AE 2FB94185658CB105 CC847155845B6B6C EDD5C3768D8D9C74 7E6BEFD0C7F02985 6F9D234617769A31 7702B751044DF396 8EB71BF247BA07A4 E29BFE39E71665D1 9B2D77087472C4A4 BB5183BDA7B305FF FE69ECEBA8796220 B7C2CDE0A18C5AF2 8C696E89BFC9F7D3 D934FB772DB5AA4B A5B541FE17658148 84E35729C1782F0F 339EBF59CF2A1D2C 4B2EC4345A2B665D 1AF8B8E2B4D981FA 82EBDC27583E8E78 C81EE1939172977A E77CDEB112B325A2 511CB71B92E3A6E1 8B506C91CA322BD9 3977F829127F62EE 1C5FB571DFEE3AE9 9769C94C72117524 3A3900C73A59A926 CE18AF5D9A9D018C 64C0F7C0735BEE64 3103C469B660013A B9B5D42937728BAA D964048E26510346 EEE28C941C9707DD 3A9432DE970AD2A2 61577E44EC403CB8 D823B71561106D7C EE019778193AD3A1 B53E20122FC51D64 529CB8909962EC9C CA27368794039795 42A2347286098C39 9CA3BEBF7A4D3000 6E5D41CBCF58B23D 8E15E984117B48C5 800AED16F7365CAF DA2E9BC70D16CF22 94D48E6CCCADF379 B51395A6DA2B68EA 6CDA7DBB9E8166EA C4BCD3B3B68DB246 170D3E8CAEA0493B E621E7776EA10AD9 1B748DEC9E5ABE1C 6F6BBAC447CA8021 05E67FB6F97079C7 EE8FB8E0B84F268D 36C887DCF3F77BD7 C093E3C94108B7BF 1B4CEF562B0022B9 29214B1210122B0E 9D8233FEC5C3B556 6B6C8C5CF7B75ECE 68162A1EC9523BA3 9B5CA220DFD0A98C 3D994958D9548B1A D7E8D45D327F9C14 6D2A1006410DB86C A5ADFF8328246B22 915289119EA2AE5B E80E280301AA4928 3EFBD80B091AB99A DBDB906A10FAF52D 7F1AA22029A42848 927893F3B3B9CD97 0380E473BF020107 F97124F1103848F7 8B1106A9F7C91205 937A862BCEF3DCD7 45AB4613557BFCCB 95951C7C4BF7B5A9 3C16A36E6F693B92 E3BCBED0A7A19900 6C3A746C71E18239 B6952B9CB599C6CC 9516DA24A65BC3BE FC945A94897484CC 0FB1950634687031 E0496110F8180E0A 76537A63E7A9D980 BB50E789F42F50C1 7BB44ABBF214FF9A F8275FD83352D57C F26FE803E1A209BE 1F192D643001927D 33D0686D4E396213 6114E631CB22858A A451CB488D602E2D 1BA66D3A43C707CB A875C34F091ADFBE BC35BD05C9B5F594 A3A8F902D8E86AF6 C9DCB44D14722EE3 CB17B3C99BF9F30C 0C5B557409E0649B 22792EC184051B80 8CD9F101F08EB0E0 2B704D7CFB433FE6 B9C8821C4999B15D BFC25D33EE6B1562 7D9C9CEA9FDB8D04 9F9CEF817A58920F 45DA54C93E71DE0C EC0ABD7EE01B7CB5 205D6DCE55719677 022F110F871858DE 3A69001790DF387E 36AF7BE984600941 A5C9B440CF685793 43FE3AF5F0CC4B49 093FB1523834BE3A 55DFAADC3C60051D 4D23D52354862A8D 04196A67D29066B5 2DCAEF080E94A50D 341F85D9D0BFFF7F 12AF5688DDFAF3B6 C13FF2CA103B55BB 3EC3896CE35F3796 D4C43789C65AC126 4C7604361A3C1D2F F320E64D642CCF70 E5520A858E6F1ED5 E92625960BBF2571 4637D9C004BD58D0 267B1BEED5090627 7B518226C2607296 2CD0FB1946337775 251042C6E8BF81D4 057B307F0658ED3E A0C339B90411DD41 0DD9E4DF0EC7EBDD 73B8162AEF0C1B57 CE6E565A27513910 7F2B953A495623C8 C726F1A47B54D40E 211C227B51409984 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 3,152 hex characters = 1,576 bytes = 197 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 49 GUIDs as hex (shown below).
Decrypted: GUID list
1 66357ce9-538b-177a-8710-97b7908c5dd9 2 76efe069-13e6-6d70-a531-a624604db46a 3 0097712d-b90f-1adf-b5f0-e619332c7df4 4 ca3a347e-99ee-4718-8924-7b2744951130 5 8c780e8d-9a85-0d11-bef5-b9b6db5a261e 6 b3aff3c4-4eac-1db4-be91-c7e639fb4b5c 7 e1e1842e-c294-086a-b3b6-b0f3aca4a1db 8 bc171297-57e1-6f3a-b38b-4d9c2b32694a 9 f5bd3549-3d23-2555-8a13-f260c8dfc519 10 e2419f58-5ea3-7276-98dc-9492a2e5c628 11 0f091fb9-ef47-0b9c-9e24-41e54cebe689 12 ba8dd8bf-390e-6690-88e6-2c5eb8df4459 13 eaba8775-b8ac-3d36-bf87-f540f8c80d12 14 63aa4a69-03d5-7a6d-aa3c-dc92b957eeaa 15 7224b128-d7c4-7dfd-8169-53876fe82992 16 5d0bb253-e3fd-1198-8866-848907ccde07 17 5d0b6867-15b9-5cb5-9e1f-24e057c3ce6b 18 808f6491-71df-8e5b-a326-53e1efa95e2f 19 e460f38d-5cb7-74d8-949f-572d063807b3 20 e1d2e1d2-a11b-7b60-ad8b-b4eb6197768e 21 3cd686b9-5e9d-4692-bd9d-1f1028508f4f 22 d274db9f-5aa2-2ee1-9095-98ed7a4d77d9 23 ddba7355-8ed1-2c54-845b-fc0f6a2f0623 24 13e9d086-9fe0-1652-a799-89f9b7bdfc51 25 050b8fba-dc5e-32b7-b0d9-196d39d973a9 26 d8dc7631-ac12-66f2-9595-991c2965a227 27 e74175f3-6e9b-57da-ac28-bb6fb5a7afaf 28 990db9bf-119b-355b-9b1a-4a6f59098301 29 69cd38e1-2fbc-0c0b-9492-0943b6c07d66 30 ca0ddcf7-725b-2f31-9bb2-ed75d9fbbba9 31 a3c2a69e-e175-8898-ac64-d8f5418cee56 32 21b3ccd9-1fa9-63be-ac97-bff522a8b833 33 90eb55b2-bac6-1a6f-95cc-884d5ff07b13 34 40c46c25-3eb3-108f-8b78-0a6f2449f264 35 d449fae5-f52e-61bd-a856-e0e07f09dd84 36 a5902dd4-c79e-7a1a-b5a7-3be1023446df 37 742f00d2-a339-3d3d-858d-fa99796c10a2 38 010fb5ab-f107-231d-836f-5a526f7c7ead 39 c2f8bcf8-879b-603d-a859-2532832215fb 40 01629016-7786-4735-8a12-f93d3af59fdd 41 abf3f7a2-a4d0-33e3-a673-1644658c25c3 42 5739f48d-596c-05a4-a280-e61bc97d05c8 43 38103e45-f7cc-618b-bf24-101734d2c8dd 44 016c9489-c050-3190-ac56-b21cc1c3d3e2 45 bf088415-fdc1-6f3a-b1b4-561ed71415fa 46 befd839e-af8f-52e6-bf7b-6c0cc6614b67 47 a821d243-ca1e-0b6f-aef6-f6d6ed3abdc5 48 7043a81e-61c1-0c9f-afc4-392dbba80ccd 49 218a25e9-213d-6b0e-9d0a-0f3173ef7383
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
1614010627063771587742213653028611673264306365006. Exactly this sequence comes out ofnew Random(487).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 45 of Run 22 (seed 528,385,484):
new Random(528385484), Next(8,64) per post. The RNG predicts N = 49; the post has N = 49 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:02–19:13). - Conclusion. Filler. The content is fully explained by the two RNGs.