201208111214 y15ei
explained decrypted filler
3DES(name+name) ECB, 51 GUIDs, seed 362
From the post to its content
As posted (encrypted)
3A9CDAF29F19CBFA EA8B637ADE3D02B4 F5A09757F27B9F94 9CD13711ECBA002F 946F36EB61DD83BE DDE6ACE0AF400058 FF4F061B710CBC60 29300F3120DB349D 9BE0A2D276178ABA A569C2D366038B87 FE616BC9CDD98951 1422851304C143E7 B56694930C0D3AC2 0E07AEDD7F0F0644 AF5C5D7975D9CA51 A873842A136715DC 8CCC65298E93DD8A 7BC28149D68E20CC D99683ADC6087C32 72E41D6D079019EB 9803D16466EDEAA0 2BB8BCEF6D61E08D CE055802FF9F06FA BD4A7A2FE736DDB1 9EE2692AD65BBCC8 D6AF4B524052E81C 4549CCBB213BD173 7882EB469CD9B7B4 CDF634873D1D4C76 F78AFAF97EE02396 8E501077DA930FD4 8BAFF579661ED58F F5A72010BB8D7812 A993CA071067076B FCD861BFB617F886 91D717C8E7064081 151B624860F1D027 CC1B8423F419438C B58FB7643D39BF39 941805906056F2F2 B423D765517D1789 92D1F14B811DB0F6 F8D7867F4A287C79 ED90020E252E266C C22EDAEA3D360CB3 E69C8B93D35DA535 C5BBC6062EEBE6E2 B4386AD7BDD80512 A42DCF6EBD775F6F 7055428E52F7CAFF 2C96F8CF70933CBC F7653E8F1E025AC3 93D69A5FFB84D127 0EDB0DA0A12E2B2A 5C147B323E7EAA2B 1AD3FA144939D6D5 C8FE9EAB4C25042C 838C27C47BF24B5C EFBA72EE1100D6CF 6C541FB9D2025630 5C228C3A3A74FD9E 5AF748764E62706B 03019089F3F3D8D2 31493210F80766E3 C4DCEE0EB1A6A191 0D0319E959646579 5EC037198E75DCCA 1C6CB0E6E2749F59 49438EAF23C04A9B A86CDE177AE77719 58D4D054F3A37EE5 ABAABB7532451F57 8C957300867A1209 6A32E37778D7C2D2 C220B4DCEC5F115A 331952B17AD77020 25C04E9406180F37 984DEEBE85832817 7EC9F7B60D831C0A 7B477BE90F2E0FE6 CDF6ABD6EA3B0571 A70DABA2142F618A 30C7C99317C4E8C4 5DFCCA003195F2E4 03128F445800B3DF D31F1B8B6C4F2C5C 17305A805B93BF72 1A2D2F8F5774EC74 E8BB979935E4B813 2A7DEF05FD51A5C3 6C84084A92852292 6A90F1104EE9058C 2414DB1134B0227B 68CAD7DE77FB630A DEB7D23B727CE7C7 34A1C634A49A997F 3B75B64BC7F8CB91 21EAE964C8450F6D 0A44AB77F593E92F F1EC60EEDD209EC3 3FA2463DDFB4CB8C E3B33E9AF974554E A4FA751098737DAB D4056EADFB64AEE2 39C430F67DC3F751 557E86D86C0284B2 45C486E0AF87CE9A F44385E369DD1605 5A04DC4EC548C861 ED99C1F17C924925 2CCB5F1A2DF99A6A 9061D539728F837B A75F33190B01F876 12133BF00ED253B3 973E98EABCF7C1C4 B1F1B973ABC1C14D DC8393D51F37581F B6084DA0535F0A0E 10AA18C7F270F87F 0C6D351C2EBB1F47 15C61CCE2FDD1C17 453E471FEF93B7D2 A4EB62B85E5F4FED 4AA30BCEB84B645B F906814990055045 0F8FA4CA8813B44A 03AFFEC95904B2FF 12DE47FEF4FEDBDB E99548E8E2F5BBED 3AC535D5FD8EBB48 FFB53AFE1F1FF47C 6A85EA4D5E4830E5 D929C19E8D27B61B CD3097EBD8DE63FE 8B76034654147698 658D61344808DB12 8ED02C7AC75BD3E3 0E3F31988440F2A8 C140BD5F0D33C9AD 4AE37A2B2151C975 33F603D1A8C8FC9C 97CE577D357FA63D 1ADB44A5E7E9BC71 5BEFE35E62A7ABD9 1302504388D06354 3E185086111C313D FD08128106649DC1 38E8EA072E2A6AEB 35F90E6873A6F93C 92845BACD3D0FCFB 4091973D72E96C3E E8EB27B51C09CD1C DC07DC5B7C74CDEE E8A7C7D4DFA77FCE BF3B5762A866781E B900D222FEB6AEFB 1B51248D333A6E68 85AF7EE62707D26E 516876029381711B 7C4949F92604805D 90CEFB683FA83217 62056258E7E4610D D2E1D12203EB545F 19C094924D26387A C6031F3F18EED2CB 075DE17A8E49A00F 5FB7CE509A0B67E9 DD45A7006C0A6F39 E6A4746F5B5370F1 B2838FC7D1450C27 EF085AA3E6855389 A9AB384F7265450D 479942223C3FA272 50226BAEEEE504D1 EE5F9CC71BA182C9 64272B566D9B9686 5C9D0DED4D0D46AB D3A3991A333DD26A B89C69864919386A 978BB792FDD9346C 7BF42915E8EFBF85 7017BC43BD8A0E00 A8C3C9C041FB0376 21F8386DA9265A97 573AB29D9395DFF3 53316B4A8B2B8C17 CEC3B7782159AA0B 9ADCD1E3DA9A842D 7C411BF736F9822F C7198194391B8F9D 499FB5C2FC87E6B5 D04EFA7722B11F9C 675E05A57D56E53A 2F9B5728739B03DC 7F3B7243506B13F3 1226E2D71EF18384 AC7E67F0AB8C6A35 41F7B18641EA04CD 32393F9330B89E8F 6ABFBFBC6C8426AA 23B85BB8C8847471 358F5B2CA54B2834 E745249A3A4B0956 4FA69E94D47079B3 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 3,280 hex characters = 1,640 bytes = 205 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 51 GUIDs as hex (shown below).
Decrypted: GUID list
1 d9b6b92f-9290-7991-bd9f-1a8074d537b5 2 0ca4f47c-1ff9-02c4-8877-57a714facdc3 3 d1a2725e-6965-7c22-88f6-dc0ceb85b13f 4 b528773a-b1b8-74aa-a016-ec8b901f7a14 5 8a3340d2-27c5-5239-bce4-75150ba57f62 6 767872bf-d853-82ec-9d23-f3b9abdad6ea 7 34e48da8-55cf-0601-b3fc-6f3ddfa22972 8 6d6465ca-be84-052b-aebc-537f665964be 9 25937a27-1b6e-647e-90fa-8570458d85d0 10 f0875ca3-5976-6b5f-8577-271d191e1ab9 11 142ec0ce-2640-8563-bd52-4431f9db7cc7 12 7f203e7d-f1ed-0455-a152-72a09747ec27 13 1ac02a89-c646-4a6e-aea2-ad1d1719a8ca 14 924defc6-8984-7135-9caf-e2f90d9ffa0d 15 12c0bb74-e03f-3bc6-8f5b-eca49f339fc7 16 319d9fcf-38e7-0dac-bd01-0b99ceb8559c 17 b5e89fe1-74a9-0fc1-b9b9-f886b73f723b 18 9022fb5f-3693-342e-b2c8-4d04c1dc4663 19 d7fc1389-e6af-482f-80c0-d5ef09e66c19 20 b7da9ae6-3a22-447f-8f3a-c535da3b8417 21 844183d5-e8b6-8fb1-b1b5-035b2ff2b104 22 362fd275-54b5-578a-91e7-fcf560ec4af7 23 b32c9582-e8e2-1663-b700-54c8155ebf1e 24 d66d91ce-3eb6-4598-9f1d-e9e3cb145978 25 8cf7161d-86da-1c93-907b-5b70104fb448 26 01926513-6538-31d1-b900-375472af5bc1 27 5e89faf8-24dc-1198-965d-197f68a63ada 28 21e24d56-dec1-8bb8-aa87-45eb0b441146 29 c7ad2c47-96c0-4ac9-8d1f-ab3270d5cf1d 30 1e5d021c-30a7-5a2a-9df2-6cdeab6aee7e 31 d108c04a-e011-7c46-9533-6fa12c9fe366 32 6dbd368f-db20-7e0a-9e1a-f3cf75d03a27 33 211447e5-aa23-7884-b7dc-68c95721856c 34 fbb603b8-b465-0b2c-b793-edd53a8f98d2 35 cdabd919-1903-0933-87e8-3a8a83b6d22e 36 89f8bda6-ae53-4fa8-99ac-ca64aebf4194 37 79efcdc5-4ef0-8bd0-a6ed-e26ea12ea485 38 5aab11ec-622e-0a70-8d46-0e91d5ada96a 39 136df8a6-1d3b-3b2d-b5ee-f474291ad289 40 90aaf03d-1636-4c9b-8337-a7fdeffd7d9d 41 cd24485a-62c4-3b6d-a30c-3645199f1d9e 42 a1158cc9-3aec-2367-9c1e-169d0e673884 43 35a9403e-b660-295f-a209-8f0ac3e19076 44 4a8855f9-005b-2ff5-a26a-e9586630f9eb 45 e28b5436-b6f4-60d1-86a3-f5e4e05bb892 46 cf17d149-983e-5e8e-809d-b10c0fe4bffa 47 2e1b661e-b580-4caa-9a92-570a775443e7 48 a86d4063-98c2-1390-9f94-88f322166c2f 49 48dace58-982d-4ee1-95a5-07dcb7dfd3b2 50 301a720b-3089-0767-a48e-914ef8885bf4 51 6d09fc46-847c-4052-8ae7-b6bc98bd2496
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
707758006680473003448514131845777004803432226541404. Exactly this sequence comes out ofnew Random(362).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 46 of Run 22 (seed 528,385,484):
new Random(528385484), Next(8,64) per post. The RNG predicts N = 51; the post has N = 51 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:02–19:13). - Conclusion. Filler. The content is fully explained by the two RNGs.