201208112140 y2ob8
explained decrypted filler
3DES(name+name) ECB, 41 GUIDs, seed 501
From the post to its content
As posted (encrypted)
3A9D5AFDCDCA9648 ADF5158F1FC47E74 6FDBAFBA69D71EBE 8F5189FFDAD89CB2 5F2AE702B15CB838 7BD35C1735D4FB12 81C853B951A1B31B 3A060B37E6CB377B 2C11FA8C00DF2B51 21C5F5B180DC7D1A DD42242DC47DFC79 CF1D83D0B4DF643B EE70BE1D5A45E095 04C0A1272A62464B C330417E365EDEDD 2299B4BA8D445F9D 17EABEDB41BF3AB9 A303A19444A3571D D37820E75FA000B7 B8DA14AD226A41F4 46DA6018B29AE824 BA4B85D5EB60B522 4F9789FCC8DFA2CB 0BF2FC22B14EBD23 910EE56431556546 95C16156E2E19218 66CD4F8AAEE87F00 31A279E2C0105F8E 6FC834B3C95F475B 4C7E974E3E381DF4 E603E93E52ADCB08 510D5852216B81E0 84E25655930261B2 F47C129ED6D420CD CBA2600D0F20A1EE 8A23306D67631F5C 6D41439F55A58D76 0AA903429E1C094C 98EC76E62B824596 917B43376E1C557E 48CD88180212A220 13BA7FB98B6C51EE FA43303B88603BEE A3E1BD6BA26DE104 34D8242AE5EC3F1A 5B1DEC22192E72C5 DACEAD809199AB1C E5BF37D9E83A2F32 E3EED351C0F3ABC3 4173DC08F3221AFC 3877D07FC8595263 CC915ECAFA2A3E51 48012EBAE26E1EB2 2E5031B2C886FA6C 1021D5C196CA59E4 3C26F9D8B0683521 64F61150B99FAA63 7A4B6DEF4373970B 3AE6F3586DD92913 41999FA48FBC2F25 9878CB9126326839 19B1D8A827E8C356 A8691446A6787F91 3F856D070696B4E2 013E67721BBDE143 B2A4EEF2246514A4 8023E771500FA6F0 3659BB9F0138195A 8EC040D0E0DBBF06 E1C9D00A6BEC02DF 7C62995B77A3A89B 9DBE9B4FC395AADA B1B0C2D36F533BA6 C12B738B01D51F95 BC0860B7187EEDD4 AE985CD688F7A130 4497BC758765CCCB D580CCE8A8CBA66F D171A358C6D2E90A 570CA8933D2D12A2 29879BB61F83BB4A CF1EBCFFB18108F3 0D131B4D384847A4 D1A15EEB55F49497 51B3EC6F2EF6A0BF CB61684B66750611 27A4EEED6D4B2E72 43B10C97CA7CE67C 9C0CF83DDF27FAE3 9F3C914199E0B121 DDEBE2FC4CD4C26F 394A64CA96444900 DB771A0EE2FA1BBA B274031361E51C3B 85FEEB79DF30E3C8 9BAF1D977BAF834D 2B14125EE6A7B7E7 E89C6E49A453283E 6706962FDE4EA606 C957D11D9FEEA5E9 608714844D0DDE2E F9494A3EE604E5BD 3CF13A402E14EFB6 BC00CEE4014D3F49 0A50CF0381769E89 421123271EE1FCA3 EC3B332A6D375A2F 858BF78469AE428D D04E2028F8A6BA73 3B65D1232D291EE5 2D31AA5456044080 BEB97A13A2A37B4A 9A2CA0745226F1F7 3D3BA1FEEA8E9B98 249BF7D370DBAF20 7C715307F62420BD E2047B8A6CF267F5 FA880734E0FF10BB 964851086105FCEE F7C50D019D320400 771A8A85F90FB004 AD26F96A084B00D9 23AFF8A279C4A094 0FBA32B390259C85 8FFEB24E968CCCC8 6BD90339631A699A D48E2E0CC0CA2445 1EAF6AE45EB6A3EE 2C5A5459423D9FF6 0B9CB7E00C4AA76C 711100D4116E2F8E 1F9DFC84DDD5B53B B97022413F370798 1B18C84911FAABBE E31E9AEB150EBFFF 0B98D066FA208BC3 071C79B7D18C4BB2 F4CBDE33AF6D1A25 89EBDB252C70367A 2A7514CE0A9618F1 2B38ACBFF74B26B6 45E8CD5849287E00 CE17151835E64FCE A983ADB6091484D8 35BC2CE012A61814 F9EC5CA8857E0429 25A84FC6CD7C141D 6578ACEA9BBD1A39 EADEDFC82138E433 65F3ECAE7D26635F 30BCBA7282AA677C E0FECA1CB51320DC 0D4B2FA6EFE7ACD4 42C6E311ADA764E9 2AE84C43FA286DD9 DDACED3F3B3F3D89 5EE2BEF4838B1251 4811FC7E6095CFF9 D8484F979A25C1E1 0D66B28C11E29872 F519F4CE3ED48226 D9AD55B0EA3C751A 180C118C26390F56 CB5B60B755A68344 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).
Decrypted: GUID list
1 c1717364-e84d-4669-bb13-4a984c1a51b5 2 fc93ddeb-be07-71cd-81fb-b61e3d09fb4e 3 d4133b32-9b2b-8701-83e6-7a7be29e5a11 4 c32c0fa3-5c86-4b78-937e-19a6934debf4 5 cb274c8c-1e00-3de9-930c-d2b2597ec87c 6 1088eeb2-6ed2-39aa-8e7d-8d1aaa2bea8e 7 c203191b-758b-3166-857b-a958e78fb09b 8 998e4299-2e48-74ea-a4f5-c5cb6f5bfc60 9 7840bd82-5809-8b0c-b27c-01a810e09947 10 8aac29f3-359e-0568-81f2-f52af7f33ce6 11 30f0b6a4-06d0-3b16-8b1b-632ac2115e04 12 827c114d-1a58-54aa-849c-0f5a345fc377 13 fe372fff-bc7c-0041-bcf0-a07b9799ca98 14 a93595ce-611e-1c5b-85d6-93031f2e418d 15 75906cd1-50b1-634a-8134-e5e17b8195c1 16 60c4fa1c-ec6a-896d-9576-91298a4724fc 17 f7f3b6c6-2b9a-42df-b17d-e4cc7365252f 18 19a4e327-c6c3-54bd-9dbe-0db9bc2d24e6 19 65091fc2-3308-2b5b-83f6-7094db9648d9 20 c739b196-1e04-2070-8a0c-5a439c7cc6c2 21 e8d0d600-b8bd-35a2-87b4-7075e3b896fb 22 3e8c8e2a-1e20-6973-b0c4-2f0c40d67804 23 591a1069-7cdf-5610-bc7e-a623f52d0f25 24 e5d7cb74-a3a0-0ddb-9404-994c29d0ec9d 25 a838454a-7ea0-791a-b145-66fb2f047947 26 f074c016-0ad4-678c-baee-1076daab0764 27 74e6e496-ab63-6e44-aabe-84afe9509cc4 28 71686707-7a18-199c-8131-4d2813a34de1 29 82a1b673-b17d-8cdf-b494-674dc69ba0e9 30 fdb7dc7f-b787-55f3-95a5-b87edef975dd 31 1489ccc0-253f-1780-93b7-a493d5e66ee4 32 52e94a3d-5912-34e7-9cc3-6121c2c7d1e4 33 fff9dd3f-95c0-6d02-ad63-fa22a141a659 34 41217db7-9e99-4d92-8b2a-0bf306e3feb1 35 e577e0b9-cfe9-5b1a-861f-6234c98fb5c6 36 9c183b25-73cb-4509-8cb3-266d66f93713 37 f9fd2739-ea40-063d-86f8-47a51b227262 38 ca3dfd7a-718c-7465-8fe9-50137f9462ec 39 444619f6-3a82-1c2a-b82c-4906383900fa 40 e1f84d89-7f6d-3b55-944c-ad3ed9deeddd 41 dd4a22fa-a168-139a-b6a6-df3e72e9f009
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
47843337803501684522365076618513645407131. Exactly this sequence comes out ofnew Random(501).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 54 of Run 22 (seed 528,385,484):
new Random(528385484), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:02–19:13). - Conclusion. Filler. The content is fully explained by the two RNGs.