201208112240 y2rf2
explained decrypted filler
seed 423
From the post to its content
As posted (encrypted)
2C046043B5765969 F6A77E9B708CFD9C 7A8E5F0F0BF405B4 55D6F532F2FE1637 E296BFEA999F370B B34335F94BB53C28 1DA35773E3C21EF7 FDA7E09F1F3635B1 2BE36312FA108ADC C9DA75A446D9E96C 27BB6F4D0F95FDC9 F7A39970EBB9CC9E C1960969D4426F92 CF49FB708918877E D65AE1D874EC68F7 992931C43DA68E9F FB260955C14ECEED B1AD7AFCB91C327A 1346EC9CD0846C6B 139EC53E5089909A CE2B258D060591B9 747570CEF71F2A3F DF4FD9C535D22A00 C66A6448EB05CF00 8F4BD7D49F321950 761FCFCB56A3F038 AF870A9C1C8F9349 1797B516F29BB528 8197B7FD3770B741 4186AAD9C2EF788E F5F309B32CA90B7D D796F017DC98D98D 4ED93DCE5B0BA3BC 7291DA9BFC40C5B3 ECAB6A0892772D73 2B53CC7A287EC068 5B5742448F2BA750 C9C485F5DBA62E51 E1D5E5E6A6B5D0BB 73DEA9C1A434699F 487E00034C226556 4FFC734BC2FFF294 7A57C9DE37A27689 72CA4B81E9A9531F 011C83C35B8185C5 DE48D48C210CA03F B81F5116D1C22C2D 2C5DC30AACEBD572 3D405D49F81ADE66 1717DE3FCFAC804D 486E65CF95824F43 02CA8D5FCF76117C 8EED934F3730EC72 8EF7825AE3424722 BFA7FC14F3F83476 D07794D2E99E1EE8 B48A556D44975955 E27E948E2CF2EA51 1B0C50736E97390D CA6C4E349A2EAAC0 B6C6A1D5EB03DED8 C3FFDC3C96131D9B D0A7913138B53D2C 8099DBA3A5E8D4D0 99FA9C8E3FF59D6C 01FE7F76C5161673 A3E60131C03B98BC C8714ADDDE553D44 C83AD0C2822DE363 E60C3BDAEE8FC4DB 63E7AA8E45A81FA0 4F4E19E7D14FCF69 E83B041FE745BAA3 8C27ACB0104918C4 E234DFB9464E4C03 C46A5AAB2F897199 4FDD76E2504D4B2D 636853A352C37302 303A94144B4DAF87 8AF1CD638F06CE16 0DE6640DC6A754CF 525A9E58C0DFB207 EE4598A828B81D88 8AEB67A9D2EE1539 71768DCDBC2C2A89 72C2E7056B6D37FF 98C120D28D5DE9ED 5846258A3E368A63 699DDEB8183FA408 95FBB69158F1257F 5C02E6A56CBC5791 F80102B2215A6BA9 88C946E78994EAF6 D2EFFD1727D6E4C1 F8344AEC7C790524 9F05B16AE6C74E65 8AE58299E3E2EF62 8F8B3D2B07D6A0EF F7883945E3234819 EB9040C0154A136E 3A0A251B7A6BB1FF C26117A380F08318 CC9D04011C419F88 1DF61F89B6058058 C278C773C05EB9E3 0A0BA9CD6F2716D3 21ECB71713346BE7 A6D683E0C67CC244 7CD7D1FF729C3395 BEC1E422F9607997 1C2C299F68618B02 4B7D578E6ACDC5FB 48D7830AC439E234 61455B1D46931BA8 B7000D1B69AC3457 9A817A2E6249649C 4815F9E3D4892031 AC98FDA980AE6565 B1BD65C641CC3AA3 DA10ACAF653056D4 469B8A717FC944A0 E3936C077069E5DB 266C17FCD89D926C F6188EE719B4946D B242E3073E1C4D51 4FD7DFFB661881C5 8891361222F232C7 9EDEB9BBEB55A1C1 5E4666950B8E04E4 141DF37070C7D0D2 83D59A2820CC7FFF 5B167FCD85F618C6 33DC0F0EEE12ADBF FB03F121725F0B30 F1D51DC01AE019E5 1F232CD80220FAB1 4448D804B7DE3E16 E5A44C6F7CA64DFC 02875A127A36D445 455036AB4D50223F 5186ACC956A2E96F 5BDF92DD5F41E8DE A3882C9E1841D116 75D617517D0D4D27 6A271E1C51416918 EB1C376870AE87EC 54BC0697E5A2261C C70AA46BD3A1AC67 62FC082382DAB44E 5940559AD74CA008 A734C280806C4D04 B3F1A3400297CADC F5CFFDD5DD69B987 46E5EE0B4E37473F 68857C24A04CB9DE 6DD4F163384AD1BE 79514666FB53503D 69A7ADA8A57FE9AE 956153046E65FEDD E9FD9E022424585A 9C2ADB586ACB37C5 AD1E876D7E4D645F 85144D774AA0C13F 2530C678266E505B A05CDC64A6C4FA06 DFB27AB5632871A0 98435C8FAD8A11F8 B8BF8202932D4A81 DB3C216180E6BBDE 260ED4980F0BE22E 701E66B7CB3024C1 6EFCD1C224244A2B 4B0E3DF646255CCE C452CC836254DAFE F0DC13182018D9D1 D6E4491E9BD7FC7D 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 9e76c383-8977-669a-85a6-7c7bb70c60f5 2 68dbbf0f-72e9-85d9-8ab6-073609bd5cac 3 75888612-0c83-3d4a-ae3b-abae9a5708f2 4 9f800177-2a7d-7654-83ff-732e3ec2b26a 5 aa8c0df7-878f-1813-b29f-c6e7a125683e 6 81c6ddbd-d6b8-1506-b1a8-e42f51f9e97c 7 c1c0559e-c8ae-37f7-81e7-6a90415c2b66 8 ed3a5188-2cfa-5eb6-9534-79598f752b29 9 cf39041e-7ffb-2bf7-83f0-f80d2c344151 10 fe249560-f5d8-240c-b601-0fe09e1bed71 11 ac64ab61-c6b2-8af3-b3d8-d798b39c5aee 12 c51dce85-3bb4-66ad-8e98-17a2823089ad 13 a3342041-6990-3a5b-a989-cf89541f1190 14 11de1320-fd47-4563-b248-81715a9579ea 15 e87566a3-d916-0dae-8449-7e68542d01e8 16 1e3407ab-ee48-1ba6-9dd6-b11243c5b075 17 0a2bd8e8-01bc-60d4-a918-faebdb32d6a7 18 b3e51dcb-e3dc-2b8b-b69a-ed6888e438d5 19 2a68da81-34f7-1acd-97e3-a5f96aa2b330 20 038f930d-38eb-0f50-af9b-604d1391a898 21 829e90de-9731-0732-a5c1-34d42665cf28 22 7d4a5f9a-5297-5825-b134-7e4fea4e803d 23 fa4351f6-9543-415f-a197-1fcb0ebcf332 24 ece2d926-7fb7-7a9c-8414-63b67be1799a 25 dbb3baab-2ae6-1739-a3d8-f885124f8c37 26 01b0339a-1850-524c-82a5-46cf8dadb1da 27 7ecc435a-025a-59d3-9e6a-f5dd8bcc8b6e 28 c3144b44-6e16-7c65-bf57-ca0f261ee4db 29 be849ff7-139a-3ee9-800f-a0e97dc5815c 30 e6a6eb68-eba7-6a30-af1b-54b6a8184825 31 8ecb21e9-2df7-35fa-9219-646b5d7c204b 32 2a8acb42-5227-7a40-b335-055f3f846295 33 b964ec33-b0e7-313a-b2d6-575effcad514 34 f63fd5b5-45d8-57e7-a733-0e54ae0466a8 35 8847c747-8676-3cf5-80a2-de6574463d75 36 fec76322-7767-072a-b031-03a78f34416c 37 7cd69fed-5c60-35ee-b75f-0f180ce73441 38 442476b7-d0a4-571c-b049-b41c952dfdb9 39 a199bd26-f99f-7a29-ae33-54ec6ff35dd4 40 51aa94ab-8c3d-1b1e-a20b-cb520055e440 41 4717e258-e689-2657-a334-aa73abc8e95b 42 6c7ff14b-96b4-24ab-8b09-88278cc0cc2f 43 0af2ea8e-a911-1d4a-989c-9a49b12cdb9f 44 7ebc7416-bf1f-1dcb-9030-19ced4d15d69
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
68371135228634016210054715573637353035712211. Exactly this sequence comes out ofnew Random(423).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 60 of Run 22 (seed 528,385,484):
new Random(528385484), Next(8,64) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:02–19:13). - Conclusion. Filler. The content is fully explained by the two RNGs.