201208131920 y4zxi
explained decrypted filler
3DES(name+name) ECB, 59 GUIDs, seed 373
From the post to its content
As posted (encrypted)
CF8E740ED34B2341 D88D02C03D3C7E17 22223FF76F036AAE E8C110E87034B74A CBDADC262B0B41C0 4435979E729DEBE6 EF77AE49C4220463 75F87325CCFBF5B1 BB23D0CE8B258475 17DB45DB280C3081 99C64C2C43A08397 61BD2C4DF59FF06A 2228F920AAB14A3C 0743FE2C7CC590C5 25C5E7B5266707DE F6F70242576781B3 13BCE8721D7448C9 99994DF0F885810C 24608C012A7FD140 58FADFB99F6C506B 0C030E0EA5C36AAA 6D17AF2DD425B688 E256F4807BC0A4C1 B6543362AF02B0B6 127842955EAF0E05 52184681D4B796B7 B700D88D0C1C0A77 E89E2C6A0ED3AD07 414E10A8F14073A3 493F8EA13909D541 688E52CC4A11C245 E31E10EE5E03693C 30FA812A340534F8 3B3A9B57F2016DBF 8F9CD82488D31132 B87B92BA5C44947F 5202CD58FCCE99D8 0A386C0FEF3DBD04 B81881A0795D8DF9 5FD5B9F7164B8726 58B57FA74816B398 30F6DB29C322D774 183F27639CE04385 CB61FB29EDC296CD 864D2BA5989A0D59 5F3CC2C1F8B92B64 3570EFB6519D28BB AC2FD03A11B06832 C0C08AF43D80B6BC 9CBFB601CAF14493 F878C57A9832C33D 32D467B875CA255E 7B50B53738D3E9B9 6142B1931941BA67 0B357D53A1120F64 CA8A6C98B81FA275 04E519D43803CD5A 94B6E55A068F74DA E467B84D0F8AF64F FF39060CF87FF021 C87A58DD159D3B05 51B3DC96AAC83D1C BE0C6C1F300D1A01 9AE236D76EEC19BD 0AF4A38D42E5916F 28C938DB84823B98 D5EA6038FF442386 7FC90763F1C26534 B9FEA183EDF825E1 B2A839B7B8DC153F 03A9DEC06CD077D6 1FDA6867ED12169A 06CA6650010D6174 D703F040A9D5A155 39DC3105C9CF08CE ECCC3F695B8A3ED8 B21520B8F78455E0 228648ADC0C26D0B A716EDD7EAB59DCD 24F9B89A95A40135 1FD32CD3EF721B25 458B1E81191E2A85 73EB53805D367EBB 1FE87FA42A723B7B 165F38599649FED8 A0C2A7F8AAA584E1 0F5E326C2BEB9CD4 B014D7CD01B4CAE5 C77E098025CBDF87 9E77DFB427FF7F06 1E6D83C8573C5C58 3C4DC60F70EA70BC A84067FE201BBE25 1F0AF389BEA2E475 EEB773DC750B8A93 EBE3CF7EA145595D D6EE0D29126846DA F9F68FC43577AE06 C9D2C9126C149784 9442FA1277CDC76F 162D262A6C10DEC6 B706732AB2BADB54 86EC922024A735D3 BA920C876AEE34C1 43D19590CFF69212 7570C060E4DA6B7B DAD2A434945DC3A7 720800B0F6583D62 2B10D727BB67E65B 1FE875593B225FE0 F54A81B9002B1E53 6196AAD1BA81BBE1 8A2D83940A381C38 6833A573E0FCD795 7B01D0D4F51D0322 F2F4E0D78A4C2EDF F02CE80170D9F3BE B920A0246221D387 08BE216364C5A94D 53C3B0E939A6F5EB 6F1E542199DDAE7C E4EC330C72410A91 B84F645E35D2632E 180F5A5F7143A276 216534FBDF823420 6D641AE53C4EAE54 BB2DA55742388382 70A3D60DC06AE2CC 6484AE10EF5F2F94 21DCD30EA6C0EF3C 8C82F22A0073A665 C640300CA69A3617 0895BF11E5E79375 E37ACB348D0C8CC2 5F67C6F13CCD9E7D 46446829610285A3 5DADC81FFB0DD058 8435F718F3997CCF 1C854DB6D33F1C6F DAD48CE932CE2EA9 36E2DE8CBA1E688C 5B73781500C78A31 CC3F9F3AE7A2DA57 9042179BAA63C3AE EA3B92F1415FD249 EE0F3C5F9F5AB666 56BAB5C3088F265B A6DEFDD4C8904921 8B8F80A390B465F7 46EC4A389387AE65 B0BC9EE23A882B6E A4A5D4FB4799E500 EAD24CE77CAC0DE7 94867FEA67A31A2F E9825015BE29B6A0 ADBA7C57082C675A 083AFD44403550C7 BD629CE6F2A56DBE 564A586F1FD5B37C D2C0562F948EA89E 9AE4577AC8822747 B8183934A6798678 6F5AE3B59CC45F49 D4EDA0AAB5A2D130 9B25A08EA41FF3C2 35619F793F993F3E FEBADB4D5E7DB4E9 DE357D6784BCC22A B7674B363DED0E1E 61BF8A793CC1BC79 B5C56D8FBF6BBFD3 9653F1ECC66F1F44 77D8BA26CC311CA7 032337E64ABEE2A9 891FCFCE874D85AC B9700E7BE8C423BF F36AFBF848AC3685 047A9BD05D6EEB0E 3507C9E02BB33AA9 A2BB85F0DA8FAF07 2F855C57AE4BA39B CC00D099EC2DDC88 C48F4D7E4F08A056 86D44085D4A04D13 8EE5B74C218CED75 2B885F3B64118EE6 4BAF5A4832BB4B8C 40015ED44E283A51 3A621DA8E8FA09F4 2E0C76B8527E4DF2 188E5153F6745791 CF0D7E9AB8641358 50A55B68F34A92AD FDF0C122209B5736 2F02D13F60F71F35 68651E304EDE6DBC E0AF68C606F3903A 4327CEA66DD0F096 58DE922677B24A54 8C0E3180DD7B7DDD A41989987A9B9E7A A545E63439238F50 6F4701D4E401AAAA 39BEC58F5EE0E366 935377C80ECBAC0B 64B6F826735C71E7 2F5BF67D508927F8 9C267B048EA440EE ADB5E9A45F540C1E B32B407E89179638 B6F6528A7169F1BB A0CCE837C7B7D5F9 2332DE71984DCD24 D3AE5463D243F108 F739000E25A501F2 73FF0D1908873093 6C64933DF2F31B61 58D4DB9C2668C143 19F30A0F24A4E87D 190D2ED35B0D72FF F9FEAB63D6374368 AFD67468802111AF C2CF05A7B1182BF4 050F95D80255E50F D93CB03067151502 FB5B74E8ECACCDC7 5DF54D6D7B3C178E A12B4BDDF0B1EB1E 9F54B23D7E773EE2 20282C8113376761 0DF1A2F8DFEE1290 A3C2833F6E5D3D4A BD255A71786DB3CC B10F89B38F3DB21D 92F2CCE31F61B0C6 4C4371DD8487EE8E 12ECFFDF2899BD4C
- Read the ciphertext. Strip whitespace: 3,792 hex characters = 1,896 bytes = 237 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9A858DE45F56D9BC9(name+name). Key = MD5(password) =0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 59 GUIDs as hex (shown below).
Decrypted: GUID list
1 371cb4f9-4fcf-5383-b058-b88651b00fea 2 85b47aba-a339-22ce-ba72-830675171431 3 92a54417-7a5b-4ab5-a70e-7336889180b4 4 517665f2-ee11-1ee1-859e-e477552bb49f 5 a882ebec-95a4-597c-8e2c-32993bceb247 6 81df2be1-5674-475e-9eba-112975c0b425 7 420fdaa2-067c-0d5b-ad99-4d2ce9863f94 8 cd1d8816-25c3-5eaa-b105-6a051d729b37 9 f62fb95d-cc38-16a5-bb3f-be937b605b88 10 88cb5a58-7f4d-7e5b-94ed-4edb7f6986c9 11 3cde5b42-722e-0e81-bcda-e80c26f95200 12 3084057d-d165-6810-a5f0-dcca509487d8 13 3cc64f40-55d3-0aa9-bda6-e0fcac31c259 14 099902ec-13a6-4348-86f2-87d18f3704be 15 7e736f72-a355-04d4-af3f-468aeabadabc 16 b1569037-77ae-84aa-91f5-5deb7dff1cd8 17 8a03c393-b24f-5851-9799-13649261edb3 18 1bcd9c92-eeba-27e6-99fa-3bf485bcdb1d 19 ca0ad159-2125-6361-88d4-8cd92d8efbd1 20 1c02e358-6b08-640e-94a4-3d59b89b37db 21 cb6a9b97-a4fa-3ff6-9425-4f2fbadbc05f 22 e9537f30-587a-3ec4-b9d4-1e1240f85828 23 a4949faa-8ffc-0a84-b549-7913e926d458 24 c8f05800-8faf-3044-a86a-e34604ce848a 25 34c93008-197f-211b-ba24-a9aea4ef20e3 26 9d5bffa6-7310-3d79-8305-4dad5f76cf93 27 65ad041b-a774-5f7b-b2cc-5f637eae4c19 28 6bbd3d7c-79d8-7acf-b3f5-6327b09c8bd8 29 eab90082-934b-5609-9eba-8a160d35b5d0 30 3bb25ace-c843-4314-b961-862680ce4a3b 31 e1b990c1-d34f-856b-9c0a-6d7da54cf29d 32 855daa43-7b02-665d-aaa1-556345c88fbe 33 28e2a9ab-5522-2945-968a-5c351c3216b0 34 472dc829-4e85-32c9-926c-9c9c195bfa68 35 ab1b5627-3882-76ca-9dc6-715d89f4187b 36 f0d4e776-d984-84aa-bde0-d73152df64a5 37 013823b6-78e1-0a79-b198-9ea908bbe906 38 c76cc6e5-f48f-581d-8292-1da94fb97b74 39 feaacf8a-019b-14f2-b621-ddc9cddd5d1a 40 0c8f760a-e4bf-661e-8e6f-9efbec144a83 41 ebb594cf-9fe6-77eb-8af9-57c6ea19270a 42 98c9bef5-a628-31a0-9933-35350eaee637 43 adb9341b-99cd-46a5-ae00-3f0561d16326 44 7571db6e-3401-45f0-9531-8ff141b26665 45 9d794b3b-decf-5cc2-a1bd-921c6dc57078 46 d6f163ca-0718-2673-b1f5-80443f888d41 47 092656d1-b8fa-214f-b0df-3e41c2d7e798 48 bd3a271e-0c04-20e5-b8b0-745690132a47 49 d432c769-92c4-5496-bd2a-9bf165d6d27a 50 9a955273-35af-46fb-b187-75272103f5a6 51 9593f642-d3a6-66e9-8003-884672c9d385 52 3a81ec6b-c46f-7b95-9be2-b54630869d0c 53 cf683548-6581-66b9-ae70-fa5086658108 54 f02205dd-03e0-4a62-b305-771481226c7a 55 5c95d1e2-a53d-7c3b-a588-25b2c3fef6cb 56 ec66ab28-5b88-235a-bd15-6c1682af7d26 57 07b18182-4301-2a97-8116-503223bfa2c9 58 4f54d8ea-7171-12e9-993b-c732de682379 59 b30710c1-dcc1-869a-9f5d-d16f2f127e43
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
52415405170604085266330323575486237805167344522254676472218. Exactly this sequence comes out ofnew Random(373).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 84 of Run 22 (seed 528,385,484):
new Random(528385484), Next(8,64) per post. The RNG predicts N = 59; the post has N = 59 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:02–19:13). - Conclusion. Filler. The content is fully explained by the two RNGs.