201208142358 y8sqt
explained decrypted manual
Operator test: 50 GUIDs, seed 562. 3DES, key MD5(name+title).
From the post to its content
As posted (encrypted)
EB311CCB9BADD72D A5B438F3DC1594DC 5638CEEB6F2A4B35 0F7FC87AF62FED84 F9D3EA873BAD866F D9EF7F8E3A205B6D 909476A1A6FF8A95 1DD9556196DF80F8 A2D5E79338B5D7D6 37E40D1992A293B0 F0D25CCA16323F9F FEDE67DCD02C03A5 05EF1D3350F05167 1CAD9E5DA99680F6 1583B356C4B846DE A7E4BECD7538D9FE 0C220FCA1DBFB26F 0691BEECC252866C 391EE8040563DAC5 B949AF28E11C64A5 E2833783C83E5146 465B01F11D4A9DA9 CF199487EE0BD76D BB2407F8453F3DBE 4D65B27103C9579D AC5229A85736EAAE DEEF29B5BF7D8F25 CCD6E092E132FA24 F55D1AEFEFB173CA C6CBFB0755B692D0 3FE336BEB8CE5588 98EA5D24A2D1D9C8 F2558A4FD2141AC6 C03BAF49A899AA77 313DF0A11B70CA70 978E880490D8A4BC 2453C02C9D595096 6DF54C07C05C7C6A 3A7216834F0C7C9F 66F06C16DD848E0A 88BA97873BAA3FF9 416B84F2EBA27067 6209EB6F90D01E50 5CD90F1F006D0B0C D27406F3A22B308C AB1734E6CA8D6ED9 C4B4C59B68913E0B 8FB704B52F6FD029 057E29EBABDD43F5 36D40FB77474163D D53AF6C2131ADA27 661C3143B4EB2F66 0FC2545BCAC9A5A6 8E3E1AB383FF87ED B585CD92C2918F50 61AC92EEADFEABC0 33533C05DA5D6346 7CA2EEA5F6B2F495 5AFFEF1DA3C27CB2 CD33748528111050 B6322C7B020809F0 007CA1F36CA6AC0A 2CD0622AAC298FBF 5C506A8A025A8B2B 83A8F3C70E265C21 33E7BA37858E01B2 42DE403A7A947F7E 69B55D89D0CBD5D1 5E8C9D0E681765FB CD0DE84B36E1EA62 844A0784393DE0F1 F868CBA6BFE47015 C68E426EF804E60F F85EA8D12190E703 04DEBFCCFF32B3EB 542F6C4E6816AE36 FFF23B056CAD8530 1DA4E4F9293FB24B DA5DC1EB2E51F1CC C5ACD90E91E2A855 4B0B4969C72F9E92 A6AE606A2E0E4D94 6373C45FA59848FD C2569039665E0143 74C984760686A80D 069BA7BF0F7F684F 7927EBB7BFB3C232 BFDC3785F628DF63 4C8FE18A736C637F 9296B09FF7050EA3 3850E31EDF0A2112 0DE5CD63E6D7EFE5 2B95E0AEF4B16980 58627DF67A34A050 8A3150890DF96675 FF860B4E00011259 07CC5B58D9AF5DE3 9FA2751781F160B8 9812EC3254F58EF1 2B93B4B31C902804 888CE37E6BFCCC90 B7DD94E49DD8B71C 8395D1BDFE501A3C 001E0516F53E449B 1F6D488A619EA9CD 3A9BB1C7B323A102 F204F2B77C637BC8 3587FD10211206A9 E3C2E24703E6F744 C1689E4D99CEEEF9 A416C825E8E2028E B8FCF99D17C1DC98 79BDC5ACC7070ED9 7281CEC12A6E6FE5 88BA0E935636E4FB 1A9841A65EB64E22 F3B5E41FA3416AB5 84B2B96B875DA830 989B426ADCD3045C 525A2E3F91678FE5 63CEBC390B716AF0 D7F02FACC3FA3E15 6E7B16583689ADC0 D9C7034A620A4AC8 6E5F1896E05D06F2 F693B15198C7B1C9 FAD28DB4F7394A47 3CFDC6EC0C31474D BECD7C8C23D7CF2B B95EAA167326F07D 2888BBC042E15251 AE5D70227DCCD481 CC8810B79EBA999D 99B1246A73E51099 D7ECBBD08EF2D707 2ECC099C252C11C9 50EF570BAFC5D45F 917ED21925FEFE38 8A18A8D3DD5758D0 39F64A38A4C565B6 BAF5336ED002C573 D65D0D5372A7CC60 F89DC84B91BB5FE1 51B1EB1AAB75CF78 34050E2B7FAA1467 6839246F1A647766 50DE9CAA14CB1032 4E936E03573DA1A1 608DFDAFE0401EEB 2352B340A0508DC5 A31815E18C037057 DE4FEE3DE49FF5AA 66A535D62E17246A 98F2E0FB073C4C4E C84DDBFDC430607F C471F4C3629AFD88 CCAB6B3F6C924D27 A8E3E68B8306FB22 4E9D15BF006AA17F AF3EB5E7FB01EE77 8BFBDAA90532C8FA D8D5E084AD74F701 7C1570D8E3B64CDC 508DE342A8288601 D00D939462CE1478 C46E0D1A78FE697B CD897E5B33D8A387 A180A00971651438 96072C3358EBC633 76F6EB3C5462E326 3B2416D51B5A538E FCE76E64D5EAB429 229EBCD690DEE49C 36EB7F9DD62843DA AF9525AE841C9F2E 00EDD4DA8BEF5EAA 7E8490CA752DD2D7 F189C56D30D82D12 00F1A6F10548D8E5 894E878F9108A3B1 23FE55B99A61F068 924AE0B9033A7BB0 C88E975D01F935CC DD6BAFFEE29C5650 2C703986E729455C 713C730C88202D89 F6AFDAF7302E0681 5340461F2C00512B 9EFEF9BE36739B2A CACF140E25D3337B 01731857A507E842 76B2F8FF0A2E5F0D 1AAD39CA72E1355B CCAACFD2FEC9AA59 8BD52CD76FD85631 28988942AB187BAD 1E5152F8E60AB263 1746614CC589DE48 FA4A1F02F4895EE2 39FB9A5A8CF7F361 FF286E00DC4E84A6
- Read the ciphertext. Strip whitespace: 3,216 hex characters = 1,608 bytes = 201 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201208142358(name+title). Key = MD5(password) =7c53cb2a561047f2f70a173b59a8b5ff, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 50 GUIDs as hex (shown below).
Decrypted: GUID list
1 6898cdc5-91c5-2855-84be-b3db4bee3322 2 2d194419-2cc5-6f43-b26a-923b0da9e14f 3 d0a7803f-f68d-558f-bd58-56bccb238c82 4 7aa2fa88-ab08-4f74-adb9-a1c29e20f095 5 70900ff4-0913-8ee8-8091-310170b1d557 6 f728903d-571e-6e09-a8f1-ab525c1dfb9f 7 3c53bc3b-f533-6b33-969d-f58ca29a3605 8 e5c1bde4-7836-3f43-aca5-bf84bca4003b 9 6670ff7a-71ff-45bf-918a-7521c4f762d5 10 bd2b4e35-e567-43a7-8b56-dc987db4cf9e 11 250871e2-5e76-3e77-b2fc-4cfe3e11e27a 12 aa6b5448-2160-26ef-959b-8c4bb86c176f 13 99d1d8a7-0fe9-86b2-8509-152517c8be18 14 dc0d1e6c-c677-7c5f-b58a-baa5a52d1689 15 b4dbeb65-1fc0-3997-b520-b9cce3437022 16 89a59557-089d-00de-a954-732aeaec5674 17 6e34283d-3915-072f-ad7e-a9a6264a8c1c 18 f641ae34-627a-34d4-9c02-00b1ddbb909b 19 047e4b88-1caf-8bb7-832d-c1b58e844e08 20 e5d7faad-596a-859c-8ad5-a5e8e1d7292c 21 ddac6698-fa9e-445e-9c82-f9126c1e89aa 22 a6995523-8319-6fc1-a2f9-5349f2309c05 23 bf33e43a-a7b3-8d2b-a387-db138a116e16 24 04b2846c-8fff-3782-bb6f-e734c27c4495 25 6100dd0a-a1a6-7739-8db4-72b959c89334 26 cb5b78e2-40b7-88a8-9cf1-9be65d911178 27 e5816a83-2b71-1daa-936b-cdaa69d180c8 28 9c4ab4bc-ca87-8310-bb62-d161e32dd76d 29 669b9364-df9d-7fe0-b1d9-b63f0ec54ce7 30 0e79cdbb-f62d-6e69-8db3-c75091a71450 31 b466eeef-a82e-50d3-9baa-2d0d4e9743e0 32 5047b38f-5c82-4d98-9963-4be826c8796f 33 88ef53c8-becb-2b6a-bf17-5717887cbb05 34 442c5536-6f1f-0d87-9595-530525e9a021 35 01479e4e-b540-7e37-a596-54cf0c22c917 36 9ef0de2a-b718-147c-afe2-2138c32a50a0 37 275ed9fe-79cb-564d-9e2d-5bf34074f00c 38 95d85107-e9ec-38a9-a77e-13474b363bd7 39 39817156-5705-52a6-8187-50acde2f80f2 40 8d3d45cf-6769-08f1-820f-406d3a886b5b 41 db6bddfa-5d4a-8c10-92c6-2fe58b4e7bd0 42 5f8d1c2b-2c51-76c1-8382-46c7f297a45b 43 ec8cc1a7-00cd-55fc-a7c4-8dad48098951 44 b4576f8d-610b-7315-b02a-90d01863886f 45 5f4472b7-ebaa-1d67-870d-b7f1952bc8ff 46 baf43446-f146-6d82-8076-d91cfe70518e 47 b109b5fa-dbf4-48e5-8038-b650f0379fc8 48 ace9d074-237a-2aab-b1e8-bac6cce73298 49 f15bcd8a-c7b5-06b7-a2d0-7b184a5dd39f 50 24c2bfc8-0169-4801-8147-50de5df7b259
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
26548663443287300388468378187654207153508757164204. Exactly this sequence comes out ofnew Random(562).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. Grouped in aug13-15-triples: three 3-post bursts 1 min apart with title zones +9 / +4.5 / -4 around the 2012-08-13/14 machine/clock change (clock lead +150 s -> -1 s between them): operator setting tests
- Conclusion. Filler. The content is fully explained by the two RNGs.
Solution summary
- Method
- MD5(name+title) ECB
- Result
- 3DES(name+title) ECB, 50 GUIDs, seed 562
- Explanation
- Pre-cutover filler under MD5(name+title) ECB: three 3-post bursts 1 min apart with title zones +9 / +4.5 / -4 around the 2012-08-13/14 machine/clock change (clock lead +150 s -> -1 s between them): operator setting tests; list seed 562 from the GUID masks (3DES(name+title) ECB, 50 GUIDs, seed 562)