201208151116 y9ucf
explained decrypted filler
3DES(name+title) ECB, 43 GUIDs, seed 2
From the post to its content
As posted (encrypted)
6FEE7C5F8EF00682 9632D26005CC3C18 C5D9E94473CC4221 1179491D4FC453FD 00C3A7296F21B0F9 181197E87D24B180 4E6B7B0F91123166 C1B34D67F9041676 433DFB0629F413AF 221E49FFD8B92F55 B86A3BC3AA0F4AA7 167EDF9F31679F64 F1E23DB131303FD3 97FEA06B168321F9 F4D0EE6C92A1EDEE EE429211CC790DD1 226593C540349279 DDDEE6EDFBBAA2D9 40A3AAB46C41F5DE 60F1F999DDCCDB2A 1FAA2B3D0088D76A 4E08E16372CC1188 6F9EDA2E475CB7B1 BCF1BE570FE346CE E3C7EA3221BD2D94 52E7853DC9C1780E 2A30AA4A40501E1E FE660E326AA94B42 21194576034B8591 E65354B0BB95708B 0F136211C0F9494C 985BCC0437E7A358 41670CD6001EA0B9 0FFFD7952C8D3C7D 44549425E4F7DBBC 0791FA27C0AA329D 7F692BE8E99780B1 14B695866DCF3CBD 433C0487652D751A 4B5DE804F7CC5D4E AF44779736729DB3 5BE3F747555408E4 010A26AD5A3EBA73 BA87EFF33BC96EDA 7B1634E4B7CCF7C0 FCF8367422F80BD5 C03BF9EC24D9606F 0CFADB5D75C51807 58D5BA7C9812D3D1 11E393088FFFD9FB EDFB32ED8DDD7CCE A683FAD00952DB1F 01A4582ECB52C2EB EE74132BCDEC66A1 953CA69EB5A53315 CC20B23921981EB2 176C39E852B31363 3C8A1982D7200330 05E563AA3FD2A530 6492161CDB35A331 B31EB5158DC3404A B88CC47529DE19FD 5E408CA193BBC125 9649ECF4251E5582 56873932F1E79B26 F1049849F94AA8A6 59C3B2970D390AED 4BDF2CEC0BD4BA02 BD02580A4F210CD3 72F92FD5EAFF8B73 89531B1C914C9614 FFEBD9ECCCA772D1 22ADECDEF56856B4 AC37980E62A06C74 1C228DA6CB55D7C8 C49695F39F9AC169 0C972637469708E4 F3F25059A47BD25B 20F1204E4654ABA7 969D82FA36FFCC89 BD934F9639B0ED38 F0423B99C690CC77 BC92AFA282465959 0FB377E762ADCB89 7EBCDB715F283907 59BF8E26A32629ED C04FBCC01DF0E5C7 7E350296DE1DF9E1 0C6CF82BDE3B315D AB4F8A8FD4DE1F2F B3FA1B569ACCDA61 86DA262528764282 AEA37A90D48F974E CCCB2B0690D6558A 6A079A39176EC731 1337B3F5E2802652 E8FEC62C4CA31462 24FF032D22E099AD 2962ECC23F41C18A B2610EB884F2DC95 80CC8E0A515EFC3C D48B5E171D9F84C1 1BA166734EABB874 ED5E91DF20A963F5 6F2FE1F6F9AA1B21 F4A5AD33935D6F06 8CBBACE2C43B9AE9 E8456ACA7D243C7B 7292D9803AB93CDB AADC1C462D6200E4 7C90ED3E55CF88D9 7B2ADD715CFA6373 B33736B7F2815148 740AF4C288B5F0F4 8DC05F7EC0FA0866 AEF82E2B2292E95F C3439AFC0B94435C 5439A107596B012F 56A12964799FB503 CF6DD9DBF3B82C79 89026B06EAC132FA B39EF8282B132D97 DC6E3B9C2CD36502 5DDA4EF334550DCA BFCF93369887E65B F0BB837D4183503E 6528D110024AF5D0 3BEB640A336963B5 AF727426F504CEF1 ED6E059FB416E479 2D1DFFC602B23EBC 0F00BF0FC1A4CFDE C0EC363648418A95 EB2194A694607996 EC148AB3B463180D F75CFA8EB16BDBA8 139DE46A61C79817 89392CF7BFAB9DC5 E8EB9F0E40CF03AE FE696D26D7EEB65F B255505B3868542E 1E42CDD56A50955A 689A1862B46A8AD6 F3832872AEF089C5 5D8A31BF032BFEF3 6320D24F19483000 764DFCCD921CC303 DF79D7044F8EAE9E 069E133F4D1691D5 749CE852A4D0D5E9 B928061BA40D59EF 78A56BC3CB835F30 BE09B779F8881657 A6A9814EED9F20E7 5DBC0EB310869F69 4E8A9FAF37617063 360A726A01102FDB 1B52DA8A04E331F4 D4BEA16943F526A4 3B459DB83F9FEE4D 6FFBC5421A06E69F 7F4CCAA9EAE80E83 F885CEC9D3102A5C 914EF79A7677F59A 10137BC2964DB0DB 6474DCA8A265BFFA 5F31E1338971055B 911F6FA3ACC466FA 7356FC210D48B676 3887860A74B35DB3 8011D360CDF21E9C E3FF48DDCDE816BF 50C6222BE77DDFAC
- Read the ciphertext. Strip whitespace: 2,768 hex characters = 1,384 bytes = 173 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201208151116(name+title). Key = MD5(password) =e0f91f9476c1b7c2ab5f70cd8f79af78, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 43 GUIDs as hex (shown below).
Decrypted: GUID list
1 5b9499e5-5862-6a79-bd27-58e420a65b08 2 5a5fac63-62f3-3070-8a22-7e09e678fb29 3 b583539f-8213-1717-8eb3-a4051eab86d3 4 c0a28d00-9831-83dd-b179-e845fbe23ae3 5 23f3255b-ad04-08a6-9ac7-7767dc5fdb83 6 3144cd3a-82ab-2140-b322-7f386964c209 7 ae7ca390-bab4-7ffa-83a2-0c9ba3d71be4 8 83972d2b-6bfe-471a-a6bb-9a18e3a9d55c 9 4cd204eb-9585-2295-8515-8221b49bd74b 10 806d83e1-d3ba-0808-a781-76427735a6cd 11 5aceb133-3b19-6ec1-8396-75868ae767c3 12 9ee6a356-ad5e-092a-8393-8b85eceae9dc 13 1fd07001-0dd6-0e00-bc5e-b655de494fd7 14 39237fdd-b3f1-464f-87b7-058ec10b10a6 15 78fb8938-bbf6-33dd-bb86-d0da425855f4 16 337d80dd-7b5e-2aa9-ac07-d6757c5ad5bd 17 fc51565b-7288-6a40-8514-23bcf2647fc0 18 2803591b-ceb6-2217-99dd-db15f8310ded 19 3b8083d6-f5ac-6d2b-81d5-18bb4b52ca73 20 676f2789-c294-0368-a386-d8c9bf1308bf 21 efbcef7a-7680-0713-a4c4-e45bde60986a 22 a7ce8e84-6b22-301e-858f-8dbca6896f8f 23 28295931-8114-279a-be48-cfe7fab9728e 24 c5a354b2-5a29-6167-92a4-b6032c695767 25 5bd61e01-154d-809f-8dfb-b30df8f792bf 26 7ab7e39d-ed8e-7d9e-9bec-9c59c84aa733 27 be6243b9-95c3-54bb-9afa-ee9d6ad19679 28 5d95ebdf-3772-8896-a24a-7ec8b5ab6751 29 66390790-984a-0efe-a699-4e9e83d40708 30 2a9f8c84-e1d8-6d88-b704-a61a509b6416 31 5c0eb89c-1655-81c6-890f-e0ee40ea0f36 32 46bc0594-a2cb-830a-ad33-90ca9c7dda1c 33 74cd4e7f-805a-0fb4-a14b-d91999ce586e 34 199b9455-dacf-04bc-b0e5-87a564f1edc5 35 ae8ba5f3-de7d-30cd-8f10-6c4603674a1f 36 1350ea39-d97c-7635-a6ee-cab320a833d5 37 b3fcb152-c29e-6a79-bcf5-5b9eab217466 38 0b459215-8634-6a20-b0b3-44d28a34f70a 39 34b8c8f2-7a0d-6346-b8de-5b6f99541cb8 40 0c08480a-2ef3-07e3-8be6-c96eb930a7b0 41 53c34017-0b77-0322-938a-1a29fd830840 42 ccad65cb-bdb1-254d-ae19-3e537967c2f8 43 7b8c9cac-948a-24be-99ed-936c93c2af77
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
6318027420600432626003268758068800376660022. Exactly this sequence comes out ofnew Random(2).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 0 of Run 23 (seed 21,083,000):
new Random(21083000), Next(8,64) per post. The RNG predicts N = 43; the post has N = 43 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 12:23–12:24). - Conclusion. Filler. The content is fully explained by the two RNGs.