201208170321 ybz1h
explained decrypted filler
3DES(name+title) ECB, 54 GUIDs, seed 38
From the post to its content
As posted (encrypted)
FA9C8AC9A0C0AC73 5AE88F2C4CA97C7E 5442A5A33F2EAAC9 2F0C905BE2683C6D 088A41A3810C42C9 6FD948BE158B761D 2A00F17A50DB768A B1C3988A67F5AA11 C17B4DCE48862CE9 0D0536E7F6825B10 4D6D7516D5EA9881 07C38B2AA061A1A2 25BEA56C1A6FFC8C 2CD5FEBD2205651D 16C668904AC1D6A1 C2B7DD68A914E9E8 D6F7CFFCF22CC1CE DAB77CECFDD3D80B A0EE7AD9361B56B3 1688539893DEAB58 64DD3FFBF70FF4E7 1B65C054C372A3CF 93D8A99283014F61 E10E253046F5B5A9 2E354D5AAD75A449 C4F5EBB337853146 56524A1FECC88287 EA670511877B88AA A246C7FABF53A452 06365844C0FC2847 840DA368F65AB638 893A8201071F438F 6B4D97DD64C7BB7C 8459D08754C3A5E0 90709EA2C02F5640 A1C8684E55900180 054D79535925C832 0CA0D40F92F4E2D6 6FC7F2D63F5D990C 465CFBEB09D59EBE B816BEA0A8C804D9 9814CCB9D7AA21A4 541F2607A746A59E 32F7054D3ED15F4C 4478876856B48F2B 32860D530D22656F F3000192DE410B15 006E056CAF4BF84D A03F6BC5670381D3 42BF604BE015C339 0D9EA48F0F5EE035 01253BD8EF64CC4C 68E71DF883CDBA5D 0BA4207CD9088AD3 D9975C8B9233CD10 7F0313AA3500E3C4 DB73A5CB81109319 7D7A23DB00177BA5 927D0C9B9FE66BF8 AB2DF3474739EE31 693F79074F70FD0B 48404A64A219DED6 563625AAA274D78A A6411A429DB4D2E1 17B43F770FFB63DB 0441B3278C2C2120 FC45BAD7DC198F60 72DA8ABC7BBDF35B F1218C7300AA0603 1A23AAC76935362C C4E46B7882025443 E0F4AE213D157030 3AC7156A9731DFB3 0332F33BE7F8BCA6 E1F6B0B5A4F2CF41 686DD062E1A91CC8 5FAC54E0E7BC4072 3767A516C66B8D4F A784EEC6ACF0286B ECCFFD89E976288B 09425049463CEC56 68B01DBCDC57B407 D8971DB5013A5A43 798F4CDBC018B9B2 4DA1306B962F269C 1952B3156A20236C 5BDC2862149E9E8F 78CD9C7721A399E6 B0C64617906CCE0D 1931B9CBD85D3FD3 51655687F3F687F3 8350624A0C646002 72974B32060448C0 468272E51F3AC0E6 8BB3FA786D452E7D 690DE28AE64831E5 63D54FA5A38F6907 727E11AEE1C09188 62EFAD857FAAA9D9 BD0FFE3C55A85C0E E72C599BD4BE54EC F254C800BCEEE946 B6007D1FD2804F22 34AACB06FF5A01F4 E99087EA4763D862 A12C32D94AAC2117 A21A392030DA68E5 ED1CF3CFE939FDA1 947A9723C9E728BA 32B8F063914A2B86 DCD84DF5C89C2062 A217610EBAB5D0D6 5AE26E7D2C2EFCE6 A6FD6CBB2743D219 EED3EBAF77387B1E B74766B2C08E0516 8DFDBAF921E0FCCA 016B74B1AC2EE612 C2F2896CA8225F96 8D596E6602ADE41B 38764C763BEBA5F4 20088F8330BE0315 91C1CDCD4BA25C37 9731AB4F8B2C126A B35B1E389389F201 136AE61B7A2CE94A 444298A3C3CDD343 847D15AB2C203F1D 523E26D11CA85B76 36AD6F4A784D96A0 D928FB779D0A1BF8 EDD42DACCC016E5B FB25BD7754025C3F 960C96DDF63D5AE8 2532F747F2A4BD9F A6DEF16F2E38C83D 211A42F283017F42 EE4B6FF5BFAE6576 909142084B10788B 3F843309D6D613C1 B45E4F63882DACD2 0F12D5B53444EFB6 03D342F720ADC4BD 2E2ED9DDE36430E7 7453203DC91689E8 B5BA578A672F3399 C449035EFFC62013 6F274539B16DBD61 57309DD8346E1664 11446D59FAA72168 4227783B76A40147 BC06210117034818 16A8EAC3DD521D78 DC3F01588E98D023 1A700F3E0DC0B13D D2D3B3A006390E12 69516D5753FB2634 2C06AC74C4222DE3 98C937238D945113 339ABAF9CD97A498 AB89E01FD75FF3E5 13590CB774F2E931 FA06D14E272786E0 7F34939D2974AE09 70B7B314EEADF512 85E31DCEA84636DF 7058069F3325104B 23703BEA2ECB7A12 558C3815D32816E9 6FCB4FDD2A11E536 9D2162534C33253D 7CC5467FF83963A3 9FC8B58ECA67D704 C6C8B09A671C520E 7E073A631F60522C BC3C5D60A7B4133E A5CB71C3469765FD 7057AFAC296CB469 C29B62193E5168CD 2A0DBCA3513FE8ED 85A8D0DBEA63521F 66BBBB438711EBC6 2824F9173E42EE69 4EF6E2BAF2CE8B43 FB954D27FB2A53D6 4F9A7F3C0D23747B F4C8643FB9FA1286 B453AAB74FA971D1 D60F3E5F9DF1E5C9 27051AA70612640F 4ED582135EE774A9 D4B95CFE1995A515 99A2EDE4710A4716 54339EE2CBCDDF31 BE80208CDB4EFA37 1C70A5571A9A2BF5 C2A4F15C039E5AF5 EB377377B2C0E776 594AABEB8AAE4E1C 7573D2049003F717 C3DF35765A4B328E 267161D54FA537E1 938B6129F4D6E23A 97C1C8023E02E831 3E260795718B03EB 68BD28BF460B80BA 6D598B21FFC90D2C CDFF1CD036B83B21 C61619E954603456 1816F8CA8547B0C0 E7ECA7A40B8B4EA9 A8726D2B20D580F8 2F9567C262821ADA 2C591F253FCAB975 7D79FB1FD1AF292F DF6FB8ADC98AABA3 8F4D5A72AB03268B
- Read the ciphertext. Strip whitespace: 3,472 hex characters = 1,736 bytes = 217 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201208170321(name+title). Key = MD5(password) =e810853490519df9f4231073856b2240, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 54 GUIDs as hex (shown below).
Decrypted: GUID list
1 89ec9173-7866-5511-a39e-5ed056f0ee29 2 572e8a0f-bdee-8295-aa0e-6b4a589d3329 3 9eaeb7af-9b93-237c-b577-c1d395b8ec2b 4 37e4232a-e65d-6417-bebb-e75380e44778 5 441f81bc-c668-3de6-a281-ea541a303a07 6 cf2b7020-0b61-6374-85c3-f95659b2997d 7 edf33182-adff-8702-a964-44be37ebe0f1 8 a3ea4356-617e-4041-960b-1c99d874dee9 9 0483ff6d-5664-6819-a42e-2cab7ea9af01 10 a481b374-2e29-2e13-a804-b9f47422a5aa 11 2c3c6990-0012-2938-af20-ce05ebd9d2bb 12 e054ede6-3395-1d65-aa8a-c174c720783f 13 9037af41-79bc-63f5-adf7-d0b61dc31a31 14 37da33d0-4e29-2743-93ef-689d24c44c40 15 a3c3ad44-b708-53c9-9d77-c5170c384f92 16 7faa60b5-0f72-643a-aae7-77f7bb658aec 17 d55dec66-3e4d-7bc9-8cb8-0066d9b5993a 18 f8e1ba64-6a30-45f2-976f-fd729334488a 19 5c592343-8fe1-68bc-828e-002e0f33f932 20 610df47f-0655-051e-8e7a-445259803cde 21 bb6a67d2-c920-7351-941d-f57d2f10bff4 22 5c41516f-3074-1500-94b6-c86cb1b32b12 23 cc36ec1a-2b91-3a01-aca5-4b78a68af76d 24 66eea548-517c-2e25-9d86-f1a3b175bc45 25 e30ef1da-4bd0-3dbe-b455-9018e02fea0a 26 bdc2ee3c-e210-8df9-b35a-ef5227931133 27 b9729bef-ce34-5f0e-92d4-53532fe006c3 28 2fbd9a28-b9ad-2e5a-a0e2-b154b32b9335 29 38ecd360-366f-0600-9c24-4295409879a6 30 2dc732a8-c2f4-66cf-99cc-3d8e00061cd9 31 4bbb4c81-3cfc-1d90-9bf6-306e69a67c12 32 d1122e34-7819-45b4-8fc0-be56921ed559 33 0232d214-f481-509a-b613-88a0132bb0ac 34 6347c9ff-7e05-878e-a8c3-45cbbf584e1b 35 4eee09db-4674-8683-a496-1b66a139b0c2 36 0d1c7059-a010-3797-bf6d-2c4c2b7802ce 37 27d3a66f-e9d9-4ea6-beb9-e5cc94015071 38 851018e3-ee50-2537-ae9f-98f446ba4d29 39 e670a8af-9c05-77a5-bb21-dbef96edc8e8 40 d7b1ea7e-a31a-4261-b401-d57314fd2a32 41 36df89e3-4ef7-66d8-acc2-25f278b1b578 42 057439da-6531-21fb-aed6-015d64070cb7 43 0969955d-6691-7a3c-9549-0b7e4d196f2e 44 f55d4b3a-786b-5279-833f-b24997973b96 45 94725072-8e9f-873f-b866-d8266913438e 46 beb655c0-78f1-2195-8a90-da128aa8cba1 47 361fcb52-a70c-225e-a1e5-267bf19294bc 48 622b56a0-6a8f-0a54-8d9d-06a321b6ad02 49 840e6b74-85fa-70cb-9bc1-a6a608b10e28 50 9963fadc-8a8b-22ff-89a9-4d5c57b34195 51 b4c06a4e-d14f-74ef-9899-5ceb9369f217 52 2bbf15c9-371c-72c3-8e54-98d79150af84 53 f86eecb0-dc8f-211b-8c0b-9b403bff0742 54 61a3d46a-2371-25a8-ba5a-03ddb45473c9
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
582636846221625674607132385206145883427462758220727722. Exactly this sequence comes out ofnew Random(38).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 9 of Run 24 (seed 39,416,093):
new Random(39416093), Next(8,64) per post. The RNG predicts N = 54; the post has N = 54 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21). - Conclusion. Filler. The content is fully explained by the two RNGs.