201208170412 yc2kb
explained decrypted filler
3DES(name+title) ECB, 47 GUIDs, seed 970
From the post to its content
As posted (encrypted)
C5AD04E7C81AE6DF 89A2AD8F39AE6280 4EBB8C2D2EF01423 2C07C4CBD8B608E7 6E176C1F3B738025 6D8BB0E6486B76AB C0F0F40DA45A6122 13DF8ACEE942BF31 3E213B3B2212A765 800296235E75FF0E FC9F4EDC889B7ABD 83D8416C5E7A8FA5 872E86BF9BA30D11 0C54E445FF625FB1 24ADAF9256D55581 7085E8A647A3F83A 14133C2627B5F953 D0B0C53B26BD1D8F 3440068F65BD7642 2700E796CA00460E 8BEE7AA964234271 482587AE5E10287D 8EA6FD2A0D18DA92 8B3F6570B232F961 FBC17A005421D258 E6C6C2FFE9C1B696 E148B47D70235EF2 F66DA82BF1DB421D F005DE70D9176DC1 87240C0F5E57F136 E8783E0A88C5DED8 045C86FA1BF4C9E6 747E136527DBE027 CD436A8537C03345 AC5E31251EEEA87F 77495C17B52CB597 E68C37F7571A147A E49446566EF881BE 627DA9910622919E EBBA14F93EC5459B 22ECBD66EA69463F 098A3B1FD195687C 3A5536A965DA8FAD 33C2089E887BC518 AB29DABE9F4BB2BA 1841924F2187FED7 3539777070274382 A18814337199AA24 F6F582C241A53BF7 89FE3634E0822646 90A3EF72D02779E0 BD3563E5360F5A99 8BB86EEC0D9CD678 34907055E69EADA3 5A4515B49C3D3A22 D72EF3E13A289CC2 1E6E78832D971F4E 5D370F3A3DD808EA E863F9285B9C1D9A 9C5DBD929622EDD9 C77EF53147E44FBE 1AFAF9D6BD2388B7 AC7A54AF4C69E409 44A82EBBE34B1F54 0DE3DCB8EACC6445 32DF062C045E1E46 132A04616DB9E58F 992D283F216F41BC 33BCCB3A307EB62F 3146A1381D17A1DF 0DF2B0B85F248A0A 628A41DD1F6CCC08 725429500323C641 5FBFC97A97D4BA1D 649917627CB1AA00 86C76DE49B2026A6 211C4B8CE76B90CB 72618CC7B9FB6699 1076B10C2AECBCB0 4B32D67362C8198C 072780BC1F723953 1A5EF54F85C1FC58 C18736D89DC297D2 16D2C5C46D5B2CC5 DCCCE453665601C7 DCC27D8B60464A4C 06F4192B4BF2E7C5 7F0EEACE786467FB B7E90809C6A0F2CE 3267580F850FC451 BD0EC3D0CF83D465 A00E0A36BEAA4974 6B25897CAA667448 47CF2403772DD984 A071F87D6C511C16 932FA02FFD4BF4CB 675199351C6C3BC0 1EE828235419E292 60F2404E6BE7856A 3DCEA66DA6314CFA 84D8361798789EB7 DB2F9F68B2A31104 CEC2F8E3D163FBF9 49D7CE8BF1E330A5 63433EDEF38A5563 F7EF733E4C208DC5 786B813276F39420 255AD520119257DF A9FB1806FE1DDD31 1AD560F04168ABA1 B6D1FC374D77BB30 3AB98BAFED9E2706 13D2AD3DB0E107F0 D1CF3F7CCB52A191 5AA4909D28457912 B36CDCCD64F2EB87 AB2AB496EEDE258B 877A1D4446AF533C 47392EC26ADD8825 003AC25202D71EB3 85204850BA71CCDC FEA863CC166FD192 F68B30300C2D1F58 F70C867A66437D09 665AE9248A28A777 FE3DDC552CB9FF70 B35E18FBDAE0EEEE 75D7A37A3D0286E7 F180CA2B243D690E 9322591583555CCE A379C7FA80F80CFB C1F1EF17E660BADB DB95F0EADEB4D173 EAC49A32EB607E21 BA28C40571FF3B59 63EFA5C72E18B9E6 2100C314233986CC DA436E0FE5DCEB5F 6136B41EA7581D31 E20B0F0F7759A7CB 9E491012EBB18A89 14876EB901331D30 65871C921FAA5292 A8C5E99895B02C8F 296A07F5BBA96D35 A126E1AB2C44162C 8651DE9970A9A2C7 E0376F94189358C7 61C4A892574E3B54 C015B3CFCBCD9FC4 EED76DF2F492E9F4 7C46BF3C24814282 21ECD5624B0A610C 9375B6067364E467 603A6FC7504860EB 52CA30A7A3E95C4F 7993D4307E4B7C63 78FBD1996300CE86 4BB23840C75918BE 9B1BC07F65B0B427 0074D1D963D1620B 8862B20B7289636E 619DBBD5AC11D316 2A27636BA9CECF7F ADBDF8E036C4B8E2 B9BB206301E2DFAB 7291CC133FA2C582 6DCE402FA33EF36C 9BF776AAFA22ED45 C4D0FABA959055D8 3CAE9D43DECB59F3 3D1FB79B6BFE51E2 DFCBB1751A9B532E 5037D5449F61F0D7 6EB7670B6382CA6C BEC62996264D29CD 4148D15725283DA9 81DAD231CF6BF3E2 45095AB97B3A25A1 F2B14AF3ACEF1D71 B825298D8C791971 722A4702EAA6D1B4 53F70A68888F35AC DB82CF948E42B45E 7376BF999C52B204 000CF5F71B3D125B 63B7C646ACDB0489 72F93A863AA23BEC 1F646ABBECFA7190
- Read the ciphertext. Strip whitespace: 3,024 hex characters = 1,512 bytes = 189 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201208170412(name+title). Key = MD5(password) =b7c1874ef56ecf18279e43d2b9983ba1, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 47 GUIDs as hex (shown below).
Decrypted: GUID list
1 92786599-f894-4593-b779-6c85ebf7beea 2 4121cc0c-c8f4-38f2-82f3-89427a217768 3 9261ecfa-a9e0-7cdb-a990-17de7b7780e4 4 3a1610fd-264e-5399-9015-89a30fe64cb7 5 d193c6db-6705-1db8-9e78-5903b14880dd 6 861ed531-827d-24ad-adee-cbd3ee4e8372 7 85c753de-71b4-4259-8037-1d82ebb24baa 8 d622f46d-3aa8-00e2-89ce-488d0d15f47b 9 3ddf6d9e-cf39-8d52-a0f6-c878fec454a0 10 7af23464-ab83-8b31-916c-382f920bd046 11 1d54c740-42a8-8430-a356-9d3f05264250 12 ed0d000d-a016-6ccb-84d7-1493b6fd79fd 13 5fc7ceaa-5305-4356-89fc-1af5c7ad0cac 14 1b87dc2b-0509-148b-9180-16fe76556908 15 28286435-f2e6-849b-b7b3-42c3855daaa0 16 7b9cbdd1-1b51-7da8-883f-88d270ee9462 17 98ae22f2-46c8-5764-bcb6-9cfaf6df4d9d 18 ec50d490-0bc8-3e36-9fae-07d886c19eb7 19 0f3fab4b-0418-8e93-9426-6747d6d4ba71 20 e3f94e7c-23ae-8b5e-8347-bdd011593c05 21 c215e491-01e0-66c9-831c-2072806505f9 22 000cbcd6-9f65-77cb-b796-f45c61a62ba5 23 f6a0cbbc-e241-88cc-b1ff-32342c8d8f4e 24 b70520e9-3315-8b5a-9aa8-97aac2254d5d 25 e9fe27b2-64e0-6722-b8c3-95fbcbb9ed6c 26 f6b66566-43e5-34cd-bab7-f19cdaca54db 27 be5d9616-c893-802f-a59b-ac5ebd707a0b 28 da4f4ff5-aaa7-6353-a315-f9937840a3a2 29 dfce656a-9a4d-4014-b21b-33ccd316370f 30 995eac39-ace1-20a1-ab8f-1148a6dc1c30 31 cb3dfe84-6a48-2623-9ddf-52cd7d7cae91 32 792b85fe-8c2c-878c-a7b1-67733a419648 33 9503d5d4-5ada-3bce-9704-90f2422114cf 34 f4b3dabc-4953-2cee-986f-030b82fff5d1 35 35b014d8-ec2e-36d3-bfd7-f1babf223535 36 63f61393-4f03-74d9-a7b8-de5fd09c2eb0 37 0a0af639-7ad1-4460-8e84-b7822e2502a2 38 f615df55-4a6b-3434-a0c7-067d001e76f5 39 d3fc31f8-2f3f-4bc4-ba3b-e2f363ee1fa8 40 67c2afc2-77f9-6994-8e96-1d7d9e871df2 41 54c04587-31c2-188f-86f3-9f98095d3e9f 42 4b71f1a7-c058-16a5-83c7-586421a4a455 43 e63ebe03-49df-02f3-a44d-6cd6c400825d 44 95fa2777-24aa-0be2-87b8-68a15918e5db 45 60fcb62e-016c-2b5b-91f5-2c96ca614d11 46 fac5db30-5398-0cc6-b941-b56d435c80cb 47 e9b1da9b-c44c-3c94-95c6-6d5bb74989a0
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
43751240888641875388678863864228323743461100203. Exactly this sequence comes out ofnew Random(970).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 26 of Run 24 (seed 39,416,093):
new Random(39416093), Next(8,64) per post. The RNG predicts N = 47; the post has N = 47 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21). - Conclusion. Filler. The content is fully explained by the two RNGs.