201208170436 yc48h
explained decrypted filler
3DES(name+title) ECB, 49 GUIDs, seed 149
From the post to its content
As posted (encrypted)
98CDE0B5E6621F39 452108E09522E44E 9D469A2147F175E7 E92A4E495BA5E8F7 714F1D4CE5244635 3294AABAF5F83E2A BFB9A7389BF72078 8F9D83FE7D7E19CB 3D4E871766E9002A F1BFE0DBF0AD7857 0989343AA8E9757C 65CCE8D72644D0DA 1D2EDC3C76FB23E7 17A9EC5844FD754F EBC2339BAFAD49E5 86DA35B0349F7513 B51A5C9EA0C7C2B9 9FE82D7E16FB2343 2CE1D7AD4A9016A5 90464C587643B54D 28CD572567515985 BC983D4BE1D97D13 4E2CF6FDDB0097DC 8586882C86CAE754 C59604C0DEA02982 9431A7C07A0AAD5E 8B06A33BAF8139C8 737980E9C1F287AC 99282DA819129C95 B5C4EF1E323346A1 47191ADC019CCBFD 1D39CBFB5E13C3DE B50E94FD09B3A465 DBDDF9544B8223D4 1C4FA112662C8E9B A794277EDA0A3B88 2221A9E1EB3E07CA DCCEE0B7BFF70BE1 0A599E9D1FC64309 060CF0F907C0DD0E 9FB9C10DBDCEF5CA 0B04536824205E5C 99C0D9A4626D12C2 C20E50FF30838507 B5B6E15B93ECA296 2140E3A8B7E9957B 369A6F2057637D29 48B761ABA441AAAF 66633B121591348A 759C44D2962E3F2E BE0CC20B7B6C14A6 A28881592568A58B C5910AE04E729A23 C5B56C77208FFE7C B0261AB9DD56B3AF 5FF0B7F09ACEC964 AA7E0577D08BC36C 4B1216A88C52CBFF 491CFC431E6BC025 780981A103CE9803 5484E249F12B85D2 8E3A595ECC6F6600 3F536E52550F362D DD57D093A6E05A23 3C9DB332A120123C 50CC707E5D9CE8ED 09ECAAF874F127A1 D6B87312CCBFEE06 609845F08F604BE0 554EDD6023E662F1 820D7AE0B4C0E1C0 6706A60B2A74A9E5 42DE8BF34761B0A3 021A021E1FF23B48 1A2266BA8BF10C90 E93450389A236275 5BD5AEE0079526E0 828F0F91C328D41B 4A2D8C78A6DB0639 6ED6D3759597CEB9 BDDE1F292105D609 CEC0984B76050A5F 3D936AD01E958D01 8CFB4EC155A1AB76 601ABB140EE5C4AA 03AF9A9654A780B5 C31A822C75940FD6 BF8E64FC37CA70E4 3C60B6BAB8AD25D7 8C1E62A3517429F7 C3BAF502DC71C2A9 BC299C7D001DD87D B301028B4CB377BD BBFABDB0A918FB35 B24AD9657E643A31 E4F85F5627D3E9B8 607A328CFE728B02 3034D235537FF044 942862BE39AA3BBB 88DBA95726F08065 72FC6C46DEFF1132 968B61FD88F188CA 60218149B89E2DA5 ACB59C684494CF48 037908190CE32056 A40394521AFCCEA0 31960413328CF120 A179F2063218374E B237E8E390E0E72F 61BAFB76BD9DE170 BF25935C394E33F8 5BA0D200FAB0F070 5FF65894852E9DB2 A6EF10C17B33EC9A 2A223E6A6FB94306 C06BC9AEAAA7DB5B 931F6DE98989BC1F A5971E7670364A39 0A64FF17937D9C25 D4CF526F3C499853 EFB667A9959F0B19 CE05BB331B641543 0BEF56C002217ABF 1F75CD214069D24C A6C4CE7CDC955211 D65E7FC02B67CB18 B6A49270FC1DBF6A 545B60C9A5C673E1 CA12B1ED0709B37B ADB3E2E766926014 1A82F9F60629466E 265C16BDF9FF8B56 CD1E32DF6A773465 073926C9563FEFA2 F52496FCC6687C32 DC1DB8D3D1266E09 0F99DAF34F74EED0 A14C53A04A5FF3F9 06517FD73C6F28FF 1CDA3698B29E1EBF E3C8ED467F3AA7F3 B10DBE41D13B8C8D 03907AC2DBFD7573 DCDAAB4108924BDC F3BE03C997BBB4AE 508E84D21A4D98F4 6566F7D932636697 5814AF93ADC2ACA8 37970D097255BD9E DC93809D17C4740F 579A56C91EE06BAD B0211BB8EE82751A F13BCE637A6C77D5 E5F3A9095DD48EB0 5657652634679C9B 848A28F3E33B00A8 62F422E27503258C 539B5519D9F9E71F 92CE5115235423CF EBF1C5C365BA1F6C C5075AD3A2BEAED1 CDFB9EF4CC742842 C85AE94AFC4BD763 ABEEC11DAB4392F0 6D09899D215B833F 6BD4D9FEB4D4683D 9C87DAEFD6DFD13C 607B647871F9F7AA 311C1CF3CA1ED40C F902D4376BEF7B13 6E3246E4892A421A B592CBF05E524F28 797836D05A802AA8 E320944C09F672C2 0405DC10C7BF8982 8B4DAC257DEA24B0 79383B170907615E 8F773043E5352BDE 5F493D42E11034DF CABFAEE11F31DA5F 77578136EEDFCFAB A890DF2CFBB6C0F2 0F385055C337409F 7EFF1815FB45E1ED F553D6FF20227B60 5AB016ED55E0CB96 2607FF74B1999F35 F19FEA37EC03CBD4 1FF83D923576CB84 77CC08A7C0DF62E7 2F874A5F9EF63FA4 F822300AD89CAC44 1A3B424B2A2DC93A 40EEC2E617EEE74A 87A64A6A673C290B 44DA86381CEA62E5 68A3D87ED6B80CC3
- Read the ciphertext. Strip whitespace: 3,152 hex characters = 1,576 bytes = 197 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201208170436(name+title). Key = MD5(password) =0fd75bdecc20e43262e54253beb96f59, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 49 GUIDs as hex (shown below).
Decrypted: GUID list
1 8057a4c5-d3f5-57e6-8f99-07d6ebbaf125 2 630556e7-ba21-46a6-8106-473e3b713e4e 3 dbbc2dbd-0406-8b5d-b132-274db89b9852 4 c5b47283-c7af-3ebe-adfb-06545404adce 5 69b33e26-2bb2-423e-ad5b-5ce591f7d83b 6 432ee652-1fa4-6f1a-a000-2939d84267be 7 f87860e6-8be4-5436-89b6-10d5014764bb 8 e76d62b9-8090-1753-8057-adab2a73a6ed 9 135a06b2-1b63-3ade-8f0b-a770ee9db3fd 10 784c1746-c7d9-153d-a7a4-4e509156cb9a 11 7d75ee24-3e48-0252-a7b6-cf2b654f8824 12 176dc331-ccea-74c5-8074-8a7ac92c6c80 13 76625046-b8fa-03fc-a45a-2eb5930870ba 14 125bd53d-0494-8707-978b-36a4e7f232da 15 e388adb1-1b15-213d-b285-4d4c78aa1ffa 16 df8dca80-8496-0e60-a55b-69392f838387 17 e860a65a-6aed-4586-8e53-2ae48d9a3952 18 bbf66a2f-7f5f-3d44-aa32-2e2b05b8b59f 19 9b13e179-cdce-6ccc-a53b-777314136bd5 20 753121e2-34a1-0cbf-882b-57389c56c6b4 21 731bb67f-6bc1-59ba-a84b-d692c8b8f5b2 22 00440110-0487-3303-a026-87c0fb3ea237 23 f75d4f18-534f-1aa6-b94d-d9072d8436dc 24 739c8fe8-2b45-0d70-ac0c-05ae963f8774 25 94c24831-e20d-2f69-a8b6-ddfa8b8dda8b 26 6c530cc9-ff0c-3707-bf31-171ecb179125 27 36d34ae0-e046-0cf4-92de-74184adb18e9 28 187e4129-0be1-0e83-bc76-03b99fbfdd8f 29 ad14ac6b-d9a4-672f-9504-c13d221cb11d 30 3241b566-2598-098f-bb35-199f3821216f 31 691ee43a-46cc-1585-8772-ff008db6072b 32 75771731-0b5d-6c24-88f1-8990b7ba89f0 33 5b2d2bdd-b79a-1d15-a01a-5ca27c885953 34 4adac036-eb30-6e9f-a9eb-0e44948af6b3 35 5958c862-e5b7-683e-b100-91b0f176ac95 36 6afc6d21-e4b9-112b-9752-744620823135 37 50df6857-f1da-4a2c-93a4-e90b1900832c 38 69082f64-e77d-84e5-a862-7857ccc4e31e 39 b8cc9db6-ac96-70ca-807c-1ff7ea59e643 40 dfe63154-c04b-58e1-b7aa-aa5881bf79b0 41 1e452bb3-29c3-8dc2-b9f4-5d7d5d0aaeb9 42 597b10a5-459d-1934-a2e4-b0055ee44412 43 c268a5b5-9008-3758-839d-3559f66edfc5 44 bc656bfe-aea5-1ee9-a774-de1490e1be50 45 e132471d-b921-4b1a-89ba-9735a614c039 46 432a37f3-1deb-0c2c-8cf7-ab2e1d7f6c67 47 eb8ed5cb-5e0f-07a3-9de3-ce77a5b44e87 48 00412a1d-f387-7c04-a8ef-b1c7ee517bb9 49 41fcb780-ce7c-6898-b1d2-48ef5ba080e1
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
5483465131070820436053102300601616614875813140076. Exactly this sequence comes out ofnew Random(149).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 34 of Run 24 (seed 39,416,093):
new Random(39416093), Next(8,64) per post. The RNG predicts N = 49; the post has N = 49 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21). - Conclusion. Filler. The content is fully explained by the two RNGs.