201208170558 yc9ai
explained decrypted filler
3DES(name+title) ECB, 48 GUIDs, seed 778
From the post to its content
As posted (encrypted)
6A7692699F6D1875 E4B311B4704961E8 F11EFEA2B95018D1 00A5D26075DA14F5 D738D6ABB3881531 75635BECF4D70053 21C83E6FFAC8A3A8 B041C6D80CED9ACB C1625FC6916C3037 2033C28621E95113 231CC39E2F9C7EF1 7AF0B8FBD42BEFD4 9CB56DF431B3C744 E1E4DE8E9D90DA32 7C537EF0C05F670A DEF591E945D2B238 D7913C0B03DA0AD3 35E1739D50A2F8DB 00E2AC6E8BC1CC38 49034AAC6E34FE2E 89DC4C676D1A2CD6 A454F0F31B034692 4B767400D0F15A60 7F7C0C2EBFFAEDA3 623BE57B28F5BE3F 746A3CD6BB36E4DD F85D37CB0FA5A2A0 629AE3E22661F3FE 6AF051F4FDCDC7C6 1661470ABA4D8274 4DD9DB45309A884E B70569A0F143BBA1 8CB2EA7F7131B51F FA7FE98B24C5B2C8 2F65C431E3FFCF4B 4C4FDAD935224912 AE69D98C85747E4B 64841E89C0D9C47C 4E60130CBAC67C30 54F2126E3B32E128 95A5782D0E718EDD B0230D124FFB99C7 617E5D61587F6700 B30C992A0CCF7A2C AA5E3F010286F09A 4A366F5A9CD22588 421B770AD273E368 65ADE75AB517F9BE F68CAF7013812618 DDAEFA6E80241D2F 198B2D15EA633F1A 0816A0F5A161C280 6C81DC4AAF70AA98 0F4AA922F09D8991 20C9B09F057CB78B 419B021EBF333C60 35C2DE12CD64B750 02A72AB2F9812135 FF8294CC32311122 5201364060A82249 E29C02BD393FFBA6 3EF9F9EDF7387DDE E2ED9EE6D12B2B8E BF8F6AD756E8C8EB E4382150B3CD7EA0 F8EB6DA81A3FAEDD FD41F7792B9DDDBA 1267D32F19033294 AB52C71D118A6ED3 9F9E14ACC2A2C0B2 7B65B720E651D8AE 1ABC0B28C40D9C38 F3BCAB99AAF929B5 D789F98751567D22 83721F690B8131D6 1BF0A77CF42750C3 8C4E89A267745BA4 31C10D55E7BD3945 45C63D732D7542B6 7C71AE80C47C4CFB 5B83307370A44226 B983428DE219287E 2C01AF65498DEF2B AF8A40A2D29246E8 DD174B37CA00C96A 618616674B93E9D7 2B433E8E6A59EE0A 55002D27803DA974 4289E46553311D3F A56C90C45F450361 2F8577857BD3AB6A 8D1C90BCA4639CED 67E6D8C6195387E9 FFA23181B6ECFF94 745C3FE3B8D6FD65 29E0ADF0624546D0 87B8B9E14A02F10E 5990AB067C7532FC 2AA4976092F4ADA7 DCCDEB10D2021E04 BB0725849E039A7D B2816D788EC67E71 FA62DEDEB7C3643D 533085ADFEC0E329 9C7ECEDB520A3ABF 3FBFFED2855E7230 D48A86A5BC4AF1CD A7468A936B180371 5E6CDD88CEF8BD95 22BDE4F9A65B1108 E2150D8A138B13A2 11D139798F570C94 78E692D4D322B1CA 9797424C9398CBF8 CAA75EE444E046B6 D919AC0AE3252A0F 63E668677CD7774A 9FE9FCBE7D4BBED2 084E61343EF901F5 087790FFB0FB056B BADE6A45446ACA83 13E3E90299D66884 27034A29E91265C2 F31E4A10A097468F 67FC155E732789AD 723876A93714CE62 130E34B8BDB97E2C 762126A2EABA51FF 4A22E15550CD7D96 652AA39A0E63840E 4E4331E082442A48 E7A9A241DF9AA565 C032EC95607A1A18 23BB190B6ABF6E1B 3812292799C0D46D 4FCC24CBAF83A532 147E8D5DB0685B48 B0BB149E0F8F3D59 77C5D73EB3793A77 0FE51AD40134F59F 2C16930BF529C3DC 7063B55F80241C20 564489F270DCABDA 35F295E6DA7718EC 8DE4EE64FE0B4E5E EFEA5C520F5DF00D CC4492C5357406D0 A7F0B9D6A3844BCB 31EBBB09E007581A 71E0842F376A7A0F B783CA261C6BF893 E24BE80E40506654 191F9E98DBC40C6A 19E23B03DC9E19F6 2AA6F5388B53138F 7DDF19BE62ABE34E 133AB2E2C39429D3 78618A664E7AA7D2 45EB22D839086FB4 B6E18640F9E5D9BB 509C4806326113E3 B583A43016F4763F D7F1C91D8C83AE42 CBB21994A8560058 3307C155D3337CC0 CF9B189847F942E3 8A3254B69D7BD7B5 5A5E3E925D535BA5 8F365DCCD1E65304 9255DBB53E680AE0 17A8F7E14220445C 4AD0BBDE9E06A1E1 F019CB14E3E7B70E E92D7CCA6176333C 08A9C85D0CB7B02E 8F6908646B6BB122 8EF815973947D199 084A47715D4F0668 2A28BCC9CE438950 C30853722902F3CA 269F6BB074E0118A 5424DEF79C100C9C C0908BCC996252FC 152278FC9A891F28 0EC2BDF7C315180A 08D33CC95FE7D375 F4E2AE1A15640658 A92445A1FCEAB46F 7435A32C7B955349 C3F489E6A38E0896 6E1997DEF66D7E11 DB38F4F30D5871D7 ED48ECD4C60E5A6A
- Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201208170558(name+title). Key = MD5(password) =7b394cd831dfc31a5253c0fec256f084, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).
Decrypted: GUID list
1 951a048e-82de-1d8f-a09c-63b37229bf99 2 f08cdf8b-caac-0221-9f1a-269b3a2206ea 3 2281619d-7dd8-543a-8117-d1493c9cf54b 4 9bfde72b-667a-555f-a1b0-38aa78086f07 5 7ddce15c-0226-4d6a-89a2-399e0b6e66ec 6 8f93b5ac-48bf-4e2b-96fb-5626ca184ac0 7 cc272177-778a-4552-8bd0-bf05fa732047 8 c016672a-0e78-6c14-bbae-50929b80d34d 9 6ed7213e-2574-26bd-81c8-b905c4eb5213 10 da43224c-bc8a-1f53-8d93-c09abec773e6 11 7b19660a-3e6d-450b-9ef1-d276490968ed 12 3e6fe1f7-b7c2-727f-88e7-4c4042f6b554 13 f4f6949e-4d36-4a68-832c-7945389538a2 14 c30e9c99-f83e-280a-8601-cef23a4f6415 15 98684198-d17a-552e-a544-40ca576de8bb 16 3dade0f3-95f4-84ce-b2d1-40480e86a060 17 a1ca448f-2c78-8656-99cc-805ab9a8d1f2 18 a4f05639-7965-30ef-989a-368918acd1a2 19 e8fab3ad-a553-6455-9f4a-6736e5403a9b 20 d8d12ba8-200e-5361-aa09-7a05cb723e8e 21 162676f8-fa18-185a-b0f4-7308be4455e3 22 36773636-816a-678b-8f6e-c0109cdc39dd 23 ef6d3ca5-5681-4a39-bf95-2f4bb7c7d8e6 24 c4131834-1f4f-76d6-bee0-0cb59973678e 25 94980a2f-43f8-8370-a8f8-37ef947597e7 26 fdf62901-fefa-8f16-b150-ffcfc5696cb2 27 36185183-f93e-7920-98b0-9c606da0db86 28 eb01cd07-e333-663f-8a1e-f8204ed43d5a 29 896e19d3-8b10-3c22-b876-6dc8660aeb37 30 54623a22-7340-5e55-866a-07c61e351cb6 31 ec05f7c6-1150-3bcb-ac53-a24f542d503f 32 d65c3a29-91b2-3668-b90e-5ca0a1e95688 33 244b8178-f3da-17da-a9fd-268b065a38c9 34 373823b9-209c-498f-acbc-bf8942d778ad 35 bb178fa9-0eeb-2412-9154-bc5f5cdb734f 36 1b062128-f08b-42e5-af24-50f4be5d1f3b 37 8dbb582e-d59c-4368-8959-98bb6ec43d70 38 92c80142-a66a-5ca0-83a3-cb066cc7111f 39 efca4491-e6fd-5fb6-b1c3-a00a599b2574 40 5bcfc9d9-9c90-6f93-acdf-a474e7684b7c 41 78721d80-e999-67bb-8838-16674928ac36 42 9f891723-c794-7653-81d8-29b8435e142a 43 4a0ade2b-07c4-2af8-aae5-d05e9be7735b 44 0aaff3b0-7049-274a-9777-dcafcb3938cf 45 8514ac8e-ea7b-0845-8436-07a61ffd5555 46 b824dd0f-7ff0-8343-bf42-70fb4e2b5413 47 704778f6-528a-045d-bc5e-b27fd8edc2ad 48 9437df71-5518-5e7a-a5b4-eb671adeea30
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
105544462147425883651647887635331424455667220805. Exactly this sequence comes out ofnew Random(778).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 61 of Run 24 (seed 39,416,093):
new Random(39416093), Next(8,64) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21). - Conclusion. Filler. The content is fully explained by the two RNGs.