201208170601 yc9gf
explained decrypted filler
3DES(name+title) ECB, 54 GUIDs, seed 183
From the post to its content
As posted (encrypted)
B97DEA5DC4F67524 FE79FA3FE278312F E77B20A0858F5E40 26B6AEDC31AB09F9 387AA95B141D9E35 D3EE25BD66309FBE A2AA52AE4CF4A0A5 DABED16AE1EFA885 E4EF0866C6588686 9C2A66EF9697B255 837967E61E65A5B5 3671A2D2130DD84F 67AFD14C1C613B5E 54B4F32DD71B391F 17775607E3900251 4D6E24B4A695BA5E 075E4CA8DB0B8DC5 4ECBF4C4577CF78F 123FB2A5684F7709 F0FE964744259C7D 3EA5D90E7FC7191A 469FB3AD679FED51 3625C9E14083DF57 FAD111C09965CB52 70448A9DE33BAA2A E696C9E81F6F3469 C611C08C3D61F192 29842F4C64D32FCA 67331FAEFF6CA3CA E0B9233879F9DC1D FA0E986FA87F23AD E83918D9939E2B60 7F7C054A20C5D934 3D963F3DA9CEF49D BF36ABF6F5F29E02 9C1B6D5AAEEC157C 5CA4358B468B05C8 2D668A4CBBEB84DC 45AE7485BE358A87 1B98828765CA1701 E2B56CFE17721D62 D6F692F4A3F78583 C3EF2DA90D89A418 954899B01F0B28BB 3CC08C822E4501BA 57C15656ABF987B4 C2FF29ADF9152B40 3EA20BB90020B5AA D226D40C9FF814E2 DBFCA8D190BDC305 F916D0B73FEDFDC9 9346FBC44C8F098F 653744DDAD7822ED 1F043AD8328AA7DE 8698552120F6F8E3 6DA33186CFFC6417 323EC57D831EFFD0 45BAD80969BFE3EF 8D93FB6C7ACFAC63 FBFC7EC901931B15 2C18F88AB19B7412 82CFF869320784CD 19B6E0379DF0A0D1 FC4BBF67B577FBE1 D055CAD6DA15CC0E 5FB4CD584368068F D5177C0FDF961248 420CFE31F66ACE62 BD134A8C45731FF5 DA383358C05E55F2 5BE29D95E1D263CD D2DA312413296C4D B1BBA32C42A6910F 87606FBF414370A3 6B202D8282C01072 FE2D8D9640FC43D3 15B4A0BF2AA08399 0C8BA31E6DFB0032 6533046BD2142B10 C59EDE27FEBF8345 C81035E4C0CEFF46 48BBB2407BCF0608 689B3D703D682E2E 864F7C268F97A1BC 952632A4AB2E5FDB A1F8C6C461F39940 233037595920B241 C4FD44EA2A3E88F5 0432A1091708F2B5 246A980D87A99FAC 3F2F2BF19AC03351 B45C3E03D873E392 AFE74BE660BD519C 238303D1C8B7D7CB B81A4BF76EAAFA5A 8C5B598C4E144995 5F4A37427501D575 9E5C5A118687D02F AE91E9DFF89E7165 BC738DF27A0046B1 56383A9ADA545FCB 14EFF56476703EE3 116057D590F1AC52 438DE8EDEA3364CA 8070F58C1C703362 58C795F9C8B8A720 F05F1B622E202988 D609953EF2BE7FA7 E0DE816B92B44F45 DA01A0E773C09ED0 C1F5FA209A74DF17 3D49865D0A54B58D B462C6219CA92267 F2188AFF91D8C466 40D0631455C01538 7A5AB4010F4582F3 1144C48130FD990F 28AB76777CC4D55A 3FD6D74B000448BF 9069BC4944EF58E3 CC6FDB7DBACCD056 EB877E18E88D16F1 6C4343021B5E1DC7 259F08307FADEE16 57703922FAE177C3 E33BA3F1D71C45E2 BA907AD4C56E28A5 C94D26C6B55E06A7 A40633B61891B460 4E5971462BC1F914 6060E264960ABF67 A7DE1086AF5F4100 C3E352D3C6995AE9 8D41940F0B1C0CC1 05BEFE3475689E68 3811F28C46012E64 E1AD71A2100409DC 06B4498343829166 6B3F2B713B6D9174 12D65727273A7F1F D1C0CA1411406285 121E174C38DA52F2 00EAE2665BCA624F C2BEB0CDDD7D8829 79416EED25F6CD91 6DC4A7EA324409C5 21265DCA8CAAE9F9 1FE7EECA23E085AE 1D4587A6C61DBABB 4D4A0F7E11592F91 88558BFBD6F37A40 09A44769BF8853DD 5F71B4C750307FC9 FB09F9B9B489FDB0 2FB0DFEB0367A5CF F951D3867A6451A9 72B13141FD984120 231605E8BC2E8EBE 909D230B6A855934 728CDC6942886C29 6B0C116F2D428332 653B33DCDD040AB7 31D7949F99C3A9E2 94F50812DE061DAA 904A5B17FA4C7C5D D1994835FED4E517 4F69FBBA6B100352 C8FFD4E0139C9620 AF7BB0EC889BF83F 99FAF0BBEEE504D1 81C5FAD6A41E5AE2 652D3DC03681997D 75A3AEE81ECF89DC 34F6A710E660E6B7 26E1FBCAB36FFF48 B0045B505E995EBA 45994D426350749F A6C93231E0169E8A C321C322285587EC 76386D3000EA77D1 7B78463589AB84C7 EBA23DD885118EF6 5594EDE2D0D4C8DE 6E80EE9B092EF0F4 9C3B09541C597811 D5FB9AF321B62BCF 56F6F14C5E4AC69F A84EE1BB821A9541 32D5C731B70D8464 E5B0D96B872B53AF 3C3AA819DC717A42 47F6BF7F6B059927 C400475C22570252 005B7AAE078BC18E 4C524233694EECD9 41913DF20FA02C23 3F1D80F9D33F64E8 56FF31FE6B3CD7F2 C92C9054721AA441 49ECF42CC20EE01D B63E541804780FDA F3378DAC235C0C35 7C07B99A433B08AD 310E5407F792AB39 5A04F676F8F35F55 E8918FA90052ED57 D9B18C7A169E7EDF C7C9C1FF9BA7F5C2 809A7FD6B8333CB5 A1D9FE13F173BCA4 0A81AE5D541E2045 88DDE04E09CC400A 6EC5559C72ABBE12 ACA5CC998D4EA4A1 E320BF1A909C6391 AA4D40BD3BABCE7F 501075C9B216D8E5
- Read the ciphertext. Strip whitespace: 3,472 hex characters = 1,736 bytes = 217 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201208170601(name+title). Key = MD5(password) =aca077c5fcee3c3791efc404d32e74be, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 54 GUIDs as hex (shown below).
Decrypted: GUID list
1 ef2fe9de-b643-2673-b224-b5d5900ebfa0 2 a2ba1086-82c5-4371-915c-5f1957ff18b0 3 46005594-1a4a-629e-98a2-2f2ae20d049f 4 5971f2a1-2a22-5100-8dec-a1a187310742 5 de2dcf0c-f092-761f-9202-713ba8fa730c 6 2c12bbfd-09c0-4de4-aeab-3af144bcfa72 7 dfc64464-0747-8028-a2f2-121bd155f1dd 8 5bb4bb03-2c3c-2732-8943-50c51963f694 9 4b89675c-0f0e-5150-9cfa-653c3d3bdaee 10 e0b577d9-f076-6d01-bb8d-db5e7ab5cc12 11 e842541c-3bf0-1a13-9e6f-eb69a6355e23 12 4f4a8881-2ca8-31e2-9d95-253be5258377 13 545208b4-8248-30a2-a161-b06a3d42e361 14 27a08c93-0f35-6f65-8e47-324e56312201 15 1e27c73a-4cf2-099f-9d0b-872cbfdb693a 16 b0cd9c6c-7b47-28d6-b0fc-49d9edb35d4d 17 a9404365-4ddd-7c50-822f-aa472811e2b4 18 4cdfabe3-1f62-4c8a-818c-5ca062d484ab 19 feac8941-6f20-5c36-aea7-1165753725ef 20 449801c7-33cd-1a9b-a89a-937c8de49c31 21 14942be9-95f7-170d-8e01-16307fc08d54 22 6a3f7ac0-2c7d-647a-b2aa-9ae5c0537cc2 23 63961621-58ec-8db3-be91-424d7f1d66e2 24 37cf3410-3635-8ea1-90bf-ba665fde1f1a 25 5ae9d3ef-e056-5648-bc8b-f58a56b26a2a 26 aea1d094-c984-2193-8501-f74485b86114 27 4e72b007-0f25-25fa-843f-fb5b1c5de1d8 28 41dc59d9-f2e9-0d38-83dd-c773dfd8bd2f 29 0f6e337d-d5e9-06e3-99d0-a894a0f85e45 30 e91118cb-e6e1-4310-bff0-f98d8f549909 31 ee960a36-4c5c-6baa-abe6-f2c4c080dc2f 32 e5b2a877-fab7-5466-8230-291ea3ebda3f 33 5b8cc5ec-6419-7b66-8dc1-314c57d91fbc 34 7a55a010-bdae-5acc-af5b-37ff4b115902 35 7a20f8f6-67bf-495d-8c4c-71ebccd5b8e2 36 93552730-fbcf-6825-ab4a-a1da87b5e614 37 3d57e089-d50f-5f62-bdf4-670dfe81091e 38 e2fc31a6-e6a7-099c-b95b-c44f1f8ba170 39 13c62896-bead-68b8-9d5a-f1b3bc9da880 40 98c5441a-7fd0-73bf-a812-836de13a5ae6 41 4eb7f734-ad8f-83a1-b70b-10912e8b7cfd 42 eba4d28f-a07b-500b-8742-c3388431b206 43 5e74368f-e1fc-726f-9f21-4403e042799c 44 8c5e4be6-6a90-8da4-88c1-a1ced021ad54 45 3b1aaa24-258a-3ca4-83b9-d75d7edb45d7 46 a602dc9d-a343-8474-9960-f926cafba213 47 ac5a7a54-950b-5026-8e2f-ff31fbcca04d 48 0ebf7175-cfa1-2053-b50a-8bba7c6a90c7 49 8167e4ac-900b-0532-a79e-f82cd9fe6ede 50 a8c99ef9-bfff-3868-9a5b-c35e67927c00 51 be478313-a3ab-6a49-b273-0942294b684b 52 41b73944-57fd-189d-9e74-a8fe8c1747bc 53 dc889878-8189-5d13-ab97-721939f2261c 54 d88d2791-4c47-632a-96d4-fed5a565894c
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
246574825613360274511688522004657546506785783852036156. Exactly this sequence comes out ofnew Random(183).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 62 of Run 24 (seed 39,416,093):
new Random(39416093), Next(8,64) per post. The RNG predicts N = 54; the post has N = 54 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21). - Conclusion. Filler. The content is fully explained by the two RNGs.