201208170628 ycb49
explained decrypted filler
3DES(name+title) ECB, 58 GUIDs, seed 79
From the post to its content
As posted (encrypted)
978CDDE78E4219D2 274A157FE5373BD4 ECD7D8D21A1D3711 0255DB2C897EB5B5 7D80CD6F83235F35 88C11C293C1A071B BD68146C405C2C8F 14DA5C92CEBDA916 33CDE2DBE3740ACA CA696EE7A0FC3801 E90905DFFE0A03CB 582BD19D4663059D C5F682F0915C6A73 90E7A5E01CD1CBDB 9767CD937031A3FD EA0CA3BBB2C9D556 2F1D25C61C5635F2 D800442D321BB7BD 1D0BB05B400D2FE5 694C2CBDDBA3C35D 67E6BC5FDEF8C03A 999CB3710B71AD35 17D141853F635FE1 67FC0EEB88E56465 CC9483A5E2B8C8AC 072A95C98EE251FE 90EADB55C7B86051 4DC9DA1E2BC77309 2BE09D3423E4D6DB 93AC0A15323B5836 B9EB925D9711C680 681AEEF6CB315C1C BE55C1466F01754B FF53E23ABA8DB064 9467A36D14F9BA0E ABEB5EBBFEF02D92 795BD5B962029DDF DEF2C0309F637B5C 22FF22E8D8771A4A 28DC19AF6A93D661 22177F5698761E60 CDFD3BC3FF2B4A70 7B9E257536E595AE 3C5E041ED10DA739 E7E1681975E5477A 51706B223FB8EC0C C7F7DC8B91F30D8F DAF68BC08902441E 23A3B126CAE355D2 EE0934129402F2E4 4C77ACEE7A2079AA 63008316286BB344 B349BB9D4F4C8F7F 7A67D646D2363C23 723AF0D9C182FB8D 52D4470B333A415D A6154147358046B8 ADFEDFAC210D8DA1 C03A90CEB179C65B 9C6A583F3EE4FCFB E26CC54274364860 AC63C1F932D8587E AF9C9D0E291A7A00 8D95E73DAE98448D 7917D814CEC74CE5 7FFAC071E955563C D64C005903750D55 AEED5FD5DA5607CC D07D977B19F17371 FD20E6FD27BF213F FF7AFEDD6F678CAF E879D72D240C8A4C 0EA19103BBEEFD3E 4B6BC69D756D334F 01FACB0A175D6E9B 16106018EF066DED 67C1FAB9C346C903 4DD75078D845E4F3 95B0FDCAF2C1576E 71A6463ECF9F0B49 5433A9ACE8626E58 DB74D391E35C657D 70030CCC3F59C637 BF864C64A750FCDD 6EA896CD5174B149 02540ADF0B43389C 3AE3D2420C06DC19 31B0E8488A5E9876 5DCF9C17DD1580F2 A357CABDE0984147 0CD1F64FF068FE54 0EC260F7EF642DFF A7D51E6B93AC9598 7C92E77AE989F600 4B08778BE880DB09 5A69455F027C893F 79A65E40524795B3 E640E6386B83991A B811F89DDBBCD49C 9DB7C1E5DD20CFBE B1E4CAFCDD81BA8A 94D03EF83D2C62A1 E0395F3D6AF23C2B 053CEDEECF5892EB BE001D0893CB05B5 85557EC25E1AD0E1 6438D80D0A18BD43 D7395A4F44B35AB1 F3CDA5B0E2BB873F B57277F2FFB69925 9367468FDB74BEB9 EDE2F8B3758664D6 ACA89FCAB9AFF272 7DFE8963AFDCB0AC ECB6C8B095B79D91 7F389774992BC2ED 7D42E1405B1AB35D C66A2C65B14A0ED2 867B2AAD0E012E19 88E17339D5D9DDD3 3C52EA53C1C0F08B E955671D65E82DD3 053A14087BD330AC 95F8CA3378F22C29 39C14CFA0A33628B 3B97B164F16001F0 E0BE2703F1F1D979 F8698B85A3AD3209 7F161CFA036392D8 2C143A26E32BCA42 47B574C6CBB700CE 6CBADEC88AD3EB2A 1E5A6DCC0F2D73B5 71691FE8F4F9B4D8 3360C6108204BA38 07731828DEBAAE21 3F3588C227748ECE E8008DAAF93BD476 284BAEA168900BCB B819A915EA29E387 32C3D294265AACDB F229164CF2C2A342 C888E552EEF60630 E0D61CEB44CD238F 3CF156FA33420EA7 487331AC67E3385C 360853143E037633 ABEA45B5F923FF7C F997B15F89B35F24 5EA375941FB9B751 1F9B6EF3FC06D478 21668D33F8DAE76E 7D579C22E3D45B88 434BE1BB5DA33A0F 155B8F49996FB026 B7A922060D5652EE 1130DD9A3B4B30F6 FD856545BC83B8B8 F2E968B17FC2DC97 DD3314D22BABA40C F3B25FC4C8209566 10DDB63454368515 B83FF127B99F62ED 61701E935BB9391F BA89A15C25DE4EB6 2C94AFBCC24177D6 6C4DB9247C0924BB 51E08C2B64CC513D B216E03CD01D1676 31AFD1F2BE6E3BC0 758E3A136E92E516 7B9E5DC0DE6AAB10 72B963219E7DCA18 212CE0C31F8A3EA4 973615329AA88365 17E8B8F37F13E5C3 A886205BF4992CF9 64E93A51DE141489 13351D43EA5F456C 531692387386374F D645362AF0CCD5B4 5837BB20758FAC70 5F5877EAC54F0E40 19532450E41D96BF 2B61A8DED0E8158A 9737AE2E859514F5 4A3EA3279F72C9E4 9BB3BFA2E61461D2 F6D8D671EABB0551 2D4DBB3A1CAD2EC1 5150240EEBBA1B22 207F983278C1FC73 FBFF7956AE63D139 2E6B6D57415BE2BE 563B9B385311F194 D901EC57BC99E18B DDECFD9AA81A9250 D7506048FE2276E0 5461113E8E215914 8A76E124AF9C1B69 3D75290ADD805628 7BC580781292D7F2 CA36B3A0FCADB3C0 0B49F724D07F4C50 AD52480A870726A8 EDAA95225AA5F194 388D9B3190635918 C0A0353D0E5F2CF9 0389B9CFDE12C8D3 407375E86F85012A 79CC814E8A83FF16 74497A1925381B8A 04B4D25D2C5DD274 B8FE06317645717A 38E66D72DEB79A97 29E67241A4623373 D981360315A45084 C8B336828DF16B83 49590498F5C9FFAF D58231FF377DB86C 33300834E44FEA72 FF506C6DEA8A5B22 22A7810D715D2F2A CC760625D0F245E4 DE3161BA7020BA72 5776EFFBB0D20B73 B4513F63E69909B5 1D13DF740D9E294B 9D9B94252F09FC44 B75F2D647FF19CA5 5BB8541C3D090188 686781DBC23355AB E9674D2E783243B8
- Read the ciphertext. Strip whitespace: 3,728 hex characters = 1,864 bytes = 233 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201208170628(name+title). Key = MD5(password) =0d0d6384c448ffbaf3018d15db51168b, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 58 GUIDs as hex (shown below).
Decrypted: GUID list
1 abd66b9b-2c05-8b75-9d6e-6263d1a02e69 2 0f45ded7-5d27-8350-af24-3e3a8993a3ef 3 e5e864de-0bb3-8496-a055-c44f0f1cd9a8 4 7247b0c3-e00b-3930-9754-6a8c95e5b400 5 6b9f1e91-909e-77ae-b3aa-b3e89ddcef2b 6 0ec1b6ce-3af3-53b9-b541-f1304e283efe 7 0544488b-9031-2ccd-b155-c72f84e51fda 8 5c010a38-feab-0bac-95dc-0b15928c29b4 9 f67d1e4e-8f93-67ed-abcb-a829a3fa1056 10 57822e59-bf0f-3135-88ec-b57c1feb3623 11 b866a25c-d9a5-4434-8ca8-8ac45ccfff33 12 e7fc2eea-f8d3-1d91-aca1-c29e0958fde4 13 f293e6cc-b051-850e-b5b0-3ee76b9c40f5 14 bc69f7b3-26e6-5fd2-96dc-7e56dd5af1c7 15 25e6a2e8-8a45-254e-97c7-35ebdca43b0b 16 c652b123-7fe1-3c9b-a577-16fa11b66cf5 17 39687456-9dca-00e7-a35e-7ca3d66449e8 18 8ce6bcc7-8033-8ac6-853a-30943ea67930 19 9c2f7b4e-a0ef-77d9-abf7-25e235924b49 20 9a0ad652-01b6-8fdb-92fc-d7b7b19698e9 21 a34f235a-5e32-22dc-887c-7f657581c053 22 63f17506-7a6d-2e24-964a-28407a2a5260 23 2089171a-70f1-3a86-996d-f684f1525610 24 315d3ce9-a28b-53fb-b5f9-255114d38816 25 1c7b8904-1e7a-3bb7-a906-00446633473c 26 c347375e-fb21-3f2d-9d95-58b9c9700718 27 c1cce9d9-b5e2-7b74-aa19-37c731d0076a 28 39399939-b7cb-5cbb-b93f-a5cc8745212c 29 f2754967-52a6-35d1-a895-68a934771b3f 30 3228f193-44df-6be2-8e8e-634249e6fab7 31 624ba4b0-cb64-3ac0-bfa6-747105e4db35 32 c432f778-7a3a-212f-9004-e7b899009bdd 33 f75b4fa1-6a6d-0c7d-9971-15e1e64907d9 34 612c8de5-8eff-85eb-8161-d53fa2a615f5 35 7ca627d8-5280-2e04-a5f4-84db68e7ae36 36 28faf02c-12f4-10ee-9358-8fae5d4e0944 37 8942faf8-63b8-43cb-8e84-ab04e186afdc 38 2392968a-a56f-1898-abd4-07285ddc399a 39 cb8d7faa-602a-7e85-b211-aef775bac091 40 5d715498-e061-78f3-96df-1a469dd159b6 41 0555c4ff-4eb1-1c22-a1cc-db3ac525b0af 42 3af6825a-cd14-5290-8a58-5a5dc20687c4 43 ddf931f7-ed70-268b-8898-f7b310509e98 44 c1236a2a-0a9c-1d6b-ac0b-d64873d3d8f2 45 f588b598-957c-5a18-8160-3de0fdd5c3f5 46 6784cee8-24f9-3104-b680-5bdaf2be73f4 47 d229ee4b-9f95-171a-b7a9-f02334c1e244 48 987ee88c-e960-6800-9359-42c6443ccc58 49 fb003264-ac43-705c-8819-ec40113c25b5 50 be4685d7-3529-585b-8285-8f4ef79e6b19 51 9093d9a8-9096-55de-ac58-4fd021a6112f 52 4e1e1248-a355-2e62-a663-e5b864eae0d8 53 a728aeec-5400-08ab-90d0-8c90d8dd5171 54 f209d475-25c0-539d-a82f-eea2c0bbd2a4 55 d148465b-e930-0750-b531-ebd1df557e94 56 cde1a2c0-0ec0-680d-bdc5-be498f18507f 57 b1ddd9c6-dbc8-5492-a73c-de002ea11636 58 c9e53ebb-c6cc-30cb-a8db-6f05e2e883e0
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
8883752063418523087822353375363208214177152153167552050653. Exactly this sequence comes out ofnew Random(79).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 71 of Run 24 (seed 39,416,093):
new Random(39416093), Next(8,64) per post. The RNG predicts N = 58; the post has N = 58 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21). - Conclusion. Filler. The content is fully explained by the two RNGs.