201208170637 ycbpv
explained decrypted filler
3DES(name+title) ECB, 45 GUIDs, seed 709
From the post to its content
As posted (encrypted)
F38FE14092F511F9 2A33D34685046698 93E9B243E04F8CE4 80A2F881DFF65249 875396CA3779CC1E 70A4B6D5386E0D50 C997E1FC155E2983 020BAD8E8D49AAB4 20E5141ABCB159FF 9D95729D392E6979 C786896F93205A23 F987986F93EA1CD2 F489D84B1CE6EA7B 1F201394FDD4DB9F BD9F8B9653E10804 A9501D19A365FC2E C106FA1A81BC0AA6 BE48BF054B41CC4F 0FD17E67BC125B9B C09FA19BAD04DBCF C3E289AF14BF43C7 7D847B00FC4DC0A1 9F8F2ACA409E351B 3713FCE81D1641A9 688F04A6ECC5081E A2D89B860C0E7210 222AB879CAB7F184 1F993D86C64B5C81 608CBD73B8C5EAF8 EE38C69FDF426A87 54BA3BC607C66AF0 E91F5337F9C7505F 77E241634EF8AC26 75DF49A297B79D9A C1A189CCBDE38E12 25437E9D9C5A1452 E6EC6FF26ED0D105 0D46F8AE8C003AEC A3127E573C674B5B D7FEA67FCC7742CA 3D3B64AB2A503AE6 BFE6B8938E1D9716 718F86FE96C1CD52 64914DD2F206E3CF 3382419D5C1CB67F A6F96C33FC6EF388 B0B16CF1DFE70633 87DF7A7E3E0EF7DB 796A2C4E345A9063 F133B3E4678469F2 4C847F34835B628C B5EA3168377484F5 D4DF8B0A90C73133 65EA3594CF456BE7 B1FB6568A382100A 097747145EF0CBF1 48C710A9D2C78D8C 1D6B5465FA795CD3 9C64D804B07EBCED 8F4F2488502C5C91 26329A288EC6E64C 81C8D16DEED98837 5D0A82472E2F4EFC D3BBD309B7E718D9 A96F5EDF21001070 D26EA8DE8EF38B0B 46AFAC2E5638B05E 8AAD88D954B74D17 C10F5C35198E8398 FEC094CE4578BE5C 1C566DEC215AA5EC 60DE4A0A2A59F5E0 B50F75933AEC17F1 63642CF08E5A08F8 AB8421D3F9E97426 F4A2A579151B1DFA 2624BBF8B864B46E 2326A584ED07D70F C1F07F636CCD5DD9 B7ABD2A860157582 4E8F24869E4A3698 D44D882283069C87 A73C03E206885CE5 C4A236DDF7C8F6AE 23482E8013A401A8 B45900FA3211452F C5DBB548AAE9EFB7 1E99EDACD130F247 F05B03AA133E95B4 71E268655FE2B2B1 DAD918E4BDBA8652 DF45EBDAB1ED7015 405CBDA8D406773F E43798BB57A205F7 9CFB101F1C277359 A990253B08B5D492 381CAC50DA3594EE 9404523429C4026F 4DF62C5F755BA343 B5A7B1091CA929E8 31D245D692D8CE59 3952ECC4DA67C7B8 DDE82896DBB8C7E0 0BA6DA58ACB1F9B9 2D32C0BFA484738A 010FF682C7520072 5C25159C9E8BEE5D 340F61FE05F18969 A006F515589745CE B107ED2819CC5F3D 0C0962A3B209B29E 956EA3AB3EA59525 577F3EB73E0503A2 D91D5EACE47083CB 10E0AE6E1ADD1B24 D9AD42475939578C B0FB03F925B055A4 DF121B6D45B032E6 E33A364CFFCCE887 70011696A1EA30AC 2ADB51ED5DFDCBA2 D8DB0C9265E1BAF7 654B118BD74A07DA D5F6CDD2FDDBBC9A 5780284EB22BBCD6 A66EFC9D7D2739A2 6FE0701426622197 E6234A48DD082203 2AB1F5669EFCBC33 C3B8898FF7B3B49E 112B1544EA12496C 1C2F425FF1D87B76 669A0F1C0141CA54 57A8BE314D7D1DBD 1B36C0A88E89F34D 0DC013ED55DA2503 7653B85BB2128E16 52602FBA9357D78D 44961B5C3FEAE789 D55D62418B16D760 0682616A945F0036 8E24DE2FC60FB6C9 3A32E92352DCBC96 FF3BFA98C9D9C30E 25E449A68ACAD2F3 525FACA6EC558E62 9129D42E0B22F5AC 8C08BA9DA06BB9E9 E6DCE6A996BE2EB7 393C43187984043E 632021A5C1E6F5EB 7F1928EF53526A9B 63876964812A11FB 206DEE9C804D0C41 F219643D68A44F59 70A16FBE4D5B43B8 F2053A3BF42A16E9 1CD793526FD9005D 49050F87A1E458BC 41165E844FA26C23 FA8EBC1FD6168CF8 F152BAAC494CCEA2 2991DF8B8AB222D0 884BBC23AD07B566 8FD9D7487BAB7B7E 9CB6D52DD1A9F3B3 B8F406029269DF72 07CF329D65A1C5DB E7956FA0D94CED2B BE2BFF5D03149273 2793AED6064EEDB9 9B63277A40FEA018 70910AB6E3287176 B2C1B60A49C04091 39EE4220A738A865 63DADA0C6175B02C AC43C5EF2A7DEEB5 08C339684BF6EB70 31A35D0FF9E2AF42 26C44F8495407EC6 6937D1E19663A401
- Read the ciphertext. Strip whitespace: 2,896 hex characters = 1,448 bytes = 181 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201208170637(name+title). Key = MD5(password) =ce5403f80c52f79eb37940ee095769d2, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 45 GUIDs as hex (shown below).
Decrypted: GUID list
1 47f509b9-d48d-1ad9-b3b6-db1a4f0491b4 2 fa636ad7-9b57-76e6-a5d8-9abbdc300e98 3 5055d9ef-0233-3b79-a0e5-351c0fda06b3 4 9617b05c-e09f-8f80-9549-97d66a77ff4c 5 53874f96-bd24-2508-8406-fc7a360b5379 6 15888022-73c2-1d53-a1c3-b6114b1fe04f 7 bd458474-07d3-5673-a73c-641fe16188b9 8 5f8b5b87-3792-174f-b62c-81d5243715f6 9 a4f37083-bdb4-60ed-a6a2-20f0461fcece 10 075378a6-1266-6f4d-8f24-7adc5e6a502d 11 fa9d3136-4a5a-5430-a4be-3ad0d0fc247a 12 051d0097-cf69-8cc8-a8d0-f0d90b437f0f 13 20c6e560-4e94-0b78-8a36-46365c1de4c5 14 46dc76eb-9585-292b-ae10-670d316f38b8 15 ca17e2f0-3100-2e0d-ab88-2839098d07f3 16 70a04841-06d6-7a69-8860-df657e4f9010 17 1d89bb06-1fea-8c5f-a641-317abce6ee0a 18 c70d1f82-52c0-52ae-bc40-f02fab3bce2d 19 8a32c034-9f62-7f09-b31d-e9b1f76b19a9 20 a0f19efa-f8d7-76a0-8552-37abd7042853 21 a3ef053f-ab0b-07e8-b3a8-9f5751c64fe8 22 bbe75377-b6d6-7dca-bb1f-0b8d0df92f55 23 79126eda-a7a8-7df6-aa40-de4191b445e1 24 dfbd98b0-fd0e-6a1f-87a7-efe45c1827ad 25 0ed49e45-d8c7-1829-b11a-5a900cedcbbf 26 75b379d2-93d7-4bbb-9942-d647abcf4d33 27 a7477bf2-c156-4316-be1e-e66e40b3e170 28 bc220c10-a153-87ed-949a-ffee3b26a415 29 97271966-fe8b-3ef5-a22f-30497d31bd39 30 7adeff61-87d4-0602-8e37-ca961ecd986f 31 665a00c0-0504-8506-b34e-d5c33a906351 32 55246b20-ef37-1633-8a32-eb1805df04d5 33 22675998-8e9c-3dc6-a093-c03637be67a0 34 64c3ebfd-7d4d-6929-9682-911231a89b56 35 48a9675c-fbfa-12c2-9d93-ccb732b2f617 36 b1703bb8-c9c5-448e-b813-45accd213d73 37 fee5def4-8842-2478-888e-1ce42c4e209f 38 c8c1e599-a4ef-5736-ae9a-4990c2c8af42 39 d0512a19-a3b8-628e-8d51-cbc3b3da25ed 40 378f241d-12a0-41c8-98cf-f66266957d36 41 741b6bda-1419-7c2d-ac09-e3a72ad5bfa1 42 2f2f4d24-5290-6d3f-ab09-71347e79a68b 43 59fa956d-e61f-6959-af7e-d7386aacbc1e 44 84399a97-e1f8-480f-ac6a-7ac1a5aeaf9f 45 742b8bb9-ac53-6964-aa0a-685894e7ff98
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
173821516658022785770776144830813614256476646. Exactly this sequence comes out ofnew Random(709).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 74 of Run 24 (seed 39,416,093):
new Random(39416093), Next(8,64) per post. The RNG predicts N = 45; the post has N = 45 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21). - Conclusion. Filler. The content is fully explained by the two RNGs.