201208170729 ycezo
explained decrypted filler
seed 124
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 2,704 hex characters = 1,352 bytes = 169 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201208170729(name+title). Key = MD5(password) =ef926ac654d0cee62b48b1be7a712f9c, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 42 GUIDs as hex (shown below).
Decrypted: GUID list
1 d790b024-62fc-41e1-9941-3f215d121fbd 2 d258083d-11f6-1af9-b130-8f3fe6f88ed6 3 7534cc7e-8d6c-3703-959f-1b532a7a0fb1 4 67162616-9cfb-0477-aa80-5065b647b09f 5 1544a1b0-0cf3-1d4b-a7b3-c16ef0545b1c 6 80df1f51-ffe2-84d5-b88e-a3feb1c853d8 7 5661ec21-8b6c-4332-8ac3-7fc2a2c27435 8 6ecc1053-dd77-5560-8823-6f825e4518f7 9 34a4174d-0ffa-2852-872f-00d2fe4b4128 10 7b652a6b-98a8-8e56-9a25-d489ec8c0ff4 11 73c76a8f-cb47-524b-a52a-9891dd21a301 12 26acb9c0-782a-2fe1-9483-1df8eeab8249 13 0f7358de-be1a-7529-8570-8de0c1e58fbb 14 c9bac287-90e8-8728-8323-e6760246a704 15 da2c7fd5-4fca-7908-a769-c2deb315810b 16 64dc85de-063a-4ff1-924a-3ea07a05ae94 17 81fcac38-fdd7-8ca7-b75a-02a034a55f61 18 a8a049f9-5d44-7009-b16b-e84c74621ad0 19 ebf63eb8-4d13-0e96-a9da-500b71f09a47 20 979378e5-d360-26c5-a37d-1f13c462b1b0 21 88d7845b-b4f5-2955-b04f-edc6288af266 22 84b91fe2-1ebd-28ec-9e5c-73cbc776c5e3 23 c6a3e1ae-6f6e-846c-9632-733d633b3c05 24 1dc5a434-cac9-380e-a89e-c07481ecb6a6 25 288fc18b-81d5-7050-add6-c91637775b49 26 2d28f2c7-34bb-2b8e-a944-ef02500dae33 27 78a09a45-ac95-46ca-99a2-1cb371d28e43 28 a5809577-bee4-43d6-9f82-fc704b64238c 29 fcf1112c-50c3-7d7d-be9b-262273b6b22f 30 dc4a6a6b-7a24-8093-9008-13106df254cc 31 12ca4dc1-4e29-8d75-b84f-4e277e28fc71 32 5e7cca42-34ba-1a10-b759-1c2f892937c8 33 3ad5539a-765e-11a6-9d9b-e185acb66156 34 62f68ac2-30b7-0e56-92e8-d2ddc273ce07 35 5da1ebd4-83ed-89a5-84a5-d98275f2eb37 36 793d55fe-2812-1e9b-9aad-6c47fca5c44b 37 f0ea4461-d4b5-6da5-b1a2-4abae8174a7c 38 5d461541-4a5d-7ab1-ad93-7941eeb7f569 39 90a375c9-d236-5fc7-81dd-f8d11f5baa42 40 64cd8d46-78a3-30fa-b558-e6e584214db2 41 954e0d6d-01a3-69e1-8157-b2f3628d7398 42 814ebf54-84f3-10c1-98b0-b4fecade04bc
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
413018452852787487022283724478811081675361. Exactly this sequence comes out ofnew Random(124).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 91 of Run 24 (seed 39,416,093):
new Random(39416093), Next(8,64) per post. The RNG predicts N = 42; the post has N = 42 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21). - Conclusion. Filler. The content is fully explained by the two RNGs.