201208170303 yd75b
explained decrypted filler
3DES(name+title) ECB, 44 GUIDs, seed 188
From the post to its content
As posted (encrypted)
95A5BD464D889DE1 ED0366F95ACC9E75 B77000A6B049A5B4 843A5C7D53FAD8AF 1F73B00E88A4F3DD 6360B12D594087DB 70C8461C5BAF821E 4A63936231F1E948 BF291A4D7E803838 1CB31A98D72DC427 63782645A6D108F5 4F806BB5BDCE772B B74E1292B649AECB AD4A4EDB10DBD5A0 7C983CDB184F2CF5 A9E4371929BAC003 BCEC3205CE40D4AA 43548537F6B24B1B 4D8DF42B5A697D0A E0CFD00C4BFF9B6B 03EBEA636042D959 4404004E94682C71 953A541A212C7B62 4BC4E19CAC55FBD6 B866271E67F007C8 790507C6715B413A 834E0BFD90D423EA 8A80A6319BC3B2E9 5017ED35126B900D ABAADD3693005C4C 6D9A10A220C7F641 64ECE682FC98D928 19526D4F0299E1C3 6D85F565BD626814 AC9964FF6471E517 15CEFC32E58EDF79 D32B6D45E68D5300 AEDD25E99651DB10 2E7BD48700A4A8CD 63EE782A42949C02 4A112FA9D3E193BA DF2E24309FDB56A4 6A2467470C67848C 7A9BCA0BA05C7AF9 14A5109416FCC5AA D115FF6C9221B3C9 11677AE6DDCC17C5 FF31BF4DDA9F5590 CAF41ABE54D6C4C8 42499BA92B0B1370 1DFC12EBBB47FFA7 7E8EFADE9C4A3DBD A4FFAD9FC1052846 E7D65C286893AACC 5F2C4E4C3A9F2DEB 9E9158C21D7A7806 68380D812059A27C 3FC514A0F30E2470 2299EDD78A460739 ACA74B48E8132FA9 69DE3457C240B92D 196BE7857C1FF04A 3C503F167D204BB8 B486137EA49BF1FE 9DE97CAC843D8686 B5638C9115889387 62F0694084C1457B 498E6542BC43B0B0 0E67E3CF4CC1B1F8 C29FD6509DDC2DE0 CD1A66F8450BA05E 8A0EA5B52352B480 1ADBBC0532535782 FF7DB5EE8E6A335A 26E3A7AE1CCA393D A577489678E69FBD 0B5C8D1055122A27 4A87843F1680FF0B 82B31767549AB942 30508FD0FA9F396C A38BCFD5FF176824 BEFB568CD11BF1F0 4689BB444015A524 1546351059E39F7E 08197C41C0AC817A 520392070BA0C06E 34906FB0884EACBE 8E9C05D14BE6ADCC 7E13613AC738D91F AC29CCE6E8534F67 1546EF9AB7119D3F 82A17BC775D96890 B6885CD2106960BA AD5B2862C313508B 3E596ACABC51E8B5 CB038D4CB0DACDE9 F9236F26CB7E21F1 CA1CA8D6CC9397D2 DAF95892079336EC DC28D1A7FDA0BA09 FEBCD101F0C46BB6 B182E2A3FB522E61 04DFF3794C50656A D505A1CC57019576 65DD0222647D7D94 AC008CBEFA2E9298 0476D48613153A17 ACA2E8B20FAD92E1 87F1887A14A6F3A4 495923313C16DAC7 66E7A38E2F1DFF28 2F132FDFB7347AAC FB341A7329E3CEF0 D4FAEC2DB0E9D1AA 392397F4AB0D21D5 A5EF22EB1197AA30 0F37348671065560 77C0B0F1B15DC4E0 1C180B9094D9B765 C5982219217C5836 85EE9D2C9BF842CD ABBFD3AE5470278E 460D97B7A2EB8ED2 7F7FCF438A356D0C A8ED6C960C6B14FC 9E286A9688828794 AF17EFD749E30B41 DBEFF9F3A8D3BAC0 F74EFE84FCC18B19 8288E5BE3801F729 F6DC8FF5CAE46227 7BD95E05E6377C0D F50F1CB6207FEC48 B001B600FEE27C1C C711A7DF6F6167A3 FFF88A798967ED4A D4DAEB4282055F12 9F4A0ABDCC5E3182 D5FC5CE69B2A213A 69070DD2607B9055 9BCA26BC18190CB2 50504D36EAB9B4DD 77E79F5D54C80A4C E4F0E255711D14DC E1A9EFFB8717EF4A 1BFDA4AD26029FA0 2512D2574410DB66 F4467867A428CD2D 4909DCD06EAB9536 2EF260269E3BDF96 B62E95CDA9E9B618 2A6601A0F6DD2994 2E9044E31F392AE9 C6B1097114E1FB44 C86B6D94721585F4 81DDE0D632D4C9A6 4B182250DE8491F1 2823E0A2683920A9 C2AF204818EEACB9 0AC976B2A920A959 ECF6A10FBCADC38B E3A7F3FA4076620E 84B66D73DD7FF33D 29FE3E6029D6D428 7C0EDB27DC3A7E99 A39E4E6D5C52B36B F737E5FF87F695D3 CF0BDF23F7563FCB C13CDA8F535313A4 83FB04BDB989C5E6 8F159FFACA797F0F DAF580F0F51726BD F97148A72EED3913 C858ECBA7FAC18DD AF490B8CBDDE03BF F8300D90CC7B3271 0E357B19644856D0
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201208170303(name+title). Key = MD5(password) =1475dad582b44dbe31efe8f0c1ef5f06, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 b70f621f-a0fe-8926-81ac-50863002026e 2 7faf10d5-b8cb-8961-b39e-e56a89503925 3 e2136b2a-289b-1e4a-a391-b6717b92a446 4 d9617a3e-cf2a-6bf7-afb5-85095210a8c4 5 d7f2605e-5f57-00e1-bd4c-531517a7405a 6 0277e8a8-c8d6-7a95-95c0-32b940bd5797 7 e9fb6227-b57b-14c4-bd0a-5a10cec31dde 8 1699a76b-c5c5-6f0e-a3de-13668a0a958c 9 03184e09-f552-2f1d-9812-ea2036022e2e 10 af8a1590-ea24-564a-b2e6-fccfd03a3be6 11 feec77e0-0acd-74b0-9f98-f2cccd36eda0 12 e9458ef9-d174-2187-9fad-5b7bb800c607 13 e8f22280-61e7-77c9-a4a9-663ee3e44751 14 96e68e9d-d611-238c-b2ba-8e8bf92847c3 15 350994e2-afbd-5aa3-b8e0-02a80a3b16fb 16 a1433269-d43e-3ca8-9ebd-66ed2422a584 17 46f2ca3f-7e20-8e8d-9fc7-c4ceb3acaa2e 18 ce47a7f6-70a7-420d-ab92-a5953ccbc5c4 19 667fe64e-328a-6aee-ab7f-ee29ff4b558b 20 e869ac93-4b0e-0444-b1be-20812f41de3f 21 e9b95735-228b-7e8e-8dcc-b3b7cad1edae 22 0788fc09-6436-8ebf-90f2-81aa4504c7f1 23 6a01cca8-16a4-6c67-af11-e1fe22773bba 24 612af206-e4be-6532-89d6-f6ea12e9efa0 25 212010e6-b94e-14d0-8c6e-895920f6d18e 26 9b9981f7-7336-4a66-9b16-2f54c6ae44a6 27 780c1cc2-66ed-565c-ab11-71ccbd205953 28 db3af9ed-e3fe-1541-b8bb-d3b5d49a2a8b 29 7d186d6c-9c10-41b9-a09e-1977f58f2596 30 6f5782b0-1dad-4516-8542-afc3f22e3686 31 f6af66a2-180d-5731-9ac3-1e2a010ce44c 32 9075f329-e86f-83ca-a0fa-b7dae7989f65 33 9d8d307d-4eb1-8c08-91c6-ff7104d8a0f0 34 91ee0630-5b1f-67b3-8782-570a71b6a3ce 35 713e94cb-99f8-2701-b2f8-cff74333803a 36 48fb0a67-114e-8c85-9c64-4e947f4ce5cc 37 6e9428aa-c305-6fde-b10e-b9f8566233ee 38 0ace5a90-fd8b-457e-8f19-76420dbed870 39 e88c0537-85c1-47b9-a506-a1550af8b8b2 40 61cf3af6-9943-60d4-a818-f85011572939 41 a01d5054-3b98-735c-b4c6-b3ec3ade3e41 42 bb50caba-9a94-8822-b432-327aeb3325c8 43 231f6f41-f638-6a83-8380-082323f49efb 44 1e7d8023-63a2-466c-b68c-7a7fc0f37434
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
88160716257272538460786614514458862864467864. Exactly this sequence comes out ofnew Random(188).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 4 of Run 25 (seed 158,297,437):
new Random(158297437), Next(8,64) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:14–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.