201208170323 yd7wn
explained decrypted filler
3DES(name+title) ECB, 50 GUIDs, seed 521
From the post to its content
As posted (encrypted)
F9D095F9D708DF06 A637B8242949978D 008AB483C9A3AB04 904920056FE0585E 6B1DAA11931744EF 51B25878C8DE0CDE C70A3041D3B0763E 8FE82F82BBADE4C5 C99C03BCED9C8409 3390F7C3032C485E F545B9058FCCA81D 375173A059DC31EA F19F840B33169C03 6434ECF2A2BE8CBC 988D455DCA408876 F33C6B753F48E355 9AE2674D31A1357E 97AD4D394CBACC0D 1192951A97354784 6F9099294A0AAF92 F4517F060F90161E A979D03CCCBE9F6F 6B10CA3AE45EEDD7 9465A4250C2EC05B 36D2B77E603C8C5C 2FAFB248CF62F37D 50F9A611EFC2DFCD 34B45F92DEE5D857 A08FBAB0F2ACE550 A679DEED6B986690 36FA47388F8D3C43 680DB799034F234F 963C2088920A3A6E A9D06739C241E3B6 0BB314A233629586 95E9B327CDF85C17 0CD5A9BDFBD90DFC 1E72973E074F7E69 35A93465B8FE4000 6A2569F93F6F159F 91E13C30CA4F0324 E380AAC5D66E02D6 CB6709019C5C4553 CB48559C71FF5F8A F20D72130C34E0D7 FFAF3E7714766606 06FEE618752781FC D1B9BE04C8D3CDB1 DCAD2F1799F38B7E 6F8B167C0AB28854 55FDB3F30730BFC4 9C16FB3C315F11D1 675A50B181EC8DC1 C6958E6E71C6E9FD CE6E3A946348FD7E 72DECA78C3823175 915BE692C2E0DB48 F9F8DBD07CCDE6EA 021CC105D21BAE7D 77F58922FC49595C A93126A95C690276 B4A214B322A6ECBA B4AE5150BDC1D59F 64031DC5EC6D9E5D 91E928BA52104A2A 06856B8B791D67FD 653AB4A8B2FEE3C5 2336DFDBCEF0ECC4 0895EC8562C103EC 8B4D2A57EF4CE9D5 C785AF3F6165BDCD 7F63AF1A57B1B8CB 6B515765826F311C 60291F24F0847AFC 5A8EF1C7E93649E8 A754EC8D69A950FA 8F7C75AED99CFC62 56B146518F21A675 0722967146AA0B89 7DF12B0FC50366F2 060740A7FFD4363D 4B57C582C6283898 BD809AA81C5F0A6E 66D2F4436F658F02 A0BE8A6602B85092 93BC746A6EF44F98 24C5A14A2E14A358 CB7C6A3BC9DF6420 E640B845AFA57B1B A42872EEC9BF03E2 7EE772027ADB0BF5 ED6963A486E201F5 201E6B2107BA817D E07D5A9F61A81D4E BA65AD86FD20764E F3FFF61FC2B75B71 FF849CACC6FFFDD8 D1591C3F0D65B64B D5E624D49F599A9E 8E7365E0F15BACCD 3DBAB0D2013D2B47 EBA75F718C07D1A3 26A95F0765438AC6 C400C82433CEBBD0 58B94CF2C4E1EEC8 D0D13F0DF34B60B8 1E6B525970B5A9EA 07586DAD1EFEBE09 FAAA0CB626AD7910 5D0071A9358BB324 D9034C79EE5E31DA 4290E5021A984A0E 12222FAFE1180A4B A4E23465834F9836 EE5444B03C539774 7DF13A705F86AF9A 88F9898B6F72C92C 1FDE0CB3EF12921F 07E39462D114ADE2 248C64F2AA4ECB1C AA69E24C44B74D06 1008DB21B82925C9 CE642DB119320744 7CF145BC2014794B 126D8C7BB7463B0F 7E119542275755BA 06258A4D682313DA 1BF39B488B6529ED 09E5ED7596FD07C8 6CCF8390B33DA2F8 6CBF78B6B13CB21E 2F72CC711A7B35D6 A1C79237710ADE61 127CE68255C296DA 2F1FFC5BFD8A4603 89637F73A5D4C771 CF127A042C184A60 B84ACE2577ED4EB9 7338B07B693FFE41 A9AC1F21ADC100E1 CE1DA518D55A928E C6383D88956ED842 35DA5D013238CA59 89E7F459F9416C3D F67A7ED3887D3A60 8E298ABD14C2BCCA 585760D329F7305A 7852252F918D6D6E F5E49CA9894252B4 118F563F572FA809 D33E5638F381CDBF 84FCE2120EFFF81E B0D827F24C438BEA 05909874799737FE A88DA4F4FE6D028D F31065837A52A66E 7C1F6004BF264130 621C8EA5578A048A C29D48601BF7B2C3 BD990D67FEF6003B 09E49DB3E79464ED 3CE60C80DF7F61B1 412F3B77AFE3584B D9D0C991D8F5FDD9 8A20AA92D5E370F8 599D65453028B4BC D6BA3017DDD09D3C 5B32E8A0A30F2650 2CB09E1A12A2B992 F68765EEE3FF9877 401B753616753456 84806F5DC956736A A62EBA927EE077DC DBA16D79CE9F61FC 55FE27EBFD7C14A4 B61A6104A31004F2 A02F8C645A50646A 992BDA553A01DFF8 41C83E1752D363CB FE57A571765473D6 3EC8E8C374C4665B 6BF6C1984036B30D 1074A85328AF602C F8BCFEB618C4C27B 1B6CC553E8CB817C 4C364F99FC00ECE5 34A25DC392E0AF1F 07C95B34AA259AC3 32A88FF983478FB0 8CBB4262448FF3D5 4548FD41F5C52858 654B769086364D42 7C24552110FD5781 076FD16CC7AC98CA 1263FBE6CD3C22B0 17017D14B9D9BAC5 0AAD985B66991179 622FF9136C94D5BE 83352F80D4F6ECD3 7A30D66205B49419 499D2D7441EEE911
- Read the ciphertext. Strip whitespace: 3,216 hex characters = 1,608 bytes = 201 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201208170323(name+title). Key = MD5(password) =954345e1605ddbe15048dfb2433dd4fe, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 50 GUIDs as hex (shown below).
Decrypted: GUID list
1 95a8d95d-3e91-865b-bf23-37c8a30a4c7a 2 24e2652c-2253-6b63-9365-7240df8173f6 3 7cdc0d8d-c31a-8b8d-b74f-2c58caa951e2 4 b28c353f-2bf6-6beb-9f8d-eea705d5c898 5 a6bbcbda-c23f-31ba-a861-35caf61b27c9 6 9055db05-e7e8-7bce-bc5b-f55d250c5be7 7 b9f1d5dd-9414-3878-a25e-d06b3b718681 8 e4de6198-3981-76d2-b82e-368cb8278cad 9 fd124c99-be74-34a6-8610-617936103b5c 10 8908b76f-ab9d-3b06-83fb-cc1488a5f743 11 8e37a5f7-18b8-1cec-815e-3edcfb30f871 12 3a3a6ba5-4f8d-1957-8297-fe4ebe2e02c7 13 a3480726-924f-784a-859d-4c628164963d 14 70228e76-c52f-4be7-94cd-9574b56dc37c 15 78e4a331-970b-618c-bc14-e402ea3ef351 16 b9c5a7a7-0c1e-3021-83c7-751c8ad0df44 17 3f9f9a9b-f579-7872-b614-32de92718b79 18 c5f776f0-3e3b-0066-8f9d-e96d566d337d 19 df657877-5baa-7742-9446-7ea8d770ecb6 20 c83ba01f-85ee-03bf-b2fe-20e25a7a568a 21 cfc147b7-c9f2-061f-aa7d-0e72cab30a78 22 e0812ed7-4fc9-6069-9946-38854f40b8ba 23 612cd7de-2fc7-0a4b-b2cd-5d3584f2c3d9 24 36749cad-a554-01cd-b7d0-ce68b4fbb72a 25 2079418b-5e1e-6ab1-8226-fa7002dcc598 26 799c7d26-be3b-5de1-bffd-6d279892116d 27 84154fa5-8712-7770-a04e-2737b78abe53 28 64658666-3d15-427f-bf9b-7d2a5532ab39 29 c681c95d-0e7c-42a1-b399-053964c29923 30 3b1e76b4-8ff6-6f38-a263-19e4005a2711 31 2e49d47f-795d-4317-9be4-ecd117e4aae7 32 c551f23b-31be-6538-b0eb-dddd6e73762b 33 aa2999a8-c49d-702d-ba98-9ccc8a6b6384 34 41d60ee1-c168-066f-8a7d-f37595b58e43 35 a7d2fa5a-b84a-57b3-9049-f20e6c0f6ac0 36 15d18e8c-33b9-3fc7-99bc-36e48f92438b 37 89988618-4d44-598a-a8d3-cec33658aa6d 38 6fc7712d-e40d-3275-a1e8-f27f16bfd459 39 aec14211-9552-55e9-83c1-237157fed990 40 03f764dd-0619-70c9-ac49-9361fa7b8a7d 41 5675ece3-b46c-49ba-a38a-cd2deaa35086 42 f84ca0a2-518e-4f31-972b-a81e882a1fd7 43 a4fd05d8-d613-138f-b2b0-50bf064a5a1e 44 572c4ad6-f9ae-25dc-9e19-fcac28237f5b 45 bc10ab26-66c3-5aa8-95ba-221da07ed90f 46 e01563ea-c7ad-5591-833c-df051c39b2f4 47 7547021d-ae50-535c-8a73-6bd66e57dfb9 48 6bda4ee1-cb5b-5f13-a02f-238dc871b419 49 219b29bb-c937-0ef8-b892-c7eabc42e31f 50 44a49f64-35f1-06d9-bbd7-622da9b356d7
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
86863737331174637070060065744646705353574412555500. Exactly this sequence comes out ofnew Random(521).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 6 of Run 25 (seed 158,297,437):
new Random(158297437), Next(8,64) per post. The RNG predicts N = 50; the post has N = 50 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:14–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.