201208281655 yzcoj
explained decrypted filler
3DES(name+title) ECB, 42 GUIDs, seed 822
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 2,704 hex characters = 1,352 bytes = 169 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201208281655(name+title). Key = MD5(password) =46b49de843500f8ff869a4838073fb59, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 42 GUIDs as hex (shown below).
Decrypted: GUID list
1 11c755b8-fe41-115c-8f04-12d8136b0238 2 ff1b771d-1cf6-0a84-926a-aaa73448b940 3 d950847d-4d28-33e7-93cf-a5d6cc0df164 4 81900d35-0bb9-0c78-97f4-0bf9b27782c8 5 b5bbef26-64f0-29fb-9ce1-6dc63b453640 6 a892f58a-c62a-85cf-9852-b9c9752febca 7 d3edf28e-169a-1baa-b72a-4b72a28941d7 8 0a243219-b6c4-7065-b0cd-9303abcdc7e4 9 ddf73b9b-417e-6890-a785-57ad38d0905d 10 16ece7ff-615a-30c8-a19b-ab659b648433 11 1e16b943-051c-765c-8ca6-3465f9329f10 12 a9d129fc-9818-1a4f-82d0-2207bb9ace73 13 4d328abf-7814-6c5c-aa9e-58ae67afe4c0 14 a3c22573-f76c-1b05-8313-52f3be8ba850 15 58151712-b5ce-3c2e-8a23-da566ca411c1 16 37e485e3-0e84-3c72-bbdb-3a93b911514d 17 36e0508c-c291-3859-b829-b97c164602e5 18 3e16a3e9-0371-5dc4-b233-ac119251735c 19 1668bb06-5cc4-8d4f-b838-cdf30bd8a4a5 20 53549b50-d77f-5b45-842a-39102e3530a5 21 df0a4c27-4e3a-01fe-9ac4-d415219c9b05 22 93f69d80-d343-47e4-a9e2-42a57706d079 23 e65c10cb-a6fb-8953-a56e-33f07be5c9d6 24 a0572f8c-508d-1d3e-a40a-a279b6c5b609 25 08e22ae7-e31b-2828-b2d9-113a153f3f00 26 448b4e43-5558-21de-8a3f-b8bbf4aae0fb 27 73415af4-09aa-5588-875c-e2d4ce442021 28 6e449f02-126e-0768-998c-8c861be65e0f 29 aab57113-b49d-5a94-8beb-bb10a5e586d9 30 41fc9014-bd7a-0415-b6b9-096b2bb4d817 31 f3f50be9-3b18-5d34-bf80-8558773f3b9b 32 f10f1c44-1354-82a4-b596-3055128a8cff 33 bbe4a2b6-920a-746e-b6b3-69a1877ff7db 34 3e75fed6-9a71-5e1d-8357-496b66b0da9b 35 adc33d67-700a-69fb-af93-1cda8578028a 36 e76299a4-0c64-3352-a6c0-433a145ef5d0 37 617c1407-8135-8516-89ab-e3c73eb0851d 38 44c539ef-902e-555b-a437-d1b07275cf03 39 8c650f41-566c-1fa4-8e16-19a7703c4915 40 889b0279-1656-6fec-84fc-a6e0650e25af 41 a8ab1cf5-a2a2-420a-bbd0-c7e657a9217e 42 90d70ec6-b1de-0792-8eee-6804d9e8af9a
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
103028176371613335850481225050587563851640. Exactly this sequence comes out ofnew Random(822).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 10 of Run 26 (seed 1,159,248,375):
new Random(1159248375), Next(8,64) per post. The RNG predicts N = 42; the post has N = 42 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:21–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.