201208310440 z4krr
explained decrypted filler
3DES(name+title) ECB, 50 GUIDs, seed 717
From the post to its content
As posted (encrypted)
994C82CE83BF03D7 DD810EE43A679B05 675A4F3501DC6B13 8231DC60D54FEC14 30D04C79022830F6 7809124DDC73CB22 6D5D5B4480C7D4D9 54B01F5CA3D3585F C057C6D562196588 6D7F251113CA7540 89BA0242165E3F3F C4716C090A0D30D3 9D1B262E85A8F261 308E1D7F64BF2809 B415EE046381E3B9 48C11B1DE96D73F5 2782D29783F596DF DA13A688D547C276 5F9803105A1530BA 669BAB8ED861AE6F 43D3C5B8DD86498D 60E49F1D84665E69 5DDA9A09F6770FD3 52E635BBD027FCE5 279BABA0FCA28B64 E62EA10E3DEF3187 BC74B4A75BA1D388 D7F05E27C25F35FF BD8278B51728FE47 37EA1272E51F78A5 98CB13E57F3588B6 CABC955604B278A1 C32DA7203C08BC61 5B6B0EFD267A30A4 84C63EA1EE704971 55B7AABBF656BA23 C8C294D4B2984EA7 581C55FF715F93E3 FD5098C08706ACB3 2783CE80A1934BCF C93E33760257DC87 875CACEC13888F34 DA251D3F7E230D78 E7DE84D5BB9048B1 B2853659D1CB8711 F987D683936B3A2C 7B23958211B85CA5 4DF6F61414ADCC17 649BFF7E284A456A 92D577C652CE3BF7 A13B4BCF69498333 082A6E3A54F1DA00 B9578E6C707930D3 DEA97E6EA927C537 F9B59AA29ECCC833 4A354CEAC789B9A2 FC7371F9D2CB7313 D5D61678AC7C3CCA 879837EF9C32D7FE 22FB1DE6C1369D60 9CB8BECD238BEFE4 E9D43AD44D4BB010 3AC1DD4A40E36B6F 9AB9BE39FE46BD18 7B52927DA6EE95EF F380BD60F0FF8154 A6D40AA5026B09AF 0E491A9A3A2B9388 20E1D140F2D51860 D60E6E763D034FF4 BEEC9E88325D1C67 94E2DA951A0183DE 36B6A3243CD7374C 10BC5F2AB5394305 247345A4733D0F7D F3BF84615345E677 8632B08B5430AD57 978B5E05BDC9A47C 39411C5CDA1BDFF4 3DD2C171881A6C35 FD9A5C3F24268852 3D64F21866577580 7EAAA756D725EBF2 7B8674E34259E89C 350B860E38A3D60A 9E69C4EF8E6749A8 B6CEC8845D8D0075 361AFFBE1DDDC801 44218171B719F058 7F900FE96660F600 58691C92C2B68C31 D1B9E9D7DAEC2688 DBA0EBAF9E1934F9 3D0490DA337655E7 74047D28B4A25E65 B4B5EEF107E7A5E2 D1BE08458CC10E51 83B6273A587DDD34 D361F0E0075A73C8 FEA0E05AE589AB39 9241E3000B3E5D6F 4A447D66ADEA20D6 EAD1B757782230B8 297CF86AAD3E2F76 4D445AABD708E97F DD76FD76E945B6BB C145DC3B66E0C6A6 701AD3284A0D5022 7A75390F426F8D3C B0F69D7BC91C6973 DD2E2E791D046B0B B86DF491310EB0F9 05D36F2ECDBA2C4B CA44AD85772A64B4 E97473E41247EFE1 BFA8755A4E174727 FB6DAA7962303F79 9C839979409D30E9 9E2EEA203002C6A9 5345BE359D85E857 8479CF65A7114510 DE29038D74906495 2B757D22EDD44035 9FD379DE0145AD57 8AA6C5CEF2D743F1 C245985E557F03DC F7C64BB8C4472BB2 1A14644AC8E55EC4 0158CE80750E62AE D486A3210B40CA53 D3DD67DF8D6C088B B0E958B98798B1FA E99862FEAF00A29E 015DAB7921E2B38E 36C2B17A395F429E F67C7E435ECB7AE5 71CF5C82E0BE60E1 3D3784123E6A6A76 DBCB0A4C96C304ED D144E1DF04BF70A9 59E034B8A70FEE79 4E53C191C2896A8A CED1BF3A9A7B0065 AB8DFEE6A6CCAA1A 2506DA94CB005282 BE69611DA7F4F895 B1511B39F38B92C2 FF0B78AC402F413D 5B5F298E781A8007 181179C853DCD291 D519EE6E50F4D9BF 4CFA8CB08FA5B56D 9E168579186BD44F 4F21421FF29413BF 0E780426FD14CD7F 78F909944618FB1D 904C476F0735C6A6 910A3456030700F3 40AA3B9482C62E16 448DF6A24BFFC75F BE970F626F37D486 2B41C73C289D1C28 4A4C38E7AB591860 A0C757F911B51189 ED5506C752DCC5CD FB7FB4D1A8DA3406 C4884E3A42E23706 08D643CF74472690 49AED98FBABF52D1 4FEB34622B847C0A 177D14BD2E10A10B A5C680A9A883D216 D186F61DF2811762 1F9761BABF85F50B 6288593BF7121757 988EEEBAD18B69C9 F95906568709F6FF 3136366A7B864262 C24012026FDC29BF 5EE16091E264E7BF A96C0F02EF8BAB7B 64B5C9478DF24F07 C600DA9E5743AAA3 E59C0B0B11E35E87 C9DAC23DC9682EE1 1B2DF7D3AC828C70 B8DCFAB1576CBB75 EDC8A7FF91097114 0D5A3D46FE0283AE 1359F99DC19D5E31 A045A18B54531456 C829FAF0FA5C9217 21988550262629A4 4208E960DF7A4B37 B265B45A3214ADAC 3425837C8113C9D9 B7D2568B0A0EAFBF B2A459B1F5AB90EB EE816AF6AFE7C73B 36A43024E15BAA36 53CEA750876CC9AD
- Read the ciphertext. Strip whitespace: 3,216 hex characters = 1,608 bytes = 201 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201208310440(name+title). Key = MD5(password) =a40e3a63c51363e486c5c03866bf30be, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 50 GUIDs as hex (shown below).
Decrypted: GUID list
1 0c8b6785-924f-2ace-bc37-de4fc6ef36e7 2 a48845d0-7ab8-1579-9026-05a3c6309ab1 3 0c9b2441-7bac-8886-b805-b3d79e066d18 4 e9851157-7e38-5eb9-9f11-4d2a4aaffec7 5 3bf363b3-9444-827b-b1d7-f24883babcf4 6 210cc48f-fa12-167e-9b0d-3db8007d3fe7 7 ba6af90c-ef4c-1944-8c44-6aa5c5e22659 8 96076e18-3f7d-1807-b521-8bb86dca585d 9 d5143734-a7b9-6ab0-8690-6b8939db279c 10 b13c7f80-5f21-6a69-abcd-933e3c42175f 11 6baf878c-bee2-4b7c-8163-efa89a117e02 12 c7ddb108-ceb8-260f-b651-8fdad78f6e14 13 d7f691ea-471c-4280-9cb0-6d44fecbd3a8 14 752740fb-aa9e-4f53-b11b-006ed90f7002 15 06d69780-6edd-7db6-bf82-1c79223c674c 16 8b555893-d56d-704e-a1d6-278d99f88c0f 17 88c66b2b-051a-201f-b7d5-b1548b1427a2 18 42f8b751-d88f-4b01-9725-b8fbf14dc0f3 19 1ee39700-621d-05e1-bb87-5f2f9efcad68 20 dbba4123-b293-8b98-97e8-b14f638c0ab1 21 62808363-0338-06bb-82f3-d4c4285178b1 22 033bb908-46db-6017-8ce4-2f5bf74ae051 23 cea45abe-6174-140d-840d-736526b9e23d 24 025bd218-4e61-4ac9-9370-6a45909b8bf8 25 65e35570-cec2-82bd-99a7-9c85ff467aca 26 b2c50bec-f9b7-64fa-9444-e51475cebaed 27 6766aa8a-d618-34a8-a512-d35e6bf6966e 28 4c8358d8-398d-88a6-8957-c6cc0806045a 29 9d4a8207-b0db-5606-ad6e-12c081ef35a6 30 ab6fd2d7-c60f-4951-8f01-4f10cadf7844 31 287d5c34-cb62-76d1-b253-ccd7f77379f4 32 d91b9a53-ac48-2b5d-844d-49e8207ebdbe 33 71e684cb-4d1c-5b78-be64-b56c8b6afc5b 34 a24f2f34-14a2-8fff-b5ba-424829017b58 35 b68ee595-fdb3-081b-b4ae-ec81a40a1301 36 d985ff93-79ba-792e-b8f5-cbc062e77f7e 37 0017b844-b974-87ee-b8c3-2959a25a850b 38 4c5dc4bd-ad96-0c41-8552-b310e77ff019 39 46da277f-bab6-175b-ac8e-684bc2618a77 40 0d612449-1416-0b15-ad85-a7747f0a0382 41 1cd1701f-0fb1-8377-8d17-e738e8ca71cf 42 69407bee-e98a-8c59-a69b-dbb55e72a793 43 2f66f987-befd-363e-8290-fdbd308f75d5 44 8257ab96-01d3-3b42-823c-745f9b0c0cf1 45 54fdbcce-433f-8b03-938b-4f21cdbfc63a 46 e8d273bb-e250-1336-8234-e6f513a511ba 47 0827f07b-908a-27a1-b921-a82081aef350 48 a3ff6cab-7017-6bce-8712-db21e0c56e67 49 6a471cd2-3b1d-1bd0-a42d-e13325df9f18 50 6c7a0033-3330-8eca-9420-eb036da0c08f
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
21858111664244772408061486385472580780108833812618. Exactly this sequence comes out ofnew Random(717).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 20 of Run 27 (seed 1,337,299,625):
new Random(1337299625), Next(8,64) per post. The RNG predicts N = 50; the post has N = 50 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.