201209010925 z5wen
explained decrypted filler
3DES(name+title) ECB, 54 GUIDs, seed 947
From the post to its content
As posted (encrypted)
A373EE9309497CCF 1C7F051C4C5BC85F DE8F9C2A012AC822 A04530823FC69943 C42753CEF1CCA7D5 AAEEBFF084102F54 7E6983D08A7FCF13 8A0E99445A333069 277407920E4C41DE DC60F55E7634AB61 BF420801CB00DDCF 01AC47F46FC18F95 98CA7EFE64F836DA F75253C4B65ABB29 09DFDDF3B14BA340 B06761069F1C76FF 2D83F9EBF0ED38A5 AB194689B4AA9FDF 77B694D63CFBE5D0 0CBDA8D15733A037 9326ECE47054ED7E 6234E6BE5984FDC7 F6844D378FA6C0A0 88616DEEA2324056 ECA0816E6DF13091 C04E2EEA75BB0BEE 8ADC58391B658DA3 E2273EFAF579D20F D53D53F0E5BBAA8B E8314B24E5FBFC96 FCF04241B84CAD3F 4C4C65F46172C47E 0D25608D423C62DF 241500C5500F55F1 A5B5C7E8961F809B 2B8D2369BF5B0E24 7E133D43C4057E64 A857CD4752D05122 C436A5D4F19D5DA1 2A45DC06C48E0FCD 24CCCB338F3AE46B 54EFBF5DC330960D A59FB27084E35C33 2503A0165026918B 941F584A8475B5D3 AB4C24B3FE63938C E70EEED05319C0CC 97DEEFC007EC8211 334D6FD6754CEEE5 91B4A0B5A0388541 0CE025E9CFFCAC5D F0FDE3ED876E72AE 4B02AA84076CB09F DBC36DB38C516935 930551B1C84F6239 18F9DCBED9054AEC C1E30226D958FE63 E254269F15B3BCA6 2DE0636A19170097 F59F4FDA080FC250 DB161D86723E898E 38428C812B97205E 64F5090CC948D748 1D6693262A394CF3 89B241F015771B7B 75A8C32156A95286 4E644215DBA35922 3C241BA657A7D730 5C450A7822991FF2 D3A032B19F0C35EC 40DE3CD8B86A8107 40C7118869A73261 C43F179E67E8ED4E 640D7ED31F54476F 75F9FAEFB73080E7 C7BB9321FD282A2C 14B85DA4B64B1B35 FA993F361020FC41 C3742429947B44FE B9371DC0B852C7B9 9A8FACF0084862D5 2AB7134395024C0C D2EAC2E16076871B EB2FBB0C32EF9564 CA26ADFCC9848A9F 0F6300EBC9D9AF0B 9A8525131A1E7D2C C27AABB5E0C9525B 708A6B4C2936F471 AEEEC8875BD369F4 FB5FD96D533C7EF0 E3B3D02D1CFB9350 331926173F832CE3 CDAF51713A4178E4 3E3EC8BDA8D90058 3E2787AA11BFD22F DE7145E134C26550 269E31F20EAD71DE 76616FAF2DB66A4D 671BD132D1AFC052 07BD73776C061C22 4BA8F7D7AD1A1202 BD56BD7E46D6B470 94AB2919C1C6A58A EF9A424D3394E76B FC2FF53AA9D00E54 59E320F7B8A467BD 2FCAC540F802A1FE 9451E8D103ECAEA2 69B33061E02AA31B BB581153C6772BFE A4A7E43632818CA2 6C43D55620865AF7 3680D637FAA8F1A3 F4BD05DC5FF2047C 1B97047CAD5B330A 77DB10A0A742B8ED 32497D9061B62F9E 7F7BD1328774104C 213FA244AF785A43 6FE1E5348A606D4C D43D9B8B1566114F 195D7C41B25A5C51 D0811E30E855BD05 D840743611830D7E 1EB463AA8406FC25 3C902AF1324D9891 A4278F0D4EB14820 E29910F659B62175 0C5EDA01956742EF 50B6FD33336F198C 23465C911B46383C C64AA1B81F8E76AB FDB2234B964EF9E2 FA209FBCFCE1DC3F 46174A8759620E0B 2430983DFACF99DA 4DBFAA9FDEA7EA28 41DA90AB9786568A 73B4AEDF18E231BA 6312BF21AADC1244 D4E337D998D1E1D1 F5BB9806A1A4B529 2F891859C9073943 2FDB4B0D386B6EAD 0F86E2FC55B76EF0 1E5469CDE57852CF 20460B3BC3A42869 CCF744F3BB9FF9EC 679085ECAA228961 E2C6D6F5F46361AC BA24E22A1511E5F1 FDCB7F1FCB26F0F5 FC614F03094C3A2A BD95F086D130C98D 9A7007D204E16178 9782A420C41A2E86 48831181BDDC8965 47202255293EB569 44241BD7D12F02EF 7D43325C555B108E 170DF544D0841CBA E6C465AD667B6E1D 2C558CC8FF80DDDA 8AB3404E7B22F74C 6E92F2A4A54005D9 58B4D04EDCC41D0F 814104C04DB1A52C 894131B036AF02DE 2999669ED325C155 542A7EE8A6471B42 B8AE1E42C3A880A7 012477414202729C 2DE7A09644D88C7A DF936A61EF88AF2D 474103B0C12BCC70 D095877DC21ADC24 4558DA33755AE0EE 6770997DBE28DBE0 EC5A6700CFE79E37 E42A94CBEF0B18D7 2A642D6A8C3B9AB7 4F519DB4B93D86DE 5793CECF28AC5EF4 1F7F645029DC86AD D377B48FB0B45A91 67B9337C6AA3F846 D6805F14F744B449 0FFDB2A32DB0596E 0D34989384316474 C0512C499AAA4D97 2D9D512F6DBC4C98 E1BE6EACE9097EFD E3EFD04002C34E40 360E389B5133684A 31C0C6D17E155650 E74CE19F70CC93CA 1BD75113E5F39278 8AEBD62D0C95A75C D7EFD1B5CF939E5A D0AE785AF0F184EB 4ED440C82DA64F05 4421B2836293BD96 FD6A1D69E460A6EA 9DAA79BC5482FC3E 7018D85C85A83A9A E4BAB9599D995E73 4E0167D829FCA208 1473D86763B56060 FE91A96296D2C875 4E6988B2D9B67AD1 D98F51DF29848E8D 7DC2FA6F8336F391 3EF5F7088B74E602 FE1DAA725E9D91AF 7DDB741FCEA5BCC4 941FA7DC34B1F4F9
- Read the ciphertext. Strip whitespace: 3,472 hex characters = 1,736 bytes = 217 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209010925(name+title). Key = MD5(password) =416ed4c01230ff50bc53071e2ba8b3a2, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 54 GUIDs as hex (shown below).
Decrypted: GUID list
1 f7f1955b-f49b-4100-acbe-a726f8fa3542 2 b302b2d3-f95f-6e3f-a677-32607db0e40a 3 30588eaa-6d31-619d-bbdc-4135a9ec7ec9 4 1f7f8abf-f2a0-6a38-8fb0-7066283db46b 5 114e005f-3ab9-6162-b1c0-c5d70667bf24 6 22f21bdc-825a-125a-a985-89b260e3a269 7 5b751900-7f83-1651-b35f-87448d6c5352 8 d62acefe-1dff-4ce8-9fd6-4aa8069b33c9 9 12b12add-d173-16df-b722-3129233045c3 10 45c04c96-6ab7-4086-a502-b39879ce887d 11 a6eac366-9719-88ff-a997-66aed9a1cc3f 12 f31fbe30-af01-7338-9603-28a287a324ce 13 4759c18f-7850-5510-b3a0-87c641a2db09 14 a8481cca-bba7-1426-bc44-85494df5fe2b 15 91365d13-6e99-7927-ba55-17a651fd21e2 16 dcdc662a-dcd5-4a57-8575-0c902a8cb78b 17 ebccb7d6-1fa4-8832-b666-3a1605e1b05f 18 6d3d35e9-a79d-1abb-8998-cffc6d5537e0 19 c24c012c-e4c8-2416-8720-4edf1282a4a8 20 5e79f7e4-aa22-85cc-b118-bbd73170b801 21 ea8c9b74-dade-5361-b049-236a00798d32 22 07e2e0bc-a20b-12fa-bab8-f7e767103cf6 23 e3e60de8-fff2-0384-bae2-65dd83ce325a 24 bb271691-8330-73ad-b4eb-3cab4a0389cd 25 e4ab37b1-7881-490c-be60-993ad9ce8dfb 26 978d5bf5-eabc-5f69-9ccf-0526b25737a2 27 e34bc547-c16c-1773-8ddc-519d64835433 28 4f79c9d6-c8b7-4a7f-9200-93b77983dfd8 29 f2be59d3-ca16-1f42-ab87-c427a63dc26c 30 2e1e46cd-8830-6516-a0ff-cbaee1f9cd28 31 92a4d7e5-233d-7b32-ae70-c63e31cc935d 32 4c7a9e03-ac68-803e-80fb-09203dae4e0e 33 6cce7f1f-0481-05d4-b77e-eec7e42c884c 34 cc82e080-ee74-6a0f-808b-202a1bfbd70f 35 185a24fa-5c1f-2ec7-aec7-de001bef6dbd 36 576301d5-2b95-7fb3-ac74-8353b3bd1d89 37 35c05912-7fe7-4eeb-9f49-0f7397d01862 38 be44c71c-b44b-633b-82bc-1bee9c8ecc89 39 abcfdc06-dc7e-48e2-8c57-089fac123e22 40 06aec8d3-421b-6d1a-b685-05e471c2c9d3 41 1fe96a93-1abb-4eb8-b8c7-1f6d00e7d29b 42 e1f989cd-e3a7-742a-8cd8-5e1f3602e35e 43 39811d15-ca2e-8a04-baef-b7815cce83a3 44 4ab1bba5-939a-3044-af32-548d783c37db 45 3e57045b-f91a-1d50-a7a3-54ec3bbb8a5d 46 0b37367b-f302-6b03-bd2c-84203b135fd6 47 60f0eeab-27b2-4d92-9049-6860172c8178 48 2602e182-49c9-2dd7-ab60-3b0e42a2dc13 49 15ebc4c8-66cc-590d-bcfd-eeaca324c509 50 cc9a3732-0d49-3b8d-be67-943b265c1b7d 51 117bdd19-26b2-3d6b-ac4c-67613ae534a7 52 6aff5d20-0dd6-437e-a593-8e065f05e28f 53 01015f66-1e60-7a81-a281-11cb7616c047 54 c279f4e6-d485-3ec0-af5e-b232f37b02ad
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
466661141487517481285107451416780627464647831642533473. Exactly this sequence comes out ofnew Random(947).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 32 of Run 27 (seed 1,337,299,625):
new Random(1337299625), Next(8,64) per post. The RNG predicts N = 54; the post has N = 54 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.