201209041730 zbsib
explained decrypted filler
3DES(name+title) ECB, 63 GUIDs, seed 747
From the post to its content
As posted (encrypted)
66F118AD48D9B293 0BA3037251E22137 3F048C885EF38270 5EDD55B09C5F51DA 63BBC37AE0819E71 7D1205E7385B6DDD 8621D67FF3A36EBF 694353E0B00EE66D 8172D3C97DB805F2 3BF711B860C5ABF5 80ED1E3739FEF182 8FDEFE12B92CAFB9 ECF87040217E57DE 37AD060C8886D812 9A375CB0AD31B82E B9F0BCF3CCBBFD58 AE6B12818CD912AC 9A4872FF6B0F03B4 66E7205FDACAED59 4FCFB24D601954EB 0AF9C7B3091C1179 191C58E8111EAA1A E2680F6D63B286BF A0330F97B40DF0E2 32CE396B9DC2B194 A31E74298E822DBC 8C6149350C369B22 4BD772F7D1672C34 1B49340F0E582DA5 57A3118D84240DB0 57F8871B2820BBDF BD3F44D2629F2ACD AD247E05814CA86F F41A18A01E58A2A3 79420A5F7612D4EA E4476410A8C6217C 0E54D6B73264605C C0725240594CE2FC 098D0B3ECD33047E 8533C3191F6A0C9E 7B1C758F422704FA EDD29B4E170747AD 8408D1E8A1352A9E 2E94FF8E1E1356DE 6E8EE3380FF6D32A BC4B650F12C3675A 9BC848AE823A8F65 D6077425BAE89DFA 319E699B575A1209 1A3917A1DAD88F60 6A9A20663E4C06B1 F12E0EECF1DF275C DCCD177B6E169013 80698EF48A5180F1 AEB28CAF8C445EB8 8CF0DBE03C4AF997 5811AEF30B9E5177 EBFE092952947AC0 2AF47C093F9D74A0 44125AD08C3054CC FD31FDDB3CDD50A4 CD3E50F235B832D5 B6ED61E697AE57E9 A4E0999F639D9258 9618FD0025C27BAC C2C496CEE8500A85 677EFE75EDCCC879 5A5C8A65CB06E749 EB3CA59A82F2C6E7 71CDFB6261F33C71 8265088EFFDFB4B6 A8FC90605F97A569 CDAC6B8E6844163C F56A4F7A3EA7EB00 6002BB34F8A6FC38 4ADCC6E62474C34A 7C76EFCAB68E625A 581DD3B0A1E99AFC 887D224FA97D06A7 8F1D6D3E7A602AEC 2C384E0CBF35A88E F45E6D657B667C13 AC925E804026D2D7 E1F4BD3411494847 CDD9A3C428A50D69 BFE1325F09285C31 099BE3AD5BF6BCD1 4FD759F9D621561D C37E7D943A3C4784 26C2C9D8BDD01981 2BFDE20BC137FC0A 472A2D0A7ECF5CF9 7B148C5AC76666BC 3F1371C63CD421AF 9D1ADF97AC09067C 9ABF46083EECF579 F92B327565183018 7889F704AA864C1D D730ACA18CE6C54F E1F064B4B32A7094 3918F094CC943B03 39688E20EC9C75DD AE5F117622847B9B DF30D7E86112CAF0 9689BF8105DF2F84 4BAE5CE5C8D1EBD5 3F7CA37A1063B41D 93571D0490A6545A 7A382DE12F3F37BB 933BF821D7DA5C0B C007B3DB4679650E F433C85C28127F4D F2896680D7FB5C34 FE51E7AA8A97AE24 8A81B6A40057CBA7 848D7CAB8BA10CC5 8D9CC16D32DD1AB8 106B74CA8DA3688C C4E86E70FDD8FC74 5D9DDB6213A626D0 C373CC5D137E739D 6A1508102AF52EA0 859E34325DC0105F D65F580E85B0A30C E5984BE6F9CD71AC 0F68D19DCA2B1C21 2AD5ABB58865C0D9 9AE9163D062EACB8 B7C34E0D1A3B27FB B9EF8C722059CE38 0A4C46339F78155D 9D8694F9DD7A93CD 5F5CE6A2498588CD 195F145B06A12D4E 99F3D649E266F87E D2F654F37B3EDB6B C42391EFCE9C1D0E ABE08666D259D884 696CDF822C5962CA 35322534DA685F75 79F65ED2217A7563 397B56980DC10B11 5F1401EE47945493 9E9CC09857C7BD97 48A5597080D24DEA 144B8EC206A68A7A 7866267BA8A9223D 268CFD1D8EE800A2 EF6BB1B671B286F2 9407F99F7923185F 047E3DA5CAE81F71 D5D13C8ABC58E754 5FFCF7EF3BB9C738 A27589E60805148F 5C398046261675B0 1C5883502D6B9CD1 E2E89E41A14DCF48 26AA4B7AFCE5F559 CD3658A73AD39558 94AB27B9F94FE304 B3C314B3515D98F9 C81CB969E56ADC25 99AFF09E8BA53B61 2DABD10868A7E068 0F1FC4280ECAB1B8 A09092DADCFD81A3 F9E2755F5C76672B 01400A86F3A95BBA 81ABA5921C9E32F1 FCFCF49C308B2EFE 840645DD19D88792 4671F0D00F47A0A4 1E829CF0A5AAFF5F 993F3970A465C729 0A3EDF72D3E5B42D 6033E36CB7093CA5 8AE2869E999B6150 43102638E2247CEA 3106059E0AE6A830 BB053DCF58CA03D0 8CF4AB1B0B9CCBBA F44340AEA980B9B2 69E514617B58E8E0 30BB73BD77ECE6A9 5AACCEC911C08D3B 6ED2B876245A88CB C455DF9576491B06 F114A79EC270B75C 94C209799316C93E 8E5E5676AF5DE158 530028695A014558 AF82543AF32C626A 70786B25D261763E 6C103CE08FE95FB9 5D88E1493AAF73F6 C6E1DDE9D4A3426B 4011B70036FD0C06 22AFF09E7D1B8220 57D235F0C24C243A 9AD279CEB210B94D 5E56EBB434B938C1 785C713C1AB864EE 82E48B756C9D7049 5BD259DC8CF1D3A2 054E27A4C214792F EB9198F4E62632CC 4EDA18133C209645 6B296B901BA5ACAF CCC8FCB4EE2886AC 1B919813E8CD398D 8BC2ECAD14F93103 9DB54B13999B569C 2BE9D6D2C36B0C19 C736CB3FA8511E6C 4F9849BD6D10D89B 8278555E7ADC924E ECEFC8AAD8904247 14E03570CCA079E7 BB4D3C8043ADCC95 D32BFADAC10EB562 A12162E3AC9EF683 BB315486C948D4F8 09B1D413206AB273 D73527AB8C506B02 71832294F91EAA72 64BB0CE016EFD2DB AE02E8059039153C D5E0A8998DBF19C5 3A8782338998B942 3EB6CFAAC14D8B98 BF3795E62AAD2254 31D533772D3255CE 4380BF925795821E 8D4A60DD6470BDF1 3C75A4D1EC8A1699 92A1A451FC0AFA82 AC94980AF6C29B1B FE64CC9DEFA91934 16B5F4C963D2FFBC 77338456292E274E 84464046E275B564 873969B430D3E435 F163A029CECC1745 01D28F5D035A73A9 FB9BE9BF88D169DB 5DC351F549CEBD2A B2BBB81815EDC1EC BF0CC34039C2B41C 61331F1E74D0C588 57CBEF5CE49D8496 B925D426349307C4 6372109DA19ECE45 D5CC991682E542E1
- Read the ciphertext. Strip whitespace: 4,048 hex characters = 2,024 bytes = 253 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209041730(name+title). Key = MD5(password) =430cb61f32ce143033096b81eaa56239, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 63 GUIDs as hex (shown below).
Decrypted: GUID list
1 24d20429-147c-81dd-b46c-5b4028750415 2 6007961c-68f1-050b-84ba-08f2466fc00a 3 320924ea-9be9-877b-8bc0-e9f3bfcc2764 4 53172755-dbf0-0881-853f-2282a9a5b4c2 5 0361c08d-d6fc-4ef7-b69d-41881f015e90 6 9d05d52f-f9cb-33ee-9f32-57d93829733d 7 789615ad-8651-52e7-b00b-86cd8767d9a8 8 1675d754-a9de-1884-b573-5a94f018441d 9 ac476479-ca56-33b0-af9d-a79d16434971 10 9c7c53dd-b538-650b-9b24-1cf5f51c4ff1 11 24d94f6a-6c73-5e6d-ac3b-388dd48b1942 12 f6efc870-b278-5236-b762-fcfb23d85020 13 e9ea52ca-bf2b-1792-9c39-7f86c8c364a2 14 30b4ddab-900a-02a8-beff-eaca411cd914 15 543c2e1d-9dc8-7857-bf91-70ce6547c45f 16 a1d80992-eb60-4b25-894c-a62943f5c48a 17 e91b504c-ddfe-7e75-a6f7-023f707b2e81 18 3449935d-2898-15d6-96d0-e1b39874b80f 19 789be22c-8357-8aff-8f24-bc6a97f51847 20 3a590302-cf83-56a6-ade5-feacd3079e53 21 899f841f-80ac-0446-8954-c5b2447143d6 22 a583f647-1db1-12e3-9929-b8612415531a 23 60c5f80b-4782-2fe4-ae2f-1ac6f9b65170 24 a7b9588e-25c8-8ca9-9b37-c6d747522726 25 616c6c16-af6a-84d7-8067-e142007d7ee6 26 34520df1-171e-899f-965b-8abb940eaee8 27 fc93fe21-77dd-1ba6-aa11-d5291c218f84 28 918f3016-0c29-4134-bc40-1ea29e0bc1a4 29 9ca82860-85e3-7423-a1a0-255376fa6df3 30 67813a67-3dc1-69e7-ac7a-7ad176684e66 31 412de4aa-6340-8883-90e7-8d08ef388c4e 32 ebd2cedf-c86a-13d1-8087-9a6e3ff7fe0c 33 3dbbbabc-6dff-6fff-b819-9f03b7f560f0 34 2a97661a-a777-6084-80a8-ada49a489041 35 6212995e-4b39-440a-8c6e-cc18ad4765b5 36 808e6c75-1fd3-187b-b2fd-70fc88a97a98 37 b5d08446-a407-7504-859e-9d5261440923 38 1ae3d094-b435-47a3-bd00-c95c0b7ddbd9 39 38bc0902-bfc0-2fa6-8a30-a0732547b33a 40 19bd332c-38b9-06ab-9d1b-c99158c2cc1e 41 8f691778-9e3d-861e-a2b3-8d68bedd1d12 42 f529d7ec-79d7-2a23-be1a-25208db5d260 43 78e03a2d-6075-4cfd-84cf-ee4ba8643e5a 44 03944d9b-4e33-7644-af68-d86cb685f72f 45 ed7185ab-908a-63b1-a11d-71dee4b5c826 46 53eb62cd-48dc-534b-9692-fba6444ff57c 47 74922ad6-9dc3-4e65-bbb0-4e4c1924b3d4 48 95a5182f-f2ed-1778-8024-eb5a8eaa343f 49 d2610721-5797-19b3-9896-925e2d7cea08 50 beea477e-9650-8ff0-a3d4-8f219e89791f 51 e00340ca-1a59-15da-9f23-ca7152f630bb 52 69d052f0-372a-3dd5-85b4-429ed51ef248 53 639bc072-8697-417f-8c2c-544f22bd7f8a 54 e19872f5-e3f2-68cd-abd1-ca6c23ee13bd 55 3938c6ff-07e5-6bf9-844f-6369f3f2aa78 56 04003bd6-10fe-7087-9e85-8d3681089a7c 57 fd327224-47a4-6198-966a-9a9290e0a42c 58 580adf31-cdbc-8a19-9614-8b920e30b6f5 59 5bfe6381-7a13-0bc7-b6cf-94c61d89e883 60 e2ec9090-de5b-4297-b5e4-5f4302ab51db 61 633b63d4-1fee-1d97-9170-242ce25588b7 62 e0eb040f-c038-0054-be36-e41d36118cc6 63 92ef9fe7-a898-269d-b8b2-c80ec52fdcf9
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
808043513655107471850128881476816641742082476541181346676804102. Exactly this sequence comes out ofnew Random(747).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 55 of Run 27 (seed 1,337,299,625):
new Random(1337299625), Next(8,64) per post. The RNG predicts N = 63; the post has N = 63 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.