201209042030 zbx9j
explained decrypted filler
3DES(name+title) ECB, 49 GUIDs, seed 648
From the post to its content
As posted (encrypted)
6DC9F2248CB64C46 1A328738837D272E 617C630325A70B9B 5B4EF4668CAB2E6E FF6FC61F9F5AB02C C1A068E2161AF4E4 736F3AF9E672E298 043718A26ED29094 AE56A841CF6CB2CF A8A8A2424984F920 40DD3E2ADE7BF869 2FE098A7A25BD0C3 2E0E27DBE3D95226 1BA63B242AC16070 2E86EF677E1587E5 7F573A64578F5EFC 11D5D6BB8F5AAC13 5E40C204BF0DD4B9 362BB7A600711C82 FF3BB61DBD7CDCAC 6FA4AD446FC0FC5C 7B6B41E5B4D86E1B CF3ECE7B8B0782DA B69F32625206936D DA1F739477C3F739 E0EBA087FFE701F8 E24B4B0F8F79A4DB 95AD75D427E48206 E415D6C9072A1E52 1A9219B74BD45C12 E61F2E8106DD090A F6119F1394CB261A 4FDF5A151BFE3C8A 625440B4D334611E C820265CBF539E9A 39CC3796E62BFB03 27EE752F73AD664A B286CBEE5A129C98 B897DD740023B53B 77C819A3E5D75A2E F2BD9DE643DC7B7A C784CFC5808FB264 9B74B9485063FB7D 39C16A81900EF02E 02C4EB194D04C44C 01AA081FE995BFD3 6C9720E41CB82395 269C02D74D4C3184 91E39C7A3094532B A1BE383CA24906DB CDAC206FE339DFD3 3F621ED6B44B02BE A91B3824C6EE2E62 F7977973A0417147 000F957956D43BBB E3C891D5BE7E8EBE F6FAAF4416C19197 56FDB4B4BFE84CC8 B4CD87B0ECA06339 79F4CE9B2587C0E8 4693515DAEB74BA7 73C5CCC3CB2902FB 9B9BBB315F9D2B6B 7F9F32392DFC509A EBBE5E5807984F20 901C0DB3CBD8E06A 25BD609F5F5BBEBC 4CCCDE25851B91B7 C00414D99521661D ACAFFF2874A45FFF C6A908766416D867 20F7FF7FCAE21DE0 B5471318A463D9B0 E2ED8F5661993B88 CBC84FC17CF89BC2 17912831C8E26CEE 0B32F45D348FCE75 21BA7153E8D5F1AB 1D4A797377CF2D89 EE1D99AFC2CF1683 FAE33C5C136E6318 69BB4F9890053760 A0AFEF67A1D78153 8B42A9C1C9BC1DA3 B7961A18728BDA03 4DB757D58D7A1BEF 2FA9C7967F7A17C4 E58C68B6792EC1D0 E7B51ADF5CE90264 9855594561DB143C E9B81151D20696FF EB190D6D207554E7 78F090A2952AAFFB 7A2E7061F77601FC 8BAE322728FC6AEE 63FD19ADF42FF804 BCB459E6ECBF8EDC E19B4C74B9ECF6B5 9275FDA04C19CBC6 8D0598F26CBA6F0F FC536B3CE830886A 9A27829A882252BC 66023DA7ADD854EC A9D31528A797AD00 8DDCACE5D45A1859 A6593CA473A9A548 98CEF3CDA9988185 3C4590709B823C6E C2D29714A6A6BAC9 268F22D8FFA719C2 E4725C58DD9F3451 6E5BA68A2C814692 DB8FE5925889574F 0AA80FAB09F9F30A 61C0778A062D4E98 A00574DB72242329 F630344F343D26F9 F2CF6EDE669CFFA1 62E1F24E5C98CAFA 5F9182633242C02F DCC476BEDED7444F 9255A0EB0D8105CA 8F2350508F24E383 B772749187F8736F 0E519AB74CEA0F23 A526D4534A4DB39D B575731C1BE6A5D6 9CC0A686DF08CE18 911E4F34F02D6538 38A66F2AD81A28AF C098F2787F6308CA 3A81E1660CD70776 B7E0E97CD5CC0D33 E6990E57991B43EF 0A2FAF6F2F3D3FEE A9BA72C83A18D725 C51BE7B53E0C6EF0 B05B2236143ABA3B 01DC406851D02DC9 C27AA843B8871E6B 22F1FD7FE68D3988 5CDBB493B6E9498B 824E77C8184D9F64 02E1E2D496B8FC2E 3DE1D622EDA16D0E 74BDC0FBFDC76C07 2F5285812C7F9AAC 7B304011ADFD3F56 41E19DA473900E47 0E0261F7678BD5AA 4A7D3BDB890346C8 9702C3D8E2B2D6AA 58B9849D9B0699FA A255211FF7BD2833 4C6E3F9C25796118 9E8A6EDCBF6B0D35 F8175FBDE8ECAC79 6392E5D6776383A6 E0A0538C6F129C22 22026732C12C9814 708EE339BDDCCA6E ED642737F08CA344 9173168CD2F099EC 93845D7C6AF41C7E 2A919479B0F38A76 884A11FF9147D04A 046E4E7110ADD023 C2F3D77C56F09516 282DF0F4FF89A6B5 6243ECE6A6553195 DA08941C534C560D BA8B612F82E0B7A4 C4D18E14ED5CA5E1 03250629A52F98EA 545E0E543D6CF166 7437F44D111578F2 94FF06F29D9FA561 F1583D6AC25CD129 E2312A61877F1111 658AF94DCF5AE9AF 2936DF3F9D4EA96F 622E8FBF6A43675B 10BA20D23AE973CA 8BB08EE9A6330373 BF64D56AB5F4718C ABC5F2489ECC3C36 B1AB58761E7C0DCA A96F2BCDEDEAF937 0FB9F9A70A030C2D 817F11168B92C303 415EB2AFC3696EB3 DF17EAEBE1248C18 D6F2783E686220AD 8CFE2626F70C35B9 BC47730439693304 DB9E7F6DB811AE01 67774E8CA7CD6F26
- Read the ciphertext. Strip whitespace: 3,152 hex characters = 1,576 bytes = 197 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209042030(name+title). Key = MD5(password) =d2158afba46b3783ec09cd6fb2099b6a, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 49 GUIDs as hex (shown below).
Decrypted: GUID list
1 2e79cd4c-6085-2f75-84df-e83ca47454b3 2 25f95005-aa27-8c9c-aea4-ce06349942dc 3 9aef3326-6007-6ed3-8b6a-9bf58eea33b3 4 3f6aba3e-a069-7683-b98f-964c8c27eea1 5 a20c5415-d044-6030-84e8-e144defae8a3 6 e4f5f498-c49d-7177-a3c9-632532ac5491 7 d9fcbaf0-dd6e-2a57-87b6-d2f17aa6ceaf 8 8236e222-1f45-4a4a-b9f6-a094d5a126c7 9 8cf8dea6-62c6-1b21-853d-ef69a166a998 10 2c1ff24c-0734-2781-b3d3-664c68d65636 11 a4e29a3c-0d40-6226-8a44-8a30c25e4e4d 12 4afc84c8-8be5-3f38-bf20-f48205031808 13 79713f3b-c886-0e04-9200-a80881c075bb 14 5c319ab3-7e86-5b1c-8e24-ac0111473960 15 74b758dc-c382-5b69-921b-a202a5faea9b 16 ba71cd5a-a815-64b3-beae-10c3c6ca4e74 17 767433a1-4bc9-264b-818a-c55123544432 18 9a74420b-f84a-6b8d-bcd7-a676fc391a67 19 85e6ce29-add1-1e84-9277-8d415869f06b 20 c4a60bce-50a8-264b-ac3d-b226cc350f95 21 8ae50f5c-d0f3-807d-bf1e-66bfc9f2e4d1 22 a0815447-3969-7a06-a4f6-16ceab0e4185 23 e74c2b75-0aea-48cb-a0d0-f4fc7ff079f7 24 bdb21c6c-c48a-360a-8824-52502fc20e42 25 33404109-7e26-167c-b420-954b9edabc00 26 82fce979-cab6-27ef-85b6-f68bbda28772 27 eedb62ee-0d9d-097d-83eb-35d67d44699c 28 a0d5204b-5432-1d00-b0ee-20eca8ca7ff4 29 f4a9dde2-b5c3-4a89-9125-89c04f69b43d 30 cff1b13c-6fd0-8451-b162-84fd79489df0 31 511299ad-b4f4-3acb-9783-b650f19f6461 32 3b4a0537-44bc-1bf2-98fd-c97cdd63386b 33 bfbba477-e3ab-7632-a842-8bdb869ecc00 34 858c9f92-b566-25cd-acde-22241ecffadd 35 8b883edd-a013-8d64-afac-b31e2d16e043 36 06124a42-e205-71b6-8f30-4c230f22aac4 37 6d6229ed-d248-709e-aef0-40105db11bbf 38 293daa47-cd11-8989-b91b-bdcee2839cec 39 ec09b4d2-a726-2822-bbf0-d3308de2234e 40 8f42ce0f-aff2-853b-82e9-028544bdfa6c 41 0fbb09ce-d8b2-8fb8-ba65-4ea185825f09 42 a5574fd9-7924-62f8-8e0d-bd7bc6e27b18 43 c1d8f7f0-7ec2-7df0-a0fd-bbd679442d54 44 3c1d7792-48ca-5c0e-b34b-28b7a431649c 45 5cfd4d8c-c940-540c-8f98-08e1086d1e19 46 576f2bdd-a1b6-45e0-80d7-765033c789f4 47 538214ee-deaa-74ac-94dd-c85fd3c80944 48 78b4b587-c69f-5594-a9ae-547ad0e5036a 49 4ae60d38-80fb-45e2-8f60-321c143b929f
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
2867672412630556261287431201483172877828867554754. Exactly this sequence comes out ofnew Random(648).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 61 of Run 27 (seed 1,337,299,625):
new Random(1337299625), Next(8,64) per post. The RNG predicts N = 49; the post has N = 49 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.