201209042100 zbyaw
explained decrypted filler
3DES(name+title) ECB, 45 GUIDs, seed 186
From the post to its content
As posted (encrypted)
7C4118EC1EA2A4D0 570D0CF1C0412208 C3C9187FD3EE4514 1AF5246D03209388 A1D14F7638E7C5B4 D795C6A49295C5A5 B7BCD527DAB844DC 68D197C1DD2E1988 6FE01EE7BE2B0CFF E3101DAE27AAE369 97010418B6E564C1 904C288DB3ADEECB 99BBAED56021F4AC 8B40DFAA5EC8B20C 8A9610BC202F9252 7EBE16BB7517D6A0 A81EEAB675D7A02B 0A903D57B100D853 22C9D3A7F036283D D92E71AE874E4A3E 095634AF758B5BB0 3D3F2EEFED0AE896 EF3463585140BC88 FFBC8D2040A97522 7DD639DF6311B1F2 EC3FD3EA7EC3B1C2 D5E5FE4E9D85857A 2838A99C30840751 E740C3040348C6BC 278588B6C2F2FAEB C13CBE2771A6147D 2E705C7152A7596D 2C1156B926240B39 5C25D1397D10805C DF3611FAEC26CA3C 42DBE6D65186B758 C915067D39940DB9 E7549C175D903364 0702269ED38EC098 AB841663F1C5934B 0B5A5997BAAC1326 DD1417889FDD6BC8 7133ECFE4C5B1572 22618EE9D413C477 5A9366E77E5CD4BF 4E25F6BE33DA14C9 B98DADA1C772880A 7872A72BE85BF838 FF25ABE7133E35B3 8B84CF9E69372D0C 64008ED71B4307BB 3EBB2D6FCF842634 4D512FD9251158A4 3B985D0C3B842CFB 26A7E3C7E5B17198 865B59EEACA23943 856A58561E76A0E6 34E31CDDD0E4743A 4DB9A4F27DFA70AA 08218E4F406DB696 246FED4C29214A91 644D2FACD1BF92D7 2111D219DA7DC871 B011C80B32A7730B EEDC75DB32A5C9C7 60A1D99D1ED9BDE7 933A62E229102C52 29264FAD64C6C0B8 2DE14D0E6795C22C FCF9752086F0BEEF 9C8F4EB3E4C892E1 B7C4BBDC126F09F1 DC1CB010B7A315F9 7A20F0DC3173FC7F 0C97999A6D787F1B 0BDB546A5C311D9F A178E0A91C0DEE77 2631344041701D7B 092AEA8BBF79CC59 271AED58C6B78693 70E39325139D7315 E5CA465AEF931AEB 69A97F9B267278AB 799ABFC98288246C 971F3A3BFFE0049F FA11C49DF92756D1 C4FCA3A16FA6DAF0 C9D060626D7F5D7D 08D9FAFD108DD228 F3DC76A7C6B53FDA ED2625999E73944A 8A64D857E43E4016 FEBC75882B82E1A9 D305EE8FB54794FC 23799FC0AB6E712E 7D6CAC0C06498AED 25D3F33F6E721660 E97B7B022A90AFDD 3DD9C97FFC1F3A91 194BAE5A06988E91 27D73D311D008D93 A3864D9F99162A18 D073244F80EB3864 BD27FFCCC14E2534 4FAB9C4FE31D6E5A 88B39E11062A3427 B6DF4BAAE7909BBB 8E3B4E235F91923F CE7E4D30BC39119A C7A1B39D8E68A7DD 304F35FA055B2243 220BB4401CFAB2A3 97C6FCB2D89988F1 F04E494DE6510E22 24D9DA5A5456CFF0 97F09168BFCD5D32 E45EED87BB67B865 BCCE98F8C08C6A1C 4DBAB8B7C2655C86 A122D0E4525CDD06 591E5DFFAFDC3450 AC7D22F4B6436184 E313C991BECBDCCF 9C77DA2D0462BDDF 6B7013726BFC6272 AC1569575C24251B D7B9E3EB7EB2432C 45269C1E1DC4CE58 0CDE37A9FD3B95C4 2D42561F50C757F0 BB5F338D21BAFC25 9C5498473C9933EC 1FE9AA00001872AF B20ED7E1652D1A58 B0655EBCFA2178AE 1C314E0D444D15FD 607CB826C981C197 ABB3FEA77613B0D6 46E23843EAB4D7F8 52AA54358DE1A671 297639DF8B8511E3 1C5BC1D79C72E260 13E5D4A7A2DAC203 92D52D1C38892B23 AE2795AFBEE90D6E AD00650AAC4B8F0B DE30F6538661B35B 48AED53F5EF3BED5 2B5134973261D58C E763C69DE9EDB1EB C998D9305D016E34 69CC58BA1322A55F D22F2CBF619AD196 8C91EBA8576F79C0 F6D4DF0F0371CDB8 A1B03F1175BE4051 DCE0EF9A0C46432C 34D5DD007BEC3B7C 57B1335B2916D944 65273EF048B2DB37 6C7B8088167B7226 DC509C49FDFC2A30 51F4CD0F8142C72D BE9184BD2324D179 B106CA5AFD079752 1E9470A8E94AF569 7E6AD351933233CB 7043E72E74093F2A F8A7F81D5F1D3274 2E30FD58A767D3E8 4E09E8C6A98EA817 262972A11A9C9A76 E4FE82C74560232B D5764E0452C9B4D8 1AE2417B6447760F BF33187C9ECB5418 1671634CC2A8A7BD 99FA8EB13CAE771B A052BC50DB96DFB2 94B92D9C812B0DBD 8B24345F73FD008B
- Read the ciphertext. Strip whitespace: 2,896 hex characters = 1,448 bytes = 181 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209042100(name+title). Key = MD5(password) =9c208de682c3a5eb08ac14b8eaa2033c, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 45 GUIDs as hex (shown below).
Decrypted: GUID list
1 d5b83221-8d47-867f-959a-ef16573f69de 2 a3382fdc-43cf-31ff-88a7-7da1e8bf5a55 3 023de127-7fc7-77d9-a939-64c8ca17df80 4 3256fdaa-dd63-292d-97e3-e3d5f1c44a37 5 091681fd-1e04-1671-b91a-1b24b72f114f 6 e2d2bd57-f5e6-0359-9fcc-1f2a847b83d5 7 80fa6dab-1b36-203a-b79c-3bebbde5f8a0 8 bd117937-ebb9-6228-99f4-292d2073399b 9 afc9a3ec-86df-815f-bbdd-9110c13db235 10 8ca5efeb-601a-794a-aa25-b4f7696ecb22 11 a1235328-e15d-269e-9e11-aaf6b7d9674f 12 712de96b-c7c9-678d-9fdc-defa27b3ebee 13 52428b21-b037-4a03-8d27-29731f38ae20 14 c751005c-4975-2db8-86a4-9f6bee0103e1 15 30dbf8a9-43ff-170d-adc1-42fe600de5d3 16 33c065a3-78ad-1ca3-98b8-2a1c2d7cdc4f 17 4f676be3-5948-0ac6-b9e7-22dc2ecc3155 18 9b3f7c27-c7ab-2ba0-a64d-773f7e906c31 19 b2da8d5c-cc41-62ef-863c-32c42a5a2f90 20 c16003f3-7bfb-31dc-8d78-67a8ceeedd5b 21 b1afc4a1-edb0-4c9b-ba52-43ae3070324a 22 c49546da-e8e0-44f1-ab38-3fa9db9e03fb 23 422796c2-2165-3a88-816a-32e43fb34df7 24 c579fdc5-e3ed-096f-b23b-a013f937cf1c 25 8de3b53f-a819-8d59-a887-65fc1a840a4b 26 c9cf2b25-2bc5-14be-8885-7078ea990738 27 6e29387b-9570-76e1-bf41-d44f9ea4a8c2 28 3b3bf38f-d7b8-86da-b69f-5bcaa24c83ca 29 a6a716ad-1af0-80cb-ad1d-58e4b3a7b356 30 b5e0c933-c430-7220-a4d2-0a70eeed5b39 31 90fbadbf-463a-7784-a9d8-ec656cfb425c 32 862955ad-000d-4556-aee2-8cdd54f65a2e 33 2b3a11ae-82a7-05f2-ab4d-52828a54a154 34 3aa504b7-14d6-5a35-933e-a04cb455211f 35 cf920a88-b65a-52b5-9169-8375062176e8 36 270ea1fd-2c45-70e4-9121-2656bb2c558f 37 1dc61c52-af15-0067-b33b-833a298ae1b8 38 858a621a-190c-13ec-b85a-ffa061b71db0 39 cf2a28c3-175c-1b05-9828-7a40ac7e3acf 40 9b1e15e9-788f-58da-a45a-affc538eef96 41 bf523cf1-b2a1-2752-bc44-0ab5cc3a155f 42 bcfa06ba-72a6-3805-8422-867afa1c1466 43 d0af0319-ee7b-4c95-bd7f-23dbf99369a1 44 5e303d18-d1a3-23a7-9971-cefa2085b959 45 26930c7f-8e2f-811f-87db-339f3da9f1d2
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
837210268726421102634430817887740557011523428. Exactly this sequence comes out ofnew Random(186).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 62 of Run 27 (seed 1,337,299,625):
new Random(1337299625), Next(8,64) per post. The RNG predicts N = 45; the post has N = 45 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24). - Conclusion. Filler. The content is fully explained by the two RNGs.