201209052100 zfaax
explained decrypted filler
3DES(name+title) ECB, 49 GUIDs, seed 664
From the post to its content
As posted (encrypted)
A629F648D9E296FF 4891E5F0C850E673 7BF97962086416B0 D8C9A48EE0FF2355 792EF75BA11BCF02 0FDA41E4F4A2D7A7 E9BFDD04F3860246 EB9723C9321D73A3 2AA503BD9858D990 5FEF2F4EFB59AC23 714F7021B0CA55AB FA9D7CC3D45E1E2A 7C25AA1AF7F41399 DCE8DD98CDD3E25A 6C679160EEE94EFD 2EEDE264E182DAF6 A7AE7B610E74F103 5DDC18231C8E9BFF 8AC21678FABF46C4 F2C2ADB1E650B787 A90561338ED59762 9CC82E73C50A64A6 851E69D79EE0F3E4 6BA65F8630AE6EE0 7809B747F1985B01 F6729731420DD1C7 613CEABA1698F534 6476EC8A9A80915E A17415DC57CBA00D 055A1E4CB924B536 072E656DFA272D3A 33633E823B7575B6 1865CB95C74115E9 F0C0EB990EBC1946 4B4176B277893AAE B372791E4DC37A24 91DDA5F16742089E 3BE77EA5CDC1127F 79074BF112128607 0C6CCB3BC590F92B FB51FF97925C2C58 8E7ED0D77DBFBCCB 7A7D0B8ADB18E495 2EB7B9A750135DF9 380CCE5441313577 A63D3E622594E372 B468E6E2320797D3 DBE0A27CDB1BDA2C F64D77B7258C5E86 3377F26B1E47D72E 6F07B09360F20F58 D7F5DE4F5A09C2E0 3E899CC683DEBF8B F2567D30327DCDE9 B1DC8069C134181A B54F080DE1595ECD D71956F3F91E2B8C A38EE561301C36F6 BF5D9039F5BCF330 4C626541D04F02CB 3FE6A5C4652276FD BBFF98A12AFDC75E 9469F0934B9D2FB9 4B5C938D87C99DA8 8B8000459704DA06 BF745B0FD0DACF3B D6652450DA0B4C8A BA3E87B8E9FC47D6 7E07D81D3ECF4A6E FEF40A3B1884362E 904C9D8F205B7A1F A67E3502A41744F0 95C1B1A200DDBBFC 94C591CF45E46D68 2E1F4FDE07361914 A90D2C5461FBF562 081146F2A4549322 8822474C3377C013 787F001BFF3C63A2 6F3D096135958852 E45C90177795743A 2AC0EDAE2F22414D F641933F3395345A 3A0088D6A0AED97F C3A40F69696182E9 57D9036092C9C32A 0321E92D900943C7 EB6330C566348F1E D63D5009E2DD14CE FC7FB37B1CC6BFB8 18CF3C16CA98275C 4D1CB5A57B9545DE A94AB44C758DCB55 BD40978483F2EC0E 559E2CA8025E5D54 2A1721EFF4E67C65 251E773B67FB6009 519F0BD720FE8456 B6EB8FF537FB19F8 704FD1D10B34C7AC 4191F812BF693CA4 C15850031D2BD535 D29D9DA5BC5D84EE 4820507310D7B4A0 D50E610C996CF82F D93C6BE4C206F1B7 A5DF7624AD922A87 CEC34CC87FA4F922 BEA3A313B68F9988 FF45F7DEDA960109 E6EEB798C7C1C381 A6EBCF3BB89EF2B8 51375E4DD3D3F37F F6E1F0D5E42FE2B2 F2350BF3B3F4F881 95F32E574CB72130 3E3FF26CDE6F1BB1 1A45961BB8F8151D E17C9A5686BEC69A 86C9473CF98E12BF F6B2EE93A44DABE8 9F330FB0A430542E 7AB66567C8EA1C37 B78A24338669771B 3F60CF731DC74F61 C0FB8A32E70A625F B12CCD44E0872F83 00B3F05279C7708C C3393F266C005172 8C330829C00C69EC ADFB040C9E3B843E 2FC7554263F66825 48C47A898CBC13C2 A6E98C3EDCD922DF 6D1002543CA0C5CF C0EEBBA7377D340C 9984B122FF94EC4E 3CEFC75FCF05C53A A2C0F15BB96789A0 7E94659C7A11CDA4 B179FDFA9284DCB7 F3973AC31FE88ADD 089AE891A0C0A52D F7317BB2218AE795 510610731F1FD824 17C6168B38E27DF5 23936A8DDC2C2726 8F0B9B5365C900DE D9C8AE6D7BA3A09B 1AE9695982FDD645 4805CBB4E177F718 67D6C6F295FA46DC 2772CFBF8E4B590D E5333A5B0043F510 A2E718F468931475 F874299F7E9E8450 1BD97C4C7593CE6A C8FC80EE9D78A029 4FA6BCDCF480DB36 482C55E755251171 57C42B4100DBF49F A3F34E13EA049427 7E3CABACE615EE65 885E53059FF53F6F 9428D106F2C9C44A 7139F691EF3E22D5 1A7F28961ACF93F9 2BBA2680AE58579F 49A099EB1875117F 02184360E6CC748B 1A421B2E3111A44C 8482DDD8C466DFC3 DA16B943DD04DF9E D85FAF6D96DA0F86 F65E5D1E24FBEBF1 77DC197C8D24FFAE 6E22AB2286543160 CCC44A4F440E2F4E 09A724128047B21A E2AC1102F42EB463 EDA07EF50BF5189A D9B2254C0B28CCF4 F322B6C1629901C7 A95075AAD17C9375 FB3269F74768C1B4 1EC30EB5FEB1DB71 950A8CC0A509369D 627E865C70C8C5BB 294243163F358024 5832C51BB58E459A 5CD9F85F97D87026 29031057753CB5D9 79E7E1FA7ADA0811 0770514E535E96BA EE0F7582F2F657F3 1FBDBEEE4E1C2A72 5630D0C3F4D9DF7A
- Read the ciphertext. Strip whitespace: 3,152 hex characters = 1,576 bytes = 197 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209052100(name+title). Key = MD5(password) =f78eaacadc7f8578dd1da000b334f48e, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 49 GUIDs as hex (shown below).
Decrypted: GUID list
1 00863cdc-3b6f-5891-b54c-9b90b06e8d65 2 cac40fcb-71a6-544b-b804-072660383676 3 f158cee5-5644-816a-84b0-4e5b7ff85135 4 13afa55d-724d-2144-8cb7-c6599e9facf9 5 892abaca-8a7c-85b0-be5f-8f8b2c8fe040 6 b0bb0bf5-dc2a-75e7-a21b-37bc9a3bd806 7 8916628b-2096-34a7-b58c-29eb25d5c238 8 00fc3558-0118-581f-960d-88b34450532a 9 3339e373-358c-1d61-bd5d-2372ab0ae449 10 af533d65-3827-1eb2-b5fa-26633bae3101 11 940a1879-e4fe-4f88-9515-e832c498991f 12 bca42f40-3c3a-7a4e-8ec6-822011fef416 13 adc02bbf-05ea-0293-98da-4bbfe5845806 14 fc7ac524-66f1-86cf-afa7-706989d83981 15 bda8233a-cd3c-6023-9007-69dc23618040 16 4db2ba7c-c4d3-6ebc-afdd-8970459e2fba 17 025f8c4d-c6f5-8c04-9d99-03f1f0a97997 18 05baa94d-ae01-6dde-9d34-6b4ce97a6f92 19 72dd802c-b6f2-503c-8c22-0ae934cc7359 20 7334f760-3b67-33f8-99c2-12bbcd719ed3 21 7c112634-dab8-0549-a95a-a2ca242ad0e2 22 c336cdc7-430b-6fe3-bcda-08b75b74c1ad 23 b35a6a7c-c354-1206-b955-203acfadb08d 24 8772d9cd-4586-8388-9156-9b10bbc9548a 25 d64323c4-7868-6610-8321-c35ecf30c068 26 ceea5200-6382-5f81-8093-0542aae50767 27 dcc819a4-c373-7f2c-8f74-36c637614362 28 e3e46362-4f75-0496-af93-b1a9f83a4c42 29 33ca5233-2e01-8a42-adb5-1c49a5783775 30 3570b3fc-e389-7f6e-9df6-3fde8faf5382 31 52b616b0-a0da-2441-9880-890166cb4ceb 32 2ecdbaf7-8db8-33e0-ae11-5459d03af717 33 0c063bb8-46a0-22f7-bdad-ee39eb5f853b 34 333ceffd-05cf-5c90-ae9a-f6ffbccae19e 35 8fc5ab4e-3f3a-428d-afe1-e753e9423dd3 36 1165c486-de43-45a2-924b-0b06889b875e 37 05060a5c-cacc-0654-9bb6-69f78b4d3700 38 7c1c78e1-a467-8eb0-a578-22c5b0746e0a 39 599bb969-a450-046a-a9b7-fd05c1989f9e 40 f4453d56-d489-80a4-8185-ce428e37cb35 41 d5a0acb7-6ce5-2e67-ab9c-42efabb15efb 42 c5bebddc-c910-137a-8502-2f66b36d1e77 43 b4988d57-c460-05c5-bda4-c100d42d6060 44 94792e1e-bf4f-3d4f-befc-225170676c66 45 2b1307ed-675c-87db-9071-ac289b79167d 46 7f7fa8b0-06e7-4103-9d2f-af458789a611 47 b9dc8325-d9db-26f6-94fe-01ad179591de 48 9b75b572-1fc3-7298-a74f-40deac29801c 49 85f91f40-cb63-0621-9dee-53ccadf64573
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
5582873511470866865306186570872325440808210384270. Exactly this sequence comes out ofnew Random(664).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 5 of Run 29 (seed 1,844,859,734):
new Random(1844859734), Next(8,64) per post. The RNG predicts N = 49; the post has N = 49 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:32–11:32). - Conclusion. Filler. The content is fully explained by the two RNGs.