201209060000 zfllh
explained decrypted filler
3DES(name+title) ECB, 63 GUIDs, seed 532
From the post to its content
As posted (encrypted)
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
- Read the ciphertext. Strip whitespace: 4,048 hex characters = 2,024 bytes = 253 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209060000(name+title). Key = MD5(password) =52127d06e86f600113b0cf4abce19ccc, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 63 GUIDs as hex (shown below).
Decrypted: GUID list
1 e3284c8f-5dd7-5617-97e3-1b0c2578ee91 2 1274d8b3-21fa-808c-990e-29695757a2ad 3 1b625af9-29da-5fce-aefd-5c0d3478666f 4 5fbc4984-0cbd-0090-8d55-dd819f55d271 5 1dc3da1a-778d-310d-b18f-e1f813b24090 6 f48d9b03-19cc-4570-bfe4-c2f77295cedf 7 81a2c758-7d6e-2369-8a48-9ab57b0f9b94 8 d0b6e951-822d-39a4-91c1-1a38945fd28f 9 633bcb61-8f24-7dc2-aa29-0a84df53706a 10 9c3d2f30-2706-4e97-bd6d-056ca85e73f0 11 79d0f1d0-0021-29d0-a24f-d9d81ba735f3 12 64afd3b4-a6da-7348-9c79-16c245394afe 13 fc652df7-fadf-32ec-9926-8df52e931067 14 f28a1fec-0002-2080-b825-fe7a93523b18 15 fcc81998-7815-3e28-8516-16cb92d687c1 16 0cee83e2-077c-2154-b53a-e4236684b029 17 f4563d51-2e4f-4d8f-86cb-8354bcfcc2c5 18 db4759e0-e6d4-70ec-8dc3-1c3b5f80796d 19 7fd51b00-c0f6-0ba0-b1d3-5bf454ccb5b0 20 358581d1-5472-209b-8a53-6f13888b55fb 21 32a58848-1a58-406f-9dcf-d3ad42c4b26a 22 7e436ee4-33bc-3c7c-8f32-698ea0b3ee1a 23 dedb7e80-81c3-8b7c-9a28-2510824ec64a 24 a305fecf-86be-7454-bb17-343ff7170488 25 945d8570-1196-7a3e-a52d-431b3ca7ff80 26 62b1c20f-ba1e-6664-aaf6-9360c433af13 27 0c84358d-2ba9-27c8-a410-97e21b019935 28 30ae35fa-8914-2811-a305-222092be774f 29 93ba4016-a5d7-455c-b214-c6b5b23eb0e6 30 33b99c46-9bc1-4419-a80b-f44bdb27d104 31 82609c81-2270-545c-9b2c-7b9ccff51470 32 9b198e87-4084-514a-97e0-e36dbcf8f34c 33 a495c208-667f-27d8-8ce6-937769290a78 34 7fe325d4-9831-22c8-ad4f-7a756b93e4e6 35 373f6422-6dc4-3d6a-a25b-78cfcf7a5bd7 36 7e91f8b5-e085-70f7-8441-83ce2c818699 37 273a3c5c-7567-61ba-91d1-324c4d72a545 38 ff0cf3e4-edbd-81f6-a74b-9dee3a9fcc4f 39 90e79565-6b92-44c8-9b04-b7e477b619ee 40 e46f2f76-a3b7-0992-b819-3db23a29b2d7 41 1252d32c-d996-8852-a925-427e5d895d95 42 f0e8c4b5-5de1-491d-a9e4-86f591717b26 43 38c78a08-3465-4eea-894c-9730cada3673 44 1a2d5ae2-4d20-44b0-acca-86b822264d79 45 9c519b76-b432-3e34-b7dd-f587a0d77980 46 5005d2e7-3659-24be-8024-a64f47c05b31 47 08be8c50-023b-3011-8b12-b4a591746996 48 97e32dbb-ab0c-7c70-a1ad-1a780354dbc9 49 1c68d7eb-9fcf-1614-b266-19f7f21d19a2 50 2a74aefe-e4f3-4397-85aa-444674a4e183 51 e7f7b7f1-ebea-1981-8728-69a2cfe90e1c 52 61fcc3c0-c6bb-474c-9b26-6fec3a914aab 53 7a9c3c26-b6b8-2055-895d-682cb3579687 54 49710fdc-6e04-7c98-aa2a-84614034e943 55 dad73144-c8fe-6d26-998d-e9615ecf41d2 56 76b88c14-767f-282c-9ba2-1348429db794 57 4282d711-dcee-0215-9e57-afb856a0be8c 58 2b58011c-d114-6686-acd6-8bc1410c435b 59 cae78eab-02ad-2e8b-b711-bb1d2f030a4e 60 8be2cd92-58f2-6907-8437-71db67138368 61 f8ff0736-969f-1135-8bfb-de511ce2622c 62 bfb5a1af-1831-8b3f-b900-e50d2b7c6dcd 63 1527438a-afb8-776d-899a-0c2d011b0694
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
585034237427323247024387762244552237684084443237141427620626187. Exactly this sequence comes out ofnew Random(532).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 8 of Run 29 (seed 1,844,859,734):
new Random(1844859734), Next(8,64) per post. The RNG predicts N = 63; the post has N = 63 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:32–11:32). - Conclusion. Filler. The content is fully explained by the two RNGs.