201209091933 zmi76
explained decrypted filler
seed 802
From the post to its content
As posted (encrypted)
FE39F147F38B3A70 2BCB5D3C10DAA5F4 D502E47BCE457227 1EEA82F1BBC2817F 610167C2EF03D85B C11017C31FF31617 06F3B0AE99EF806A F179727D3B50869D 4F634677043599DC 3838C41E8D61A718 A865AC569F4F93C1 D36D1A2740DD869F 7A97496AFDDF7BDD CF6C8D7C593FD900 854F5DA0C15EC774 6DD7005A2776FAD2 7D15C5ABE7794B66 BDA253D643BF9C3F 01AE1D9B260E2FB7 928FE34743DEF747 A19F3338D845365F 4B2F3AB144205CBA 4A384F3A3B348BC2 E4E01E97DFD68B20 D24023F339B10D04 4437F1BB16EC9BB1 4CE3AB92B57364EE 39CFFD5EA24381D0 0C61D31346AC7558 497113F06EDB8CD1 99EAFCD2BB18F8B6 EEDEC4F56717F3D0 2DBEC813E14CFF21 453510899E2AEDA7 484CF055354663D9 6B7BB4C9E0B9AD57 1EEBAD88C5AF3E44 770DE39D1B73B100 DE9BC923E9BA59D6 D33F5343CDFB2EFE A2D15C3B348CCFF4 89E98C91EC0DB6EC 045269B41D0C0CEB ED2201932D64C850 02820F08CB316A8A 4805BB5E5714F34C 55BE4D5D66346D32 4339BE23A1DB7509 6027B25316EDB5FB E8EC5787DB3CCDDA 4621F48BDB27EFDC 701821C5089D4480 D33D83C60E4BC534 CDBE56F24B2D7778 5F457623E44D18F9 764392FB92F3F289 0EC88F762A82B768 D089D2A29D2ED0A0 909414E55AA638E6 38B31EAB8B61C499 35EC85F25C9179CE 3B4A0CA6E82B3607 9E40721F4F22E259 28055AABE7EC314A C31DFB1E79E9BEDC 94D3188722C60461 0FD8C8EFD61A90D5 1B9F5F85BE2EC59D E1DD341833FF8403 24A73CDF29898B94 864F942712CE0ACB A65FD79211CA5FC3 FEF32F0AB77DE266 AE6E66C21637A45B 48CB7073423BAE55 1A5F65088CB9F2CE 1363419CD9F191EF 0FC88D6FC20E67A6 20CAA096144DF16E DE80101532BE79AA 5CA0B91045F4A0DB 1E83A366AFEC30D8 F6074AB80A8550BF 15B029508F024077 39272F7D7A019F87 583F58CE455B44ED D119003C5AED3AAD 94C085685DE69BDC D814676079B15873 4E1C7957F286D2EC BA267E21E07BDC6A 47E34497FBC4BEB7 2E1F85269BFBCA41 1046E40AAF53CCB5 6FA05F039F42A260 59295D5E3207F7EE A8AD0B3E20E0A912 3E5A9B6AF6E2BD9A 8A7A762CB16606CF 032DB3B915D3B52C 120A87A3416176C2 E1057816DC55AA61 7AEE351A8379155E 4462BF42B54AA1C8 7E65CDD8E4201EEA DEF5A54816C962C1 D1BE395406376BC5 51CFC9C379431AA5 0C6366B130AB13D2 F598F005D6A0AABD B386C5E85EF5AD47 B1917D70CA65E720 71ED1AC947E39179 31166C436B4AFAC4 72E884F3F52A2061 EBB07192FC9B9D44 CBC65EA288EDAC81 AFC3EBCA6A7096EA CFC1826F48E59628 4C313A50EFFE920D 5C967B4976C50E66 E515D8052CA4DEFA 83E5ECF9A372B0D4 F6495E8F980822C0 715054826E6B04AB 120048C138399BE8 8FA5A1E2800560FA AD893B2F94C9CD3D D391FEF87BFE13DF 488E916D91E9F4FB 92D9783CCA7C9BF5 763E769AE9719415 56F693E0C9EC8A72 1A4732074A6156A1 731CB8FCFC004D35 BE6E932F7147C6B0 D82C72584605537A 9BF5E4A30E8347F7 D2294326AD57C6F7 32F4710395BF564F 863D1B6BC239233B 2BA25C2AA3EB5B48 FC61EC7DFF6776C6 4BD6876440E69A46 92155DA58B9E7BE7 ED62775E10D7D695 2F14D586625221AF 59EC9648DDE15F4D F859110383C25B7B 725E0A0F111AF218 A990B8E5F5FC7D60 CB4DF804006C5FAE 6F9EC158B30C29F0 EA56C14CB98574FE FF623A46F6413E1F 69BE245A9F6FB155 65440CA73727F319 D5BF89D68E6DB0CB E613B91E40ABE0BF 2AC835E5428618A3 463A6528D2B036C2 2B04AE10459C35C6 2BAC5D5815897964 50B598761A4698EA 5C4461F5787244E7 C87090C238D903A2 EF3AFF83090EDB89 53983D74149587C3 A688DB0D3B929806 04F53703F88F4FE1 2F5633C23EFF13FF 64B4B0EBB8794922 A1AD2CC7356EA65A
- Read the ciphertext. Strip whitespace: 2,768 hex characters = 1,384 bytes = 173 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201209091933(name+title). Key = MD5(password) =b5d13cc82b4477f7999d615bded0dd50, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 43 GUIDs as hex (shown below).
Decrypted: GUID list
1 9d237038-42e0-6494-a1df-2ef46d038a60 2 35b25863-f863-164f-a331-d049ace1a021 3 58e0e49e-030a-3a86-9fad-d96ab76a7334 4 588e8972-c383-62ba-be0e-37658caeb75f 5 506c5cb5-c6ac-21d3-ac8d-8ba56410995c 6 db2a2b41-adde-361c-a19c-01d01a399177 7 2980c7ab-49bc-2f76-b29a-58b44e2f899d 8 b884bd0d-15bd-7a25-87f7-8b849f22d93b 9 c6061d50-f8c3-1385-bfe2-231ec68d4284 10 315a7206-607d-0cf2-ba81-2163f50ace5e 11 0c005a3b-a95c-1698-87f2-ca4189dafa48 12 2acf5728-7c2a-53f2-93da-51272f75e5c9 13 fcfd0757-ebba-8962-8445-f72a306796aa 14 92ed81ae-c0e6-631c-b235-31861e168aae 15 fd6ada32-2919-3a5b-94b6-b97500814fc3 16 c2f5880a-588f-8ad1-b1e5-3be12f421583 17 721aed11-5fa8-8e61-8638-88600d148e2c 18 4e1538f8-c1ba-2057-abe2-6515a39f6d1c 19 ac601a26-197c-3d92-9a97-d36408a73e22 20 d5ed691e-cbdc-7ee1-bed2-a2181559c661 21 df28d064-1c91-30be-bfad-63157ccdb358 22 b5f969d5-a6f5-54d9-b15f-266f1fae6dba 23 b8b3071b-21e9-40b3-86f2-c3e3f5fd9bf1 24 1462b57e-4a79-11c4-bee5-ed16788f5ab4 25 58ab5519-ddd3-206f-b3b9-c48d26d578ea 26 296ee1b1-42d5-3bf1-acca-036d548373a7 27 13eb0325-2087-4a0f-b726-1ccef7f05a51 28 516a35d0-b90b-59c0-9d3e-34f17d1f8905 29 7b6b41e4-e069-0827-8e6b-27233eca18c9 30 d6250820-78d0-84c4-bf2f-703b605137c7 31 1474dff5-6513-2e5d-8572-29b60554d107 32 a0a44045-5704-6b01-96c1-a55b064f55dd 33 3534c084-358e-7d9c-a2d0-6b0813688871 34 7efe3ba4-acd2-0f89-9bc0-df5c503bf29a 35 c31a341d-8bbb-60b2-b94f-dbc145776d76 36 bb6ac7b8-7d8c-48ff-9660-26eb00006365 37 59150832-3cca-33f5-b03b-de45054ddb38 38 e7ff2133-69df-8c96-932c-1bb52bc7ece8 39 59c554cd-f8da-6375-aa21-a8dcf9d7c018 40 baaf6d41-c6de-3728-9818-fc4a9153125d 41 0f01380a-c761-1524-a206-a1039c9debad 42 e380833c-a6f1-4f24-a584-be888dfe206c 43 ca9c69c9-ba93-8d73-af61-400f353c0b1b
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
6136232710158638823735412345082670643863148. Exactly this sequence comes out ofnew Random(802).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 15 of Run 31 (seed 15,917,281):
new Random(15917281), Next(8,64) per post. The RNG predicts N = 43; the post has N = 43 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-07 23:34–00:34). - Conclusion. Filler. The content is fully explained by the two RNGs.