I'm not sure, I don't know too much about encryption.
I passed it along to a programmer friend this morning, still waiting to hear if he had anything to say about it.
Another thing occured to me. On the backup board (and a lot of other bulletin boards), the URL has a session ID incorporated. While on the backup board, I noticed that the session ID was a 32 character hex number, just like the one that showed up in the screen cap.
Example:
http://www.xxxxx.com/xxxxx/index.php?sid=cf85d7f9582cd7e645009d40723b3335