201209241439 10ekvd

explained decrypted filler

3DES(name+title) ECB, 44 GUIDs, seed 386

Metadata

Post ID: 10ekvd
Title: 201209241439 → 2012-09-24 14:39 on A858's clock
Posted (UTC): 2012-09-24 18:39:37
Timezone: UTC−4 · title 14:39 against posted 18:39 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201209241439) = be57220192abd8939d850bf91bcc628b (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 44
Filler GUID seed: new Random(386).Next(9) ✓ verified
Run: Run 34 (seed 83,105,000) (seed)
Draw: 264 · predicted N = 44 ✓
Machine boot: 2012-09-22 10:23–10:24 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

F37D884B9DF25CD0 A9A749882497101D 9CBFB7E5BDAD1F94 33D4D0802CF110E6 3FF67B2F2485F522 AA858A05D3118AE7 0619874E22992D2E 5AAE975FBDAF7824 D02331FA3BF08AA0 A48099FD5D7A8BE2 13610C46947309F4 913945F118D0950A A522A1F170E58308 D11411E686B4A89E CEEAB8E8E399BBE6 77972DF6449F4389 F3DCF10CC1ADC4F7 49ED1E05E157CD63 3BCC4B3F720491E2 F74C2CCA20DB26A1 5C8936F5835B4829 2E389DC40BE4D88F 7A5418117D5CE0C0 104AF098E97DDD17 F2F5202EB82F67AF 67052573A744A396 2468C8885FD2AFB4 47B79BDC6ED157BE 6926C12C0AB70B9D 5D6A1F016F607ED9 DACE87C1670F899B 925497D29B325218 A4424D62AA5BCB82 B62A32134F501FCA 175E814049F936EB C282515E22A7250E D1EBF02089809FFB FFDAF910AFCE1300 0512E4BABAB78BAD A552F7DF3A46EF75 A219481EDCFC642A 7BBE376F1258DE1E B079BC1AF750CBCD 4E62104FCD944FB5 016A7D51BA785D9A BDF89C88AB5E151A 85CE699167489D56 8438363D65009ED1 6C9FAE20E6998D08 D56A5D9849FF27E7 94E6B8BF5882206D 2E1DC519F57302B0 7AFF3045F0A90E6B A869654AE1D17A7D 4554CFC710CBAE9F 9942D2BA3873BB90 8C06DD81E33F7B3F 07FDD18FBCAC1E2D CB8C9B8FC93CC70C 3E46FDE6BAC3856A EB095AF481320B3E 484D4DBC3B78B938 EFF289CE915B10E4 E03F14EFE902BF6F 496B0234D044FB68 A215C2486B27EDAA 2D64FC6D12757244 A04950ACA862A167 9FB434C2F1B48DB6 93948A94B91A338E 0EC8044520066B4E 5D4BDFEF22AD1808 EA223C01F37F43EC AB02CED32D189C95 E6833D7137BEBC5D 7D30157118F99B74 7753FD6381F0FCC5 5EEDBEDD7A513FF3 CFEF93AF998AC542 93EDF534B5F62E95 C34C00ECEE2B60B8 E18969D25D505CDE CC1636BF96A25A9E 223675CC459317A2 795B66046CB4615C 452F487D922E5610 74E722BEFBAAEB5F 400AE2DC29A7521B 980BF07B32255C97 131DE2582B306FB5 343D2AC52477249E B13B0A389E07953E 9349FCB6B5F1B93B EDD8323690A9C6A0 17A3236961DE5824 35DBD6DDD7A7E1C6 73A5A818FCC812B2 ECE2B2927B7E0FDD 1AD39484205F0D32 EDFDBF96D7579770 BA40D87B684EB174 B494E785E9CB1A97 23003E741EDCF845 05FA637FD0917248 BEE95A92E225AC7D 62602EBB6E5EE0FB CDE3E2DABFBC6C47 CF9522613F1318A9 B46A215815255F84 D36C3EAEA8FB3C79 0BECA8408003EF61 922DD9CE5E7168A7 CC4C917B3F843A8E 706C97852AA99C91 DEA30830ABA40DB3 63385F501787FDD3 14266179DDCEEAFD 45C2FF315FC8F56F 55ABE7A46770652A A4977B5357C832EB 80C11B657DFC5A17 F04CABA58421933B 6B21615D379758EA 7C16BC1A9C093C86 E7D6C705F268A3CA 502A2AF57A7F9255 0EDFF46FA1D77C99 482D80E4C57D2FDA D7540073BC8BCB11 366782AF1FFBCF0B AF3D3C489F67D4D7 117CDDBB844E29F7 6A6800007CDF055F DC100909DA6F4D8C ED9DE184A8C69408 E7EA1954D4F10CCA 63FC98D5946182FE C4A400BE6A681C83 E85C36C2ACEDC8F3 DC136860AD6D7E6E 7DA7024C6AC56AB4 CB47CA9E954472A3 C3BB76D203446F67 328F7A355A405706 28B6B0204B37B908 C3F9E62029B854A7 39019B6263293DE4 081BE2352D6C2001 221C786C964ECDE9 25645EE1C74A7A62 D41D8A5475C1D957 ADA42F24A3D49ECB 5D5D5A1426761AF2 5088E1A0D3FDE40D 8F8FDC8980438EEE 9B1E166957F4B278 ADA44ECA4B69F722 7393691AC6D171FA 384C7515544FB03F DBC699DDB1491F74 889FB8B23FF2701B 4754C87B9A54B8EA 1EA1D75101FB4D40 2F22DDAEE1CC028D C81EB676A3B25C49 1CA157E847FA7702 8C1191C9AB5C5945 F37FD47294570DA9 66180BE9EEA5D316 F4F7B75CD89B5EEE FE082D1DBA87B822 5FAE0A01A9C36500 86A9BAC0BFDF8EA2 4C1499C28A500BF5 BD7C21FE91255E54 D352B0D6340353B8 DB491D78578E9B26

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201209241439 (name+title). Key = MD5(password) = be57220192abd8939d850bf91bcc628b, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a78d401b-1f13-356d-8e73-ca050d3dd1be
  2 1a6c39fc-1f03-02ab-9896-22968e3d57ba
  3 7a6e7758-2c5b-5e92-96a1-edda0b82dfa7
  4 316bcfd5-eafb-8941-b05f-973e14afeb7e
  5 072dc464-2658-4367-a3b9-a1d182c5670e
  6 9d4b9e29-eeb1-72de-bb8b-f5151bb7d18e
  7 4c32f93d-0032-7262-9af8-7bc3b2debac8
  8 423f2e00-8d87-0be1-a718-56810440632b
  9 20c2679c-af3a-6723-9b24-eb579b3e8f59
 10 b577246a-76ed-55ce-a903-fb2ea85ba32f
 11 4ac893ce-3df9-647d-b8f4-1117eef56ea3
 12 a00cd8cb-77a3-7014-a687-2a4e13a904b6
 13 2b3a4c7f-b34d-8830-9396-2b6ea45b8201
 14 87297fef-f8b5-29c9-879c-420d09568a9b
 15 a8b32ad4-13a7-1708-b9dd-1989b92062ee
 16 8b48ad2f-9620-0a23-809d-a364a6671c3e
 17 f0aa8bfe-e937-1de2-8d7f-2b9888ed1f68
 18 d2975d7e-c981-284b-b590-2193ee270684
 19 1c785fa6-7006-1a84-a643-b6caa9dca9e7
 20 09e97dff-2cb9-628b-88a3-7f380a3760d6
 21 24d2fc63-440b-08fc-b509-ba055503d2cd
 22 23c10863-5074-480f-8342-cf370bba79e2
 23 2fe1a7cc-f314-230b-a881-2c043b233824
 24 9ec18cfc-29ec-78ee-9b47-4334094aad73
 25 1dcd732d-0c64-4e5c-91ba-77c9d2958ba0
 26 d2236134-6195-7420-add0-538b245aba7a
 27 a863c73a-ff6f-7c2d-a6fa-e94b4ae740aa
 28 7e61b7f3-5765-7236-b65e-0396ce0dffbf
 29 7c04f0af-8fdf-15eb-92bf-74b5f8fc84dd
 30 579a0cd6-8c2d-88ac-b2be-4a7788241202
 31 e3623156-7bc9-6903-a6fd-2e51788a7197
 32 532805de-0226-11ce-9bb7-1cbfc0b8a4b2
 33 5cc1da1a-accb-4393-b63c-2fe12c8165be
 34 db3f724e-de3b-5852-ad29-786d6f262200
 35 5cf7d0e4-3e6b-334b-9c59-939d2a869a84
 36 024ba55b-f3de-4dcd-af2d-4c016de3b693
 37 43e1bd85-bf1d-6fe4-9303-bc692f9c2948
 38 995b0b17-dff7-3ee4-8233-5590d1e769ed
 39 346305c4-9f29-4471-9d49-82b6951f2f2a
 40 76a37af2-6f9e-1732-bc64-44e1a8a46725
 41 11ecd309-19c6-77eb-8d7b-21e8037458ea
 42 d5d356e7-902a-8698-a4bb-6f3528c64c17
 43 93b17516-acb1-8de2-8ac4-24901f09ff88
 44 77c09da6-a038-87d6-a119-078df97fe94b

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 30584770656782101216042747771861453463417888. Exactly this sequence comes out of new Random(386).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 264 of Run 34 (seed 83,105,000): new Random(83105000), Next(8,64) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:23–10:24).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related