201210022140 10unca

explained decrypted filler

3DES(name+title) ECB, 21 GUIDs, seed 814

Metadata

Post ID: 10unca
Title: 201210022140 → 2012-10-02 21:40 on A858's clock
Posted (UTC): 2012-10-03 01:40:51
Timezone: UTC−4 · title 21:40 against posted 01:40 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,360 hex characters · 680 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210022140) = 62549d66340f2350bdc331238cee607d (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 21
Filler GUID seed: new Random(814).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 53 · predicted N = 21 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

6539B4EB547BCE8A 61C5D77FA8419025 82E4890BBC2EA684 A651CBBFAC39544E 26CAC4010BD6F51E 96BF7E0DC99D010A CCC8E92FB9FC3B16 3FE55D6C319B6573 C075C5130C4BBB9E 06959229F771F52D F3A98032FBA5F6DE A5FE305C18F15BB2 21B83D97014092CE 7345BFA3A5062092 BAC9D41B4DDC4E94 41287856419121E3 98E0BD3EB6D9ABAD 557483F03FBD20C1 B9C2B086338534DB A8C864308FA5BD80 ED6369FE3D70F079 52CCB7670CD23894 26F890544B04490F 9F8C464807D420D1 CCC7B674FC455425 9E6930F2939818B7 4CB900C7E5D02295 C95D17F5DA325F1E C14EC9ED68F1E043 EC29AC26B557AB3C 878973FE6444D979 72F85F314C8E6084 B1493A9B386CDC6E A3CF02990916C779 85C823D87075BC3E 6B9D47D84AACE954 4D2AC1DA0C933496 77FFC7E0704B4C87 08D36DA4F837BFF9 4AFFE098030F9004 C80F791005364135 F8143A81052BB0EA FABE9E1D4CE82E00 77E9BFCC11755E9E E4DB98EEEB6E2DDC 7AE4654934506C4F F099B4398C7DEBFF C1C40D0030C5748B 7B1E517FC020E5E0 4F8B1DA86D35A21D 907E4D923012E385 BC4944A672F436CD 41E28CE64983968B 91A081E70ADC4E2B C8896EC1404B5EAE 475E2E2170FB5862 37DE9B9D1009A4CB 79AE6FFCE26D4187 09EE62E9607D953C C1D584594EBBAC1D EB809AE9A5186A21 141454AF91BA79A8 650C633288C50324 588EBC2A097C47A2 B3BC019F41EF0CB9 B1E3D7BC881C152A 28B7BB0573C859C7 E91811D168FF3D83 685F6858533B6FB0 80C82A3600375260 172F5120B34B9C15 132AC109242173DF E150F6656584A10F 78DF47F55FDD859B 6135E13628B65DD9 3177F2EDDD0BB3E8 07ECA6A9B50435FE A80E3AFDFBDCBEF6 301697ABEC7738B0 2E60576AB979B99B D1502E4F7926D972 090698F4B87CC517 512A926970844D70 C56A50F684B01528 5113FD03FD3E7D8D

Read the ciphertext. Strip whitespace: 1,360 hex characters = 680 bytes = 85 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210022140 (name+title). Key = MD5(password) = 62549d66340f2350bdc331238cee607d, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 21 GUIDs as hex (shown below).

Decrypted: GUID list

  1 86b6d5b5-44ee-8722-bddf-21416cc59ef5
  2 55f560ef-7c3c-558e-83d5-13ef681c4772
  3 edd45251-f287-68bb-808e-9538a9e09936
  4 e142e021-91d4-2660-8bae-b3c9232f44f6
  5 5a80a896-d16e-63bc-893c-9525a8fc216a
  6 4ed41a94-5003-8438-b790-9429b4a277bf
  7 bfca2cd7-e625-590e-a7d6-433cd323bfd2
  8 47395e7b-f301-7f25-9678-13942c149585
  9 adf8c349-d9f9-6079-9aa7-2a04bdf72ad7
 10 f1f10089-d81c-3d3c-b97f-f5186990f1b5
 11 cbb99539-0b69-8f71-aff4-0dae5005fbf3
 12 1cf47c2c-6c54-8645-80dc-5063ba42780e
 13 235884d7-3030-1a62-9d45-f332cee3e6ee
 14 b5474380-2ef3-892c-a474-95be7c2ccc54
 15 cdd4ca7c-ffc3-693b-9e00-5ee7cda1f7dd
 16 042d88c4-2b8b-310b-8ff7-f23940e9e319
 17 8d4d49a3-ed6b-08fa-a7a1-f94179d4b744
 18 dfd94a20-cc93-63b0-84e6-1ea9000f7b62
 19 fced83c1-f4ff-610d-8468-bdcdb41f0d5a
 20 abb9cfbe-334e-46a1-9f8c-7239821f4ac2
 21 f35b8c31-0698-8c42-838f-53ecd297a992

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 856268576388186306648. Exactly this sequence comes out of new Random(814).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 53 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 21; the post has N = 21 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related