201210031101 10vldh

explained decrypted filler

3DES(name+title) ECB, 22 GUIDs, seed 555

Metadata

Post ID: 10vldh
Title: 201210031101 → 2012-10-03 11:01 on A858's clock
Posted (UTC): 2012-10-03 15:01:18
Timezone: UTC−4 · title 11:01 against posted 15:01 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,424 hex characters · 712 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210031101) = bd4fb2bd48892c975776d43def0bf998 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 22
Filler GUID seed: new Random(555).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 93 · predicted N = 22 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

0A2D465B7D063A2D 0668EDA4355975FE E5517C5FBE2A989C 961F47FA8FC2D9EC 8FFEC61EB050A9E1 4C513A82AF0F97A8 587DBE4B53EAFC0C 5F921B7E7E90F459 1FD03CB9A771BB4A 7A9403749D32FB62 F1DEEFC043A0EDC1 708577B8E8ABB40F 98C3FEAAF1825DFD F2240C3D38DEFFC9 6A761771E090BF64 90273404EC9FF59E 38AA5D033CE4BFFB FF3D323C5CD520EF 329B50F82B17BB96 AD6DD8D77D382207 E861062F729D62D9 31C751E0791FB167 05E893AE48A155AF 461139AE26B8A0FD 0FEC5EB26583B842 CC3E3CF7C94A1673 606D976EC9F25316 ADD43726D65DA75A FA06576C5BC0C0C6 012D83204857DA55 A1700698ED37A2CE 2408DD3A1C0D201E B497E124E0F31D1F BC6A560740F4F933 72F7F901AB9D55AD 4523C42F0616DFA1 10F7DADE2060A7A4 4CC361E764155C72 431359C4F7093B93 FFEB267F70B026DC DCFB05C6F4E2142F 207C2EB97D0A5F22 7E4C50E43727F3DD AA09303C8BD92F10 3189A0F2C08C08B2 78F171232D2AC216 6286177E05F911A8 578ACE37F6888E69 C74ED52DEF344929 8E392DEBF9EFE7DA 32C3A369EC928088 D753928909DB5C73 009457D1B99448C9 CD6B1AC37127E82B 1B8F1BFB4BBE9577 4AF1A9AA85B428D9 53F70D520CB69B97 DB422F3725107766 B26118E97061B45B 1FBA47B3AF00B2E0 70CAD865772CC7A5 FF5F93DFAEE4970B 2B0FDF3C0FB54479 BD7F20822BA1D0C4 3B275250B96AB28E 6353C408DDF2C025 0D1ABC0404562E90 DA4B64713B298D5C F7190F3163DCFBC7 00D62F457E962725 3AD5EDD74BD6CFA0 E3758EC6CA97839A 9D0A0EF265222301 572AA438103EB141 1967B42B1E31D849 7BCA8162B4E92A87 0AE7703D66F30DB1 2550524C30351EFC F4C0216DE3C7CE0A 820E3E4CB524C54B FB9C274629D7395D 88C0E4E8C4DE8242 EBAAC8FEB7EEFCAE B3AAD84DE1C874D6 290F57F4ADDD5EF5 E6A02835D4114C40 FE4DD3186440644E 97188D1D01C78EF6 12A9F45ACFA587C0

Read the ciphertext. Strip whitespace: 1,424 hex characters = 712 bytes = 89 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210031101 (name+title). Key = MD5(password) = bd4fb2bd48892c975776d43def0bf998, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 22 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a37edb69-2e69-617a-84c5-1c0e03180172
  2 128eb1aa-9e05-5909-b635-141dca246801
  3 2bd19aff-439f-6570-b738-7e3cc9925b2a
  4 a5aba032-5f1e-0ce0-b854-05d2e989d0f1
  5 de543e96-08cf-7cd1-b392-157924e32066
  6 1ad8a4d2-9ad6-51cb-ba4f-ef211948fbb9
  7 e127c00f-9783-5781-b5a4-c9082ad5e904
  8 a40514ea-d383-7b45-9a3e-f8c4b1ca42f3
  9 2e500cf8-83dd-5869-9fc9-50794aa7cc94
 10 a9c3519b-c407-8bdf-9b80-36fa7e4205b3
 11 9c3e2f4e-03ae-16fd-8aa6-df4de88b48f9
 12 dcf41f84-e05f-696e-8db2-4a87908bbcd0
 13 14c24444-5052-16c7-bf92-c40201a90eee
 14 4a1e35bb-cfcf-1bd4-ba40-8f4af956dcc6
 15 8a05e428-d11d-4a85-bb2c-0ec11ae4a724
 16 8f01a5c0-5f22-59e6-bddf-8ea988d35b24
 17 27472a29-b7d6-1e68-b4c0-f4cd56d1786f
 18 7088dd49-4244-061b-ab81-4a2cb796be0b
 19 83e99b2d-756a-61a2-b7af-7b4208d9b67d
 20 e21ec4a2-e81b-155b-a424-052e7cd05c6a
 21 4d43a6fe-142f-5146-abf7-681cf26a2fd3
 22 50ec95f0-a598-083a-8674-1b062e3518d1

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6560755758161145106150. Exactly this sequence comes out of new Random(555).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 93 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 22; the post has N = 22 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related