201210040401 10xdj4

explained decrypted filler

3DES(name+title) ECB, 45 GUIDs, seed 922

Metadata

Post ID: 10xdj4
Title: 201210040401 → 2012-10-04 04:01 on A858's clock
Posted (UTC): 2012-10-04 08:01:59
Timezone: UTC−4 · title 04:01 against posted 08:01 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,896 hex characters · 1,448 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210040401) = 7251d10ca396dc40204ce65e7a12ed6c (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 45
Filler GUID seed: new Random(922).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 144 · predicted N = 45 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

06EDFE9D91043758 5F9C6E72CE180A0D A130C4AE75EC90DB 7BF91FF9E3163DC3 3E1B2AB0987F6771 314EAA611FD2B720 156B240932BD7E32 8D00408473C9D701 CC5DBAD5A58802E5 FFFC69E3051837C4 A1A094BE0A7DC6C2 03E5795E1D19AD69 4DEE5161B14964A0 0631F5CBAE1E12CB 1E56E00141ACC24C 96B5A685E3467C1F 61E1443267781839 EA5EBDC71132D00A A634AF87556F2BB3 562B9DD4C69887AB 82926F090202CF84 B318B3F8C29B46A4 0AFC1030AD2469DD 9A153F0C1C105ED4 CD081A6E9B5B8A09 7682AE7F0D6534F2 D999C155F1E0E0DD 5CB13F99A385177A FDC48200C791D18C 38F364EE315FA779 41C4BD32D5F2342B D85DAEC66563B85F 54AE73C245F10DE8 2BD7CE24AF679009 396A1F3C4050C630 FE526F714DAED6F9 ECCABB3522A5D623 DD77C0778CB5BC97 086C4B678E4AC815 920B8B481FF53083 CA95B6C8143E2C74 A0628DEDF238F4EE F819CC6EA1E4FF45 8E51F20E0A93FEC7 2D5D54E2091C4DA8 A1F6439BA5A44A58 0FC89DC88412E622 757E986FEDE9E9EB 99B745E837790517 9D5D05AFBA354A70 BF8F9EAE358E94CD 4328BFF91BA07515 C2C63B973888F2A5 984BD12A88C82E9B D5B21154F6728349 445335CC9241C96B FFAE15FAA4C3A9EA 5AE2FBDA2261F152 F920B3372E4941D4 F7DB9ACEDFEDB463 7E4A8F33EED942C9 E51697F5A9650ED3 92D51EF15F457EB0 42053138495FAE1A 7289FEA518A8110F C098B0D3F79BA9AD BE3CFE80C4193720 C2A1DA5CC0D7888B 834D63520B17C23F 17FA8441DFC4E052 8CAF40E6993C198F 4BFD42358F8BA2CD 93A1181F0D8BFFD0 615A5B37E84E8B6A DC395F11712E6006 D83D2A958C302516 BB5D71BC9AA9DDFC E596507AF7EB367D 35EBB3CE2704E803 73ED5EBABC6322A3 763819BFBE5D7C13 DEE71855BCC479E6 BF74E1021DA5B583 CE8202635FFDC2A8 2D5D45AD9E77DDDC 3A726B66DD7363E1 CED8AB7AE49EE8ED FC91699390EFFEBB 301DB35085AE1587 39FA3EDE06D274CE E4E626C7991911C9 94AEF4F78BDDEBB1 D45C6052F73B4E85 DB48620B806E4BF1 DAC4883D583B5685 BA28B6B449E91749 8A07599B0FB3D917 42FFF3F0939B830E 15713B4F920CE90B 33F8159E0985CD54 F34ADE074741B4D1 C4532181BEBE6A6C 5F60E7646B44422C 1F116CAAF719135B 728B264F38B5BCDD F9E623ED3A1855EC DBC0F3444B23F7F3 79111282BD25C187 64A5FCF35B4EA49F 34B0E9832C6C8332 69E94B96478D25D0 BD77B12330887883 81D42A0D20F338AC 29F15DC0CC85268B 66D3DBAADF67C508 CD0C1940DCF4B4F6 33B4636AFF883EA7 40B93BF4278925C3 58C79BC66E13D807 B8E568EAAC3FBE90 749E2B7935D084AE 5FD2706F27DC5941 0CF57B010DCC9702 1B75E7506A08FA6A 65AE5610FB9BFD41 2C1355570CBB3732 40FAB75754098A77 0FAF8CBF945EB3B6 891458A222A2BC14 7AE71738AC294DD9 78395BFD48667757 F1572D6FFD9839A7 B8BDEC1CFD47F871 E317AF560EA47B36 6E1FA62789267AD1 DC1CF1D64CD5BB97 E524BD3F8410ADC0 1593F93FD24C09B5 E964779F0ED64240 1CEAA02E93990FD6 57E3A1178E5879F6 05C745876FE50743 43C0C72819ED32D5 12EE41CB0CA3C3CF 877F317EE64B4F4A 1D3FEC647D3FD2C2 18A1A2D9973D7D9F 9086713036DD54CE 6D114AC213FBAA43 70C0C60E0CCDE471 616926F498BC71BE C1251F5C9CB7B1B1 B5B5EBE6E91982DE 6E80464BE4A48873 900DF48FC6E2F8B8 E0EA47F43E8C671A 3D50A817FD13C38D 19977927898D4154 5522529F107DD903 4A7C776873B9E7FD 5FECE0B6F07AF459 A995FDDF58559353 9CD8747C668A60ED E11D43B137FCE617 F8609FDFBC8DC5FB 2741375F4AE250F9 6D22C22AAFA9B98D 209ABECF4DBEDC0D 9F66967363D6877B CD6352F1171FC508 6E97480FE7CF4F5B 4AB72AF01C015742 C799A59A3078FA06 1237B15081AE7BDB 2D18C505CC842FA3 54BCCF22CD954B86 7E7044C0AD6B0367 41E31DF4D5EE088D 3AA5A65CF21FED85 BE1EE10A1AA86F11 7116BC472AD8A7B5

Read the ciphertext. Strip whitespace: 2,896 hex characters = 1,448 bytes = 181 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210040401 (name+title). Key = MD5(password) = 7251d10ca396dc40204ce65e7a12ed6c, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 45 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a2eeab3b-d8fc-3abe-b518-5b4b6eb55231
  2 7ba644e3-3601-3f45-87d8-4ef31e47f293
  3 43f59b2a-5ebe-2a6c-8bf9-ac87c2d2527b
  4 1bcfe298-371c-3208-b57e-6c4ff93e4dbd
  5 3ea8b1ae-c2c6-456c-8636-a5b88566e3c0
  6 d6afebca-80fd-2a87-9235-d64c31b0f400
  7 b79742af-cf6f-0eb9-bbde-ad315b4f41b0
  8 db20f642-259c-8f7f-b4ff-957b1cc61f9c
  9 c973f572-f2bb-0380-9c49-c21fd5405099
 10 c50a7a48-cf69-2b93-be4a-3d4ee5a1e5d0
 11 336feea1-0526-5ce0-82d1-98e36842bf40
 12 6b581c43-49f1-2235-a51b-6817150f5335
 13 6df4580c-fbe2-4c0f-8141-cf3d1b712479
 14 03d11cc0-736d-1b0f-8401-760f1ef3ca29
 15 d16ea24d-2265-31bb-aae4-ca3149df9cf1
 16 b2f69ea4-cbcb-7e06-9d2e-f0b025386d7b
 17 d482546d-88b2-3628-9018-ba5cd6384d5d
 18 9d527c1a-b5c1-5a01-bdcc-f6913e132c88
 19 64615966-32e7-5a3a-865a-5b1667d0ff4e
 20 8fb2549b-8d69-284a-9f23-300dde113a02
 21 05730e9e-79b7-27c8-9b97-3ba073ec3b7e
 22 c3f85014-0d47-0e74-ad86-6b070f6f1c5c
 23 6edbcb10-d0dd-7501-b19a-b2697f7bca12
 24 b8bd6f04-4ff3-144f-b54f-6b8889f179ca
 25 ab8869a9-8ca8-003a-a5f7-2a2cc580d1e2
 26 c7018c22-fbdb-446c-b84f-a3a7cfad8bd1
 27 44851392-5314-50c8-a58b-8b8f7effe087
 28 c8fd2ef1-5a9e-871e-9dac-8a84fee46ab3
 29 e4d6a33d-4b97-1458-864f-3fc2b7ba91a3
 30 7f895552-4dc5-56ec-93e4-fc794711d44e
 31 fcd0e787-6bd1-5ac4-8f0e-497981759ff8
 32 00a52d87-63c0-27a4-bb47-960efa43348b
 33 88b38a98-8322-06cb-80f0-a207c070ffba
 34 643ef416-6891-07bf-9849-8b040f234202
 35 db85bde8-46cd-526b-82c6-97ee214f914a
 36 4b3f013e-21f9-6bd3-bda4-ef98095eaf0d
 37 a0389dc0-43b9-63bc-b88a-d939d94e624b
 38 cdccfee4-ca8a-6db1-ae96-1bb2f56bb3cd
 39 6e8c69a2-f9f5-2143-be7b-1ab6be6aa6a0
 40 857086b9-b7ed-46bf-ad85-112632f2faef
 41 fde8661b-5a58-2264-8a8c-7a0e3d85acbd
 42 bc9a28af-dd0a-7a70-ba84-5108b14f6998
 43 40cdff8d-59b3-57bf-bc0f-db434187454c
 44 50b66ea7-0024-5b8a-87b4-ba14e4121f95
 45 e204dff4-e380-07f2-9b2a-37c809ba6bcd

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 332342080252413735522071045815520056662427550. Exactly this sequence comes out of new Random(922).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 144 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 45; the post has N = 45 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related