201210040642 10xhi3

explained decrypted filler

3DES(name+title) ECB, 48 GUIDs, seed 920

Metadata

Post ID: 10xhi3
Title: 201210040642 → 2012-10-04 06:42 on A858's clock
Posted (UTC): 2012-10-04 10:42:07
Timezone: UTC−4 · title 06:42 against posted 10:42 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210040642) = d38167cb54245e00f8de42b695158ada (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 48
Filler GUID seed: new Random(920).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 152 · predicted N = 48 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

0C52CD23B4E14E7B D6F64B7D2E0987A5 795214BB4358114A E3F3F10C3C867DAB 9AC2F79B7A2D8C08 98E7764B1BE338FE 20F176BEF8CCA9AB 09173FFC1CABFE06 8CC3DF3BD3ECD62C 4C68421BE72A38FF 9DC8708095F4F185 7488F81356CDD52C 20B3D3325944040E 41C5D8F402E39B77 90229553E905C1D5 2277768ADE2B5A67 D42495A2003A4EA8 816CE352239D604C 9D11E1D7F118A9A7 4FDF8D2BFAD8CEE9 91A7E623CDAB3110 A627F092DAEC1581 88A7B7BC6B7C2815 73548684D76AD078 A6BB7A65AE7F3078 7C265BBFD0964457 6AEAAEE4A623C881 35EDA157F08C0340 C63537FE7A1FB620 E796D3E284BDD5EE 85055EF5268FF38C 4DC9BE860757EEF8 46FD9D9645A68DBA AC158931562CEEB4 E64B90F92E9AC532 51BBA4933B319E2D D93CC5EB439C70D7 B3D46F8830F7DA95 CDDB4365BE72C388 96DD29A5642D6204 C635F485A90B441F 1456EBD5D1E438FC F06254FF42893BE1 8490635934C388A9 76F6339BF76D20A0 B6C481C22B25B7C4 9BD39C7529A358EC 8C0021C5EF9320D1 B813F8EE8ABE21EB 9ACAF1F83C7243FF 15635C1402FA70A6 706B6BDF1F370233 B55CB6A56B310A3F B015BF30EB960CFD F88EA8FB6B32BFA5 D2789F97337039E1 66D152EC5A80042C 5059782A6F8CD15F B011BED079261959 88F31041E9842B70 342EF52C0E7C5D47 31C2D2BB91AE84A5 2522CD045E169819 EDBB79E443050F78 F6F09BD1C2AD0AF4 D378AA1A507A86C9 880D35B121A6CB62 3CA0CC129DA7EC4B 747FECD54F29D9C4 C9DEE3D01D286DBC 93F584DA181D3AF6 91DBF1FB4F98B34D 13FC4099E146A1AB FCBDB414925ED155 E3E32B9C60FE3762 D9E7C76F2A95C786 999ECE4EFB1C42B3 F97084D603B196EF 0924DDED12DB9DCB 76519235C9E0CA63 2A7D1E0ABD205B45 8AA749E78BFDEE2C 8A04F57F9A8414C4 81FE51D1407B62B4 6297E290DC6D2FED EA26387B8ECAFD30 9764D5086E9B67E0 9EFAFFDD5DFC3347 F8B7381193BE39F9 35C7E1EC484BFFCA FA8E003001EE6BD8 75E93CB713F47EF4 3E364FD35839208F B110BD49BA8395BA CC2802A4FCD9FE38 2D6C28F464059DA0 A3805E3F1514010A 2FB2C91205469CFC 161C5A8D0058C2B6 F012B06E05B02315 419C76888DA4E6F0 C24C1E1FA042F776 624032BE1D9056BB 25CAC5D7AA818639 2578AC732C33DE6E B60F63C571D97AEF 5502F8D6EEBFFC39 704F5DDCF5D04BFE 472E47F04BDDCEA7 BB845F011A203103 DF37BEBC404F16CB FF38C0504F030335 199AA85F368394DC 82DE71B81ED43AC7 D747FAFC38A17D12 2DC8FC29FD97745F BFBFBD7A84666910 214409ADEB19B9C1 7809DB6A89B0E38C 10D8413A5991EA10 015CE5CE5BAFF68C E3BA479E48677C8C C547F5A9F523F591 B1BC16B743892B45 EE6134F62977ED47 FE45F73301EF8897 A98918CD041B901C 2D066AFB3CA7631F 3BE289A7E18196B9 898920928F6A6479 9BB432E9464DB4AD B4530646B7A0B30C B2C2442A14F0053B 38677AFAA5F421AE 4D3455053819701A 2C2440E0A500E962 CBFD00CA46B8B465 1A99358E50A97109 CD4C160FAC74A7AD 9CE1E9C9543E1789 130CFEFB86DC938A 1297883F08697FB3 A2F38F3D17F0050C C2DCC474FF521EFE 049B1FBECA96BD01 82ACF5B33FEA141F B062313DB99FEBDB 0E1227B223DD87E7 D2C8EECD0A3C6E03 D6A8E152606B5046 FB2DB9337318A16A 39FAEB3204C106B6 EE9E602C7548C1B1 FE89CD17CC63A48A 5647D81E571BBFF0 0A4352271A1FB5EC E6E4875848653AC8 5CF0D13606ED7C8D E633B9B640405478 DD1DCA24614801B1 62D40E419823439E CF5180B7B96075FB C3850CBF0D66C288 C457503FBCDA5DDF C775828FA209FD06 47D05D590E20DFA0 45D8C0997C375F82 8DFED23230810761 A8FBED57018C4DEA F3F53575D0B405E1 DC7EF44C254BF53C 5CD6A3E94A230DA6 91537BD2C409BD94 D5EBA38E44B74736 2117EF38327FDB16 F5A089AC3EE252C3 943EC00EF3AD064A 1E136C0506D2F8D9 D5BB5185C11AFA48 626646E8EF9CF5EA 266B6AE7ADC73009 1CB7DACEF76E62DE C26F408B6A35DDC1 4A266664584DE0B6 B9A8E1577D089BF8 B7ED92400CEEE255 D561167FEA02E388 A5DC046E4DEE2D70 8DB084882256ECB5 7B6E08D7F095E484 E94E1682EC05B1E5 4D89B2224FF83286 25A3CBA047B33249

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210040642 (name+title). Key = MD5(password) = d38167cb54245e00f8de42b695158ada, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d9f00cfc-d9ab-3cc4-97f4-1d2e6413a599
  2 c1444aee-d9ad-6d10-8b35-4c8680946375
  3 6e5de28f-1b2e-7631-9cab-d8abc58a08ca
  4 80ac6af3-ad0e-8273-93e3-427743ea7e4a
  5 ff549e63-1189-567a-b1d9-52f18dfeb676
  6 a7103c70-716b-46c1-9a54-23c0f3fe2b75
  7 d3d18200-15b9-100b-8b27-01eaabe9d9aa
  8 1528c7b7-fc63-8d6c-af17-91d359726842
  9 5aa34465-5ed2-74c3-9b81-ece7a4a401d1
 10 b8ff1864-8b84-4a07-b5e9-bc0743f088ae
 11 e2562bad-0039-0593-a304-46c9e9b09137
 12 2d38e698-1863-6f74-a6af-09dd99f92c6d
 13 6a3543da-3ce0-0194-aff2-b7808ba397ae
 14 309f1d26-1182-0a9e-9483-4ad048534313
 15 4831c93a-8ce4-8976-a07a-2d875dc97a5c
 16 2886aa08-5f33-5c84-bb66-9aff8545ee38
 17 59ae434c-7847-5676-b9b5-ea2111aa12e3
 18 48e2cae4-7855-3fb9-a45a-b5fec9056ec0
 19 8396375b-c9b8-5a0e-b344-d6d5dee3e536
 20 8c149af9-56bc-43cb-ab53-ad8f892d47d0
 21 b66250fe-753b-0b86-af7a-373f86087d5e
 22 8341390e-4b60-51aa-8a3a-7be8209b76af
 23 cb62d74e-8ade-4a79-9871-260540928a38
 24 1c5e36c4-536f-3da2-8573-3ce6544ea960
 25 3c627925-be32-73c5-9db0-eef6e23d1796
 26 14ff5080-aeb4-27b0-9cbe-44442c2cb81a
 27 7fac4912-3858-8930-a309-865ff8c2147a
 28 95411085-2c66-6069-b862-aa405777f35d
 29 feb69abd-cc54-5739-9747-30e3dc89dde7
 30 81b54fca-7c0a-0563-b98d-ccfcbcc43146
 31 840e1058-e61e-77a1-905f-1411532008d1
 32 841cb90d-5016-7c56-86e3-56a7b4e99a46
 33 793218fe-3c93-272b-b929-c61a17427f64
 34 f9e381a0-94a3-0115-b170-b7ed15185943
 35 45c6ec86-3506-7594-afd4-72a1f8bb7330
 36 a84b067b-026d-5baa-8e22-02d292cb9184
 37 f69dae3c-5ef1-160c-87fa-4c586633210c
 38 b6b4f5ed-cf2f-3e13-b89e-a385fc63a1a0
 39 bce5a320-1ab3-85d8-a697-4e2d6e996b87
 40 77049883-dbdd-3227-966e-92df280565e3
 41 5476b5f0-fcce-76e3-8a26-f0d80f2b144a
 42 a716b569-1c06-246b-bcf0-48b0cbaed7ff
 43 b6971339-f1c8-47b1-a843-52d958fd9785
 44 6d48e71f-d62d-391f-95dd-c7af36f1335a
 45 a84c4ce2-f823-815c-b3e4-45419836485f
 46 a7f017f8-8e16-8124-a515-e7a1fa07da91
 47 f9130680-6eab-388e-ac8f-67da3a3b684b
 48 fe03ed74-c0a2-7e99-ae5f-2c320fd0276d

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 367854187406008553540543728650772075138372438837. Exactly this sequence comes out of new Random(920).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 152 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related