201210040822 10xkgz

explained decrypted filler

3DES(name+title) ECB, 43 GUIDs, seed 623

Metadata

Post ID: 10xkgz
Title: 201210040822 → 2012-10-04 08:22 on A858's clock
Posted (UTC): 2012-10-04 12:22:10
Timezone: UTC−4 · title 08:22 against posted 12:22 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,768 hex characters · 1,384 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210040822) = 961624580275cc5b022da1fed86bc794 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 43
Filler GUID seed: new Random(623).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 157 · predicted N = 43 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

BDA28929D7012555 D8083C0684538F3B 63C9886411C4DC0F E49279F76C4A2EA6 ED746CD62F66080F B95C5E5E2D7238BE 55AC174F3C0C3215 48F8FB669026432B DC3EF555CFABC0D3 8E093D1723893C61 57332419E3DBAED6 30071EC2B313F67A 702B6CEDA4127444 E448233D82B057DE 37E5495632CB4794 F5BBEF320105FBFD 755AA1B0B622EAC5 237B8A2E6D74A143 35A2B4C578B5EA35 AA388E0EC2D428FE 76AA641E4D2BF275 99ADA1F6D68026E6 745ECC7616FE81B7 ADF9F5B678E45D66 99ABF37901D3D5E8 A375A02CEA5C4011 73A35DC1F9FA928A 3ECE2A6F3E9A6118 39AD2A6AF7DC69C1 DC620311BDE5EB84 72B62D780CB8B371 B3B2B9FDB2909023 861DBFD31325D4DB 8E73F3BDDC1A918B 17D583C09C3BE714 6EB00054047CBF46 D4A58749DB486887 EEDABA028B621212 0A39445D36981071 BDC5B3AAB95DC7F8 A2F83C14C9FAEBA1 8368D6EF089BC037 E85434EFD7073406 B95D6E4531B1D91D 50DBACCB1BB3A3B3 99258D735B4E6430 7452FD9A4F6E04C0 912E6D58A87F5AD8 CA74AFC42875F1AB 605C3AFA297B3EC5 E0A6921A4CB0D8DB D0A89DB442981AE4 1E6CCA1A59C18A2F F82540486B1D56B7 D6EA627B20EBFC5C B3CEC71967824061 18063A05D9BEB1C5 F394FFD6750AE2D6 AD25F827C1E43421 E1AD999AC8284988 674834104E2911CD 717AF09E84CE39DD D8C955239CA3C1F3 A66298F2766977BF 593D93867E51A7D8 B2A45FC639A106F8 ED105532CDE1084A FC27FFDE5D8F2226 712E1BEFC53F77DB 491F3605313C8E9F 4D1F344D63303278 D62167169AD0E3FD DE26F510A94CC591 680CBA536802DA72 3E8D07D8DDBD3DF9 F6235391CFB312FF 30F608F4D1C5F8DC 25DD0B09605CD099 3C0355CDFA95EB37 23306862FFE82F6D 18A900500F1615F0 43C08AA8FC4DB911 5AFC69F5BEAD3099 B2635061251C3E5E EC8EACD169628F96 109196E4C65C58C3 E99B9DA1422ED916 047A161A3E247D5C 20C4F9E2273AA163 DADF30767452305E 6D4794C725B7FF28 77A01EB9D835C548 91883835DC043C4C 9C9970FC60AB484D 401D338651E207DC 91F80906E0C13CF5 8398E215E059D0D3 1953D638B081BFE3 01AEB894F4EA367B 79D97C2794ABA7B3 DF1918161049A29E 4BE9B06C876EB118 E355BE252F0B9A9A B3D2A6263EA8B871 8B56254377C16910 CA9B89DE7CF0ED7D CBA1324556D01EF0 9191B4A80408A0E1 169B5698CE01C444 57695112C0E0DA5E EDB326E9CAAC3202 F8E26F4DCA808889 8934C23FCDC45C7D 978F513DF5505AEC 94C85D6BDB802136 2215A91A5B85C134 65F3997059F2C1CE 557B2AB9F9FB90A7 E2F101D9FB6937A2 15F50EB8D19DA686 E0F0D77A19FA3FDC B9513E0368E002B2 A2DE125718F6B342 123829298F8C7DBA C264C4615554E2D5 8338D04A3CFFA3A5 84D94BB8E29BC371 21FED75118503ABC 630538A3C90476A5 E7EC2660D01A2060 68E99D28D927E98B 464307E4D3147076 0776A746B0AEAD13 5A93CDC8F548A00A F2C2DBA0FE0AFAE1 B2328F8C8BD3DBFD F359E720BC82FD52 12AD46BCB107B5D1 F91B06624E9153A2 67A34B374AD01AC7 7CA2DAB1DCDDDE68 1367CF5F36AD4501 380FCE35C610675A E526B1DAA6A42EB9 344394828DF65DCF EF4542229DCE2841 675550A4DCAF32C6 9804AB64164CF5DC 475FF636EDF4ACA2 C861C9705D2C32E8 543C93B3484E9F2F 5C83ABAA127F468F 6C3A3DB2999A4DA0 818F9B5E36AA5C64 5026E31E9A62F810 CCCF477EA035F856 744900C2805D439E 3CCE2972966F9BF0 D7FC611A2E8F6C65 17D3796E5E7D8D8D 274B6CBBF198A2AE 67A90A139C40DB11 E2EB2D8DEACBFE06 BB879F627F73A3C9 4A31B12E5CF59682 B1FB04EA57DDF6C6 C539DB4F722FD111 934E86683BA0C5EB 47795894BCFCD2A2 66B3F3184954D79B FB2A5AE541BAF5AB 9DF2309DF4966BF4 D0E015C3642690EF

Read the ciphertext. Strip whitespace: 2,768 hex characters = 1,384 bytes = 173 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210040822 (name+title). Key = MD5(password) = 961624580275cc5b022da1fed86bc794, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 43 GUIDs as hex (shown below).

Decrypted: GUID list

  1 594336f9-60a9-1329-b41b-22d1183f6e01
  2 a1dcd603-7281-59d1-a770-fb939551b53a
  3 2e4e8d8d-f572-2026-a377-fdcf7c8f5ac0
  4 689c1588-eea3-4eb2-af9c-1fd7c9e4b0c5
  5 a0b4b35a-528c-4793-a370-9491fcb903fd
  6 b0128f4a-9cb7-8dcc-87df-8147c0101b84
  7 ebe0389b-d2d4-03d7-a147-c316d0b1332d
  8 24f07077-604c-8f0a-87f8-8c7c4c137717
  9 9cf46a7d-baa5-0726-aa52-58389e8f1db2
 10 a09adae8-dda4-0c3f-a0ff-bf4de2d08dca
 11 5eb2070c-5122-2dc4-ad50-8dc576318121
 12 4296d5a8-71b5-78a9-b407-e1a51f70774e
 13 c4e2b5be-1525-81f5-a984-1e4b45f11ab0
 14 754ed1fb-8932-59b0-a72d-3a9a815dccc7
 15 52a49615-6087-0054-a0a7-a8806ff196ea
 16 15762127-a1cb-08ab-b2f0-d27de155124b
 17 569fb10e-1636-6c66-9de4-857bf57faa4a
 18 6c594786-4f33-2a01-a578-e36c4eb0395d
 19 631d436a-1a45-4273-bc48-cb0ee1f8d998
 20 ff366b13-e3da-445c-8df2-5f6765fc3edf
 21 cf561bd3-2b08-5d3b-ae47-759df0d911bb
 22 ce6e43b2-b388-6da4-a8ac-a24ddc8596b4
 23 9a865152-2188-23e1-a951-66976f05eb77
 24 29d993f0-97fa-6ccd-9bf9-3519bd2e41f8
 25 7e656e66-ee6b-622a-8d3d-0f1936516a95
 26 66d9fe91-b906-2574-b0f9-c9f9c064f775
 27 96bf530d-0439-5e0d-887d-dc3d81650e34
 28 8f24bb79-cdc4-6fd7-88cb-89c6114fac47
 29 4c32ac68-83f2-5e20-937e-0a8ad2cacea8
 30 e2f0453d-23db-7116-9905-97abe54d2f84
 31 354f1317-31e6-115b-94db-c6e70d1a30b9
 32 02e32490-15c7-5387-8239-505be55636d4
 33 908f358f-463f-7d7f-83f5-9dd74c141495
 34 4e38d192-5bd4-53b4-9a44-07c3b7ebbf27
 35 f7fe6478-d6e9-1e5c-99dc-ffa391e3acb7
 36 22ed8d38-ad7a-6b56-9b0f-e0a28e5878e5
 37 08485ece-798d-0c63-aef2-3a1962298920
 38 8e825adb-870f-8a8d-900e-783372688f3c
 39 11281a62-1229-0a00-a6c6-479127ce67a4
 40 a2007cbb-3b7a-6e51-affd-cbffe8c6b485
 41 b61f4edf-2f25-718e-a0ce-7829ad9663c5
 42 2c4a337c-56f0-73c9-9f0b-e62156a23889
 43 f8eb7f56-4f94-5f85-b14d-98479d3ddd83

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1524480800278500624456266256571575160806775. Exactly this sequence comes out of new Random(623).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 157 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 43; the post has N = 43 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related