201210050022 10z7gb

explained decrypted filler

3DES(name+title) ECB, 22 GUIDs, seed 23

Metadata

Post ID: 10z7gb
Title: 201210050022 → 2012-10-05 00:22 on A858's clock
Posted (UTC): 2012-10-05 04:22:52
Timezone: UTC−4 · title 00:22 against posted 04:22 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,424 hex characters · 712 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210050022) = 83602f476a1132771a282bc92ba1fd7e (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 22
Filler GUID seed: new Random(23).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 205 · predicted N = 22 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

9475380999961FC9 01D61CFAA6E7822C D76431731ED7E1F1 8B5BDA104BB26421 9E0BA6598CCEF720 B5FE0D14CC039555 6DF74B23CA097D7C 1E7C4C5BAFC13792 2A8897E5B1967663 D38B059D45DD4DDC 372068F3D5D2568F 1F8E5F89EDA8427F 30D316FCDC9480FB DC2F3A18AF78C235 D70463FCD3E00E62 F10A1AA0A30123CC CFA31541CF7D52B9 856C5455676CEB51 FC5C76A191EF7463 4C09EFA91DD88902 14757CA0E9070A06 A6F5F82123D9E654 0F3D11A63AE61E63 DF912D26298B952E 7BD7035D876B889A 2CB7DF4B0905DBD4 0E5D3B0535779344 3027A20AD134FA0F DE6BCF08504F37FA DF0FBFD54CBC6141 2848BD90FDD234DB 3C686885728B4392 B8D5437C36163530 ADF475B70BAA1F5F 3D1DEDD631658067 882E18EAEA99BEF8 3133B39E819A8464 47ADF44AC64F7BA5 7932CB26CC5927BA FA1ABD0940D94AB6 40799CF906207106 9A4C16A76B66DDD3 C98AEE7B38C71C98 D044611F213EE122 AC27E8A61909EDF8 2C66F5E4936F9D97 1E0DFE40C2963FE2 43B4461E25766093 6771BC85915603EF 1F0FDDD8D887423E A944AD2FDE96A7FD DDF38D5FCF911BA6 A1451444AD5E4EDB 835024B5461D6A65 2EB32D700116D065 D93F80ECA71418D2 F4F5ECABE341C79D 19CF71580B5C4BEF 9F892B9C6E22B361 2F2C5C5F5829CB17 24B51BFBC1EC90B2 5A12C40A712A47DC 34E9F26C16791BE4 28A613F7F0101D07 BB3E69C7FD329CE6 B4612286254AC63C 059DBA7B07875C61 089F0CBF5F24F8B2 BA1704FF89295841 2DCC52B05BE2FC39 B7A3100ACFB728CD 69719B9D7D3621B7 73E8F9E63C08EFDF A0298395A276E4FD D45D2C8D04F9A7BD A36FCF5637578434 FB6C704C32FB2418 817BB2D068101AD6 07B6F53CF9F88718 6DA458990670C8FF 8509ABD466ADF2F3 576830204E38569D CEE95049A1613006 354D191D3AB69BFE 17431B2F951F4EED 7476B6169BAECE64 2D4FEECE60597415 AA4CE5DD8B37AD7F 3E00CCB74E59A193

Read the ciphertext. Strip whitespace: 1,424 hex characters = 712 bytes = 89 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210050022 (name+title). Key = MD5(password) = 83602f476a1132771a282bc92ba1fd7e, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 22 GUIDs as hex (shown below).

Decrypted: GUID list

  1 1df91fad-d179-61b5-8cc3-b89e6b09b58e
  2 70b7ba1e-13bc-5946-a98f-f0a0fd74701b
  3 1acc9fc1-9183-75f1-8318-618875b31bc5
  4 035cb72e-d68d-4a6f-8ea0-93e0f7fe04c9
  5 da3f224b-d16f-5ebb-a1e1-01235d57f9f2
  6 11054147-9d52-54d9-997a-934a1ee38f76
  7 5e1ca33d-5872-13bb-9d7a-f837b8c254e6
  8 194a6012-0c06-8fb2-8893-213c2aa075ca
  9 98ac0caa-f30a-763a-af7a-485b32a9cdbf
 10 cfcc42ca-c94a-67b4-a099-d8f40f9b1f56
 11 e448f449-4987-2545-81d5-9198e8fe89a8
 12 ed06da03-5f10-3d05-a9bb-3b99187814da
 13 e242d110-d890-3d5c-821b-db4d88efcb99
 14 34ca508d-8bad-3da0-b823-9c2aadd85be0
 15 ea24921a-1b08-0d29-bd4b-581f5c735cf8
 16 44dc5014-5a2a-3c02-acf9-d4030590de50
 17 87121224-789c-43f5-8b71-d4e81267640a
 18 059e02a2-9355-2e53-b7d5-c9e032d4eb08
 19 f7cf085d-a27a-2c50-8294-221bc4c4f628
 20 e729c48d-cc33-1fc2-b411-38b046746952
 21 a479c350-6c08-7a8a-8d59-4f6ded4c96e1
 22 1111ea3f-b05c-441d-82b9-26c51efd05dd

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6574551876233303422174. Exactly this sequence comes out of new Random(23).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 205 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 22; the post has N = 22 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related