201210050122 10za9f

explained decrypted filler

3DES(name+title) ECB, 20 GUIDs, seed 839

Metadata

Post ID: 10za9f
Title: 201210050122 → 2012-10-05 01:22 on A858's clock
Posted (UTC): 2012-10-05 05:22:54
Timezone: UTC−4 · title 01:22 against posted 05:22 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,296 hex characters · 648 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210050122) = 3a1b93980c7af1bd2255bb2234a1fc33 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 20
Filler GUID seed: new Random(839).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 208 · predicted N = 20 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

23330C74B6F2E8C1 DE7349FEB324AD86 ECED414FBE2C9E2B A1CE8E6CED0A22EF DDC8DBA4FE2FB248 198D00F13F85A012 624A5A7478775F8E CB72C3AECABCB633 7DD5986F2E58BC79 A8998B26A8A3D269 DF2E913B8EFF672C 066EF7B948C70DBA E8B3F30867C0D099 5941C9700A534B56 7317727BFAFD4548 B64C33D86E6EEE23 5C5520EB0BB030E5 A3BADB4F6CF0957C 9BB5190A3854A5FC 5B13F5508A160316 C67A78B0A5901E03 0BF276FE10D94F77 251FEF782314DA97 CFEF4C08CC8A4BFB 19A98F1CE217EF6F FACEF5C96D228CDD 49865FF1A4C1F673 B98546EFA215FA34 C4A699F302468C6D 78A7619F7CB3B4D5 DDD5A62DB9AB325E 590936355C78B91B 29C170FC05D3905A 9E575ADF0A4B048B 31A74DEF5579823F 874A3F23A9729811 AF6F940B762F8441 4DB258DD3C959985 78D946267E6E182E 0813B0771E6E9EFA 4FDA23C7F5140FF8 E4345EC6E3765ECB 3F48FC419628BA8E FA970A23F39BE008 CD70AF17947E638D 0D1822811D62C3EC 4774F1AE669540BE A34C303C05E3B3FB 519E04BA8DFCD209 FD9ED104CA3B4F01 BED2E1AA72EA8D56 49BAC14F49FE1353 A006B7BE3C4326B0 90A5F9FFDD5171AC E650638A9EEEA670 800EE18411693E95 9C83978CCA662B8D 25B310570DF1B496 6DACA8EADBA149DA 99EDB48689A7904A 43C0D41C5A4A130C 27DB03CD46758979 E02799D43AF3E595 F2577C138BED920A 498FDC4B38E8ED96 4D72CC55844F39A1 5C0E70C60DEA027B 132B25CE012D26E9 2A75EA9FCAC193D9 A76656409EA2D77A C76425868C832863 4DBDA8EFCFBC8FB5 C5DB2781A194AE15 E26A0C2795D0D537 003FB0D36FD241D0 3F3C71073409FA79 B2B6E7EAA3527C8C 7141B80F61E0B307 3F2A1A7032EAB782 35F00022FA16C202 CD32709A40377AF3

Read the ciphertext. Strip whitespace: 1,296 hex characters = 648 bytes = 81 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210050122 (name+title). Key = MD5(password) = 3a1b93980c7af1bd2255bb2234a1fc33, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 20 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4b08a6f1-7018-0e6c-9990-e9ad0c99eee3
  2 c4ca7006-2e7b-82c9-95a2-00c1a48b2b61
  3 041fc885-92d0-1823-b00c-bd1bc43a1712
  4 95b0601b-c99a-5a44-9977-3256b02326cc
  5 ac990a53-5255-065e-a385-a8dbb4bf3616
  6 d51b9ee3-e363-6736-bc40-42a415861db8
  7 da881d61-11f8-7833-b593-4047c2a581c4
  8 e4f7a0cf-cff2-3cf1-80fc-011a2a1c38c6
  9 884e8432-ce8b-6546-bfa9-861c316a50e3
 10 3b41af34-6b25-55a2-8da8-1fcb37e1a92c
 11 09ff2d1b-cbd6-3585-8ae8-06b1ac6d882e
 12 7ef5c6e5-f3fd-4130-bd3f-087dc3c4a0d2
 13 782eb200-46e4-3172-aa55-b45c80db4016
 14 073b3e7f-3cf1-8f62-8018-a5c7b4148ddf
 15 18f701cf-c1ec-2df3-ae38-ec2cb243ad37
 16 de577143-f889-06bc-9507-d801744ca58e
 17 d1c9c168-f327-40f0-a7c5-f437b9c5bde2
 18 f030b20d-ece2-17f1-80de-69954ac81c0e
 19 64911a77-7d51-3333-aabd-17d87ef3203e
 20 e13be006-0dd2-1861-a486-79aaa719f27b

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 08150673653438204131. Exactly this sequence comes out of new Random(839).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 208 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 20; the post has N = 20 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related