201210050923 10zooz

explained decrypted filler

3DES(name+title) ECB, 47 GUIDs, seed 141

Metadata

Post ID: 10zooz
Title: 201210050923 → 2012-10-05 09:23 on A858's clock
Posted (UTC): 2012-10-05 13:23:12
Timezone: UTC−4 · title 09:23 against posted 13:23 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,024 hex characters · 1,512 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210050923) = eed7aa03345314f91fe5af009e92e873 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 47
Filler GUID seed: new Random(141).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 232 · predicted N = 47 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

38003CCB8E149D0D 110AD6C85F7590A4 0CC101F1F5F4AAE8 E393F9863702E7FB 806773B91D7A6556 C7B03D74F6680975 C42EA5C455C8947E BCD636060B708E69 D667F48C1AFDA981 BF6F9F7B2160FE28 7912559D37B07FDA 20444A6DE4904092 1B93CCB020EFA035 C294C84AD022AA1D 39E0E53830E1361E 85F4219E112DC404 8A7A2553FAECFC27 DED8DAA7A8642E26 22441AD08658F10C D597FF2EB06ADEB6 F703F14D0FEB5BCD 9E0B2CC3CD4CD334 435163E7B47E7CFB DB12FD07A5BE1B14 2404A8F7A19C84D4 5F9EECD093CCA89E CC5DE19004224A74 A42061FDE847F706 FB4450F19EC00238 3B91D489B48FE123 15598471139C1D34 798E0C8C4F4B2B7A 78ADAB58048AB0C6 FF99A4A3DDCE52C2 6CB2F74BF19AAAF8 91E435AD997ECD3F 9AC806833E992561 5D767891EE7D3D23 28BA1D0726A9E262 5DBF43EBA969851C 69CD17F74E63B6F2 6FE6D93F945BA0A8 D79DD88D37E01F6E 0E1A84E866C72149 59A3AD7CFC3E2345 22F07522A12915EA CBDA20528A46E062 253B6D4917336DCB 8E8A3D23AB23D50B D395C50D960EEEC6 956498DDC7F90635 FB272D4D322FC229 595DC7F2737CA872 8B7D8A5077975C34 990633442A37935A 814BF72F64862EF1 5D1EB1663F775673 469A15600EC84A23 C45887880A361D2D 2CE637CCDA403F7A EBC65FB55A3CB7B2 16A66DEE527F423F 6945F719D501F280 B7F29FA2FC485D0E 7B819D5B5CB3370F FA3C9384C82B5747 26B0512F5B9FE692 4F77FB61AA9DDA80 AB9656857689B483 878B5C4D63AB640E B93155CEECD2FE30 87FE614EC9ED91C9 FE7987E103972E44 16BBF8AB6F5E3EB2 9A2C2098F859DD46 B895A0BF66C8B828 549509007BEE6528 3B387056EEBFBD64 093A35A5C16633B6 C3E11A077564B3EA 671EE408436BE878 DBD52DE7FEB037D0 9B480E0A99957796 3AB974AAFD86B48B 18E1AF3EE542EF94 200724CF4299F654 665811B0B68C38D6 A215CA1235AD6715 8DA50D05730A089F A5249FAB4DF97077 8E73A7C815DC13FE EBE8CC7062E54B9F 2F8BF29DC595B089 91166B41ACD42969 82FD8C97548671C3 E6A08BDB0785DD18 B806823345B86083 FC72AD1E477A2EEF 02F6DC42AA35AAB0 EFB4E9A8FF92E56C 6A35E418DD448B90 EFE1F3848F288069 496E42D97C0E3259 B72E9CC0DA47FC96 5614841492B0AF1E 7A1565E437823C51 4491C998D1C94CF8 8C32794D97C3817F B2ED7BAF130F990E B88D83C6191F9EDA 4EAA69CEF4F2B327 1380A26901CF5397 EAD313ED8683CA2B 82BB4FBAB77C41F7 3025A594927684BA CF6CBF06E579C172 5F6EE34B8EF9BCBB B8FF2FF89B0AE6B7 C9697DB47B41656F 2A63D51FA0E99A9D 27B2B5A5C7E487ED F5061C3427F0AB82 E04FB154688F0FB9 E338DCA93D92EBC9 A31FA2F960103EF1 B258615719DB5AAC 4BDDA3386663407E 80BB723C8D16D15B A9B95D42C05ED6A7 EA999C9DA018F143 83DF5D0F9A184DD9 07B2657B86711777 A2D3EE8C38C43A73 E8C5EB789DE112FC DBBFC7B6027C9054 CB2A3DB33E9C4FB1 D4C69B360217D0AC E94F648C3E3C8C12 2400133C05D6E07B B2A18C0EEFFD02D7 A6954529B21A6802 6DF1C38E4E2E49AA 2BBEAA7E0FF6C047 01525DBEE9389CEA 803AA7A8D8318EA7 C05B3F62EF04F8E4 C72CF3C50E688180 ED0CC5AC6C803EB6 942137A7C2667DAE 4A42018E5B6958FE AEE93773723382F8 4B0D69FEB9A0ABB2 79E103B102509160 2D44888A34A83840 53D852338F5B6D5D B8A01A3BD098E892 B2A89EB032F0975C D4CE3C62CA9ED681 C208E96B632A8C1B 532D9496D0534DF0 BFD5D7C1BD9D8ABB B34D3A8EFD831946 49BBFCE11FB9FF2D 2F96C0D736C35FC9 552ED19D766D208D 1E04D9D8B6CC8C1D 73ACB2086019B5B6 FA6F3CF30F275429 5E9895414AD391EF B0788322B14F10BC 13852335E64D9F8C 8B5B7583D392D81B 9C95B1312C81AFE1 3E039D604AFDAE0C 6FBEE867C63EC7ED B26974C5BA772763 91D39198EE5D9BF3 9D21EC52BDB6D8B1 A4323F1C0BF4A3BE 092B6269A15F6B95 8FCE702BFD927737 90451A1EF174FCE5 0F906632281421A7 2D9354399C53D03D F056CE04A32859A2 DBBD083328F8EDBA 13337AC4997F6C56 248E4DD213B48495 941F8635060C835A

Read the ciphertext. Strip whitespace: 3,024 hex characters = 1,512 bytes = 189 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210050923 (name+title). Key = MD5(password) = eed7aa03345314f91fe5af009e92e873, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 47 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0bd5ac9c-98ed-305d-b0f3-c3adb269f7d6
  2 ce934883-4e38-1859-b0b8-aeeca9e49c67
  3 6cc362cd-2f3a-2f29-b289-01c3cea5d179
  4 a9d6163c-4429-5e86-aac5-da171766b2b9
  5 1c2a0b40-039c-7607-8e03-9a5358ef0e84
  6 3620f319-d086-7f03-9793-51d0c2ae4656
  7 1a8a726d-08ab-0178-8bdb-115866208075
  8 366136b1-a707-15fe-ae80-11ce831188a8
  9 21548afc-5508-35e3-ab32-df4184ef4437
 10 496431d5-4422-29f9-82dd-bd1a83568a33
 11 6d8f5847-732d-152e-bc58-a7fb811ca71c
 12 b77c8782-8d18-4efc-a3ef-666a6276f4ce
 13 478a2ecb-66ca-51c0-88bb-04e69a82f192
 14 25dd0c9e-d0cf-75ef-9bb3-d5b7f7c6e321
 15 f83aed82-d184-6431-a41e-554c1a0f648e
 16 66260b23-c5e9-0403-b5e1-f48bbf0ad636
 17 543251c3-def2-123c-a5ac-35616f51ba6f
 18 9647f5ad-aaa6-33ff-a5cd-7c19fb506464
 19 400e0945-6778-47cc-8b9d-77d8ddf03ce3
 20 f063afc2-9920-8c78-9f85-07e24e8d62dc
 21 756682c7-1230-48e4-abeb-c4b61bfa42a3
 22 8cbf1976-e5f8-3e42-b223-ef01ac591bc7
 23 b76a690a-fd1c-7d34-8f86-8c8fefc6938d
 24 d6629d87-ef55-2d67-8a5c-f2c865459c00
 25 f65f6c2b-5506-4cec-9944-911be85598d6
 26 401c7ff6-b111-11ca-861a-46dcb37ae2ca
 27 52e6e64d-cc26-1faa-ae2d-6340c76526f0
 28 6599a64d-a60e-01f7-b7c8-4893e0c7876e
 29 1e1f6766-83d8-4b37-949d-c6fb87590b34
 30 2931068d-fe28-5a7e-84b6-4e231a0c4e39
 31 914debe6-dc6d-250b-8a6c-a64651cf018c
 32 4c329d3c-02f8-5bcb-9555-094bcc07c5b2
 33 406c1abb-511b-85f6-b5d3-9af9ec2ad5e8
 34 5610061c-8ab4-4db7-b702-2c14f9d67377
 35 1231a9d0-01ec-7b83-8719-9c145cb34d86
 36 78c9a805-a6d6-709f-bd5b-86b1647e0b5b
 37 5d5ba161-286f-782a-8a17-7e29c2589332
 38 05e2718c-fb3f-4e82-acfa-59b4d4d3c249
 39 cdec0fc7-264c-4680-8f01-a49eedb39a01
 40 0078019e-60b2-0826-9f48-ed3cc9aaa58c
 41 472f91d9-b2a8-6d5f-8bca-509132af18c3
 42 b26f5a40-8892-88d6-9827-7a9e30bd60b0
 43 d3a3328c-4d42-7946-88fd-c1d5f04326a9
 44 5dc1bd08-2b4d-24bc-b014-8b89c15741cb
 45 09272c62-d04d-2787-a57d-390aec16de63
 46 3aac54d2-bf2c-86d9-bd55-34be8d33d868
 47 0f40004b-040c-2b64-8a55-11f58b8e942e

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 31257701321457601348437241104525847774406872282. Exactly this sequence comes out of new Random(141).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 232 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 47; the post has N = 47 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related