201210051143 10zw4z

explained decrypted filler

3DES(name+title) ECB, 19 GUIDs, seed 901

Metadata

Post ID: 10zw4z
Title: 201210051143 → 2012-10-05 11:43 on A858's clock
Posted (UTC): 2012-10-05 15:43:17
Timezone: UTC−4 · title 11:43 against posted 15:43 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,232 hex characters · 616 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210051143) = 51b6e7822cfc280a33aee4898da3d410 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 19
Filler GUID seed: new Random(901).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 239 · predicted N = 19 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

30BE86479B066D49 319B3CE8D7153E50 668DA76D556425F5 3E08DF8C326CD56B 25D67A48EC925CD3 31454EF988161C97 9DBEE6B16862CB6B 04FD6333C85F169C 0A60D3AAAEFEDBA1 8770E04778CA3F90 AFF76DD4F319EB7A 71F653BB0951DF26 B957BAD76FBC06EC CE009379786BC11F B98FB5E16C86EBE3 99563498C4553C5D 6571CB56B03B54EF 9A596E2215B49188 3E770EEE7B66D2E8 E570216E172AD3CA B344019B6D13B5A1 105AD46D88AEAF79 0A11203E8D9D4C20 1A14AEAE5502E8AF 80DD93ADD1B23932 98C3C6AA106313B1 B0DD3A6ABF9EAEA6 5B4E39C7E211BC70 E2A7899385955C28 E26ABB2185A1AD11 F50D2656602E3058 D00C9DAF056DCBD1 D2643B87F544B8D9 48D38C6D8D8BC212 D23CE650C97BF1AC 65091652CB5F02E3 E68370037A363BD9 874A3EED6B734EFE E1C446BAC47CAEE4 12FA075B3A262176 D75E076F469B3911 685D7B112B895348 4DFF44E7B7A918A2 42B8B2362B2FF2D9 4DBDC690ADF1CA7B F62138FD662B25AF CB6F2314356DFB57 64903F802D3F97BE 4715A624E1853F8D B03E32AB20C4EF75 290798BB248F4B24 38ED8A85FDF2C15B 4D4D61689FF68F75 ACF0CF0A9BC6E506 E324B84D4129AB35 ADA1674ACD969598 0C458640560E3625 A9A80AD4AAE0087A D3D93276E3AD73D4 E9C250EDC9D0675D 4E69A62B908B0239 E6F5ADA44261FB0C 80E8960A42856FA7 06FC4688501CDC99 D4108639482E06FD DC4A207945ECC0B8 E4115EB8ABC9D529 D299F4DBB8F1A3C6 B894681F521E4934 BEBBE17CBC420FF1 A977E1342E1BAF27 12B34BF261B65AC8 B8D5B38316CC3B7C C8DB384332D2C21F 06C5CF46D486DA43 11C3E5B4E8FC57A8 181E299638BE5354

Read the ciphertext. Strip whitespace: 1,232 hex characters = 616 bytes = 77 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210051143 (name+title). Key = MD5(password) = 51b6e7822cfc280a33aee4898da3d410, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 19 GUIDs as hex (shown below).

Decrypted: GUID list

  1 59a264bc-25ee-342d-94f5-ad710d8b304c
  2 77ace8a7-90a5-1e45-81c1-8da8d847aa48
  3 3c0660bd-a9dd-5e31-9775-7d566fd9e3bb
  4 a11a61cb-3778-793d-bbed-5ece81f88fc3
  5 5ab640e2-4374-8c7f-b956-557a93c9ff56
  6 69c28b28-dcd7-8d34-af1d-aeba7f6d2ca9
  7 e6b98935-7ec6-519d-996f-084fd417baa3
  8 10b0d8ed-356c-41a7-b36c-c260bf0d6748
  9 01ed6a8f-4523-4f4b-9443-8578eeaecab8
 10 61fc0cc2-3be5-4d53-9699-3fa975b8a7b8
 11 29262188-5848-0804-82ea-30258ffc4c1a
 12 d9c2d586-ca4e-8959-8980-7b6e0c362fa7
 13 abb96336-b44a-0e78-a2d9-2292269e8c7d
 14 ddd68412-d7ae-166b-848a-404dcb846a23
 15 3219dca8-79e0-5852-af2b-352dea7d5cb2
 16 7a12faba-dc9b-6712-9503-af13de197020
 17 21186b63-d59e-598f-a377-252f26367f70
 18 9d0073f8-1968-5f11-aeb6-085b429d746f
 19 b5abf745-0999-0511-8799-ff9419870bd4

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3157885444080156550. Exactly this sequence comes out of new Random(901).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 239 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 19; the post has N = 19 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related