201210051243 10zzju

explained decrypted filler

3DES(name+title) ECB, 20 GUIDs, seed 356

Metadata

Post ID: 10zzju
Title: 201210051243 → 2012-10-05 12:43 on A858's clock
Posted (UTC): 2012-10-05 16:43:19
Timezone: UTC−4 · title 12:43 against posted 16:43 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,296 hex characters · 648 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210051243) = 514e3cbb44039181c464877969c8a1a4 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 20
Filler GUID seed: new Random(356).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 242 · predicted N = 20 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

64DD6267DC795254 025935F45B6277D9 A8421F2E994A8AC0 C2BDA1EED0E5989F 8E57CD701E09E9BD ADFD9E1218A74A28 DE07FF76153EF12B 3B0F2F5A039977BF 4D0E3FAA9F21A417 F21D28FB1BBE00B9 74E023C388C27116 4511AC1FC083DE12 7953F005647833D8 1DC772CFEA0D1EAC 5CE628E08A9CA83C FD75E48B0FB41A99 2D285E8C4D69C6F2 29EF188717A3C2D8 BADAA1742C5F05B4 1B6202E0594696D3 AE51C7E83A533021 F02600042AA1B512 5B9DF72F68371B54 F4F204C878CB8BE8 A88A8853B3A4B905 91D2087C99576D29 0C92CB72A73B5157 3B1CB2AC4C9DDAAC A31FBE4527ED42E7 2744BA0A6374C3D0 2FA7BDF78F116AF4 C197B006E6B0E7C0 8AB4A4DF9592D816 78348F0026069292 EAE9DABD3BDFD616 0857432381E49B6E 8B88944F70174186 E3BE86E50FB41C66 C46F7629B9EC70C8 8A8FB0E830C3E9F5 4091C279F26D528C FEA1F993EBBEC6BB D73134D305EF6461 E7737391C3F0FA88 B63B091BD4FB6CD1 8B6FF30426A65D06 80B508D008177EE1 211CF389F0078B58 F677A4B3319AD733 F46D791D6FCE1FF9 21AF4F1D316C611F 297B1D916B7E1D38 FB0AF8E2FFDD8BEB 8B80AE891B1A3246 4299A709EFA05A58 FA3867F8F7CF83F6 99FC1553E703C34E 36A48F86C5EC090E 52600223148FEF8F D8CE915D82FF6BB5 A4810F7BD77CFA6B 6D2737314C3A2956 E42D92B47C948185 446D3695EA1B88BD 49C4A8CC7DB89776 6EB4493574BE089E 92EE8407F26BA2CB 6575CCB22D3955E6 92B40F18B0A1C359 139700D9EDD486AC AC8614BC78DD87C5 CD990DC0E4DE3788 FC9EB93C4143D26A CB1DE260B094CF66 CD7E02CBCC739667 49D3E06357C04A45 021E2D8ABE9A2639 67C0B2AE428A6D3B 0E0B4C736F82802A AB71EE217C0FC5FA BD2C06BA48DFF792

Read the ciphertext. Strip whitespace: 1,296 hex characters = 648 bytes = 81 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210051243 (name+title). Key = MD5(password) = 514e3cbb44039181c464877969c8a1a4, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 20 GUIDs as hex (shown below).

Decrypted: GUID list

  1 36f7e40e-e193-6988-bfb7-6dac9f90cfa5
  2 71e66d11-5ff8-2912-b56e-ba62b3db26b3
  3 7c37d009-752a-5e8f-985b-f2a48f4ee2d9
  4 b946cc3f-859f-49d3-b557-79ad47019eae
  5 842ee3f2-e665-829f-817f-fa57b85707ea
  6 7396410f-969b-5b8c-a911-5afbead34a42
  7 de3e16ab-da90-3a81-8de1-e55606ae6e9c
  8 e0014d36-f195-0bea-ad39-f22223badb34
  9 ec241efd-e611-0d66-a86c-7254af42a939
 10 a4f89fdb-1ddc-4919-bb96-e70c5be12e2c
 11 bc8fd2bb-aa82-5883-b046-f63adfc25f3b
 12 82c700b8-89e9-3bfb-bc30-fb198b720ebc
 13 4d90aacb-f923-3787-8294-53365fc51f22
 14 15a3e24b-8933-6590-a40f-6dc816503429
 15 78355d79-d6ca-1a29-ad3f-5a65d14aa090
 16 65a8f9ec-8c27-3052-aec7-23d099f7f538
 17 e6849d1f-9985-4c7c-ae9a-1b4695cb8451
 18 5b317aa0-019f-6d8b-b8c5-c99aed24f21c
 19 f4dcbb62-e11d-230a-9b43-9baa536791d9
 20 03c92d3e-1edc-1e27-8f9b-3aecf18da72d

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 62548530045336134621. Exactly this sequence comes out of new Random(356).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 242 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 20; the post has N = 20 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related