201210060023 1112pd

explained decrypted filler

3DES(name+title) ECB, 20 GUIDs, seed 935

Metadata

Post ID: 1112pd
Title: 201210060023 → 2012-10-06 00:23 on A858's clock
Posted (UTC): 2012-10-06 04:23:49
Timezone: UTC−4 · title 00:23 against posted 04:23 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,296 hex characters · 648 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210060023) = 17644088382f53c75aaa2003d2995091 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 20
Filler GUID seed: new Random(935).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 277 · predicted N = 20 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

53C0AC4D1713F597 C0205FAC8ADB32E0 0FD08BB039385691 8F5517F566A6FE28 A6300E405B10B750 39D74741A00B2F08 BC675EC48DAEDC2B 854304B434C22753 AAF4F070C829FE08 90259CAF094CE759 C493CDB44F3AD40C 9199B26E7470B5A0 12DECFDC21875B3A DD204CAF0F4B8694 E1A838E86D78E170 F69D13780C660399 A28F10EF59D99A6F 84A89818D66044F8 D0B32000524DF5CE E771F685E8F5330F 88D3EC9BDB7375BD CE40CB4E7A0A5EF8 98D081EAC0F47E84 2F305A3871E6F7F4 798539FC20AB013E EE86286300A5F133 DF8DD8C36298591C F27D64E6CD06298C 510731A1116A202A 900C0FF9EDE04A46 C0FF6FCA7B912202 D62B305ABD9B56D9 A49FD771B652221E 09D913EAF1098C49 A8F8209A9ADBBBB7 685464BD249E5E2F FAB0D1AEE8A463A9 F2F9DC6FBC74AFC0 5D5AD3C7D6A02DCE 6F020379CA3A8A32 557135DFBB3CE5A6 803F97616DAEC9B0 481AE6C9C701AC59 EE7F54B7E0794DB8 D5BA4FB25F3F1F3D 564FD7DB92D90275 8516EDB78ACE90AC 712EC62790A57C55 7E2F6BBC4A317A62 46C2A3A8C9A09B9A 48DB65260AB12CE2 96314DFDB3FC31A3 282FA3B3B8F49658 88F28195FB119FDC 2DA531631C9B6428 C8CEEE43D4D79CBD 42630866BAA0B895 F0E7495086CFA8D6 AD624BE683D1F7D5 49E7585A86D53720 9909D94A5E0B9B73 56BAF46E16C2726A 4E85D2092D80E4FB B9078E6DB0C94737 4613D6DE96DD5517 9F3D537CB4537712 804A87D4B5B67736 1907B59963C4B895 1C8B6AB56F5EF8B2 F6DD8373E17A594E 04EB06549FFA6D0D 625D75AD86BB3CC9 1A7C4B3C3A44F68C DCF1628C5D9A1DE2 56BC6C710ECF32F4 A2ECB32CC4010004 F516164424E61AA2 C9550CC21B2630E8 73804CC559F856D4 BE00EF9545E7D307 B44BA655639BCB47

Read the ciphertext. Strip whitespace: 1,296 hex characters = 648 bytes = 81 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210060023 (name+title). Key = MD5(password) = 17644088382f53c75aaa2003d2995091, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 20 GUIDs as hex (shown below).

Decrypted: GUID list

  1 519cecf1-5c09-1207-94e4-43fdef5604c4
  2 a2de5286-385d-1821-bbf0-fc5bdac5eeff
  3 20693358-d7b0-2d12-8752-ec0670aac8df
  4 0b1b03d1-11ff-1ba2-b6b6-f3cc6296f375
  5 93f3b477-b4f7-3094-91d7-d31df855bb73
  6 ab75bbfd-eab3-5741-ac51-0d3eea26d5c1
  7 2175d67a-b7ca-7601-b3fd-02abbd78d1a8
  8 c0a6e451-74b6-4244-b6ac-c66d3e3bf930
  9 c939cd5c-e604-557d-812a-7978fc2fc70c
 10 9e3583aa-6105-0f5f-8320-b3b46dc72544
 11 fbe40eec-98fb-1105-a726-bcfdd5f52cd4
 12 0f52379b-bec1-3144-8742-cd4a8c564edd
 13 5df629c5-ac1c-303e-b5b2-48d460901e41
 14 bd824384-7259-8394-b057-ac6361bbac04
 15 3e1a4808-78a5-4e76-94e7-024ec9bbce32
 16 78a3bd9b-d748-8af4-bea7-ed472072fbf2
 17 8ef87d39-3269-884a-b23d-7ea8b050b4c4
 18 d0c22cda-eab1-6d54-88d4-32a0d3ae3dab
 19 da01a59b-366a-8fc0-9ba5-5747030c84fa
 20 c8a477d6-ec34-3cf0-b6aa-4165ab135341

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 11213574501338488683. Exactly this sequence comes out of new Random(935).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 277 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 20; the post has N = 20 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related