201210060123 1114z8

explained decrypted filler

3DES(name+title) ECB, 18 GUIDs, seed 318

Metadata

Post ID: 1114z8
Title: 201210060123 → 2012-10-06 01:23 on A858's clock
Posted (UTC): 2012-10-06 05:23:52
Timezone: UTC−4 · title 01:23 against posted 05:23 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,168 hex characters · 584 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210060123) = e7d53d03b8248a1760e72b621ce9aa8e (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 18
Filler GUID seed: new Random(318).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 280 · predicted N = 18 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

5BE3CE5294AB9805 813AEB8CCF0B8C7C 4E42EAA2F0174254 6D98F6529D835E97 A551A72674ECBFF3 BB18A8B56DD26D8B 26BD197694C1DED4 CE4A618F2CA80AB4 F3CA491A5902D788 BB4C6507E65E61DB D84283D84DD5539F B94C0EC1A810E804 F1B728F8B07FA86F 28DD26607E10B970 9F070C74D079C011 023F75F311793789 E6A85A0E04783F73 71D425E96F154407 76D7C8B45A722D65 3E780076917B1021 CFC46BD504526841 2727CF43D2A3362F CA5F1976BD54BD85 AAF4759AEF53BBF7 9C1D51D30D79A41E 4B3763ECF0B82934 963512DFED7F1B36 71BDB7919A639B55 35E521AE40236AC4 55E3BBE2824616B1 12A0DCA834E9E278 FE211A7129C36784 BD4193B90538897D 7A9D13F328AAD18D 8754B5B6C33BA01A 5D108E47121D2623 2FF14D389BE8ACFD ADB20B223314CF29 E6064D00FCDE5BD7 9A4824EA833DA0F3 80B042153677A657 701821C128A8A542 8B26B26E2EC56DBE D516F21AF86BF4EA 43B3C3B0E1A07286 50BC2720F75B2365 822BA031058F9FE4 019FE9F7FCF43D6F 2F9885A32F87A570 B8A280F7713CF525 9A84AC1B0FB484F2 418A03AE3C0E507D D0B8C3FB71BF66D8 0C1991E75DF2950E 86ED930DA051806A A2EC091CFBB388D2 2D621696D02B907B 6D18130BAB422824 8DA326AE81CC6255 260194EB3FB866E4 F73F729383CBCE16 D3292A1A3609C39E F13C2039FFD00490 9F1FFF1211ACFB4E 98176063C14E34D9 B55AFAEFD262C0F2 7E96BD84EA8DFD39 838D428CB01B7E77 6D302BF9DC129649 94D2585D0EEFDCEA 076F5B377ECF3397 87D75210DBA3E686 851BF8DB4F9088DB

Read the ciphertext. Strip whitespace: 1,168 hex characters = 584 bytes = 73 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210060123 (name+title). Key = MD5(password) = e7d53d03b8248a1760e72b621ce9aa8e, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 18 GUIDs as hex (shown below).

Decrypted: GUID list

  1 84bfae3c-5ece-7dd6-baa1-e859956f6718
  2 0e1db7c6-5791-1fb3-8f1a-bc0199dea1a1
  3 3d9fd185-0954-0eb1-a437-e2213903b13f
  4 20825530-1977-392d-8400-4ecc698082f7
  5 fe1b0d6f-0cee-725d-b5b9-0a461633bb47
  6 fc831777-9109-4b35-a9ea-f205fd3cb2a5
  7 ac912145-e645-3bd2-887f-c2b121c21aaf
  8 f2ba5ef4-2ed2-8cce-b71d-2d93b9716354
  9 68df4780-d7c3-26e2-add5-53be5af2d145
 10 a6242ff4-cd61-4e98-92ec-c92943091a31
 11 025935f8-5443-55ad-9769-99135955e261
 12 211628db-b39f-6f67-94b4-2b798a192380
 13 7c013003-f1a6-209c-8ca4-150456afae3a
 14 64ddb652-d96e-8e26-ba57-f4fe03e3ef7d
 15 5de268c0-1d78-5722-a0d1-d9aa77f01782
 16 1285f03a-b30e-54e5-adbb-d7aed8a54286
 17 b035b261-842a-4dbb-868d-0c517c658d54
 18 8f105948-9828-1346-928f-425c1a453b0d

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 710374382456285541. Exactly this sequence comes out of new Random(318).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 280 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 18; the post has N = 18 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related