201210061804 1126qb

explained decrypted filler

3DES(name+title) ECB, 19 GUIDs, seed 803

Metadata

Post ID: 1126qb
Title: 201210061804 → 2012-10-06 18:04 on A858's clock
Posted (UTC): 2012-10-06 22:04:26
Timezone: UTC−4 · title 18:04 against posted 22:04 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,232 hex characters · 616 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210061804) = b36da0d51dd840db21a15fab53042594 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 19
Filler GUID seed: new Random(803).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 330 · predicted N = 19 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

866F89E2E71F7634 0811DEE7FA6FC1EE 7A8FEF5B64FAFEFF 37A7CC45E7776885 E7A605D372F19D87 D77CB45BFD4969AD CDE98C1DC98210FE 24F4C739F9175B8D D7C1F6776A5A90D0 2C36210D3BB95BF7 F168341AA1B4023C A02050A41942493E 8A26E533B2D296CF 9C7D0A359960BBD8 B21D88F14B48EDAE D7800DEF06D66AF0 1D25ECEA066FB8A5 08798E658B3C605E 27B56CAE8AEAE815 F31F8D214FE9636B 9BAC38BA6686805D 9AF24428608CE81B 5AF203A11DAA35E2 26CB5FAB59EBA700 CBA086DC216F1490 0E7DBC366566AA80 2705992445981247 F673DB69CD9356E9 413F34BABBA3C1C6 B6A642BD4D482F0F E43561430617C02C 35C5E03A714EBD66 B11DAED721907A1A FBF7D5C21524C9D2 837167BA1329CE37 D04220D4B2A917FC 75BC98CC636B1EAC A6E112CB3480C149 46778D547B99EED9 67F028DDD70567A9 87FB390B6B2E70D5 FCB99B7E0E42AB01 10C745916B3BD4EE 6E0EEBBF34C4F349 1AA8CFD68BE27947 7C98B25C41B9A9A1 0BBCBED1AEFDFC54 7D1D6D484CE0A46D 27F879CCD822EBFD 12C61C9A3749D691 02B1FE25C1E2DB00 85868493578E07A7 0EC48477A183E9CF ED91BD014CB4B03C B492BF1489DEC2C6 8D174EF2F60AA3D7 8AD779C53C678ECB 2C973C8003D74DFF 9D07629EF8C7F709 C4DCE290A155775A B851B689AFE8DB5C EDDFE572565C0DDA 6A1A7A85A36C0EC6 126280C5C23B612D 5F3A957918391C88 742C7E47E1C58D7C 3D42FC91FA92B5D2 02AC39EFA5EB97B8 6C20C32E9FC3133F 4FC7738AA2E83E5D 9D3046A61D24A468 450ADF7B2CFE135D 0EE6BA72DB512389 BE150F50469319A3 D6D50E5B78CD2BAB 86EAC1A437F5B11B 5AAB61759D64ECE3

Read the ciphertext. Strip whitespace: 1,232 hex characters = 616 bytes = 77 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210061804 (name+title). Key = MD5(password) = b36da0d51dd840db21a15fab53042594, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 19 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b3e2bd49-dfa9-2ace-bee8-bb7d9d8df64a
  2 3e433350-b8a9-3fc6-9bbf-fe0dd7458ee7
  3 5af653b2-4682-0a8b-bb13-1bb43933e467
  4 97f21099-a2fc-8e12-95f8-d3d6783c7ba3
  5 f5cba2ce-39b1-6cfa-bfbd-f152edae6fd8
  6 b966be6f-a55a-2623-8c0b-8e90cc6226d1
  7 d5d69394-0b63-635e-b697-4a07dce31982
  8 bdc30acc-2cd8-2aa7-9973-8b0dddbd7c81
  9 c5caf736-ed7e-27ad-8805-952a0dc6d31e
 10 5dd0d454-52f6-365e-b8fa-4b20d56c117b
 11 3589db07-9005-7099-96c0-b2198cfeddb2
 12 b8455f24-d0ea-30f3-80eb-b0247f7840cf
 13 739b20b1-9d73-53c8-b274-57825590f85b
 14 e44f88d0-9f7d-2175-878d-5ee07fa3f537
 15 65a2d5b4-1df5-022c-9b9b-c2413512d908
 16 4413a5b3-ced4-40d7-8970-cbf1e6abe651
 17 4c11e0ed-12e0-3254-94be-6348fbe70fe3
 18 25141d49-045e-7789-b1b0-14b850c31337
 19 f964ba24-411d-3d10-b5d2-a66a0726972d

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2308626223735204373. Exactly this sequence comes out of new Random(803).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 330 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 19; the post has N = 19 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related