201210062004 112cve

explained decrypted filler

3DES(name+title) ECB, 55 GUIDs, seed 251

Metadata

Post ID: 112cve
Title: 201210062004 → 2012-10-06 20:04 on A858's clock
Posted (UTC): 2012-10-07 00:04:35
Timezone: UTC−4 · title 20:04 against posted 00:04 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,536 hex characters · 1,768 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210062004) = 7d35b08b0957461a0f0c50e1953355c4 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 55
Filler GUID seed: new Random(251).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 336 · predicted N = 55 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

9BDAC738A9DF823B 6ABACE1A4AD49299 30C2CC95D8313AB7 BE45E7E942CCFBFC A2A59F712511EB60 1F7F5E2F494DC2E5 416C086E036F89BB 4410C72072117051 834B3A1239A907AD 18F96414C4AC15EA 0B5568E0EE06B98E DBF6B42134650381 5DA9DEA93EF856E2 B4FDA998F56FCC79 EE773537E28907CA 5D5E3697A1B9E4B6 5FD7C22617525808 BD7FE311E28A064E DF8E478059FB92D9 4D8F39BE2D0682D4 5D3B54B35545043A 9E406906F1EE25D6 754290BB3B4ACF60 BFC21575EA8799AE 66E1DA06D7BB2A50 577AB93F3BF52AFB E2B28BDBF1DE3B7D 9C7D5795175439A3 3B4DDB4450FC8A40 0BAA3677AFF5AF73 0A4905CE2DC838BB ED83BB327D086416 D2F2E1D8E4B2C25B ECF83ACCC5D34A15 435E510D1DA7FE21 F6D36EFB5F29D484 4084C9990F660F13 364DB57D20BF9901 D5A6A3CAD9ADA023 30B863E94034AB18 6847AEE1E15CBF2D 842A3829F475C47F 709C2F637B31BCC5 9E93705CF414D370 175CA5E520E95548 EEF0860F7B741C00 E77DF217996473F2 59FC2F5527D3BD44 BD99B0727497C28C A7CCFC5A07D377AD 9EAB732934AF0C44 1733FBC39991CC29 3370C98015431E10 6A03CBCFECCE3D34 4615F76FB6EBB74A D38043767DD4F55A 6D9939ABE76B95E6 59016AF16CAE4C98 6E83153ABFB34B85 512E5B1C3932C29E 06CCB25A1ADFBC7B 754E7DB5245BBEAB EC6A30C851E583E9 7CB5D36DC6BA25F5 47C628CE41659515 3110837F95498476 5EB9B338D5AC33B3 F8DBA5A3FCA24266 B2065F0915200290 6F61FFAB1C576FE5 69985F8C6D3DB735 FBEB435AE33FC043 2B11F28EA5F96E8E C2E2C20B43B1AB35 B8E8B73908953CC7 4CA666F27671623A 0DFAD65794D7D5D4 2C7DC865BBDCF1CF D3CFBA69CCF4486B F73E871CCEE8BCCD 489740EB96CCCE1C F7E951DC2CA4A5CC EE86838C0801AEB7 BB4571AB707B40E2 860E398EE2745C4B 4A837F09F9393D78 F8DC35944A33C9EB 7C6BB287AF96506D 7ED8C376A3FE18AF 4946E6699033704E 02F48F03209411A2 8CC257FA07638072 2F9BC20A4EBB3C1B A46BDF816BCE39D0 C38DFD52F198C7C4 B60178E63578DD78 364CB95CC3A2911D BB78DB3A038A24AD 5A6825B98589ED3A 90C9FDC8A168AB25 0C60A56C15F9A380 26796E8CA4852D54 C7B395557D44C753 2E0AE8A1AEB24730 E51CB97CB139DE61 306F3C3644BF74ED C95F69914042F103 746EBDC7AAC7D386 A0361EB039CAAEF2 656B94674DA3F005 AA8571B3957BB286 A78995A65B4EE6DF 3A08F74D2BAD817C 53A2AC5CDC02ADB2 AF334CEE8D9B3FDC 8C68522BD433217F 9EDC104D6C72EACF E6329C0F18C0ADB8 3C0A24C0B964A0E0 99AE8ECCA5CABB6B 1D91334CB2A84E75 91B321DCFD323A07 82C5E883F9CC14B0 70BCD5257F05D25D DB9D491E5707E0D1 BAD6173879FCF6D7 8CF79F6E24E226C4 CFD7D9972FCEFBC2 3AD9D84E19993815 CECDD3083B85E0E8 9218AFDD224EA21B BC310B7ED6A5C567 393BF2A73CA428A2 92251F81FC68B53C 84BD95EF457E41A3 1056A7B0F4594B69 FA1195D6B92D28D0 9630C99C5906F565 29622674963134D2 1C7CCB0B33465E1B 6E9FB2CA6975FDF5 EAB8D422CFB96CC8 1A3CDCCE4960A516 ACFF4F77F3FC7E7C 548FEFA7ED59DC65 6352503CAE43DE8B 8576938A3AD5A043 7FD6D17039C49D56 67E6C4F457CFA8C6 EE57B1CEBB5C1ED8 F76B3D7DFAA31F6F DEC5B5C3332D5178 6A70F84E9A65BC95 222581235962E258 FFF9CA14ED321CB9 28C90457C0F36AF8 F61BDF51D829561A FF58F19A1D23A6C9 E854903D862A74DA 25C5292D76EA4BEB 25268C71319B4C2A 5E6A69B98CE6B8AA 087CCBE0886C8A3B 02ED201DB6357DEA 816C834B03B9B7E0 309BCF4582FAA33D 99F2F5E9ED123AFF 1B8C1CE14D403E1B AB936A161B1C5206 2906953D8AE91E2C 8629CC5A69CC1940 E658FEFA6113AEF0 84F7F75C069A66E7 95084682D971811A 2923DA11D234C9A6 CC44FA0D6DAC1448 62CDAF4CFDAF766D B8A5EA7B36D893AE 0A75AB527B0430C9 FE2591DD06A2D981 EE9CCA5587327730 6D752C9F085A470B 4E97AD6C1A9F40C3 5F6AA640EA214A00 D1D91C882F14A35F F335291174F3022B EE2A7A0E59EC7F34 E0B6EAEAC7118911 DEF0C6063D1BD9B4 A3EAB0DFE4BC23F7 6DF316E23ACCD64B BFB643BAD6F4C170 7F7DE7298941DEFC 13DB425C8DB558ED 43D951815DA34210 D1B7D823D8139117 24FD1470DA6A3FF1 C1CB6DD53AB03963 4D02D95442326A26 53DB961EA2C35E2F 1744C31E5E3A575A EC76AFBB5D10D8E8 D78D3C2D92B61AD3 77B90ABFD7D35A48 02858881273E7D25 2A1FFBC3AA22816E 5916A8FE0E95F56A 77B2C287EE32FEA5 E04C3DB8F1CE9BB2 0266DFBBCF1511C0 36187AD8ED161CC8 A9FCBD2A4D7355C1 6FFCED96419BB715 F7FF173B36D75A7B F1288591D8632678 FDB15955B904A90E D7095CDCD2ECA1AA 7526F69A4773D97C 268F9D2F6FA36DF8 127F655AF0986357 79EE880FAF4DA077

Read the ciphertext. Strip whitespace: 3,536 hex characters = 1,768 bytes = 221 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210062004 (name+title). Key = MD5(password) = 7d35b08b0957461a0f0c50e1953355c4, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 55 GUIDs as hex (shown below).

Decrypted: GUID list

  1 152d1db9-375e-7928-bfb3-2225ea0282c4
  2 02cadaf6-7569-4bcf-9e14-518b76b067c7
  3 5e66d26f-aa8a-1359-8fb1-68ba1996d2b2
  4 9852c152-22a3-1afd-bccc-31c5b0169dc3
  5 9bbf6899-39da-4eda-a1be-2710143cedce
  6 ba5a40c7-c982-86aa-91c6-fdc3ede8bdde
  7 8c06bef2-46ee-3fd6-a8e5-3180819ae8c5
  8 f92ab2b2-93a3-3824-961f-0834649e217d
  9 ce333fd1-cf20-0928-9fdd-e011b0860a26
 10 d315793e-d67c-7843-8051-10999ba2224e
 11 0f6c3f0d-0711-158c-8f23-6ccf9a666f8f
 12 caaac138-ad62-3ca9-b835-c4bcff51f702
 13 6e1abfb8-e102-1261-b1b9-4fa44f4c3518
 14 f85124f4-67bb-04f4-9689-d95eff6facee
 15 25e03f01-f5a2-6725-8d63-606c31c1912e
 16 c9bc6eed-4052-703c-aedf-b8a2944cd58a
 17 413f18ef-94c3-3404-b362-8327e5596117
 18 abc449af-015d-5a8b-beb1-96dc2fd6d8ca
 19 380a87e1-5fdd-4ec3-bc35-c07acb7ead8e
 20 cfc46acc-5e62-441f-8978-a57683d652d1
 21 7bf08ca9-edb1-1505-80f7-f859a543e1ed
 22 f837cb63-3515-35b9-aa40-157407d4b077
 23 e871b17f-3014-392d-bf71-a0abc7acf869
 24 02b96c5b-f26a-6610-b234-930ec1a9ba08
 25 0055684f-65b1-247a-b539-7d311e5453ac
 26 da7a6146-bf1d-800e-b9d1-6ee058705d04
 27 4bbf5bfa-2a0d-6b07-bb3a-8c30bfe80f5d
 28 605ca7ca-9ffe-13d2-81a8-7af8542c2a7d
 29 2829f822-e833-7df7-9b9c-d5eb324221dc
 30 a6b7172d-6411-290f-b8a2-f45e4115fedc
 31 e610a24b-f1fd-784c-bab9-58391df176ef
 32 5d190f9b-e062-5e98-bcb4-ad7a0e4807ba
 33 5ece2aa6-6a07-2961-ac3e-6708cac35a84
 34 cbcd9305-ab9f-229a-86a9-b09c5d82c48f
 35 b1dff55d-77cc-2811-bfd8-c54e954f44d6
 36 4341b54a-bf9c-52b2-89a1-328ad11a1863
 37 8660fbb2-c969-8822-b1f1-ea8f72d7b3bf
 38 f8b2d52d-69b5-361d-8a5d-f69495f2a529
 39 a3063d37-0b4b-2f66-9cb8-001c576ff81c
 40 645ce41f-0e69-46b4-9be8-e5d883d131f6
 41 da0b3032-f235-1dcc-90e7-f44d53e74747
 42 1585fbba-d184-4a25-a0ae-79d4685f6f92
 43 4907ed08-8650-636a-85db-06c9445b26f3
 44 85710e65-8ef7-69c2-96ac-250f93c5f129
 45 3384ca41-81c8-27c9-9d50-d212ffe455ce
 46 07bc4d4c-1243-7c3b-9c86-1216bcb9b7ae
 47 4f2fdec7-ca22-61c2-b97e-4987de839cd3
 48 cb684720-256b-3a5e-967f-4cf28469c235
 49 e82edaa3-c511-6a8b-bfe5-6a0a93565e47
 50 639ff92c-2d97-33c1-9a8f-136a78d972b9
 51 20f1f630-e4a5-5348-8f3d-c9b002e57aac
 52 ea619a19-64d7-7230-ba22-079fa39ef730
 53 00857b6e-f00d-04b8-a0fb-f64d706798aa
 54 4cdfea6a-cef2-50bd-ab79-e8529e679adb
 55 64ca6529-3953-48d7-9032-7d42eb917d1a

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7411483307131067354413362861727522258324146627636357054. Exactly this sequence comes out of new Random(251).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 336 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 55; the post has N = 55 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related