201210070104 112rmg

explained decrypted filler

3DES(name+title) ECB, 55 GUIDs, seed 329

Metadata

Post ID: 112rmg
Title: 201210070104 → 2012-10-07 01:04 on A858's clock
Posted (UTC): 2012-10-07 05:04:47
Timezone: UTC−4 · title 01:04 against posted 05:04 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,536 hex characters · 1,768 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210070104) = 850103a571b408a335b3a3c82acda1ae (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 55
Filler GUID seed: new Random(329).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 351 · predicted N = 55 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 6 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

BD9A49C6E2D807E8 A933EC042109CAFF 79AEB8AE5B1414F7 A5C2C5AA17788CC4 E2FC6664E0F9C4BB A30B65EB44D8066E BE056AA4C652493F 9D52B9547E28EEB4 A86EDDB13AB9C7C1 630D990F3BD76953 A2785CD2B45EC0F6 4E23DAA1FFE36392 FC17C96D1CB33A14 85307F45001A4013 8B74F5F67CB8D184 39116D825F1590E8 617738BB05EE500C 74F8D1C22CFBFE00 488D713FAA40658E CE7DA3BDA3DA98BB 67115C475153AB14 EF084D0DEA3EE57E 551A9F055054B8A0 E40B5A6148C4F577 E1AFAB12326D2B66 E2AE7CFFFD2408F8 B142E5BBC648B7C9 1F4586875F0447CF 6E9C7B9877FC8007 BB1F3F4123D68029 04DFB364490830AE 9E3D0036A6A873CE D879EFB3478E3F52 C652367A295C4B42 EB94730380336C0F D60D57908948DF1A EB8D3DF5CD0A0309 69ADCCE5AD3EAC72 332956EC14256782 C81748451CF0463B 030CE130F695D9D1 993DC81B79ED24A2 EAD9EA77D2918B28 D656D6E66A89C1FF EBA69FA49EE7A468 2AA9C9535699634E 7B507BC7AEEBF3AD 13BB8DF6D88C8D9A B85CCD10F08DC0A2 0D0926014B99F00E 549C02E64CF8C686 EF658465280AC105 9BDE11E2E7F11F84 0B83C1DD1B4C4996 C45F410AF815F338 9066DAEF0233A995 793100321A97C504 2E004F03220ACAC0 0F4C9CEAD77F2356 86C6B5BE1DCD1D2F BEEF12DB9DF602CA 8BF9A434D6E678BB A380B275358D9D6D 7CE2763104704CCB 14AC5A9498BAA1B2 9EBF8001BCC48910 071153E2BA28E0CD C7B43C00B04FE3F3 7F9E6488D6039AAC B5998C056598E8A9 302AF0E12AB50EAD 72E072B771726C5F 001202AE9B34A055 EE29541971B2EF79 59DEBC353BC73D49 48E247AC7CCBC18E 95A5A305A9F3339F 14DE0234AA24EAD6 A617728AD7747C6E 2FFAE59276AFB21E 30DE614D08F1A173 C8E7612FBBAD138F BF20300D160E4F8A 85DAACEF37B29F55 965B49AFA11A0175 83FDCC6B3D1CF48A 9196CA444FE60DAF 01ED0B33CFC470DA 694887EE8CB2C220 390BA8C40C9E7D8C AD11B977FEBB3A55 38042BD1D77921D2 FF195814820CADC1 9B8420F6E1ABCFC9 CD4507D0BC98208B 40ED3E15C8E4A06F DD5429617B3BAE08 6FAAE3128A57A82E E6126D3FFAA45BE1 D30356F0CC12489E 052206CCB83B8A36 1639CE349799430F CD3F7B08E81CB4E9 C9D7411C915517B2 BC8D5D71051B5EE6 25467AD1ECF1913E 3476374992E48317 B0A9DCBE1F04B1EA 9AB592C78B8FE42D 36A5CAA4DB739D76 26308FBE63E6C52E CC2DBF2557DB3C90 452D8B7E9980C5B5 582255A12D74A179 AC29216582C2CC32 04701E3CAAF54E4F 42060ECFC5BDDA44 750ABDCC888D74E4 5A104706A6BE7F86 8C5F0BF15B0648AB 170558B831F7A45B C9CF85B20B223F5D C8B81A534F5D3597 8610AE69272D831C 5A3737068FABDBA1 B5F4DC2E06EDADA7 0BCF199FA66959CF ACD53E917FD7FC7A 5E3CF66358B68B8D C232F77C23B737F4 50C98EDB35468F4A 2222C1CDC952B437 B3C27FDCC9D9CE41 BEC1D3A9FEDBFC57 FBE03CAC5D2E50BE B1C81F24FE7607CC 9CB255B5E96AD67F 84C943D91263F3DC 1FFC22C4D9945DB1 F12E092DE7091E91 FF863B7A6D573F6D 47D2E2428AC93995 D02E512A54AD7DE7 8BC1FB4F9A444BBC 0C6F90DE46902479 035B6CF3A4B7EF0D 7267EFAA06152D6B 8E17DC27ACE5F15E 633DC651DE7279F4 5F3D2FACD0F8CA4A 8BD9AF44EB5BF4E5 EA2B48CD333EB8EC 6BB67DD8D475993C 049EE158B859C6A5 05E2A138EE314374 BCB78053B5207468 C9E48CE2CFB4E690 60B8CEB665A89333 4A0CE53E090E750B 9093F785DE978995 E9E325A1FB49EADD FE55F2D5FE10336C BE507CE4684C6A9F B9B9E6A1AA4B0CFE 0ABACC0E32B7B54E 300E4AC8E62B1158 89ECC0A4A06A6A60 C34C58791BC32C45 8F5D59AEB299E16B 1A7548438044847D ACCEDCDF0420EA06 D90355739899E9F1 E7A369727AF8179B 2E8BA9EF36DC05B1 FB4558D1F3E15975 C57FC3BF96C23974 FC29273309A55F4C CB21873892329286 4661BE1534F21E9C 6B5CDC8589A05B38 571099413218348C 19A01E6C3D190C4E 7D0600C516DA675E 29828B8EDBEEC4A0 F95479557712B9A2 F696696F6B27163B B85AD725D5837D00 29CE4C85C8057219 5BD870AB6F0977B8 BBD43C8753F05453 5DE3CFC8E5B4BE85 1499D8992FA26A8B 2AF0F0C125C54887 3394ACCF2B946F60 E49006BF9184D054 EF5CF5D8460E0938 F455190B9C30A629 348B8E428EEC36CC 4C868580A3C077E3 21C5DC1AF2B2DE2E 6BA9FC3F21CACC99 421682588E36E7CF FD8300488C387D58 CADBCB1363A34005 FB6CE046B9AACABE F8E20C21073BD58F 3B71F3AEF2E01F66 E05B7C7D6D32F3BF 5FBB09206D5475E2 A60EA4AB2B420DB3 6D2F792CC630982B 15FC5475C1C70FC1 A36F5E98E266A0B2 0EB0C775C3297D2A 0ED57226B867713B B8BEF6D9BA4FE745 360F81190A6F2231 9E17EB842C235004 7E56E1556C751033 2783B4CD0D6432F6 F14DA3D92EC1E5FF

Read the ciphertext. Strip whitespace: 3,536 hex characters = 1,768 bytes = 221 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210070104 (name+title). Key = MD5(password) = 850103a571b408a335b3a3c82acda1ae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 55 GUIDs as hex (shown below).

Decrypted: GUID list

  1 eec1ff27-bbb0-5462-b14e-a4ce9f6461df
  2 924c9110-a041-38d7-8ea0-fe11ce5b0e35
  3 8e808806-ddfc-6294-9f38-05842a2084c0
  4 7248e2ac-aa3d-7aea-90d2-65d37871cdc8
  5 94487565-c7b6-6a53-9e01-c5852ea8db36
  6 50d22abe-9f77-0c9c-ae5e-ba5f6dedb4d7
  7 8f6f0ed9-f6c0-259e-9777-94a802be8e26
  8 3ac9a89a-d2c0-45ab-988a-948438703fc9
  9 8e7fcf1c-4170-629a-a4cc-29284831cfab
 10 a2338062-1e2c-59b2-8178-2b030cf4ef04
 11 42b73d54-fe5f-6b0d-aa90-dcc6443c8b48
 12 ca838bd1-5d2a-2d41-a4eb-fac6905b82fd
 13 189d5955-ebe2-7006-8d29-9e83352473f5
 14 978a25c4-694e-5604-8c04-71e432c1678e
 15 0a5a5943-26c6-2949-b79c-3e729bc31c90
 16 75f4b562-2ef9-472f-800f-f660d21e72af
 17 e2155c18-311e-1781-8aca-7abec5049735
 18 f2c8d3ad-47c6-832d-9b61-5df4323a58e3
 19 4981ffa4-fe54-55a0-b8b7-800cc5059c01
 20 9dbb7fc0-cc89-668b-8576-ecff74eb04f3
 21 080b3a48-26f2-423f-be1f-f684927d2c46
 22 aa9ead95-957d-502f-a407-8bfa5c7c4160
 23 388b1815-794f-59e0-9965-e7e54f838df0
 24 170ce8f2-b374-879a-8e39-eee5c4feede7
 25 cca00837-6ac8-8ebe-9280-38530f99f561
 26 2f92c863-fec5-1b6b-9945-9ca84951f133
 27 3d80fd94-8f5e-7da9-b2c1-59760bcb8d66
 28 1342d861-0efe-4557-950f-0be9293b7a03
 29 c3996761-72a8-3e13-9f6d-5e7002225c8d
 30 930a4e1c-a9c1-0a5b-a199-2e0658aa3754
 31 3e9d00de-f0a3-5bbb-a57a-56f494d6c94b
 32 277be703-f9fd-1866-aa0e-a24ce44bd24c
 33 95be7fad-ac80-551d-9c03-35ebe4383801
 34 1aa47109-7a37-2021-91e5-21c9475323cc
 35 61b63d29-a0f5-4daf-b214-3e196693a259
 36 9e40a96a-01c3-0890-af85-ae06723222f4
 37 26ee2243-12dc-5fa2-b77c-f85fe91f5504
 38 4a00c787-0459-5052-87cf-0e8deb0b29a9
 39 c5db91ae-6242-6777-8525-a4e4b957f0b2
 40 ffab31d3-85bf-6498-8b3f-e8cd096aeedc
 41 d7c5937f-2abf-0f94-bce6-209539a6e183
 42 b6cfeac0-8de0-14d0-83c9-df0f5958ba4b
 43 db5577f4-06ec-3d36-b7d0-a2c0d4cd1124
 44 18bfa074-a5d5-4c4d-a009-4d234fda7731
 45 94d2d258-ff07-319c-a276-0a82107321bd
 46 5b2b746a-3851-457f-80d3-3617096d6cb8
 47 e6fe0841-e145-2e39-8cb5-416455dd7a14
 48 b32125e6-6251-56d7-856c-f930e4511d8d
 49 bd751953-d99f-2b25-baf1-b227f4c6b082
 50 0df6dcf1-3bb8-6206-8a27-cdd3499e25ab
 51 d0416052-2184-5b1d-85cd-aaf5f0459252
 52 8fda09f8-e046-8927-ac42-4301eef4604f
 53 5935c28d-1799-66ca-81d6-a6542407fe86
 54 e7ae03a3-d909-469d-84ea-d7dc935996d8
 55 5245a9ea-ae1e-0e1d-b182-7bdbafa2c22d

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5367602465627524185645588174305152405566013434252658640. Exactly this sequence comes out of new Random(329).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 351 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 55; the post has N = 55 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related