201210070444 112y36

explained decrypted filler

3DES(name+title) ECB, 20 GUIDs, seed 762

Metadata

Post ID: 112y36
Title: 201210070444 → 2012-10-07 04:44 on A858's clock
Posted (UTC): 2012-10-07 08:44:55
Timezone: UTC−4 · title 04:44 against posted 08:44 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,296 hex characters · 648 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210070444) = 1175326ce360c4b84554ebf6f479648f (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 20
Filler GUID seed: new Random(762).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 362 · predicted N = 20 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 6 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

5321A08DE1BF376A A4743CD887B513F1 D81F4DC3FB17C419 DD1C848BA0EC973D 0E6879140DE3B0ED B80CA571C5F3F7AE 3BDA48731BFE008E 40E467FEBB94A510 25D5E61362750739 42D77AE2E38B2A3C 613EF4F7C828BAD9 38B0E02542492BB7 AD2A2F6FD5658980 8BBBEFC76FF94C2F 17DBD8E5DB562588 F0FD2C633A794CDB EECA3DBED616AA59 49D54C4BA8D4DFA8 26542AE62B167BED 80F3F52D5D91D999 ACCD9B4726E3B185 52BE757311F1FD90 9AF480FA541FA6A3 665644B8AC6AB2B7 C88B5EB99AA121DA 56A54D7E72FDF37A 82CFE7FB1DB423C8 3A20816A2D07D574 76991F2F122B05DE 0A48B04F5D7551DD 0BDD0AF1A84C4E7E 8A746C4055576CDB 8159321513814914 D28ABF38C52331F8 051E4300FED23FA0 408F752F6BE50803 3048A6A8C0338EFE 59295F16AA99ECEB 818F1691F023609C 5117E742DCA1DC44 42D2E90B568C471C 46DFAD158AD2DB77 C4408AFFAEE49734 551AD94F43DCB100 2EDF00CFD28AB3B3 5A42220BF5F25395 793AFE9597A7B58F 2A42CF155927EBA7 0D9F0D8064F20082 1D0309FA650592CB A7F3F9FD2A251A3F 3FCA9C1A0FA783BD 3F19DF4170FE49A6 CC161D80594F7AA6 F4829D35FBACF19C 55599887342EF540 D5745D634C43AE4B B56E0C4B40D16498 0C6707DBCD3A27B4 EBB3BFE304134A6C D314C63282DDCA5A CE926848E27152F2 CAAF7730633F7EC3 096B0BD88E63A7EB 64D80B6E999A36C8 CC3F8AD3369F59A5 18ED7B27559CEA03 653166D397B2D2B2 3DCC33FCCD7AB5A4 406665A65B6116DD 21CFDF33B10EFFCE 0DE91B3B4B8174B6 7BCE91BB5E512A83 2A128976E3FCF7C6 58362530102688D2 8F119839FF4B627C 0999585D34754E71 F9A0DD6FA6F72F3F 2BC3B3206929A1FA 1566ABF2436FCBF1 81B604FB3079BD23

Read the ciphertext. Strip whitespace: 1,296 hex characters = 648 bytes = 81 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210070444 (name+title). Key = MD5(password) = 1175326ce360c4b84554ebf6f479648f, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 20 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ca32e7d5-418c-73ee-a029-3bf5c074f412
  2 50a69819-b7a0-3db8-b33b-67a9933d7e39
  3 c42d1e14-e981-3847-a018-b52fa4dbdd87
  4 8130fc4c-e5b5-1908-8312-99d0554f18e7
  5 c0e37fbb-d7a4-2ac0-a696-75afd00437bb
  6 cd68e477-0266-42be-bb31-f6856d39e02f
  7 320a8235-7daa-2dc3-b1ac-d6e8d3e899c9
  8 e7901ac9-63f4-660b-aa96-af4969e35f81
  9 e303f4aa-da86-2b4f-9410-d6fb8b73de4f
 10 4dd8cd87-6666-2c47-bdb6-69c9d1a0eccc
 11 dc1f3ef9-084a-676e-98fd-d06aebc392b0
 12 9ec22057-8416-332a-9e07-ac4a1c77e6d7
 13 1c66a507-76d7-4d7b-a293-33d8dfea1a0c
 14 c957816a-466c-8e4f-9122-3edbb6aeaccb
 15 39406c97-3a54-38fe-800a-1b91b4e4649c
 16 e96bb36d-e724-8d7d-955f-b13a1672a731
 17 8970f02e-f035-13a0-bc24-3adc189dd96e
 18 45ffc49c-8cb1-3649-bc56-0ba2a9129d92
 19 9b249668-c819-2668-9690-afb757a13874
 20 debfbc0f-6c65-3cb4-b1b1-4c84bf33d2ae

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 73312426226348381323. Exactly this sequence comes out of new Random(762).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 362 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 20; the post has N = 20 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related