201210092000 116v3c

explained decrypted filler

3DES(name+title) ECB, 19 GUIDs, seed 454

Metadata

Post ID: 116v3c
Title: 201210092000 → 2012-10-09 20:00 on A858's clock
Posted (UTC): 2012-10-09 11:00:06
Timezone: UTC+9 · title 20:00 against posted 11:00 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,232 hex characters · 616 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210092000) = b0ba8da6211b5cc730be0c4ddfa4a4a4 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 19
Filler GUID seed: new Random(454).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 501 · predicted N = 19 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 4 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

ADBCAB5AF11326DD 54255E5997E4E0EC 80BC10B10BEA86BA ED93046B061963E6 FFE02AF26E9292E7 1AC6B41402F0B36D 4166C175431062EE 1B9990BA9D00B134 C126D48E8666896A B3EE77589687CF65 BEF850F27E5CC8E1 CBF4568BB5805A9F 9C457524B7B9FEC9 54B72549A084DBF1 B6C42F6DEAD60EA5 2E549ED52AEFC861 7389322A7AC40F2C CB9AAF039E25FDBB B451B44B3CADFB7D 3F3CCCC226EA3CAC 11EE7CCC6CE3DD89 E510DA7EC9396CD6 57B20DDFE3E1B239 8F515FB86FC116FA 92ECCDB2002B0B0B F58846E535926E11 EC01A0A6471803B5 5A90DD8751FF6406 2378B35072C13236 9E9C52B9078D904D D6B08632BC55EE5A 2FB021E0605C0440 3C3F78D84FA1AC90 E7DA4E4336B6B678 2724BF44423F4BEB 1A4F376C1DC5B753 546AEDA92872A41A 4A6D058A8F94B162 3AAA58566465DB00 34D24A6F78753C27 5B6CDAE7B2D77ACF BFFC3060095CE5C2 4498C84A85A20BF6 18CB32066177E15E 910200EDA49EE1D7 F2E84E4809C04E40 3513FCE0C8928038 BF144260A14FCCFA ACCD063F54181E73 EA0457B573EC4307 508C597E384F7A89 39F269CE5103A5A9 B4F4A185C4888CE4 2505778D1CE1DD55 019160E5C35F2A2E 61D4FE2BDBBB7EF5 C42FE4383AF70993 3EDB330050EB3FF1 AF16D2C6165DFB7D 752A3260DED3EFBE 6286D1098F91E342 F426FC7B83EED05F 7A68F1278A506376 52763827C95B8375 E24EEAE96B237913 0DF1000A877D1EA0 5C75D41A18211E0B 8C67F946E6CA2358 0DA8F56557C28C5E 7BAB149167228738 8E46D9D98B7645DE 3C5340CEC9A9A1D4 58BE1C4BF37E8839 59D4FF3FD0D35D55 768CA4F290051A45 1B236995AB8C0DEE 09D9F825B366DD13

Read the ciphertext. Strip whitespace: 1,232 hex characters = 616 bytes = 77 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210092000 (name+title). Key = MD5(password) = b0ba8da6211b5cc730be0c4ddfa4a4a4, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 19 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3f1ed3f9-ea7a-8064-9ee1-533d5027745e
  2 e7c40d58-28d4-0253-aba9-b926bb7a5b7e
  3 145c7091-b2a7-0398-89c5-dd0303c74a21
  4 40f171a7-9753-43b7-866e-66255f4f6003
  5 3aba4f93-c835-1e78-863b-daa3c4cc3804
  6 c097304b-f7fb-27e1-a37f-ad68ccd9722a
  7 9ce72074-18f7-2045-8424-44da38a2458e
  8 de76762c-e787-1fd3-9a95-b8cee769a834
  9 ffc2add7-ed8f-1b13-8458-57b42413c0cd
 10 01e1caae-0dd8-6852-b556-2f0948bb69ab
 11 17fdff92-a4a1-659e-a737-2445bf2d0710
 12 759ab68f-aa43-85a1-a427-5a88162a7f5c
 13 601dfc9c-d3d9-67f0-ae02-971b6fac8006
 14 7e2aa504-f478-5113-8d4d-cb15084b2ccc
 15 3dba704c-41c9-6fc7-a9f4-bbd7306fc3d4
 16 537cf443-ade8-55df-973a-34b41acb58af
 17 ce764eb1-32c3-6800-a8e6-4c2022b2a3ed
 18 61bd66c2-e6d7-449e-8558-91062858857c
 19 a780b1d2-1fcb-8f24-b7b1-d5fb5a971788

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8004122116686565648. Exactly this sequence comes out of new Random(454).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 501 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 19; the post has N = 19 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related