201210110100 11amzt

explained decrypted filler

3DES(name+title) ECB, 20 GUIDs, seed 812

Metadata

Post ID: 11amzt
Title: 201210110100 → 2012-10-11 01:00 on A858's clock
Posted (UTC): 2012-10-11 05:00:03
Timezone: UTC−4 · title 01:00 against posted 05:00 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,296 hex characters · 648 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210110100) = fa1ab2d6fcb749545a034ccf9e3fef42 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 20
Filler GUID seed: new Random(812).Next(9) ✓ verified
Run: Run 36 (seed 335,015) (seed)
Draw: 2 · predicted N = 20 ✓
Machine boot: 2012-10-10 20:54–00:54 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

DE0B0C4FA195C5CB 8E57A0F4ABAF1AA7 DD5CE026A3808C25 8D8E901658C1D242 E0EA2BDD70CEC8D8 B73817E2F3A63B02 417A5CA6202591B8 BAAC38EE6C18766A DF3662BC750FC62C 46A6F824017D162F 4FA2BB16CEF01E64 75DBEDD142C1D20A 0F80FDD2BEDDF5ED 9086E9D3354C96A3 201179B67D1115DD F32E334A0FA5B3E0 CFAE68BBFC53019C 2FCBBAC6727018D5 9D1C4A567A4D0A48 70A0D85540DD414E A0CC9AB121B3096A B605C47820875653 07A7C2F1283C825C F03C86F28DE7483E 581926E7705EEFD2 7F0D681AAB989512 BE629AE2104DBD1E 2803E1DDC00B39D0 025C075C046CB050 0DE76EB6EB71A2EE EF20DB66BF54958B DACA33083BAC47BD 828EA1DBF1114498 5A1C765ECA3B23DD 3015722E07E6FF75 9FFCD69CB0648D64 2CC673E061500D2B 2A21FDCEF7226D62 8269E8CBE2EEBFE4 5697ECBC5BE03353 CD63B982C910E9B0 F19C27CF67CEF248 B8D718AC0E3CF958 C255FF003E1F9689 EAD7B9A0558A1AF2 699E887929540FAF 289AD4164D2DC14C 80704BBAC1BAA70D D9C63EAD965790D7 293B99C5ACA91461 ECBEB17D75A63DA0 18052B64EBAD1D73 42BF0415E4B63F51 F95D24C76F6CA622 9DB4BC195A746E77 A77B8802B3A7055D A281D17A9DFA5B54 579911B3DDD78D91 C6C9C1ED63EE649E 79F0200AEC4416AF 5CC6FBA72FF14786 EDACF603905F688E DFA61C62DD22171F D8312EFA4A3FBA4D 8871EB2C96CE913F 10C4F6AD8AF43F26 4A62D6519CFED526 93CD4569AF674383 B2A4B34F6DE63973 E2E0C28F70E70E1C 2795A977F7B294EC C9C640D5A3433F27 AF6F99020DBBC42E 9FA2ABDCA0AB8F1E 13425CFDE000A0F3 CB17F0296F555358 F0F31EBA25BB7B78 2BAAA5802F80B21A 7443E6B0B5D2CDE1 3A847DE86D7A9EDA 9F111285DC83BCA0

Read the ciphertext. Strip whitespace: 1,296 hex characters = 648 bytes = 81 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210110100 (name+title). Key = MD5(password) = fa1ab2d6fcb749545a034ccf9e3fef42, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 20 GUIDs as hex (shown below).

Decrypted: GUID list

  1 09f11b63-f271-8ae3-bdc5-3834b54e3cc7
  2 4a1cd93f-ad32-0710-a172-1a6c7046691a
  3 a4826f26-da8c-3cac-be8f-52489d8fbfdb
  4 6622cae1-a631-7f78-9878-237e93ee24d0
  5 401b0efe-f1a3-7272-9c65-1c6ad4120d57
  6 c45cb0f9-7b04-1310-abea-4c9a462a4869
  7 a84c5766-4c67-6d5e-b43a-2eb489084689
  8 12d1dff3-b3e5-7054-8348-0ce26578d646
  9 8a2e1937-aaaf-351e-82cd-67e6112b7c56
 10 35915788-abfb-67fb-bde0-1b1f136f25a1
 11 c6327d7e-cc27-48ac-9298-e58641b22fa1
 12 521ccc5c-24c1-3fa0-9950-918f3bb3b7db
 13 a4997803-8b92-7075-9fdd-74c868e9a135
 14 fbd0e2d7-c98b-820b-b830-275ff653460c
 15 fdcf4e6a-88b1-3110-b51c-298846319f50
 16 c1c6ace1-39d8-1b53-8994-9567efb3d895
 17 6a95e791-a809-150b-8421-b87fae7b662b
 18 ed6264ca-7a43-3aab-a795-e40da7de1f93
 19 646793d1-4ae9-5176-950b-6513a3d22a1f
 20 9d9fc4f7-04ac-647e-9c74-5f5ddf9e0fb3

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 80377167364378311356. Exactly this sequence comes out of new Random(812).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 2 of Run 36 (seed 335,015): new Random(335015), Next(8,64) per post. The RNG predicts N = 20; the post has N = 20 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-10 20:54–00:54).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related