201210260013 123w66

explained decrypted filler

3DES(name+title) ECB, 25 GUIDs, seed 156

Metadata

Post ID: 123w66
Title: 201210260013 → 2012-10-26 00:13 on A858's clock
Posted (UTC): 2012-10-26 04:13:11
Timezone: UTC−4 · title 00:13 against posted 04:13 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,616 hex characters · 808 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210260013) = 6c7ca1e6870e3eb2a606fe5302663a8d (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 25
Filler GUID seed: new Random(156).Next(9) ✓ verified
Run: Run 38 (seed 1,045,884,937) (seed)
Draw: 20 · predicted N = 25 ✓
Machine boot: 2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

B354496E33810343 52A2A375FC9F46B7 68B6B2D9E9264215 39461831736E772F FE44DE6415E60ED5 3014AF6D2B74BACE 51026FD801EAC6B0 352896DF6DEE4623 5A38945A4FEC5B8F 19DF9676BEBFB414 95C46787CE9C1029 28FC8F2A8B82118D E6A271C070D85013 0191E80BA4860D0E E93CBD1F709E29AB 6D22EAD2634EF22A BCCFE70FA39D11DE F265BD28F408C1D2 E97C117F580A1B17 0BFE9B57D8221227 1CA38B1915BEED1D 6300DD39495E01A5 9FAC4B10EE267DBC 342905B8DE3D1794 DA91CD4FEB2FD9B2 1E005B10B6519EC8 8C09247BBEDCA7D6 938D447F9FA9812D 1C41E498E9947FCF D3EFF2EE5C2C877B 335ED9BA25027BCF 330AB8DFF18E96AC CF5D2C5612D56437 3F3576D46F1C57A4 4914917212900D6A 9929720AC4F77F90 EA960A2C86ED4F8B 3C0CAF477F0BE6F3 DC6906D343385C2A 8F52DB264C2C8155 B2FC10EA1724F328 0BF280DE41000CEF CE14B1437052211D 31D5C0103F84F696 3C7EF9A0B9AE4CED A5AB4BF0534A00D8 D951B4BFA088507D C384D197B8B56894 DDBDCC59079D0371 65377D449B016ED5 B5A2E26A916F9E7E 36128B249178686E 2EE86659E13F16E3 51485CB1E86E6AEF 711517D7D5787C13 78B04F216AFC0CA5 E3B3F09C1093E786 EDD3A4637573A8DC F267C50F54CEDCB9 823E5B84D3D7F1D4 6182170849BA0AF8 A06C13866C02CD08 34FFA6B223FD6FF6 56FD696F1A8ACE5B 852BCE648F731E0A 9540DB7F187E0BB0 CB80E28156546B9F D206858929D50BBE FEC2F35866A516BC CCB7C6900FAD5705 A77770D72C7CA267 C71649069E4C6907 FCEF512E0D8B6B13 D5368EEB02EF136E 84E37F7C4AB7719D 1E0005C3B4868C65 1986F365667D1A89 AC30FE3E1D5F88A1 E8B3B2F0413393D8 504D6568D9DE201E 428668B9C1D93066 347EB0BB6B4E9F19 B603DF8BFD690DC3 598C1830F043980F DE1149CCCF726EA7 F43545A1C33990B6 5907D041D26D21F2 422CFCD2A0D0832F FF1D5EAC316315A8 3299D8E282659CD2 13AE6EF7069C0AAA 74A85B34315A08B3 3CB3FC8712DD65DF 3CE53442D8CF57ED A215C752DA8979ED EC340CA319FA2142 8115BD62B76F71C8 AC7A227F475FDBA4 BD6BCD5B9D2D2E94 FCA2268D843F5C5E 0075305C3897F0F1

Read the ciphertext. Strip whitespace: 1,616 hex characters = 808 bytes = 101 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210260013 (name+title). Key = MD5(password) = 6c7ca1e6870e3eb2a606fe5302663a8d, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 25 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e2af4f7f-ae8b-2eeb-bb97-0609bfba2167
  2 62b4fdc9-7157-5e6e-bca9-fd05f1e77ed6
  3 476f0ef3-36c7-79c3-b817-0244c4a00c92
  4 48320e33-3ade-7505-b509-17037f98ca5c
  5 5adc10d0-4c98-5246-81ed-b37f254aaca3
  6 3e667267-9ab8-760a-b567-289024dd0823
  7 2ea02ad0-87d9-72b4-8756-847a0536f519
  8 c138fd9b-f135-6060-8dfa-40ae2412b4ee
  9 b332e76b-77e7-2f3c-a49c-03b8dac1ec9b
 10 33ad2aec-21db-7682-b4a8-0a8c7255bc84
 11 bede835b-48c3-194d-b8bd-6404fc59dbe7
 12 6d28b666-4b09-2de2-9f75-1f0a2ce6dd98
 13 7eb48901-c832-7a22-919c-ff3641511ae2
 14 046d5dcc-6722-534b-93b4-ed390dc08cea
 15 929c37ad-d2a9-196e-8069-471c891e71e2
 16 c65debbb-dd6d-4971-86ed-4cb5fce9aa89
 17 5a2e6856-9699-3743-b2b7-885a67d82025
 18 67b6d475-d015-67c8-bd57-80c69b49de0c
 19 35338867-faa2-82d3-aabb-b13f6d604522
 20 cfe53060-f141-6b44-a6e9-5214f80f377d
 21 70c2617a-e24a-4596-9128-540950ffe094
 22 111a43c8-f52e-1484-9e6b-c2adde1e304c
 23 f14729c5-9222-3f42-aeaf-ae9bf10c92e6
 24 f77e2946-dc3a-4280-8de9-e7e539f5feb6
 25 46114d6e-5f8e-850c-a757-24596d946291

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2577577627127514368641348. Exactly this sequence comes out of new Random(156).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 20 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 25; the post has N = 25 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related