201208310042 z4bz0

explained decrypted filler

3DES(name+title) ECB, 39 GUIDs, seed 973

Metadata

Post ID: z4bz0
Title: 201208310042 → 2012-08-31 00:42 on A858's clock
Posted (UTC): 2012-08-31 04:42:01
Timezone: UTC−4 · title 00:42 against posted 04:42 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,512 hex characters · 1,256 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201208310042) = 6fa7158462b8a947c31918c064c90fda (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 39
Filler GUID seed: new Random(973).Next(9) ✓ verified
Run: Run 27 (seed 1,337,299,625) (seed)
Draw: 6 · predicted N = 39 ✓
Machine boot: 2012-08-15 10:07–10:24 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

C35E88E3E3E6FB1F FBA1765842CF56B0 A9D6D095B37092FE 439EE77D0A41BE29 580BA843167C48FA 0224D37A4322976A 8C5EAD5E9D239EF0 AFD9E037C5921167 22183F4806DF5097 789F6E2205D56002 A0CD3F8F0D031A3C E878BC8789AC48EF 6960A01113E7B11B 917608427D579EA4 23E4F4930CE6C826 FF0344FBE749E3A0 A53EA6DD1A04184F 5E2903412EF7AD3E 1211A267541AAB95 50BFF2EED4FA378F 27CE089C54C30623 97FCF97C3FADC5A1 2CCECA8C4E17DA68 2AF24E84F196E647 6D8B48AAC2641546 4A425035DAC455F5 075C1A21D29734EE 96695A1FCB575F14 B397C24E0AC4CAD7 74270764165CF3B4 2EAC4DA9B0D2045D B1A74A647EA33D27 6D6275850EEE52FB EE375E0A7872C8B2 EF2DCBB6E5929B95 9800B85ABD5C297A 5070E05F3B891FC7 625DE0193599B0B9 E83D2F7DDEA34022 17479650DA729FB5 CC2239141BF06163 690ECE1969DCA436 88D5A7ADE091F4DD 870CB6574A015527 0EC1E5B9B148D390 08D470F10F8AE636 C3FFDD11409565F3 B1A7A3FFB318F863 F741FDE3FF5AA079 67A6C83A3A6B5D6B FCCD63B704AFF2B5 30060A1360409037 5781B439D7CD2512 4455248C914EC919 4FC927E5B7C35684 7489D6D78D55002C CE6A6F56715B3CF8 95BD6BD7D6B8F07B 08F14BE0524E7620 0EBED0ACC3686B89 562B23AF9B1CA947 215A3AD442F5DFC9 28A70FFB37BB5412 33FEE662835A0551 9A21F79D8D90F17D 90A1EF51746AA6AB 14B787E27905B7F9 B576A82BC6D3ECF2 CE5F125763350804 230FC0689C396ED5 B01873E4AD46D8BB 1CF903D8469492DA 22F01110AD09C9F5 3D3B5CE15433F2AC 9D9BC6B101104F71 0C0937BB55ABED84 2F3137DF9931173F 421C7841F9D9D218 65807F2D02976CD9 BC34663474B69275 91B41661BF7FC4FC 0A4B0A359F262B37 4E6073B816BBA6EE 0DD683DFE70D7F51 10F1B65D54225CD7 8D803324B82D16CF CDB6B36CE2C190EB 91B1326EC5524AD6 CB6A2AE553F8B624 BD831D554491A61A 6A244334B694B6A3 2D925ACFD5E48E2B 2C86433D55373570 81B507AA5EB702F6 677F90A334162129 28F44BCE8262C7A0 B77B1911D42963B5 6DE3255064F14F12 175B87F87506E4B6 EED0243668F33F0F C0D2AF23AEE3172D A88D5BCA87CAF82F B3BE97278676328C 665DF8134DF0FFA5 CDDCA773183D6BA3 5B8BE677B54667FF 7B2AAC1988D10D43 4B9939E55A220442 FB1B269CA49E9FF1 F27F713134C6B217 E4FD59DDD93E00B0 21F9B90EBF0A113E FF1102643ED09DDA CFA460F76E50B513 37567ECCC0A599FF 25D38732227E9D4D D2D46314025C7277 F70A16670A98A3E1 B66F1049C392E1DE C4DEB4ECEBE43617 49D883D2D1AF29F4 E1A499B6118C59CC 60998F4F863BBF28 1C4424238FBA66D5 E614ABB0C12E39D1 477A84B65E66F825 9DDEBABCA229DFAD DC4FCB6ED655B902 DA906048A63DF638 029104C1864621F6 C15047B769DE2753 14A610B9DA5178E0 81B0619B6D551B9C A228D5F3D6F6088E 5F228DFF66BBB781 EFE3BEC59076856C B53AEC31C97A8C2A 026B4B8F3F13D1E6 EA6309B290DDC5E7 8C066CF668406C4C DFAD089D041BD440 5BDC7F25BCA12E92 757C18F0DF25CE98 9B28F0D4B530ED62 D48C1237003B76E8 6018A2F4BFADC359 3E6B142A45AFCB35 4EBD7B34A113E7B3 113F3B6D16B5C33F 3BABA82F68556FBF 532CEFC3E50ED624 B3E541158BE1B517 5C73729A853BF5C6 7F952FC121F1DCFB 0B977C7C7D31FC0C 383BC0D4E26F3261 038A309C05A8632C

Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201208310042 (name+title). Key = MD5(password) = 6fa7158462b8a947c31918c064c90fda, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a5a63555-3c6d-0018-890d-d1e181d3a869
  2 aee746b8-9a41-2cd3-886c-c770182e4814
  3 9973547b-50c2-7dd9-89e1-4b4beb6dfb0e
  4 38b3bee8-aee6-2df7-94ff-65dd9125b2ac
  5 172abfd2-cc0e-4b1c-851b-107f53bc648d
  6 2727b537-9abc-7790-9ed8-78307a16cf1c
  7 1f1e011e-c1f5-7b5f-9966-b07adad27b2c
  8 f1decbbd-30f8-5771-b5e8-3ee7472d2745
  9 831674fb-e628-3502-b450-09fe6e60d5f2
 10 fc71480c-0cd5-0450-a4a8-baa3a5eda935
 11 2498d47a-c7f0-102f-8903-cff613ba0f56
 12 39324123-14b1-0e05-96a8-a8557a142308
 13 68386538-5356-4e04-8663-4037440121bf
 14 7eaef1fa-3af9-6fee-822b-06893632b6fb
 15 3b7c8472-3af9-0a65-8a67-147688d6617b
 16 da425c98-fec9-6c12-b278-09e0a0b2e220
 17 ff844b2d-635e-7a61-ac88-d0c3bcbc5b4b
 18 42c538d7-35a6-2583-8b4c-a9bcd86c8ad8
 19 52e856bb-8ec3-07e4-95e1-7574d010e314
 20 933ef48b-84ac-0ab9-a916-64f31f470cf4
 21 18917bc2-51dd-046f-923a-244c25323f66
 22 533d2149-1907-58a4-a2da-2b2a008ab75e
 23 9595e050-3d26-3af9-bc2a-7c5daf5abb7e
 24 c1f7370a-c9dc-8c0d-a69b-bed24eecab3b
 25 90b5a046-6b12-0017-b2a6-99563d2b239d
 26 439449e0-390a-3423-8a18-a06aa7ea21a6
 27 be719a28-6039-4f74-87a3-bbf1ca945b2b
 28 9bef135c-3e22-5994-aa76-226fe1b8ffab
 29 f9be25e7-61d3-20dd-8c4a-8de6791d67bc
 30 26610267-0ea7-60db-b826-5ac8bd9f20be
 31 bd1c926d-09e8-362d-b7f7-18412a6afaae
 32 ffdaf0bb-a86b-6fde-a68a-eca4d80e0a09
 33 6f3a06a3-3a92-58bd-85b6-0cb0a53539e2
 34 df117a4f-184c-3799-8d47-36087332b7f7
 35 13c94037-be81-36ef-9953-8e5d483752b5
 36 d8d92f05-9df4-879d-ae68-13dfd4646744
 37 dd62a7cb-6c74-0ff0-bc44-5322884e8e95
 38 e3437945-cd86-4f25-b702-7057688d14ea
 39 0e687af3-5f09-8297-8b20-84cb7c39f40b

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 027247753010460672000538034526365338048. Exactly this sequence comes out of new Random(973).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 6 of Run 27 (seed 1,337,299,625): new Random(1337299625), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related