201209010834 z5tun

explained decrypted filler

3DES(name+title) ECB, 48 GUIDs, seed 929

Metadata

Post ID: z5tun
Title: 201209010834 → 2012-09-01 08:34 on A858's clock
Posted (UTC): 2012-08-31 23:34:12
Timezone: UTC+9 · title 08:34 against posted 23:34 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201209010834) = 0e96da60b7f94f6eb9cb0066caa0116a (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 48
Filler GUID seed: new Random(929).Next(9) ✓ verified
Run: Run 27 (seed 1,337,299,625) (seed)
Draw: 29 · predicted N = 48 ✓
Machine boot: 2012-08-15 10:07–10:24 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 20 · 5
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

8CFC273E1A531959 90DA5C83C7ECC570 A8AFE911C77CE28B 6BC02B691836BD00 C2E55E15386BA717 9E7ADB8AB13E0348 15E98DD6CB521842 AB78D8C36996829F 1709CE6DD7EB1BC1 928CDA24B6B84705 BE447A4AA770B931 107AFC0E5275A6A7 955D681D7B8BC7DB 4CD6EDC375268309 C43408004EDFEDB2 E9893A13F964E828 D1F6C4B64F959962 4B49D1A18877C6F8 660D011C077B401D 31023AF69B536694 BDCAD420A7D254A7 9F5837EE0E4D9133 A3995B49E5C179EE AF3F91B9AD717DAC 3D2C7EADE1298692 91B6FA5D6AAB7A0B 379A6F4E6CDDA85A 5906357A0C2EC69F 7C145CDDB68C4B4F 9FFEF322BBE6A0E5 0A1E98DC30081103 6908FD49F85F85B1 9AFF205B1B7FA91B B43988C69A12D4EE F36B74CBC93EBA1E 8EDC88584746D297 7A93529D04B10D6A 721C8E11C331FF53 62DD034F4DD7ED14 1AB3C922046668C0 A17E4AEA47353E29 B9D558D755A78332 8BBE55AB9C5E59F5 284FF7CDC7BC6FD8 A463A48DB72A7C47 9F5C765A50B1C9EE 7EF1662CE21F84D8 C8BC1C6545562758 1EAF7CB0D3F6B5AE F8A38A68495A9BBB E5E23F8CDDD6BC00 AA1E5E3C927220FE 4953106456CC6E8E DD83B7B8AC7D9B6E 11C5DBCD1BB4893B E5118EB78ECCCC32 79C6BF4DA1EE2E86 D25E82B322A781D8 174C4E0D034E2B93 A709F703A4CB7716 61E6E4A192573C80 726F6CE7992B2E65 DD21A6CDA410113C DC56F2D33FA13C1B 116A8ABE28D31DE1 92DDDDF4AF68332A 5478A91E1FEBEBFA 1250F8398E400EF8 7D22E993E74D0136 A50B059CD803CF85 A7866BDD1EB70187 FA67012BA84039BC EF3EA4DB4284DC3A 3B7171DA3935AB76 736A203F405EBD7C 2C56479271DBFA55 2F527D65A3696757 AA9B6328FB51A2A0 2B3582CE0478F990 636AEE9923734836 DF68FEEF47DEB41A C314612D69C536FF BD89211EC6FC83B4 71857B2A95F37E87 E931C844B5086621 2D41128B0C392111 11015AA94BDF45B1 0E1734C5DB21F932 2FB73714CB1D09B1 FFCAD0D513FD0E95 B42D66BEA0A8DA26 300C3A85B0EE16EC 07C4320A79E30A3A A8B55576D82767CD 56532A66E2DD9DCB DDDF518BEA5F6994 5E37F6DA3B5BBC2E 7871C39A4ADFF662 629657D08135BA4C B6E1CAF2CE0FDD25 516F077E1AB70793 FA14E3604BD17B3C 057C184E15064645 B2793A1133B87BBA 4F01036FD2DB4AF0 B855F35D8C407981 49E9DE2E351B4484 38AED83CCD1A4AF3 EF7B6C9D5C1A499F 91049912E601F9E0 368B044C935C4B80 466D3A2D55518C4F 1AC1138A55C956EC 4D0C4A04C62AFC92 F0ECCBCA8B3AAD7F 328DED22B4C14FB4 966AC659FC98EA93 A57D63FF110BA16B C388557ED5846CF1 582B5C186861D20C E8138A59220351BA 1127B720F9AF1CC9 A7343B6E90870BC9 C165F1823394662A A675483917D06E07 E0C25CC025E80C9D 286D6D78F6D3C239 492379EEC19812A2 101FDA713113085F 1ED8753F18D43FFE 5E7F8D9F8C799950 048ADD242AF904CB 54ECE89C11BF9491 423BA3978ED348D6 8F92F553152183EC A80F6DE46304CDB9 E28958D8652D13EF BFA191120B45431E 2AF79355FCA93C1E 37183717979BD8E2 352E5A55633003F4 442F38B7855217E7 358FE7B8DA559160 E95FA62B1074D796 F9B25FE56412D71B 0C704138FD5E5D71 D1C09BC0930FBCBC 842AA5BD4EB2AA47 110376D34922B147 E9BC6BD68C4B8798 EFA3EF14301DE11E F5CF220DE245D19D 0739074232D04318 3EC7FCCEAA4446E8 007FF78FB8312FBC 7C5048F9B53B6836 4535EA9259FC3389 ACCFB625ED063CF8 7C8A247D448A1CB0 5EBEE29D6052B8F0 88CFCE445C2714DE 547A7311506E3567 470144ECE27A1F26 A3759925AE9C7043 8101975115D01892 AE5558E901E10379 578D09D26137EC88 CFBD70D7E7BEF2AC F94A5654089B23AE 2FECFD55AF1D53E4 4D9EB3ED7FB1865B 0CD6B3E974E66D54 3F008D38102DC0F2 BF5AD143E97EE49F 39051F4D19E57689 1610DE08FBC128C7 252493D0ADBA6AC4 54FDF1556A81CDCA E8EC695507454723 21FE371E954F31EF 2E5C11EB181E6CF8 E8805987E58D7402 95F2811E8BA66CDC A4914D5DC8DF7B2E 4B96D42A85B80094 D92728B2FF94ECFA BAFE43D96A4911F3 FE6CC4E0B6D58CC9 B0E5B838012E1601 57D93A1CE3DB47BF 64875296D79E0D14 AFEDD1338576AEC2 730458562A7C9E99

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201209010834 (name+title). Key = MD5(password) = 0e96da60b7f94f6eb9cb0066caa0116a, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8ecd233a-bdf9-0078-8de6-44165ea302c4
  2 1cd5bec0-93b8-3419-89cc-4ba25d62a0da
  3 78e1dcdf-1549-1a1d-baf0-3324696993c6
  4 c5831bd4-5f61-7a9c-8ab1-3f3a33244dbe
  5 c577efae-8e12-5e7b-9b98-9e051c10b330
  6 4c7648af-eb2d-37b0-a964-23b79164fb87
  7 0a8cb163-8cb5-150b-a053-09f07edb38d4
  8 f26b45fa-c464-4ae3-adc8-9497820aa25e
  9 d25284a7-963e-8767-8f00-bf9c0975e93d
 10 a0b047c5-6a03-75a1-a60b-7dd2c7b2b5f9
 11 46995858-143a-6a40-bac0-4475ddbf8890
 12 9cc7eb78-2ca3-6fae-804a-9535722ece47
 13 1d3d1c96-42d8-2df6-b4f9-49b5a068d5b1
 14 e8d892c2-3fa0-7990-bbeb-481313fe32d8
 15 7b68101d-029c-2aa3-b575-04c5c5a5673e
 16 8899d499-4188-1e9c-bdd7-4de868371efb
 17 5c9bda8d-4e1d-3667-a834-b288d8cce4c4
 18 59384fe3-0a80-8358-84fa-23660bdb8e79
 19 535bc9b5-4167-7592-85b0-91fba7bc1b30
 20 ab968801-db0b-08a9-8781-67eb2396d692
 21 8f3deb0c-831b-2e77-8563-3c696a3b0de3
 22 388db40b-e1b8-619a-84ad-0cfb22bdc41d
 23 63b12f70-0c27-8d7e-a248-944d5d05d5aa
 24 88495802-9f2f-55fa-9823-234c675c0b47
 25 1efabe2e-3ad7-6f01-8a92-34e165b23465
 26 3f7f5c78-8477-0b64-85be-32daf9b51a54
 27 30d67d61-7ddc-5389-b76d-e823c65d8f77
 28 1ad89e33-35ab-26fc-92d1-ebbdab8f5743
 29 22a08ff8-ad53-10b2-9ad9-b818aab799e7
 30 85d6fb4b-2fd3-289e-9d44-3017f67cf7ff
 31 53731d21-c29a-19d1-80d6-440cc01182fc
 32 5fb393a1-ff93-1e8f-98fa-36be9c20579e
 33 8f439f4c-d1a3-7737-b4be-3e3c00be6f0a
 34 16109f35-76db-2a53-8df8-07f3cb6c114d
 35 5e84a338-5613-08c8-9913-32c75866d549
 36 46445c23-7049-0ddb-a4f6-a27b8c7ca0fe
 37 7f843e20-612b-50fe-91a8-5c994d791d67
 38 0f4193fa-97dc-4a60-a244-5ee3ec836ff1
 39 a711fa57-05f8-35bf-a3e9-bafd017cf117
 40 ce639586-299b-409e-88d8-6064b53ad9bf
 41 749bf27d-8e40-6e4f-ae01-9bdc5f71b006
 42 d48e1884-f9c7-740a-8c04-c2cd1b87122c
 43 08b77613-1182-56aa-a924-e8365654476b
 44 25fa3aff-3f56-3369-9ef3-0adc155475e9
 45 b312fa68-fbb7-6f9c-bfca-e40afc85c09c
 46 d8090337-1875-8897-8601-d6a5dac4e9b0
 47 1ea8006f-398c-3d1a-a458-96be0ab58d06
 48 3f060c81-7ad6-04b2-85b8-9aba5f508cf0

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 031753148766272138702685605212117200543467536830. Exactly this sequence comes out of new Random(929).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 29 of Run 27 (seed 1,337,299,625): new Random(1337299625), Next(8,64) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related