201209010851 z5upr

explained decrypted filler

3DES(name+title) ECB, 43 GUIDs, seed 331

Metadata

Post ID: z5upr
Title: 201209010851 → 2012-09-01 08:51 on A858's clock
Posted (UTC): 2012-08-31 23:51:14
Timezone: UTC+9 · title 08:51 against posted 23:51 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,768 hex characters · 1,384 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201209010851) = dc5eadf405a903a36aeb994dce791602 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 43
Filler GUID seed: new Random(331).Next(9) ✓ verified
Run: Run 27 (seed 1,337,299,625) (seed)
Draw: 30 · predicted N = 43 ✓
Machine boot: 2012-08-15 10:07–10:24 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

DE28AD6935C0E0D4 8D64BADCCC528270 77D63E374505ABBF FCE8CECC8DCA960E B7D4269829173452 7EC38C6429186CFF 33B7CE8BD41FC8CB 8BEB03BCEE80C022 4CB13FF6B3A7D59E F7D35F87C6DD6B20 21A28CB2AB2DC519 885AF7F90C3E2C2C 4D5CCFAF50E2C51A 522A0F0285227169 B517C12434623C03 0F18471BF181EF7D 4EBA0B31623ED4C7 3C73490490285F6D 09D1B47598ADEAD7 A2201FB8045D669C 346A6DD63EDFF278 A86C755D7724B78F 53CCA2704045601D 687A463B9D88286A 5B693B7776C04A9F 6EDE747D38C2AC86 8A551E25E639D782 B0193C78293493C7 98C2ACC05A8529F9 1245EAE6300EFCED 95B580BD37DF1774 4D25EF1534043353 1404809A3E892348 5EA810F39CBE35DD 264D6EBEC35CD3F3 4196BD75AAD3864F 85DC4808E7F0A5A6 F2DE2D5FB83E2D98 FC5DED5C1F229C08 B4013AECDE3A48A7 DDD1D92E41BC3086 6489237926399E0E 96FD523AF13B2837 C8B20B9BC79B0EE9 9B03406CB5EFFB74 FCFAEC93AB98C2A7 6095750E72ECCBD6 11961AB1FF5B862A E1764E4EADCDA907 E798581D8A6BB2AE D6E874DA9DB1E8B0 2666A2ECD64BBD68 A94EAF495FDB1557 0FFDB92AA8899AFA C6C1B7D5ECF3B5D3 2DCAC2162591268F B114B332B91D2762 BAC51CC25C1AF6F0 5DDB7AD4F25371DC CC8E1D69AA0EBE27 E935F9DEDF0EBE5F 68BC86F432599E84 800FD6472D54FBCF 1BDA19421374B762 E9AD08FBBB688819 297C9A05D39B92D2 D07AB810530F7ADD 3589F2B2EB27ED74 A7996B6B575CF087 758B59049EB40CA8 B442815B39F11D8C 01F870A476656550 519FADCFA3D2F542 4FA37B536508800B A70C9BEC4D93490F 284DE2B25A427CE4 A481DFFA27146296 831DE2C3CEC3E350 DA9DE93FD2507A63 9EACD16A58569C6D A2FD08C210298610 115C632DAFB905BA 29434692F37A84D4 B9B429D7E21791FE CEE5ADE04DF8ED5A 93CCE9039645F55F 78679261AC224666 E01D85358D318FF0 E8408C66F0F7770D F1B03679470B8065 8EBB558C2AB4CCE8 C6B465DEA76EC1D5 32E58BFA44E62790 429CFDB207AA46F3 2319E472FFFCE086 1D787CE51AA6E129 82F56B381CECC725 D86AD078F09D380B C527357FD2A0DD43 E77AD09D1FEE2DDC 4B8011C83AC6F070 1BF70382173038F6 85DCBF88BB757466 A5A6E50E14543C3E F32CAD33E3243EAF 4989F807CB9F551E 75DD464570C36537 D50FD995448445D6 49503212861D3CB1 9F32E54722831B9A 7F82373359F4E5E3 DF51B2C888D183AF 1DB9B42FA211F75E 0349713630BCA8CD DD26524A9F3CE89E 5C9072CBAB7FF34D EB3524FC9B0F98EC 12D19C10D59401EB 664C577A0C9F5A2D E70B046EA4822801 4653414E14D45993 6A3DB55CFD3619BA 7BAF24CD91FF300E 1DC7C38AF6BC9183 6C88F15FB9AD2F77 E239F9F2C9F21C51 F7FC2B73A554CD71 94556BE170083A52 119D0F211E482031 393D8A9640300355 6D6272777283C4BF BE20AC081FB0B441 89FEBCAE6D2F31E0 D941DA452F76EDCC 0CCE4B144F53E5D3 4416DB0D719E55AB 8411EA9C9AA3B353 0A83B19B6012DD77 257AB11ADAD18B79 29216F002106E316 F32E89985973DD28 5E3465D1CED04BA7 4117FAC7079BC974 6C2A86523ABE8BF3 89EE30EDA14DD2C2 6B10B17CBD88BD3B 26E3E5D996C4EC4B A2E3F2A1933970DD EFB88A0834EEC9EB 743FA150FA6A1AA4 E77411676A086BB2 C37FD87211B31060 10BF367B1C234335 7F7018E1A86D06FD CA469006CED28464 94BADB050B189999 4B6CEB8A70F12B91 BE301574F241DB69 254AA7A8BCDA8F66 CEAB52C1E9295B92 CD91EA825A9B2C42 AF272E4B5F2189A8 67CE52C7D49E78F2 B30866FB5BA95DDF 28759E2EE1D3CBC7 F11C471811F57102 654A613930B629FC 63BFE83C13FAE77A 340B70F2B2E7DD04 8F0824513961F038 5C3E4985CC26B603 ADAF576077B218C4 73779946807F233A

Read the ciphertext. Strip whitespace: 2,768 hex characters = 1,384 bytes = 173 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201209010851 (name+title). Key = MD5(password) = dc5eadf405a903a36aeb994dce791602, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 43 GUIDs as hex (shown below).

Decrypted: GUID list

  1 61e549bd-3f9a-56cc-95ca-0e7c61bef67d
  2 b8809b03-1c91-8ad6-ae87-4e1194a71f1e
  3 bd79277c-05b0-1890-a6c5-8dc6da5a21ea
  4 73a65c79-0f61-19d6-bd12-70ba200c3e3c
  5 efaae552-4f0f-5642-9170-67daf072ccc9
  6 acb5bcd0-32a2-709a-a87d-0b2ccd18f45f
  7 ab86f891-92d2-122d-ba92-c8fd3ad80860
  8 3cfe831e-f17c-4a10-99f5-d1013b823348
  9 b8aca2c3-9921-8105-ab4e-5efed94f81b4
 10 ed4c338b-1571-210a-b6ac-922728240e72
 11 7914a1b7-04dd-1d4c-9b4c-5910ff28403b
 12 7bb929c2-0090-7ab7-acae-418a8c831e9a
 13 c2c4e52e-5636-19f9-90a0-845dd9fbd970
 14 f0287767-ca5a-69d8-921a-cfe2e074aa46
 15 8cf9447b-018f-6d14-8f4e-1b3913681ce3
 16 2d9a6158-482f-606e-97b8-5131986159e9
 17 b9e52693-2390-027d-a139-7cc78be5a29f
 18 56b7beaf-f4ba-16fc-8595-7118dcebea87
 19 bdde0829-3ac5-522d-be5d-c424d8769d79
 20 9851e403-27b8-41e9-a735-0a6e258618d8
 21 63851db5-32e9-7776-86a9-08fc7efc008a
 22 5c65a9e8-b471-031f-90dd-08f825e6bbdc
 23 98e32c35-00b5-837e-b78f-5ce5c99aee5a
 24 d30ce66c-bc86-5b97-be48-da57fd995260
 25 c94f191a-c3aa-1a75-be7c-3888cabbf23d
 26 af384830-d80c-39d6-a47e-8651749b1f25
 27 2fbe9938-9a0e-44b2-9736-72b6b078ca07
 28 cc30f699-890e-7ca9-a099-3f50900aebef
 29 02e7e3f4-d275-806d-bf68-7ba84a653694
 30 5dbd1b93-704c-54ac-bb0b-815d5f3958b8
 31 92beb64d-3b38-3b81-8a1e-331c9ba1fa33
 32 a3438b68-9ead-5cce-a986-13a97d798dad
 33 7590992d-25b9-39b8-8bf0-c1e0344dc762
 34 9d4771ff-7def-2710-b6bb-8b8e098ac86f
 35 395e8d65-038f-17d5-a3c1-d847aa7aa540
 36 48494981-a681-04fc-a0d1-794e023fcf96
 37 6b1027d6-5a21-1ff0-9433-920bb25f666c
 38 d893da53-3963-816a-ad71-e485d07e5c03
 39 7b9d12c6-7798-06a4-afff-61a4cbad0625
 40 e8f05a41-3358-8167-91d2-8c3dee9f39ee
 41 3dd546d2-de14-5e66-aad4-3c59521622ce
 42 2ee30f9c-12bd-6967-9d04-a9204d72fe41
 43 e130c5c5-dc7f-4ea4-b1c1-7e1f292be23c

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5811571482171666015470851347853532101808564. Exactly this sequence comes out of new Random(331).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 30 of Run 27 (seed 1,337,299,625): new Random(1337299625), Next(8,64) per post. The RNG predicts N = 43; the post has N = 43 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related