201209041830 zbtzr

explained decrypted filler

3DES(name+title) ECB, 56 GUIDs, seed 215

Metadata

Post ID: zbtzr
Title: 201209041830 → 2012-09-04 18:30 on A858's clock
Posted (UTC): 2012-09-04 09:30:36
Timezone: UTC+9 · title 18:30 against posted 09:30 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201209041830) = 11be98ceef742a11da07f391ddc6b8ea (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 56
Filler GUID seed: new Random(215).Next(9) ✓ verified
Run: Run 27 (seed 1,337,299,625) (seed)
Draw: 57 · predicted N = 56 ✓
Machine boot: 2012-08-15 10:07–10:24 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201209041830 (name+title). Key = MD5(password) = 11be98ceef742a11da07f391ddc6b8ea, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 511916e7-99df-06a3-89fa-ebefc9906299
  2 22db150f-92cb-84d7-be7d-61b96702633d
  3 bbf63b30-48a6-0240-ad42-c7f402b63699
  4 f9f53c12-1375-492c-85c7-ca7c4ccce6d7
  5 825d9a1f-7db1-214e-afd9-7e4250612f4a
  6 f66c44ca-b886-4063-8502-515f6d96e740
  7 5b1abf7d-6f5a-2424-b1e2-d91284dd4e39
  8 33495ae9-6f2d-22b0-9224-8204b892039d
  9 dfb33149-3d99-52d6-8d72-aa15df6043be
 10 b38b5c9d-3df2-49b7-83e2-952a36585b98
 11 65f4f1a7-a232-6740-af9d-4a221cbf3629
 12 b66ba74b-f89e-25a7-b711-98b9af3306ff
 13 732d652c-cd63-3c17-9d26-91cd4fe8e6c9
 14 ff41c83c-c87d-23e2-9e61-1cd79830d15f
 15 cadf1aaa-0f5a-4994-9480-d9b30920277f
 16 b52ffcdf-c8f5-2918-8718-ea30a1dc2393
 17 f9787cf0-eb54-2b09-acbf-e2a47faab121
 18 be5efd12-e652-2b31-b2c5-32d17e504001
 19 172aad85-266e-4509-b718-0cc22ffb363a
 20 cba649cd-db97-5b3c-b7f7-8e6778acc09f
 21 bd18c47c-45ce-3a48-a930-85d50428bc99
 22 dd8d91d2-b5de-55fc-8c75-4857355e0cce
 23 a4e18b3c-58fe-257b-806f-bad7a3ff00e0
 24 610c2e90-86ac-166d-9585-4ff3d5a338bb
 25 ec745ada-2054-687c-ae67-4b128c1bcbc6
 26 fe9cfb02-d3c2-719f-813e-f443961887be
 27 405d1a18-5368-7b40-a7b0-5a456ba12dc4
 28 388e15f4-a0c6-8ae4-8226-8e957ab4066d
 29 2c2b9662-259b-8b05-9638-6780c3563e51
 30 0dad84f1-544c-2a72-9c77-a224d7a98ca4
 31 bfa488c8-9da2-5477-92b5-a58b8f54395e
 32 5a4e834e-e52e-0740-a282-b91722c73779
 33 1c8a9c38-3326-6c34-9543-5446b4091b60
 34 b7a24fb2-2488-3f6b-8649-d70e973180d3
 35 c3d998b8-933e-6da8-8f95-1d4f12c1b76e
 36 82cb219d-eff5-0bff-acd2-a7f6cbad20bf
 37 35207a2d-6ac9-1f71-8342-828f71ae33ad
 38 9e8d6945-c47c-8c2d-80b1-45f5ac2960ab
 39 8374275f-2f5b-1c9c-90c8-5695ed34524a
 40 031d6521-4e45-0097-bc84-a98db061b2d4
 41 af2eebe5-c33f-5dda-ae92-5fa8351d313c
 42 c4b6c5fb-6009-4abd-b0dc-ed5547e81ae3
 43 a023739c-0bad-1831-8877-fb301da53336
 44 cd8a0dc1-a61e-5e0c-b1eb-91c3229163e7
 45 79d90ff5-43a1-25ed-9e80-d3ab22580779
 46 f69b33c3-a4a2-1feb-9b0f-12610ee8e951
 47 7345f277-e85e-4abb-88b2-b1f89daa2a71
 48 d4d5fd75-483a-7087-919a-f10482d094bf
 49 c6ba1137-c4b1-1b5f-92cf-83e795549a30
 50 487b32fd-ca9d-5454-9dda-e5206ec940a4
 51 19db219f-b9bb-3cfc-a59c-118fa2edefd1
 52 10888320-7943-53da-8259-f994e4da934c
 53 90bcfa92-2fb7-76f8-89e1-cda581cfe2de
 54 10289da5-dc3f-2d36-9bde-06f2c7ac5670
 55 cf7a78d5-56df-208f-bc80-901d8a0bdcaa
 56 21da1022-b206-4718-a885-41adaaf33f2f

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 08042422546232422245352167788250636018105415214715357224. Exactly this sequence comes out of new Random(215).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 57 of Run 27 (seed 1,337,299,625): new Random(1337299625), Next(8,64) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related