201209051700 zeuw0

explained decrypted filler

3DES(name+title) ECB, 42 GUIDs, seed 912

Metadata

Post ID: zeuw0
Title: 201209051700 → 2012-09-05 17:00 on A858's clock
Posted (UTC): 2012-09-05 21:00:03
Timezone: UTC−4 · title 17:00 against posted 21:00 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,704 hex characters · 1,352 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201209051700) = 43d405a8c2d8ed21b9b9c43142fd590a (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 42
Filler GUID seed: new Random(912).Next(9) ✓ verified
Run: Run 29 (seed 1,844,859,734) (seed)
Draw: 1 · predicted N = 42 ✓
Machine boot: 2012-08-15 10:32–11:32 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 7 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

59FB5592D5FB9903 65AD31677CDA0F5F 670A35ECA7025F00 F456861E8E9A0176 C0C91029B9C8B799 4066BED5FEE17619 B89BF44B783A647C 512F983732A0AFA8 1AB4BA2A609FCFD1 539C2D6398934A95 13C455F1133C484B A54F53B2691370F5 495DDF514B5444C7 131F116199596F83 8ED34F0A929630BF 7EB97E9B31DDBF80 DB0AD1376A3A568E A2434006FD46BB91 CB759FF89A6BBF75 73E216023774668B 990D16A92B17969E 9FE9DEF2E9E40D6C 502FAE685D3E8047 ECE14755CFE92D8B E341562EA0B144E4 761D7ADB588EE2FE F39B7439A64E3E22 EA53F8C8BBF89E51 D87E6384040CCDAF 5A99015175996659 6927401F6ABD5205 82C5D3F63E128070 87D13C8C546B91E5 350495AA507082F2 26BF0DE90DAD05F4 9EF1814C311B0648 E1A890AD0FEAD769 E6C51F685EB3B1F5 F8DC8F1ACFFAD5FD 931E7A025E176F4A 11C85E25D7CDBE64 3372038F3DE74F06 0650DF994F17A655 D6FECFCC50D07FBA B6E12126B88FFCC3 D2EEB83917DBD6AD BCAE9497FE311C74 89602F355034DB3E A75AC7F7413BF7AE D5D43FB05820F1E0 6416787349821EFF 5DA157EF51525987 546477BDF727BFD5 CC55CB1554E38FC2 27DDC7AC0FD7521C 776AF63DDBEAA571 BC84DEAB7EE0A2B5 9E340C5FD3CC482F 9B2DE5CA1F10A5AC D4FF17A6B1159B9E 2908CD10A5FDBC06 4E2B80D63F70090A 5376E48685BF89DB DCB0397C0BD8CE12 592547BACDFA0AB9 144880CFE0D9376F C4901A191522037D F08EC0393484F630 1D472E9FB0493817 633ABEE5BD462E65 32A3F234B9F9216B 83F14174D71C9F77 8CCC39E8D7D275A1 6C3BD3F4F5AE83CA 326F278A159D96B7 F0B3CE7A61013BF2 99BB465C61286CAD 8458D6DF2C8D4DEF EB4AF312D5F6A308 77E4A5F44DA63706 3A73A8FBEFE63ADD 4BF67173726DB415 022163D250109511 8EFFFBA580270274 3E7DC89D94F805E4 7B44F92F2FDECD0F ACB24F31391F32A1 92BE050EFA388361 0613C6DE00E59FAB 654085D347323BC9 49BCCF7EBEE3C79E 31AB6A2D1E446D70 8F6E3DE80994E6E8 DC37C0D97F837EAC AD1D73EB33F506D1 E3F379833A7BF34F 529CC317D41D68EE 5CF71DA743FCB668 774FFB12852A7F2C 58E008AA37842FEB 7B300048964FB676 5D2F875E613FF86E 234DCB36743918FD B77CBB4BBFDCADD2 B31050A394E8CE11 414E9EFD28AC2489 F05EE9FE062E8B14 02737DC2D4CFD054 626C59A854530A14 868FAC15E3333AE3 BFB5E1F82B3CC64D 0E4793914006A71E 687A750C42F67A60 3775BDE52B606133 32EAD8368CBFBEC1 CB73C662C99E0578 5BB2B435F6C45F69 861D3A43864586E0 8A07F6A68D909839 DE09A72B81B01265 49FEA61A501E5796 8DA1CE4C7D491F5D 06DE3D57231F93BF AE9961D97A75A355 D7ACF1ED8C071FC6 C4A242D1A8DD8156 0C0ACD3C69493C88 51C5E7826FD61CD8 6FB1A94B9EA27C3A 2BB1C68B179BEA81 BFE9DA4E214805F7 F12DE6689691E224 1866C2AFF2B790CD 6F9FA759E5736B2C C2D84C7B027E977B FAE578F8822FAD2B 3A52A4F27592E9B7 D0D5087FC28F4124 BD3118DFF6CB3EA3 1FCBDB06238CE86C 5EF1D14938EB47A6 66403B6F1F6A94FD BEB875FA3209E11F 34518FFF3DBB3939 5DBDD4EB6DD48600 2DCE55A1EBD20A92 19672A821C46904B 68F783E7F49FBFA5 24877B063CFA74E7 A133FF49FA6BC188 E0FE343638B50944 5EB71C379358D7E3 FAABC1CCB2E34AE5 5F5EC67E0A9240E5 B6F197674FBB6103 C1961C916007C73E 8D8891FB7856E087 9CAD402FF95E1E27 EEE93423397A622D 80A3C1728142AA51 CCB35080C4FA7386 FF3F7861BF11C316 41A5A5F4F9E12B05 ECEA55A00B28E185 209866022D1A845E 4FE2500008898204 1831A2C39CABDFD9 EBC23544BE4E7A13 0118BF4C8F13803C

Read the ciphertext. Strip whitespace: 2,704 hex characters = 1,352 bytes = 169 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201209051700 (name+title). Key = MD5(password) = 43d405a8c2d8ed21b9b9c43142fd590a, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 42 GUIDs as hex (shown below).

Decrypted: GUID list

  1 1c4e83a2-da46-127c-8284-14f33d298063
  2 94e99b3b-bb90-3042-bbc5-92eb840988ca
  3 a8dc0eba-dd69-2b0b-b8a5-ed4323b77ecf
  4 86137622-dc5d-1ec8-8dc2-4cd923c88328
  5 f9f28bd6-f207-87e7-b94b-db069336e2a5
  6 a705d8b0-b28e-4336-ba9f-7f12d08c3260
  7 88e98e7a-08c8-41d2-877a-db854ff94ad3
  8 d7f3c035-bcad-8890-a8c5-d1eb76bd0a15
  9 9e0624a2-0f31-7ab0-979b-b767704099a7
 10 44c6d046-c59e-560c-8bc8-605c0bccd831
 11 25dd7a85-24cf-1e4e-94c5-0ef546f2314d
 12 6349e96e-5e85-462f-b040-36d138bffb7d
 13 f16a69ec-b927-54d7-a8bd-c249dc92c120
 14 e565ad49-9416-81f6-b54e-1d89bc648f78
 15 c4a8ea88-f58d-3eac-9fa4-5cddc54aa22c
 16 825ec89a-2c86-5c6d-ab56-3fe9b108275f
 17 183c7e15-7f96-2f16-b014-2ff06add4932
 18 1faf9998-8d03-3fe6-bf85-1f8fd6b993f3
 19 a32c0afd-25f5-3e6d-8e6b-1852a84054b6
 20 bb63aacf-b883-4651-a000-5ee53389ac0d
 21 987ec680-5799-836a-aa81-8ae36737ff6b
 22 ab1bfec7-bdb7-501d-b6d0-53decbc96620
 23 e7f8673d-a028-1bd1-b416-e1baee7e278b
 24 ccd7508f-7d8d-5d7b-88e5-0f78f69701e5
 25 b62ac986-751c-009a-b467-86f8e6d5342d
 26 c3fb3419-3bc1-023b-afda-1392e06ef59f
 27 72a1102f-a4ce-074c-aaa2-83b5e00497e3
 28 ea369cb6-dafb-6a1c-97cf-7a82f4085529
 29 4cb9030a-610c-43b3-8513-9d248c9c422f
 30 e5881919-9ac0-56e2-a9aa-c18eb1cd1459
 31 8fcbe600-14a8-7b10-9859-30faf30e4839
 32 92a11b81-4808-6f5c-a4b0-34f35a2363e3
 33 e48cc991-f110-06d1-bcdc-016a0b84f1b7
 34 3a09500f-21a7-78b6-9e5e-39a796ea18bb
 35 f17cc68f-5709-0eb4-9f09-cd15bbaf6af6
 36 0d309d5d-65d5-2319-a3ed-9a4c55be55c0
 37 35efe7a9-f799-4e6c-9e61-f2103fb0e6a9
 38 f453b7fb-217b-83d4-83c2-d3574aafd74c
 39 8d073061-917b-4dcf-b741-82c28e924f3e
 40 e2601b50-d57d-7dc7-98f2-339cddeabb72
 41 36734b22-d5c4-5f3a-8b3d-04c059cb7ce2
 42 81113952-15bd-078b-a941-f49343ff6832

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 132184487514583523348515000645760702484750. Exactly this sequence comes out of new Random(912).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 1 of Run 29 (seed 1,844,859,734): new Random(1844859734), Next(8,64) per post. The RNG predicts N = 42; the post has N = 42 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:32–11:32).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related