201209051900 zf2mu

explained decrypted filler

3DES(name+title) ECB, 47 GUIDs, seed 571

Metadata

Post ID: zf2mu
Title: 201209051900 → 2012-09-05 19:00 on A858's clock
Posted (UTC): 2012-09-05 23:00:07
Timezone: UTC−4 · title 19:00 against posted 23:00 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,024 hex characters · 1,512 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201209051900) = 327b4f50a84171b9ec12d16ec4ff025d (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 47
Filler GUID seed: new Random(571).Next(9) ✓ verified
Run: Run 29 (seed 1,844,859,734) (seed)
Draw: 3 · predicted N = 47 ✓
Machine boot: 2012-08-15 10:32–11:32 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 6 · 2
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

ADFD58D76B5E4366 54BB07D707FB41D0 916C02F8FFC67C44 D237B2478A000452 F0899373756E8E8A EFE826A4DF013944 3DCB2320764ADE05 C56664331EEFF747 9548A658DF691552 0F7AD6875746A061 395269145C4F6295 60F295CAB5120EB6 59C199890794CFD5 F6D4D75DFD74543D 3D3F350482B5DADC 369A0B6292BACBD2 DB520307DF380384 D40009D260A5E451 FFAD16F0E36FA2E1 0E50E69C0B04F7B6 5C3B8C46542CA782 50A9BAE1FA471E93 E3E230FC883A7926 20255215537E310C 603B8EE2F35BB717 5BE4A7253694FBDC 698570E60568C6E3 E5D114284F50B646 2B21C0735A00A3BC 1704E76586F9652C 015EF973D7BF3BC7 5A2783A0E988F785 55251DE7DA3497B2 DA019753466E63A3 D46B9515A55FA8FE 739FBB5898B67D5C CEDE22FEF81A8E0D 591E804E97025D8B C6E608583A9CC1F5 AFB925B338B1A5E9 78EFEB4F010AA635 D553437938297073 489C876E24C198EA 327BA342B2E29DF5 8C4707A9534C204E 1A40BBCC23956C80 CD82B3C1A72C9263 00BA8961A9744205 BC40FF6134DEF9A9 9DBB87947132BDD0 40841F0E771C837A 02209DCCC8E8BFD4 849AA41CDF0EAAB7 B1A91912B97C8B4E E2B5F3C2BBA5D953 FABAD44ECC60F46C 430970F7B1D3248A AD4FA68C7A7FC6DC E72FC22B13C7A9C2 8642F0BD3EAED0FB 596721B6DCA05C45 89382BD3DF3F95EF FD8057A9F218892A 03B0B9D86F218A30 F753154B65A4EE99 23221A3F77DFD0EA E357C7070BBA77A1 2DE626079FEC8F3C E00A8BFB8F16D5BF 60286570E4AE24F0 A3D4E377ACCBF86B D6B35AC7904E89C1 347BA9C829234520 A4BD0B8ADC8FCE7A 620B1FB32A42AD43 089253C917B65AAF DAE08178C7714C63 CBD49EA61702A63F DD18D7C2FA39CFCB E21AD58EEB0A3BFE 99FFFD0097D22EE1 1B509912E727A61B C9116F6ABEC75212 C3681EAA417F4680 BECDD1BA9F72D78D 94358A52A6744A37 A3A4FAC51855C4E4 91C901794202B357 F206252092A1FC41 40301D0AB3208210 6571B2DA1A5D80F1 47965DB2B5146BA0 6D3BD4066B1FC046 91E505EE9FB5118F 4F6A1227D5B22EB2 A08DDF4ECF46320F 6808654B79F08C6F 6CE237A8D9B7C541 34F26C53BCA7485D FB85CC00A6CC7BE3 79F745F430209D9E A3926B7A56A9D7C8 CAD7FD247CED05E4 6340287A8814FCF4 1A018FA4DC97E7B7 725EBFB036B7A040 1D21315C2FA0FE70 AA392F50BB2178CF 579EFFB17A9489B9 6C437C05A3102FF9 5FB0E7C31356BBEA 909F0C9D14EBF043 4B278BA120471528 75CE9B7320C99981 9E398A058F3CE652 122145023B0D2298 1F0B8B452ED86B63 33DDEB818BA1C02A B6789502F5C19653 4E79FBB5C4B66DE0 D518F5E9BC38D155 8C0CA312192BB066 FDC66F62B99DD7FC CC97DFD5D1FD279B 6AAC9F827B0FF52C 7513027B99DD57CE 61BFCFE1A9D76ABF 2061FC6B6AE550A1 776B4F513E1B0FFA 086A9653ACCB2E46 66E538BA2615F7E8 C156A6D5FB4356B1 1BFF1F6D5E3F7418 2BA7300D70878885 BEE7F0FD3A719CAE CEF8DEB958C5EE8A 7B430DF49168C9F6 109FC912228DC7F1 63C0DDA4D6888FA2 52E7A6DA07368357 798284555347C892 0E884AF24CF68E3A 9B6B4EE5E72CB0F4 D7EE854F8CE38FA9 74FDC3106D6D3AE8 CCC402E9A8DD877F 6959951F9D96F130 6C61FF67EDAFD47F 7A599E42840824D0 288DDD14C369E8E1 BBD556E824D041E2 40EF8C184007298A 24CB895165AC40D7 390DD8ECF6D9EC01 C46827843727EBFA B7235445194F8992 4D6247F2029F6E3E 1A3036CAFC42183E 18AB7ED4EF8C1E3F 5BC51234BF032F7A 9790ECABE5F28C56 2102A133F53ED686 3F69E2B26A5ED1E6 62C903EFE50ECD51 3DD40E0930BC74B8 9463941427D7A17E 4408AA175992748C CBB19F2FD99882F2 FD03372389DF09EA B9C8A00AAEF9A584 5075E113F49401AC 10FE05D4D8D3BDBB 3FE79E5DA0C7C354 90504E2798E5A946 C35321413303E615 DF6B03E2BD6CDEE5 F36B879FA849EF6F 8608E19E38417C08 1C4A7572382FC4EE D6E1190D36BA74BB 14406757353767D1 8664899564B44A39 61767742984487E1 C79E894F8A63EB31 F9F810BE4AC39D42 05DEF7A475997425 2F9B232764B6B73E 4732B3BB715D6DB0 821269480E60B43D

Read the ciphertext. Strip whitespace: 3,024 hex characters = 1,512 bytes = 189 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201209051900 (name+title). Key = MD5(password) = 327b4f50a84171b9ec12d16ec4ff025d, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 47 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a8855618-cdc8-0edb-ac6b-1559d21b0f4e
  2 6ec5486a-297e-3933-a9e6-fd7eb080fee6
  3 0f4706f9-caf7-8db8-8e43-650fb97d9e31
  4 f2340577-d1ca-32f9-974f-ff95b95bcbc5
  5 0e6f44fe-2d2c-0a54-9274-e0efdc26d078
  6 cbfdf2d9-acdb-47dc-8943-3b6e006af8cd
  7 f3e87407-4db0-666a-95a7-24495951c44a
  8 993a3e61-4667-8259-8072-035bd54a4d61
  9 5cb372c9-3b0d-5583-8a8e-959304d6c185
 10 f899392c-6ede-73d8-8c3c-43e901cdc7ee
 11 becf03a0-3ffe-8402-b7f2-2291459b5686
 12 1f7161bb-f757-289e-b0dd-f396e3c429ec
 13 8dff984b-d53b-136d-bf42-0400df898f7d
 14 22caeb77-26cf-4dbd-9787-720bec47765e
 15 674f48ea-9d8c-57a3-8968-0f37af3346da
 16 b507c83c-1cd8-57c4-8616-a47b35d309b0
 17 43d28e48-abca-79eb-9855-137071483b3b
 18 7c983908-8401-0985-98da-c03ce5128f91
 19 fd431490-f2c6-1cb5-a02b-a8fd82941603
 20 32096f05-194d-323c-9b99-0324739106b9
 21 ab2df1e3-7a32-63e3-8304-a7c40b98a90f
 22 6999f648-524f-80f2-8b28-1e1c2c3d0dce
 23 9a7356de-662b-416e-a306-7b92a4beb572
 24 02173510-5832-4790-a23a-7a3c59d1a90c
 25 02c6c0af-0f24-5bd7-81ac-4789c0d3a08b
 26 28fbfc4d-27d7-7c06-94bc-8274a3836e58
 27 43b7a32c-c5ae-778c-b9a8-84c0aeaed861
 28 efbad4b5-716c-4dd8-9574-67876412d041
 29 0c072fbe-b841-2d16-82e5-cb59b85ecf0c
 30 aad59a21-1b6d-82b2-89d2-eb4a19db075a
 31 69745d9b-035c-8183-b652-8bfd20601efe
 32 efc5124d-e728-7f44-83ee-f2a0554ec116
 33 bed9b192-032a-8dab-bd4c-bace7f55588f
 34 c4697e39-f9fd-25f7-b067-1f8620ed59e9
 35 8ba7b06d-03e1-0c07-bf43-74b77724fdd8
 36 b2eab12e-6b89-4831-8f68-8dbe91ae5da1
 37 b50d48e9-9223-0f10-949c-1c9737fdb23f
 38 e4e59d6c-3843-4dd7-bba2-fcdd7677b4ee
 39 18a2301e-8be2-1fee-866b-7fe9d9ecfda6
 40 f774a29f-d504-155e-8dbc-92b002f17855
 41 d92f5c50-77ca-7844-941f-b4917f892d22
 42 d445ef6b-ded8-3e00-969d-33b598988813
 43 b106be8d-ceec-78ff-8c1c-eed90a5e2c90
 44 1abed446-a432-8a49-9584-41b603da3fe9
 45 aee2f1cd-8940-8ade-a474-56db46022ff6
 46 38d6c5fa-406e-5752-bb85-d2326ce39031
 47 a50a2d77-366a-594b-b408-92d14d45478a

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 03830468578214557013684457742887820404117378855. Exactly this sequence comes out of new Random(571).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 3 of Run 29 (seed 1,844,859,734): new Random(1844859734), Next(8,64) per post. The RNG predicts N = 47; the post has N = 47 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:32–11:32).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related