201210080845 114vef

explained decrypted filler

seed 575

Metadata

Post ID: 114vef
Title: 201210080845 → 2012-10-08 08:45 on A858's clock
Posted (UTC): 2012-10-08 12:46:00
Timezone: UTC−4 · title 08:45 against posted 12:46 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,960 hex characters · 1,480 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210080845) = c5bcc8bdecaf9027027b017c1ca90064 (name+title)
GUIDs: 46
Filler GUID seed: new Random(575).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 446 · predicted N = 46 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

6D2DB458E90E8E21 0D4B19D7722D76E0 BD4EFAF9D8FE9A4B 5F2AD55D396E6D52 1362AC1AF79A856E 54B53DE840C32C34 DCAE00D363CEB888 12A0A07085079BAE 42DD4568F72045B9 10A65C6C6E39413F 8F9BEFF2FA3D90A9 952280D2D039014B CFA1DEF398BE8650 6B1712D36AA0F5E3 CF3DCA7A735014A8 B1403A356E1B2BB7 561080FAC5BA3464 CE37C9219C69850E 9E12DFE8D30BC613 135034A804EC209F F61B357E621C3230 3FBBBD3833B35977 802A1AACB019D59B 77BB74DD6AEC10CD EDD369AAB7E9211F 383F9A405F5AD0F5 2587FF8EB6213E02 6B697E9BA3BB3B3F C816D2FFC2AE2DBA 16F93AF1D1FD6F48 6ABC6B9B27D24EAB 38A2FCFF17E0EECE 9A1CD1198A67CCF6 16E203E5D9D9CD32 9557923E0C3F917E ED1F94F30E8051BF 7DB11650687906F9 58E7521942725DA4 57E9918D89E9CF5A E1D8E191D1A94928 4E4843C1626F010D 4E714BB6D1784585 2FB216644397CB7A 67229B1D60244041 D2A23C58A95A0236 CB15E2D0E07020F3 79E1C76E982551A0 7F9567F5A3A5E28B 1323088539857B16 E5056EBF79A00EEF 3241A80BB77DC23B 028F05BC4F4B8E96 65300E52C8B7DC65 EA5B84013EC72307 6ACCA90A84411CCF 42665211B2145BDE 8275974F51CF4499 8447E3F639DC92D7 B54139777D961F60 35EEC1F4DC67F4A6 07FFFAEA56CC2338 84BB67580CE46771 FD19147FD98498C1 480A9DD36C112666 CA4637A43DCDFAFD 73D57F241740DB50 BE487A4334B63332 2747E308625A55F9 5DC5F69E96FEEDCD C7AF0940C43B6AAB 95D6395A907C3AFA 2B479D71BB00872C 0A1E011028412271 ECC95A0E307F3EB6 8DDAE34A5C6C496E 74F2DAB500EF415A 3CEFEBB41DD744C0 0D03A667BEFF66D3 21B44A2C0CC73511 CEBB0B343DC153D5 CB264D09E59E2733 B7034714283262B7 5969F6868D4E922A 2DC49BCFD5529392 EBA9D778E10C309C E561234330AD0357 D524E044CBF007D3 B467E51C0F079CAA 124FE310089306D7 30BBD70F9B36D0E2 CC970470CBF85009 EB53ED2B7C48D4B7 EDAAE4DC97AD0ABF 740E18043D17F8CD 845098F1173C665B EB10F13169B6A1A6 083A5AC32227A01C 1E62E5D974822B52 940CD0D2408999A2 FF3E55D494B7C996 96ABC00C050BCCC9 654EB47587C12371 A1CF726756CAB48A 44B6487061915882 5EC20017F924CF94 8CC9A66DFA313E12 799B99DB25F5F903 449885F56DEC8199 35ADEED6BE412580 21FE9B4A9C79C8E4 48D54308205FC42F BA463E34E883B1BE DBD5E95D5CAABF77 24396A884F24D833 C6C6A60DBDC889D1 C676891F793A462C CD14C1D4705788BE D373872BFA4DDB7C 7BFF2A353BCFC879 6406CBFDABEFE032 7908CD5E866B1F59 4983F68C8656D856 EC103FC7CB1529CA D4CF030E16DF6BA6 B9702166C5D29597 E5CD6D88ACAE8354 701A4340D8970B14 D61FC2299E27A8DB 8B357DC40C7645B4 629F1F73D9BECC47 43C7C13B4107C60F A1CDE84B4372E35C 48038C3FB2EE2B02 52072731D911D28D 6E4C0FDEEB4C9421 87B89451FDFC261C 005EA677C53B59EB 221C32034E6038AE EAFEB054A84CDD38 EE92BFB72CACC0AE 9A245C0AA90CEE44 02F21C3228399B8A B53D4B143B028FE8 572E8D333E11E51B 8B68ADD144B0480E 8FD3BE16D1C713B5 FC368E90090FD610 6507A00FD4818EDD 589D41DC16491798 BCC279C8CE15D575 E30A84F8FDFD3BAE 41F59C3072F19504 A7B84F1EE3EB59F2 F2852E0BD41E65B3 3221A644BC3A4590 8B3AE9B278FD90F0 3EEED5D3F71D2AB4 EE0DCEE710C036F8 559BC9320D3C439B C4BE7BA4E570A5E3 DA08DC8986D19997 EF6632C54B502FFE 4E519CF5C02F8CC0 26A70DF1C37BBDF6 65F73CD48EC68C6F 7D9887AF1D6A3550 03709BD740038C1E 985F31F2F6D99281 9C09BAA4E5664CE4 8421B6E459D3991B FCB74DE9425BE00B 99AEF911E050E850 FE32F9CB76347DB8 BFC3A8C885FDFB6A F3F473233C7011E7 C110652907825857 B1A3A98CF309F2CD F0160C71810EC829 2CB7B977118D2AE8 190D7AA3BD59B4F2 D482FA99D562C1B6 FDFC85F6435E75B8 1CC8C0CFFF7E3C57 888CBF689007BE31 C0B683BB79752447

Read the ciphertext. Strip whitespace: 2,960 hex characters = 1,480 bytes = 185 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210080845 (name+title). Key = MD5(password) = c5bcc8bdecaf9027027b017c1ca90064, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 46 GUIDs as hex (shown below).

Decrypted: GUID list

  1 fe6bd71a-aec7-1c8c-9442-d2f5c6908c2d
  2 14719a83-b7d6-4845-8076-25d40ce6e49d
  3 34d2e284-38c4-61f2-97f8-bd3a5e6ebd95
  4 96512733-2c7b-2ae3-8efd-f0bc89e5c459
  5 7a219812-3fa2-70a3-8152-99273bd4ca41
  6 021837be-f754-0d18-9821-b3dac93e729e
  7 17643fd0-200c-4b9b-902d-77e990fb68fc
  8 f0744871-91ab-870b-b3e1-65d11bb6deb1
  9 6475bffb-11e7-1ee2-ad07-53a7d33dbddd
 10 e1a33121-6bfc-2334-b45f-1bd4029bc384
 11 9f89b63f-3179-8309-b4a1-248a7988cf45
 12 90969254-f84b-3e8f-bc15-97c497d6232e
 13 dca036a8-9c0b-8024-a711-ad323b68756a
 14 cfce64c7-9b6a-53c7-bf36-b04536218ec4
 15 786bf807-091f-47c7-bffd-ec9dabec85f8
 16 a4305d4e-48f9-17f1-a2ed-9149817961ab
 17 3ec473ce-2d3b-59b0-92d2-747e27ea6876
 18 8dd8b68e-3526-4ff3-adf9-90095a3ef18c
 19 dd918fab-ec0a-2e18-982e-f55cbe18784d
 20 ceb8efa1-7d23-85b1-b575-e983660be076
 21 e77da4ce-6e64-161f-8fd3-91f91e102724
 22 8020f862-ef94-84fe-aa90-d1d7c1364413
 23 4ed31cc0-df1b-13c5-92f6-b863f99947ed
 24 cff88945-8a0e-8ce9-b012-baa1386da37d
 25 1f33c83e-42ab-0803-9aa4-0633537525e6
 26 c16a3517-5aff-3a02-bd45-e64c6d189fc5
 27 b8f44319-3887-206f-b352-4a05e3497c87
 28 5c10561b-7493-876f-8833-54c8745553fb
 29 43af559a-7441-35aa-92d0-bb0fd348f095
 30 373905c5-cd78-1803-b030-30c6e7147a6d
 31 f2ed19db-278c-42ed-9a82-45965ff394df
 32 599c9585-1124-8df2-bcf7-e28b615e0646
 33 3747a94a-f024-466b-95a9-e622ae8aba90
 34 dc4e8dc5-0f76-3e16-85c0-48c2a7849ae8
 35 126fb91b-8a00-3289-b930-c13b79e9cd11
 36 b36fe192-6e74-6855-9e9d-fe0c4e0d60c8
 37 3be88f6a-4de3-22df-a32d-0fcdfcb45e58
 38 c2d6de68-3101-21bc-8f3f-75671ff1bb35
 39 e0b9990d-0ec8-7ab8-91da-244b29d49ce4
 40 3c500e6b-3cb1-3674-a786-300ea308f3d9
 41 1e43050c-1927-80ab-a4d7-d65ee5556338
 42 15aa977a-87d1-4515-8c4f-f8562cf1dc25
 43 e5f0548f-5c80-0742-8888-39b3a616abfd
 44 1723733a-ca6a-37c7-8787-3d57b4e93d98
 45 ab301477-df2e-0171-a546-5741c8516ea8
 46 d2b9660f-bd38-1d67-a45f-a1c2d5b66f84

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1462704812838541542818180328314843362273840301. Exactly this sequence comes out of new Random(575).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 446 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 46; the post has N = 46 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related