201210080946 114xr2

explained decrypted filler

seed 876

Metadata

Post ID: 114xr2
Title: 201210080946 → 2012-10-08 09:46 on A858's clock
Posted (UTC): 2012-10-08 13:46:02
Timezone: UTC−4 · title 09:46 against posted 13:46 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,960 hex characters · 1,480 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201210080946) = f3f93b53499642259af46ba795487046 (name+title)
GUIDs: 46
Filler GUID seed: new Random(876).Next(9) ✓ verified
Run: Run 35 (seed 854,622,578) (seed)
Draw: 449 · predicted N = 46 ✓
Machine boot: 2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

7B0606F5F06D4F21 77B402DB8F0574CC 49A7FDECC8CFE129 792CA0A3477E506B 122B53458755590A FDC641672B39DF34 59292DA742B53A17 7DBFAF5149B4AF31 0E182E2FD03D7F18 7D81209429FD50F0 BE24002EEAE92D0F F80C57E017F05646 797243DF28A6D17E 913929AF4C8BF362 A812D1EED6875BD5 A252EDCCBF0FD2A3 9AA61A2C85582196 59D7A901C0DF6DAD 412787C785C5181F 2024AB753CBF4982 F7EFBDED63441A18 337F1E6F757F159F 140753ACEE30061F EE473709C05975F7 8E2CE5D2F6076204 18CC8C797AF3B5CF 629FDF0396EECC75 A514673F5EFF38D6 2E94CD1D9BA26E74 DEC6F2DFB38F48AF AFB7BE2FA5499607 66293D4D35377570 3BC1E05CD7505718 25FD3648C1BE7CC0 A3EBB1AB0F3C8916 0B6CA8C9901D7350 089E9853FFDBC16E 4C280B66684A600D B5DC42DBF57CDD10 FF113792F3CE3969 081E53E3ACBDBC88 6B111A15C28BA6C2 04053F63879DDFC0 A841A9F5EB744CF3 6D7BDAD1E9E70AC2 DEC7EEA54E48C3EF B70957E47E0A437D AC1F2CD0679AFF35 13CE3C855AC6F69D 3425E68BFF3DC8B1 CFA0D880DF1E5EF9 366381BB2553EDE5 50DA451D36B6413F FE29B53ABF6D364D 10E7632B316BBA8D 3B2D87749883A245 A9113A66AD4EF96F 35E87FA42C3F2C9D AF3B97ECEF6B7EC3 0602889B979B08DF 0ADDF678335CD12D AB9C127CA7524206 4906D3A94AB1EC5D DE35FAADDA22D7D3 C0E600D3C7BE0FC2 B5DAB7D81B31E0B3 DB03CFFAE6A27C65 61E6D9D307AD68C3 A8A4488DC85F6EAA 7E75037476C0DDAF 9DCE7F6342836FE2 126B1EA6A6ACCF93 1BE53F151942CB61 FF2F934B2F2DFF7F E077AB1B046B1C4E EA49DDF344A87304 FD34764CB31091A6 EA0FCC008C3CCF03 7BE007AB9C168692 B760E7125F9669C7 0DE60AD3A7A57689 90A68C98D8E18F97 D9D70AEAB6E6A656 341216CB96FCA287 BD697929DD344C7E 2847DD5D1245DC71 6070F95AA9A48B75 89720384044E1F1E 0BBE27A252C283C8 CDE34AFB3B36C55F 7EE24664E3A36B80 76F695781E412F62 31A4E32C0AFEB18F 12E92914461095E6 4975B87E1C0D13D5 C85EB97338BF6E4D DBA8DF344E5AFE60 AA116D3D8CD2507D 13C8324AE2D158FE B4E2F6AC75824F8F C745AFD76C303F5F 60E134C7957768A5 9F6AECF2100767CA 9CE147DEED049E4A CD9759C89A480D17 06EEE1E27CE4AEE5 6EDA7D9D6BF15BEF A1144E89B6325670 E55D2C5DEE23D6B5 612D9F6101A3FB04 E654C9A93D50FEA3 3F8BB2A4864DB015 2F1705070BB630B4 381AF9267841FAB3 0C01A06BADAF35BC 13D36E5714EACA74 48E908A6BA107700 B9C5E159DBB1595F CC8BCF34E8C3C78D F3E7B59F030EBB8A BFF6ACE0407D706B 5964FDA744CBAA01 528A48F33D011758 31905508A5DF27DD 1988F5BC97453A04 D204237C5B8B77A8 930D89EF246BCFD0 4F4F394301036F6D 7F1B6A862015AF2F 6CD6C1F485102B44 EDCDBC8B9DCAB18C 274EBDEFCDBDF1AE C6AFF9CE647353CF EBC7194ED14DBA15 FA3094994CD399EF 27992EE991D17013 139BA92B09DE4EBF B7F604A22A157C2E 5CCD86EF1EA5F6C4 888BDD0F955AE557 412B7BD428C85FD1 0540F77B350EA2F8 5CF1DE5D24BE5EC2 A1EE10CE03978CB0 2C8950CB7F34576E 7341E55DF1BE0EE8 4E61D9119C5AA276 E115411B03B066CA 5FBBA6803073AFB0 EA7119CCF7EA3925 AC2BB83FC00D1341 D1020E06FB24D1D2 8E57C9D67A9C87B6 2B676B9D064A5B4D 288A8697A8FE71F0 40BEEC9E8441513D 833B2FBEFE703561 5473F0152AA348B6 5BFC7D85026926FF 28CBA3627D4BEFCD FD4BF8CF65B85EB2 D6D6EF3203D723CE B5EF3BD861022EAE 9E8F5D1A85D35186 D73CD7A7C97B0CFD F1C40BA5376B2067 6519ECEE642E8490 99914DBA6F2CCACD 089A9FABB7D6ED54 A278984BF95A4DD9 6E37059C959CFC45 48C22BE81BACBD3A 9FB3C477ED82103B 025D90B8560F66DF 8740FDDED93B2E2B DC76902F4CC94415 CF6078D4C5027279 B97C9AF1700640C2 B98BABE6520FFF00 BCC6FF68C29024B3 9B2E2CADD524AD7E 65D21063A57F5AB9 CEF81238E290C47C D047D309B8685573 570D38EA8B864B3E

Read the ciphertext. Strip whitespace: 2,960 hex characters = 1,480 bytes = 185 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201210080946 (name+title). Key = MD5(password) = f3f93b53499642259af46ba795487046, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 46 GUIDs as hex (shown below).

Decrypted: GUID list

  1 39d4d610-8818-3254-ad5a-b2d11124a740
  2 40d082dd-9cc9-7513-aa1f-1c9579d3b41e
  3 0a59e187-ac1c-0b2e-8b90-9fcd393d017d
  4 0cb6c8a5-09e2-446c-b949-d5c9348228dc
  5 5dba5808-d566-65e4-9d6d-c36247271ff9
  6 a6c73701-4b26-0374-9c1d-2ca480ed062d
  7 0486ca83-f282-3e98-ac76-2d15c4903b56
  8 18933e57-0daf-82db-873e-8c6e8e96d4df
  9 ae490394-1287-36d8-8abc-aef268bcdf3f
 10 c627d1b1-8359-2712-a585-73cc4640abea
 11 ed86c468-d9ec-6e57-b873-2a1586d099b8
 12 d2e6a873-d0f2-37be-a1a4-8397fcecebcb
 13 13028426-e29e-7583-9e0d-c02530764245
 14 6bd43b97-e3aa-1e7a-a17c-6d35d378bc41
 15 b30281c3-551d-1571-9848-0640700130f5
 16 bd21ed85-673b-03fa-bca7-5e7df86b58df
 17 1bf33630-2644-0d20-b621-f203911ca660
 18 27e39650-2df5-19b1-8882-c143b8030def
 19 08f63c8d-2f08-3fb1-9f56-7fb289f0fb36
 20 faf9947d-9183-4395-af3f-4ac3d14cdfc2
 21 de6de146-925f-1e54-80d5-71ed3802851b
 22 78afa566-bbca-63e2-b8ee-ca6fe579dbdd
 23 37b7d290-c08a-06c9-958c-4a3470657681
 24 183857bf-8602-03c6-b6e2-b704eb84e8bb
 25 dee1346d-f60c-45d6-8222-92fca1a12348
 26 c6c2aa72-bca4-8fc9-b27e-4fdc9ccfca39
 27 8f0774b3-f09a-00e2-8cca-4bb0208031f4
 28 d2cdf111-32af-40cf-8d59-1cc508d60d9a
 29 c67870c4-71c3-4ee6-9f83-b02c011ae193
 30 a8f0de45-5b66-5bde-94fa-58c861e72703
 31 24ccf4c4-0a0d-58d6-b9d5-52f43a507258
 32 b525268f-59b2-1021-a7bc-e9fc3ce59357
 33 d282a054-d675-5e66-a2db-1e941d135ea5
 34 475e51bc-9020-8a9e-898b-137e3c5bd421
 35 035bd1ad-f298-4408-addb-c629a659631a
 36 2e520566-ded1-6653-ada8-2cf6f6716932
 37 588ff8df-f713-5240-92dd-aac620346648
 38 89af15e3-15dd-3438-a272-ee8fdc26e6f2
 39 99ebd2ab-f939-3ff0-9ec6-cacb8af21fb8
 40 e972dc9e-f4f5-3d3a-a7a7-fca316cdc072
 41 8acdb859-fd6d-01b5-adc3-09daf85503f4
 42 4a6ef8dc-4cda-0bad-b67f-2706633d5137
 43 5b00f24f-b255-2fda-8ae3-4d0c632d0830
 44 1eb7160a-3ae8-3755-ba64-ccd70a5ea2fd
 45 cf3df3e5-fc60-61b6-bd7c-b6f885635a28
 46 72626894-eb02-27d4-a557-32fb135a63dc

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3704603832637110013416004804455158465333002362. Exactly this sequence comes out of new Random(876).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 449 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 46; the post has N = 46 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related