201211081505 12uhw9

explained decrypted filler

seed 422

Metadata

Post ID: 12uhw9
Title: 201211081505 → 2012-11-08 15:05 on A858's clock
Posted (UTC): 2012-11-08 07:05:07
Timezone: UTC+8 · title 15:05 against posted 07:05 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,280 hex characters · 1,640 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201211081505) = 1bb5b378f5fe72a16348ad10ae1b8f30 (name+title)
GUIDs: 51
Filler GUID seed: new Random(422).Next(9) ✓ verified
Run: Run 38 (seed 1,045,884,937) (seed)
Draw: 88 · predicted N = 51 ✓
Machine boot: 2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

30B9D60B16AB577C B13CFC3A8980A2B0 A7A30F680585F5AF 3FBC338C1A85156F 93A1201A33386AC1 5E08666590438521 53222AA2A8FC7C73 B8A7073F0093B9FB 702EBEA5A528665F 85F035FE96F0F356 94CA08F24B9BCEDD 4B2F3688D5824902 1D91D5302E6AA7D6 5A38D9BE8298ACC3 342C5B6AD8966612 CA78A15BF4C2E44D 75C68C9A35EE63AC 48CBE6A21CDC90F9 62C51AE9C5CEEE4F 3123202FA640CEF9 59E1A680EEB70CC9 6722EE08DFC3FF47 8127CF66E2CE1909 C1A3FDFEA815D3AD 58DFA3021E385D6A F3C488CD43B6CA3D E64E66FA5EEF4CE1 0D8EB7E4AC41545B E6B81C61F32AE4B5 5688781291E0A332 2EA2F8805F7537A5 99C8168A2B9FF946 84104A9CEB5B2272 A987F5AEC0AAD291 1BE50AECDFE1AF0D 94BC571491FA6699 229ABA518D6B3E78 6854B2F6B8D48351 A02A4D621BFD48ED 88AC8B9E0B14DCC5 B1FCDF81934AA0A2 9B090F08A3F776CF E427D28F61C49584 A51AD66CD0B8F43A 064E51B4B0B05F2E CB58D0AE137536B8 E4889776115FD99D 05E8B2FF4102E716 B778ABF944EA6AB1 E435F19068A653EB 9BE356F4F988FEFF B52CBA1FCCD84796 3F7D870BF0C7FD3C 786030CBB277B40C B002488ADF5B4F36 716D745D5D75FADE F968F2B668A91159 DB32E6F64BDCEC10 7D22152E1B8DC4B8 643145046E5A23C1 217148671490DB77 40F647DDB60A3C90 75494D93F9DE0446 78AE1786EC605083 8EB1A9ADB264AC2E 8F20B1ADD5B205F5 B7FA8503605A7041 E36841DF24607054 BCE8B007F7AFB516 980AFDF566590B0E 8BD4A81FF43B0D6A 887AF667A53089C7 B5D8AF66CF0CDB8A 2FBD0A42BE5DFFE7 090AFF8CD09F1A51 98F9A9DDDAC578F1 E7A547A74FE3EB48 626D35E990809D76 FE786CDA3C5B0557 BD027F4663303DF8 8B011F41BF07C991 2D2438E02FFCDEE6 7850FCDC00FD6CA6 081C26AA3F65B8D9 91AD31EBB947F69D 218A0CBF8A57D523 93ACE1E9BA465B22 833A8BFDC502EE6F 5EC362337D4C0635 DDB37DE8227C7257 45AB5B4D10F9F923 846DD0C4BE07B00F D32872F8AAF46D56 8DCF059DCCDB89AE 5A283096F2178594 2663398DF549C23A D96A9255F9276153 DAEF832A2FF71052 8F120AE57D99A3D9 8FD175D493E42864 D6CE4380345009A2 881447625D6D71B6 360724C40E52D4D1 3389454401D37799 EA2128771FDD9F7F AAF50FBC88141FA0 3737C7F2D5E3D1AA 276C2E2FA3191F48 A5A7C72009943909 97F90B18114ACF4D 7FBC521FD2A397B9 D0263531F48A089C FA95F5D38DC1589F F7BD8FDDA0459A7F C6EFA37FCEE53D2A BDD2FA08170C8052 63B5BF8D552701B1 0D598F568E1A2A55 ECB80FED67164974 330712346AA292C0 06E42AB09C017036 3FA06D72AF847D22 43CE592C31BAEBB8 E1DE282B40D5FBFB FFFA4D220179942D 118443D8474264A9 586A6710152F543E 972D44A83EC4AA05 D26F6E23BF0E28DF 3ED0DBF57F06BA0C 418FB6C15DDFAFFE 9D30D7CB27734E81 9999ABF73F956151 41572D3034799F5A B7E8CDB236F98E69 48E2D215596A8E62 6CE01CA7CCD778A7 1A82580402CEBF05 D30BC2648C0D03C4 161C2C576BF4ADFE 36AA4F304C8695B7 E22F4C59BAFBABE7 FADDF25141BCFB4F 94D50215DD88DF13 2A2A61053EB024BB 31D6C6759271CC08 8C4DB97E7E46CCEA 602DF489E8533D06 1F92316862945DA4 03C7888D801EF9D3 FA0977D5BF326E57 04914721A44211D1 C0CE3F647FE58FE9 99231538ACD87A1B 12B271F3D5F63ED3 BCE1BC3829E9FB56 665E382B1CF22BCC D50648F930002DDE 33E85DF49B972113 3B8E0742A9EFFCC9 CD33D0878C0D331C E5E946AF1D371ABF 7AEA1C94ADEF3ACF BB90789289882EC2 7A09016470FDFCB7 E960FC824A49C6D9 ABD27087350E1C12 F064D23CDD520F8A 8D51CD0E54691A63 C91B4EB9BC27F9AC 9F4E67B29419A2CC EEEAE45D7F4559F5 4D48322DB4273855 C1205A3EAAEA6B9A E4B943905244E1F0 9FCADBD21DFCA6AD F6276365000F38C8 32D16EDB35E9EED1 03F6B40AD051D316 1F1C077F92268D93 BC6441509B9253EB 0585E9D530B8ED19 F6C9D307D402B12B AC3C0EC29E6C1379 FFFFB45C78C6D477 4EAEDC659F4A4564 3B7244712E915B7C 888B5D64205C39A1 AB35F637A944BF30 DA56535ECD43976B 143E213A283C9FA2 237CE3445F92915F EF076F7AD0FB2DC5 07DEF67441BB224B F645DE5C18D23765 4280C9C6470BCE22 68F2CF12B3528525 DA30F83B018F0EC1 267E76F2D7DDAE9E F9CFD42EED6037D3 6FDCA1961AE69DE3 2F494C8B5AFC8D22 437C33EFC0B8ACE5 591EBEB9A348B8C2 E57AE3F1F68D4F43

Read the ciphertext. Strip whitespace: 3,280 hex characters = 1,640 bytes = 205 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201211081505 (name+title). Key = MD5(password) = 1bb5b378f5fe72a16348ad10ae1b8f30, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 51 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4c442358-1b8c-1d2e-a027-41e5df9f6406
  2 fa1d8bf4-e104-53e3-840f-265539e4c186
  3 176563d4-9abc-61c8-bf16-daffcf007ab3
  4 4cbcf4b2-2e31-53cf-9f46-e4e75f2a1d66
  5 23cd2ee5-7630-6221-844d-81e250be4808
  6 76367971-c3eb-33b8-bb68-a259b3c035ea
  7 79445b0f-4066-85e2-bd27-1018e17ec231
  8 254cc793-fe6c-18a6-9cff-7a6768983d28
  9 116fd58f-0ed2-1a62-b25d-76812508f7a9
 10 32ce539e-2de4-761d-834f-247d700a1f56
 11 157efaf7-fbd1-19f8-bbd6-02fbf2667f0c
 12 18ff4e9f-fdbe-8b25-adb6-15d9eccd398f
 13 20fd5f81-79b0-6fef-bbe2-ccb2632aa736
 14 2c409974-0722-0f57-a6bc-fb106fea4c65
 15 5b982035-d03b-36db-98b9-452fe383bfd4
 16 be809217-bdf7-55d6-97db-db12cbf0cada
 17 aa77bb1a-30be-2104-b700-30464b4813d1
 18 e8cddbe0-8c51-5362-a9fa-8bb664a2349b
 19 2eb9da66-f9f1-0c98-8eba-7612d218c3ea
 20 ee5c7725-bc12-603c-8329-38088b1fc984
 21 f85b592e-2c7a-772a-a184-8087b0b60a95
 22 8cf6c7f5-e27b-385e-8366-4f60318d3116
 23 eead870e-c3a0-2367-8e66-c1795d82f6a1
 24 987a7516-4ca2-42cf-8681-069f796cce33
 25 7abba9a0-759f-03d8-9b47-c580026e68cd
 26 d2f591db-1755-8b8d-bdbd-6203a85c2874
 27 a090369c-e8d5-66d9-8934-968dce48fef8
 28 406d964a-53dd-1296-a1a3-5effbffb3095
 29 46e85f2f-2d97-0156-b328-ee64ac55ed0b
 30 67399e19-7b8d-8914-826f-45124b3ecca7
 31 0addb925-03d1-89f0-ba2b-03a2461cad9e
 32 a7802238-ef11-5163-a323-9253f2111218
 33 bbc0e06a-a999-852a-afc9-8520526140aa
 34 ccf2fbb2-50bb-5b59-8193-4b69122b7407
 35 3aace243-f951-8fa3-8e43-3f937de73dbe
 36 1755bf41-0693-09bd-aa8a-37ba6594ed1c
 37 23922650-76a5-51f5-94fa-8bacb1bcdf53
 38 196fe0db-8e13-8245-b3c1-322f9d6579ae
 39 4e335eb7-b80b-5de2-bb25-1d4b132ab964
 40 291df7ed-e4b8-55f6-8d8b-03e1d70e45d2
 41 d3534c3d-7e79-4f22-a82f-257c89a3ebbe
 42 cf6f17c6-eb56-89fa-835c-945633717901
 43 f74ba001-d193-53db-b7ba-306d16539602
 44 14586f6e-95d0-02e8-aa3c-73494af31e2b
 45 027d71e7-a3da-3744-bb01-69011285dbed
 46 a0f036d8-ae69-36b0-ba71-361fdc877c0a
 47 ff55c0f8-35d3-8356-b3f6-0911e89bf9e8
 48 088393f9-e0a2-0b58-b402-716cbedfcd38
 49 f2bda7e3-5500-3899-a1fb-0fdb6aabeac2
 50 27842670-c213-8804-a616-dc3bf8615946
 51 6f5ea481-8384-3731-802c-86cd33b5c154

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 156563811718603525067324086108858580585548503380383. Exactly this sequence comes out of new Random(422).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 88 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 51; the post has N = 51 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related