201211081815 12unf0

explained decrypted filler

seed 317

Metadata

Post ID: 12unf0
Title: 201211081815 → 2012-11-08 18:15 on A858's clock
Posted (UTC): 2012-11-08 10:15:20
Timezone: UTC+8 · title 18:15 against posted 10:15 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,896 hex characters · 1,448 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201211081815) = 8ebb2028f48d1cba87a0b64650c16ed5 (name+title)
GUIDs: 45
Filler GUID seed: new Random(317).Next(9) ✓ verified
Run: Run 38 (seed 1,045,884,937) (seed)
Draw: 107 · predicted N = 45 ✓
Machine boot: 2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

EDB63527A5A6665E EA97555C75ECA7B8 8C005C868A7E5573 171ABC72A55CD541 5BC3E9CB68646AFE A59D3ADCD2554E05 7E09A213C6D1B8E3 AC67D5D6D59B662B 181F44A2CE0816EC 0ED33D386BCC9EA2 4CCB0CAFFB67199F 425CD8571D155862 F67D771D34C8101C 4B8206D7F51D08D2 8AEEFDE7FC3E7D58 A83FA1A0699B87CE 719EB1F8951AA9E8 3068EB901D84EB86 E7A097FE5C2A1248 7A5F33EB6112072F 8A041F042DD7175F 78FC9BB84E5E925A C1B26557A1650A9E AFC50EA9D8F44D7D 08BE1F8A4D9BEA41 21A695C83517E350 BAA518C1892C0955 6BE8A6C8A7E16699 807935DA23FA06E6 2FB3FAC485334576 3CBBE51155EE60AC 10596A22DFB8F4D6 FC460E73905AB327 FD83FD4DB1AF49F0 F44AE954B798BC48 3B499B2675F0066E A6F8EB5ADA98AD8F 6FE21AA478ADFBB2 191F41EF73F2379E 12842EF9E9E13932 CBADCA9B932AD6E7 5FC7FAEB208CDE81 37BAEE9B13E32089 E44A5585737A6A3A 035795B7CB63CE44 9C1761FAD29FA0A1 3C6BE9CBD5A7F97F 111924129D43556C 92FD74BA436909F6 70874F0A71F519CE F7E570BF051718A2 4F46911D0D2C8724 A45916DCAE47487A 2D8867F2F2F54EF6 74F7E74D41FB3C06 39F2861418F88B9A 023901175DEC4729 3C4262A48AFBC352 C98F33D0E5A56BFC DD0EE0388B39FA46 DB004198FDD543E1 77A54F090FD6E0D8 E60A1326AE95325A 999F3C9D48237CBA D6DC339A1F056A93 C2DDC96912EC490C CE251195D8CB6117 EB6501CC2FDCA6E8 6633CA3FB2771B95 C8844AAA9F48BCA9 287BC81A7F460151 76B5DB41B27DF6CE F7047FF32697D9BC D52C1E1BE7EC1FB9 BC1623277C383F20 7FB0A5EE6941D90F 3C9A3990E8363DED 8BB1D5DA7A2EBDFD 62E802C0DC229D39 8BF62496741E5684 14C068A433F0D6C2 DDE3070AD3413A5B 64C75D2EDD0E3D36 4BA4B890DC7CFC1D 4155B1B44307BB22 E0A90A0D589DE4C6 DA65B1AF4B9AE1B3 5886B1CAF633F5E6 84E71551D6EE7A5B 9FA38C39409C1D49 31B1416DCD9B021B 3AB475CC0A153A7C F92BFBFEFF501CFB 46F481C0076CCD91 F88B65DF98604945 AEED9227B5FA9152 51F8897A2E6353A0 67660D383B4ED561 89F52CA7294F7358 D77663D77B5C1771 B761B21887264F0A EE844663EC77310F 6661E0A681AD8A71 C751D5C12AC6CF77 6C0C88A8813BC7A8 54E57479E7F88227 968EB6F9F99AC8A4 6F1B5D370572ACEC DFA9C027B87A66F8 0A47FB7D2CC38E07 9E40412FE4C4DA32 38AF7961F7EE3CE6 7201E8267286FCD4 FD2B55B517C6301C 0E6CA488D9EDA2A8 2DDE349E03511D7C 85D003372166EA17 6F9EFD1365992E75 2F3A085745FF32BC 64072C927058FB50 4774C64286E60C00 63EC8B6D1FAAC5B0 3615DB395EDFB847 48F9014B58897F1C F755F1525C2F2D11 6B761C3ED0D325A6 6160D572313DE5A4 B8F1D9EE2E8ED344 5C7B2BA367690A7A 954DA8E09D7AB6C3 8D52D9EC8A4AD0EE 7FFC2D4A79CAE59B 2601DB2D316D96EF 25128C43BF9FDA7F BF91896EB6EE5291 AF15A98884F24A0E 8952E7861031FC05 B33BEE0CB2EED100 1B3CE8020C5E44D2 6BB738BBECCFC3ED 488E51E3BA485D6D E466D5EEFB48408A E9CA8E9C29B22FEF 8887B8C72EECB4F1 CCF24B165C6E1FA1 2162EB42695D72A5 9AF10BFB338788E2 D16D25B1A6BA5008 10C1F636C0C5D8CD 403446865C6F2B0A DE5931ED9A25BD2F 794C9137F0C5492A 25DC819CBD0CF665 CE82C0201D0172E9 760E82A2805ADE37 79ED4444B185319A 771BDC48FF41C380 4F02C8817E8F2F49 520817F06D09E46A E671478B03FDB880 D7C11AA0C56C9A36 FDCD17144B9AE234 5239DCD653D6AECB 0E418FAA1185162D 651AC7CF8DB14B47 CC478708B95CBCEC FB853572AC27499B FF047964A674ACEE 1AA38EAAF126FD7F 54C8F034F160F7B5 9B24B96CA3E867CC 1C7A4AFE8F4A3E9B B13F2E63BDCC684E FF492CC32F198C90 FD17DDE6FC9F070B EB0C843500877E8F 1AC55E65E15ACF04 1052479902F2EEB0 6DF9D16900D962E8 80BA3FB5EE11B15C 4990CECA99EC0B38

Read the ciphertext. Strip whitespace: 2,896 hex characters = 1,448 bytes = 181 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201211081815 (name+title). Key = MD5(password) = 8ebb2028f48d1cba87a0b64650c16ed5, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 45 GUIDs as hex (shown below).

Decrypted: GUID list

  1 46c19ff7-79c2-32cc-87b6-75fb5acb0133
  2 34a16f28-4496-750f-be05-d6827e153560
  3 b6b4bd1d-4f97-37ce-9c89-92f9308145f5
  4 0d723285-15e6-1759-96b2-2c2f8ecd419b
  5 943b657d-1402-2ea3-af57-c9b4f579f22e
  6 bb323b66-6343-58d4-b1ad-bf65594b47f2
  7 07ac29c9-6f18-8a19-b13f-7d9294539380
  8 7ac221d8-ede3-4bef-b96c-b7e6319bf4d5
  9 24b6d7a7-60c2-1236-adf2-71cd193bad42
 10 73aa3c6d-dd62-1dd7-b871-7fd710f53e60
 11 f87c51f3-3950-7fcb-b220-057ae31823b2
 12 f578c8dd-2ec9-867c-8c50-ec4389facca6
 13 af7756da-9edc-40a4-89cc-28ae5329d26c
 14 c2299f64-d1d3-3fdb-aa21-841f7cc7489d
 15 b7b2ca6f-5e12-7950-af7a-9ce82d757552
 16 47a8af84-8f72-0641-b295-a1905a6c212c
 17 8ba84b53-7425-1424-8b64-357e762c7936
 18 71164f0b-9692-40be-bf63-079a148944d9
 19 3f06a74f-fb3a-26d9-93f8-775bb3d7f078
 20 48cf4582-21d5-01c4-8aed-0c85259462a1
 21 d907592c-16d6-88a1-917f-fb59b2ca7e17
 22 276c00ea-7b32-5c97-85b0-6fd9e0fb39d1
 23 c5974a10-6345-523c-8ecb-586e13d2a89c
 24 4e32d996-b001-6707-87b8-f1cc5f4bb992
 25 d3a1378f-0032-6824-a7fb-55c51aea73ae
 26 e70bff45-bd14-36cc-8b94-b3e89aa28a69
 27 e2c3447e-23a1-4179-bc21-e8763dc007d1
 28 171ae7d1-d2f9-0242-8edf-dde4ea9a5e7a
 29 00bc973c-9f82-0fc1-be5c-db2862b7bb8e
 30 fb94c342-2f4c-3335-8d34-d1ce1d99a3cf
 31 b775c22b-5d3e-18c8-ad92-926797d1effd
 32 d3ecc6bb-a96a-80f7-aba4-6f23fa0b2989
 33 44a43e6a-087c-6953-9b16-63565763ec73
 34 ff7698b6-8a4b-8eed-97d2-c9dd054c3934
 35 c731359c-451c-22b7-ba61-3b7fc7faf2fa
 36 e693e342-c6ea-46ba-ad3e-00757d919996
 37 f80ec08e-3b8e-54bc-9f44-7305dbb8b007
 38 323de86e-d67b-36ff-a334-3fea4940f731
 39 6fc6991a-1b1a-5341-be4d-4e039e272f4d
 40 050155e7-9f7f-83b3-9495-81208f1150f6
 41 a016e845-68aa-7059-ba84-62c9f31e5848
 42 d254fa16-9e11-7813-872a-2905159c7556
 43 190bb407-e048-4e3f-9d6b-d44ccac2f6b9
 44 0267d52e-c255-1a16-8a79-502b7beba394
 45 2d89acc7-aa77-0776-a9e6-3c3e0a3602b9

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 373125841178437014208556634003186824535877410. Exactly this sequence comes out of new Random(317).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 107 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 45; the post has N = 45 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related