201211082045 12urfw

explained decrypted filler

seed 638

Metadata

Post ID: 12urfw
Title: 201211082045 → 2012-11-08 20:45 on A858's clock
Posted (UTC): 2012-11-08 12:45:32
Timezone: UTC+8 · title 20:45 against posted 12:45 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,216 hex characters · 1,608 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201211082045) = 53cd0a3898e62415a7863a51e3662a42 (name+title)
GUIDs: 50
Filler GUID seed: new Random(638).Next(9) ✓ verified
Run: Run 38 (seed 1,045,884,937) (seed)
Draw: 122 · predicted N = 50 ✓
Machine boot: 2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

49E506803C072107 EFBD3A0A2ABAD3B0 CE7F972736F18DCA 395F5B01AE5045BF C4635E5690045F37 C89420EC6B792357 2983673D51953E57 E25F5BD8E96980A2 1C5A5ADE4936DEDC BFC65711417FB14D 39D74C59B3C967F9 86E5225A723F86FA 891A51E076C4DBDC 0584DB827D2687DE BC7C7FD2E82DAC4C 6670E318A4AFCFA1 D38E27272AE75DE7 509A9F21DFBEB5E8 9D733B023F7613D7 8921702696D22CD3 9C3FE1A79465442C 6BEF5075741313F9 1F9E80FAE7C174CD B0B9C00A05D73414 F0B1C986B2C9FFB5 7FDD2AD2BDE39FCB 919E556B993E17D5 1705C8A9211B0DE0 3AF126CDF43CA1D0 204927AB798D2DDD D4D83908E2994370 01E3536569503A91 C231D8F6FECB4878 B25355B55C47ED9A 6DC452078A2A9D0A 4D2612541DA7FCD9 45D6021D0537FFF4 A46BD8BDD904A3B7 DB33CB7CB6514599 A59E6F3442C2D911 7AB9B7F478FFFD55 8B85F2A925062D73 AE3DE54BC3A937E8 5991C6DE3B836944 7679CE1350AD81BE 98C0B03CDB5D40FE 5B6D129A595DAFF2 91092E36F7A54A8B E55E8117071983CE B058CA8F75E0BB61 BE0133963CD07F0D 76AB8F8F49C27468 3124B58FB905DB8E D9B019794EEAB35E 9EEAA084AA829188 437D5FEFE49A88C5 FC6541CF78242B9B ABABDDC41F31D00C 84C981D2975A94DE 3688C53CB8E2456C D55FDB498846CE4D 313073F3AFEE47B6 9FAD5FE97F4FF6EC 2D6920C53042CEAB 58CDFC584389CD77 E4B2FAB000455322 E6A50AFCB39B7ED2 7C8D2D74E661FEF0 AE11397EB0F8A8A4 7EED675B50920E96 0612BD33B6EFFF7B 1F86E692F5E299C2 7BAC64C1F9E3E7C7 F01E3A05FD1F248F 37535F689192EDCE 6E879AB2D489C59E 326480E2242206AF 1AFA92EE09ED29B4 DBDC9B4EB16D27FB DC730A02691C567F D486654BC86117A0 4D4C5D7872497314 B372F3D380BD07DE 3D719F9E520DE95F 02573BDAD35E32E3 EE9C6FC2F8736163 164166881E574AA1 7CB01411D60A70AC 2395518CDB8A7619 6DB6773241798CD8 7D3FCD1858E07153 61C5BBB8E78472A9 46CC174D80FF7946 4452B482429B7CC7 E89E7C110E260719 E9414AD8FABBD533 0339FED0E73CB7C3 582B4214044216FF 231D10A5ED313C86 A1914D9BEACD2AE9 D1806807916E95CA 7093862841A3CD34 7E9B022388AF5172 4504B051804700EC 335FFB7EF085F5C0 BF18F2B78D81FC83 6DB07224C5FE3471 D99CAA542D1444CF A35D53CCC3E5E797 E1EB532512D03359 74478707FB3ED8F4 9B2067691AC516A2 346F3B2258A95E1E EF16F310BDE6E262 25C06F7AA99E4163 2A8AEBBC55324DFA 84E2051F155D45A0 069A569C54138867 10EB0BDC8FE0B273 640FD4BED16F2A17 F66AF821F46885DB 05C45F53C1405F53 236B22D7A0CD0B8F F5B119C1B101644E EC2552A929518CF9 152DB95BA6A4B7AC 17091E9A95A582E6 A38533F16E7CE4CA 56B56D766F53B6FA 8C8776DCFCAE4398 E1292DF5840B8E60 CB9F79CCDA4ED8A4 7FB31CA8E7479259 D3C6AFF7F38B2CD4 5D1BE017C8421D7E 2494E1626BACB509 8C04240693B8E845 B94F2585C4153E3C 487408F47CD79EDE C9233D23790CB21D A1FE426A8C41954D DAC24A79A52EA8F3 575AEA106E899F88 BA76AE0FAF9F2808 60FA4DA7D8EFCA97 25246F1D0BA4C6C0 4E8E09D42F9FAE24 363E171C86157EAB 6D9A3853B7160268 877DE89A1346E181 945BBA158C7EA9F4 B16CC761BDB039ED DF8943B2D462BBD8 FF536D7732474538 DA54B72884E46F38 BFEC0DDDCCB0F1E4 B792736C3D64E709 689CFE95B2BEFDFD 8E609FCB8CBD03B5 18C63100860F7174 09A8CAD6D0249F23 48D56A2A6C4C3DA7 C0E7F88E6B2F9CE1 220590E376ECA921 029B3CC6423EBF09 1D839767D626890C 9E9CAD5E26EDD1DB 32718921AC5A1EC1 D6D144C83064DCD3 D83F77E1F49A860F E0BBAC939EC96A40 72AB40D9D1483B43 DC692DC677F20C87 998537C8A073DCFF D2A1E166E2F163DB 3F1945C7132FC551 1284D3257D166E23 3B278C09A14E6BD8 CCBCA9B0B821395F A669076665A24A1B EDE83492902D6AD2 E06EFFA3A2FFD052 A7FDF32101124E4D 2E931DF7404A96C8 753602C1B1F77888 3690CB7DA03A01DA 477F4E773FEB037A 064145A97E0BC3DB 53B33CE14F118C2D 0C2BD296806495CE 795147D42FC5E7A7 DCC5C3BB9A4CC54B A29A7C016FB7E58F 94E3D09E468C967C F1B810B4C905A5B8 012592B684CF1E41 47246E231DFB2747 BA40F5C75DC8062A 27A182509D896336 FB4F2FA5D0924CA8 D04ACC43315CC690

Read the ciphertext. Strip whitespace: 3,216 hex characters = 1,608 bytes = 201 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201211082045 (name+title). Key = MD5(password) = 53cd0a3898e62415a7863a51e3662a42, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 50 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0ce98630-7535-03b6-bfc0-4c58650f7d22
  2 6988eed2-d9d4-012c-b3d3-81cf7cc513f5
  3 de0a152e-96aa-60f8-960f-8622a1d88955
  4 d7cdf195-7d03-68fe-bd5f-dd7de1cb65f2
  5 747fce1c-2240-2411-a981-c3cb57cc2906
  6 acf4b1c7-c796-034b-a1fb-9e892d879b9d
  7 4ef3b74d-8261-6b5a-9890-ada7f98c357c
  8 1e457ea0-c57c-49ff-822d-6a158a9c2137
  9 79bb1c84-f263-8b9c-b7cb-b22166bff17e
 10 950b811a-2052-43fa-8a43-533e59cabfc9
 11 781c2eca-0842-2faf-90d4-c6ca59edb045
 12 38f09ddc-c699-58a7-acc1-df46a68043c1
 13 cb000f11-b81b-25e5-8ba6-a8e9e1845054
 14 1f823d67-5ccc-31d2-a978-971cbe42029b
 15 297c0daf-167d-5c46-9840-f6a9c6d797e9
 16 87cb725b-e87b-49a2-b61b-94bc15849d2b
 17 3f66f06d-630e-0338-b7ce-bcc099c73afa
 18 af02ad94-ea46-4420-8e64-8a5d78ea1c38
 19 4ac41555-9636-8749-b1ae-bcb3089030fb
 20 412cdd33-4cff-3e64-894d-bcd1132fb72c
 21 ef15bd13-0866-590c-95f1-f802689628a9
 22 8509d084-4212-3ac8-828a-af069ba1f978
 23 999de910-05c7-7836-a735-cf17430598fb
 24 7b7703ad-7bf9-8b3f-a13b-bbe6a04607f6
 25 17d4effc-f736-2778-9584-68b533df6adf
 26 a36d3e0c-bf74-7aa4-a45c-4bcf5569ade3
 27 33352cd7-7ba2-4775-b2a7-63afebe27485
 28 b2adbdf5-bb77-8111-aea5-38b1320b09a2
 29 3a46d537-238c-6d57-8c54-20244ef44490
 30 6ed6bad3-5f15-83c3-bf14-c24277bcd43b
 31 55fa2c54-09bf-6d95-9871-d38ff693627f
 32 e4b7939f-96ab-426d-8df5-cdd6c8bc7938
 33 9a299e1d-f20a-773e-81b7-1a5146272ef9
 34 92f703b9-9db4-8a51-9e12-9467631b355e
 35 708441fc-45ea-3677-8b67-65a1b47ea221
 36 2170adb1-1945-3bf1-a7f5-abfae3f683f0
 37 12ddd785-b5f9-4aa9-a47c-7215660bc546
 38 a4e78c4d-bf5d-160d-8a29-a8a39f4c7c05
 39 11f25072-68bd-560f-877a-efdb8dffada7
 40 9cc64c29-8c02-1eda-ba2c-0480e9626e45
 41 7b80939e-31db-2e44-9566-76df5929feee
 42 3c816eb0-fcd2-8e72-99e9-a7430f852394
 43 9f28973f-0e1e-19b8-b6f3-d82c52f0bd0a
 44 3b19758e-2fbe-44e7-b991-c94fae2c1178
 45 d0adef2a-1378-2d7f-abe0-17a971a4e8ab
 46 2ef8297b-8336-5e36-8e3a-a9deda05e8ea
 47 1b217f1c-018b-3e78-87f2-2687f3349c34
 48 1c33b738-2123-4884-a3af-504463043455
 49 9a2a6ba0-1f3c-4d61-889b-37ac7ecd3d78
 50 84324799-6414-469a-82cc-4e53ad0ceb82

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 00662064842523540483537827486864783341512814253444. Exactly this sequence comes out of new Random(638).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 122 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 50; the post has N = 50 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related