201212040017 148wqk

explained decrypted filler

seed 801

Metadata

Post ID: 148wqk
Title: 201212040017 → 2012-12-04 00:17 on A858's clock
Posted (UTC): 2012-12-04 05:17:13
Timezone: UTC−5 · title 00:17 against posted 05:17 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,424 hex characters · 712 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201212040017) = a7e778c891eb4488ad390fec954da79e (name+title)
GUIDs: 22
Filler GUID seed: new Random(801).Next(9) ✓ verified
Run: Run 39 (seed 1,106,402,812) (seed)
Draw: 18 · predicted N = 22 ✓
Machine boot: 2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

8773DD3D24E3F209 661D6B7054557392 6A037E9B08ACA987 02D1F93C3CA44892 24CABC6D62742D2C 86773C5107178F9E 18ACF3B3794E69B5 0BE13CC38F828B97 5DE44A82B8CB2459 B764213D130828F9 727DA3E3D14F94FD 60DDEB884B2536C2 42DE2930C7D2ABAC 735919E7C549B2DA FD256CB26444A435 8FF4D6E48DF08E96 16A4D6AEF5F06BF2 8CCFAD8888331242 C82AECD8AE4D0E99 655013DBB8A17093 22E76E8F614A0AF0 D1F4414272ABEE54 13E68110F57A2C7A 1EF15F628135A899 6E8080921A395FB3 03A9BC5CB526EAB7 128A7FA3C41F8A54 3AC3FA72FF2C73D1 D29899297926C6C5 32B14418B5FBB931 DE7B0278D1EEC761 DC3242511D3B439D E2534F6010AA6831 60D3EAC3DAB696F6 4AD9704EA03CD803 A6C27D145F784455 849D5E8336E81D9A CC89770F05A69651 E693F472FE8DDF95 AE2147F0849ABA12 98163FDC4D31515A 6B977A523161234F 54EE67D8A0BA31AD A6393AF7186CAAA9 31C1BB6B23C949BC 98A676C405BD98E7 55BED96C8EC261C3 4E6767A043AE952C E7E3D320EBCB057B 33277667FE9A0AD9 F66C9853BA3B0C0D 8C501D3019232C59 2C92C6B7DBE0E292 A1C8CA84B76FCE84 7BDCF969887D57F3 2717EA240CA45E19 15D8784998A2454E 8A19ADBC02C6C3FD 138E9C46F1B49AD8 44153878342FB24F 59395449EF6FFCDD ED3E0F2B2431EE40 3D04D8EBFDE0DF5A 69059E5817D6E6D6 AEE309DDDD661687 2E4A87A891386146 248B53FCB2AA1623 F3DFD4821081A134 35B6C71E3FD3FA36 FCFB88C32E9D3641 60CB0DAC3698AB47 7F8EB75BD96E5176 012C3A862575EB70 7639B60CAF7AAA76 3CAD0B6450D69076 ABAB420325C7BED2 7192EB4002F6B0DF 12A0E6CA02D97A44 6A0D38CE4802C510 B7691FC987A6C968 3A842483E588A4CD 5007884EC869A55F EC1D284FD0952B82 649351203C4EEC4F D623589617DFC547 882AA6FEFA2719E1 17105070EFF0629C EAB3C019D5CEB37D 8BE359C18D3C1014

Read the ciphertext. Strip whitespace: 1,424 hex characters = 712 bytes = 89 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201212040017 (name+title). Key = MD5(password) = a7e778c891eb4488ad390fec954da79e, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 22 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e91a6e17-a28a-1f06-a015-e860546186ad
  2 28651713-8000-7a5f-a338-2e57d82265d7
  3 4e6c0f7b-142c-5beb-98ac-9aa6a6dd6a12
  4 258bee59-db32-4cad-b730-6aa3bde514aa
  5 e98f43f1-5a52-7ebf-b8b7-9aba441f2820
  6 e99aae71-a521-4aab-a976-62fb4093f1a6
  7 7fe81045-5f17-7dc3-bdfb-6adde7601c0a
  8 20dacf22-e28c-2dcc-bb99-c3d9324b1da7
  9 aebef265-e2f7-0276-9766-bcf3f2323191
 10 6453fe7d-a9af-52bd-bfef-f9679f74b526
 11 89fe18ec-08a2-3eef-afbc-4cdf6427b0bd
 12 6fc6b417-5991-72c3-99e6-f240c0769851
 13 70296780-ee2c-262f-b859-d36f2756c59e
 14 05bd8857-3448-17d0-8bb7-109718af1142
 15 3f0da9b6-8edf-5569-bff7-f0e757349be8
 16 c26edc82-f26b-2c5d-a6cb-23bae55abfde
 17 b866cd18-7299-5011-a8f0-9ad48aed476a
 18 65e1f84e-0db9-570d-be2c-740ab3025c7d
 19 35bbba4a-c38a-38c9-a514-a337177a1f30
 20 df035719-487c-439e-b392-9a254392ec8e
 21 a591fb78-1bd6-257b-8898-e9f76d212133
 22 263bf0cf-1ded-32d6-8fb4-0287b45db1d4

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1754747205372152553423. Exactly this sequence comes out of new Random(801).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 18 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 22; the post has N = 22 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related