201212040335 1495ji

explained decrypted filler

seed 379

Metadata

Post ID: 1495ji
Title: 201212040335 → 2012-12-04 03:35 on A858's clock
Posted (UTC): 2012-12-04 08:35:16
Timezone: UTC−5 · title 03:35 against posted 08:35 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,960 hex characters · 1,480 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201212040335) = 14c05267a79fc0ba1a9610068c3e2e24 (name+title)
GUIDs: 46
Filler GUID seed: new Random(379).Next(9) ✓ verified
Run: Run 39 (seed 1,106,402,812) (seed)
Draw: 24 · predicted N = 46 ✓
Machine boot: 2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

ED41EEBC0D1CB84E FAD0CDC40E3C8433 0430531BF03F094A 3B92296A65E33407 FB3533169AC71DE5 F938DD1CFB12C466 C661AC041BC28DB3 277C43C13E70F082 226A26BBB1BF1B63 8CF3EF58F1C05411 3AE8C51FF87718A5 6B5D5B6B7722610F 5DB9442C7EFBA852 A1E56C24025FE1C7 E76279E813543557 F1DD4C59F2D61C41 EBF6E94D9FE9B7B2 9B1CA90B61105CCC B8FC410E5D5CD41C A50A167FECBB2D8B 33625E424D03A3FE 4D0976B22A07E11E 361E18CF35B568FB 81EE4B4B831BCFA5 CEEC966FB1E9E282 03CF21BAFF9C221E D95AF620698BB35F 506B6084AEA90610 7B32D383D5C876E5 CE928F8618781DE6 D2BFBE1EBF8A9B30 6F49F9608002520F 256107B6E5CA9EEE 5681FB9150CF8D4D 625E292068E304A2 C2DCE2A74FF84543 190D5E6BAAEF6AE4 E4C7724FF6F5EB01 7850C9C57866A255 9CA7EDEB752EA714 C2FF0F32D299A635 B6A37532C1CB415E 08658E48AC607E02 342C5780C93995DE 6947F74905943257 B9C352EF07BEF6BE EB18A5331D4A9622 51637937036581FB 4AD88F658F0106E4 718DCB07F6A5913C A65D7E07DD3F071F CD5BE6AEA91C6D8A E384BF79DA1774C4 1187F8EBB1CFDEEE C00380E6B16ED2CE 99E10E2F9B4C3B34 5AE955DEAE03FC06 D441EA16D64E8D8D DCB51F53984C8DFA 64300F22E82AF487 4BC977A64CF4DB8B 2B832414D93D84E3 5C7E9CAD11779FF6 F43C55DA662AB566 AD0650356F895BC3 A76911D9C0268E23 B69B95D5A1682CC5 C9DEC82E609A044A D632F04810F2E484 694378AE14A15A93 A15AFCE8C2C32E74 09882BCD57CB744C 7BA40B882261029C 10203E9D07387F68 6BEEC5453BCC0C0F F3901F86E328A3CA 6259DD8ECA40E250 295A138F7299D158 8919CF61F5BF9D7F 2B08CA3226461D12 850AD82DC411C8AB 8864B74827C80F3E 5E9DEA71E908029B 51E4B7F2F93DC369 19E353558D52A0D6 80B617F615B28335 01B12CA830EE0DE3 69031B9EB12D70B2 F5742BD45B49C833 BC10AC88A7C73C2D 65AE447673D6CA06 13552CED5E938372 4ABB54E213CDD4A7 D3A86340DBC27395 0ABE824AF437E76D 3FD421472EA1958A F1B45736CE1338DC E78F875935DCA6ED 9B567CF7434C7FF8 9E5DBD804D61F596 1D9C033FD819E864 4BAA78144903128E 6FB5BE3DCAAEB981 1A1FA7D3BC7D0DA5 18C09EE4F620A655 7EC7C487D4AFFD80 4580AD91CEE4B1C0 A95A1C45CD13128B 2EE932B6BD56B12A 93CEAA1135C58B91 8FB9008F50292AA3 901F675754D55677 A866FA9CD50E7CA4 DE90DACA4A1A3020 8E0571F8531F43E1 3ABFFEAC0102AC3B DB3C819EDB685A60 CD8F7FE5A500595F 481A40FC036FD461 06F3D2D4CDC9FF2B 1096AF8803AE65BC C56BEBA51DCF4AE5 7557E0269ED5D43E 54A95492F470DF70 CD34436E3E36C077 613FA5507B788251 22AFAA54EC70BDD4 94D23704EDEA7B6C 0D09927FF1C23E9B 517EA55B363C7548 C8337F9BEFF26061 255B6E2CD40FAE02 55D096FCAF8EA56F A16B2619BD2B0C06 3080C717EFCAE0B1 3A460C5AA5762C4D 3BE3DB751F393B1D 01D6BCF717365021 9A0CE521229CBA96 204E76B43885FCC1 8F4EB83BFB3309C6 9283332CF2E17218 05971E1D21A4523A 2691628EF52443C7 B51732F2633387A3 0B01E6736EFA204C 13648934219E318F B5CBF47994D4F9B7 7D35D7CC4B8769D1 C1EC3F3D37301D75 3DA680F73E8DAF40 D4158D98E8C03B21 3912A1177EEA9308 D2DED7B35E6EEE5A 86B8A06361430C45 C73AFDCE33260003 FDD44736DE9AD1AB 764540023D08C257 7DF75377E91A7ED0 BC3F26D00F81CE6B 00CFB2774C88FBE2 A227BDE35412131E 4A40A24516DBEE44 30FDB57A4C0DEDA8 0737D20942C1D503 9EA064E921D35B15 25FBFD7699578EEF 202575587837E868 1DCF7D357F13250D 51B31401596D89EA D7570C2855B3AC0E 53C979E1114B96E0 4BDD3174A4C9C446 201E215BCC94EF15 015E28A56987AD0C DD7C639E7E8885D6 CC9C57F3A1771DDA 90CB27C2D9EB3937 3FF096BEC2ACA656 B64DB2CCB288C8E6 A498150394FB08EE 25DCAF5E8D645388 F5796213BD254595 06EFA15BC1B8CFE3 EEC97D801FDAA37F

Read the ciphertext. Strip whitespace: 2,960 hex characters = 1,480 bytes = 185 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201212040335 (name+title). Key = MD5(password) = 14c05267a79fc0ba1a9610068c3e2e24, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 46 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d25252b4-04e5-6a51-8a7c-42913b1d8410
  2 37dc248f-7279-0376-ab34-d86aa8cdecb0
  3 28c7f20c-302c-6a24-aae6-75d04d9cb7e9
  4 1f98a36b-33a0-4732-be91-9d39bba1f28b
  5 e6911433-0a1f-2e06-ac03-5ebdee54d62d
  6 b1b4da35-5520-6190-ba04-4d8db37ed6e5
  7 db77bd61-7b62-61e2-b25f-21eb3e87c163
  8 bdfeb913-0ac4-580a-aefa-fc79dc654e6a
  9 339a148a-c417-75d6-8672-15013f0958ef
 10 f362bd56-2b0b-02bf-91e4-27d3c77ac7f1
 11 e197b6b4-164a-4d57-8e0d-b7c769bc60e7
 12 249e31a7-f0d0-3135-a57b-ced839ff0c71
 13 22264d61-7854-1cc0-be8a-69c5776db1c8
 14 1cc9441a-085a-57d6-8f50-8cc17fc7e0a7
 15 db91916c-e175-2f13-b01a-63d2c5cb210b
 16 bbc58182-559c-6654-be29-c4a3714c6e94
 17 0401c8cb-d063-1fdb-aca2-e59ccaeb8bb2
 18 af4b4b24-45cf-8d1c-a6cc-5fdbf6b9d054
 19 deee00b5-80a3-8b0a-81d0-4570a7b16db9
 20 e87b49b9-736c-0a35-965d-b1a09a7f586f
 21 4711d958-1175-13b2-88fb-d9f72f026754
 22 23ba2367-10d4-7509-af86-32bfab097ed5
 23 966a9ddf-4c64-0345-a928-a9ff35acf14a
 24 3c931fb7-71c9-3311-a882-865ccf2e37b2
 25 29e93a80-2d51-7266-989d-d8237996db42
 26 0e1f5780-742d-23fd-ab83-521c73dd5ade
 27 f858ac1d-0cd0-7536-818c-0297050af95c
 28 7075db1b-8815-4a7e-91be-1b6cc192d7c0
 29 66589074-4aca-2754-9c2c-5181fca8f0ef
 30 1f377c13-7633-2bee-b0a2-371c4c54ea75
 31 bdb29545-db56-098a-806a-c482a2208146
 32 829da505-3c4d-2f65-baaf-083226cba96c
 33 18c18e63-0b0a-67e9-b448-1ef54054c19b
 34 1199d90b-245f-445d-9375-b8e8437a827e
 35 cb32fd0f-d92b-81b1-82e2-df37bd22e2cd
 36 6fd0431f-1123-1e12-9708-180972c4160e
 37 ee884a36-3686-854d-9a05-0873b5f964fa
 38 ec7645f2-7bef-6938-9be6-0c59e1daff80
 39 69d5da4b-7a03-2272-a9d4-e1f0b312d98c
 40 1abb2b75-51d1-1da1-9460-27c9a24949f6
 41 8037bdb2-0791-4227-bbc9-6d9cac0a508c
 42 fcb04566-27b0-0d6c-b4e7-cbcc1c58cbab
 43 d4204b4e-dba2-8089-9659-4d6022400791
 44 59047372-58d4-1292-bbaf-be313e72cd5a
 45 47fb922a-83ad-69c4-acf4-10590234bbda
 46 ace4856b-cd8f-5c66-903a-67bf04eab161

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6064266570431526188017037274220264818621408165. Exactly this sequence comes out of new Random(379).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 24 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 46; the post has N = 46 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related