201212041011 149imu

explained decrypted filler

seed 623

Metadata

Post ID: 149imu
Title: 201212041011 → 2012-12-04 10:11 on A858's clock
Posted (UTC): 2012-12-04 15:11:24
Timezone: UTC−5 · title 10:11 against posted 15:11 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,960 hex characters · 1,480 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201212041011) = 6c519f8f86eadd49e5327b16802f6611 (name+title)
GUIDs: 46
Filler GUID seed: new Random(623).Next(9) ✓ verified
Run: Run 39 (seed 1,106,402,812) (seed)
Draw: 36 · predicted N = 46 ✓
Machine boot: 2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 10 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

769B758F222AD057 8130572D50F69AD5 3D8D34EA11B74554 565F831BF661BE5C CC7E8ED5C6AE6BE1 2612B4FEDA1C3CE8 0C8858150D49B8EC 111CFFD6008171A4 7D1734A84E310DCD 38A4BE5C819EA5A8 03697608B9070E24 E3530D5D530AE9BA 44E435286CE4326D 84F29D77698ED0FD AB651E7C654AD07C 77FBAA60D3ADFFAA D1F5220F8D78260B 900C78A3581BD372 3052F6B970D7584C AAA7B1BA975E90EB 25B8CB7A47EBEE49 A77F60E19DB9A821 744C0817452864AD F409CFFE1164E1C8 09342FAEF502CDA0 348A8CCC5351DF72 3C01596A90BAD0AB 67D51E56F0892196 5E260A9A04D2D058 6CA91DDC7B06696F F52945A246610975 718396110AAA532D 163D54587E07EA12 D0A64F8638789CB1 9EF234B0AC09BE5F FB7B441C7838F2F3 1311B5C79F354C20 34CB30ABEE0B270F 8D3BBF7EA2955D10 7B9F9CA134208965 AB6115AFA9575355 1F258F016033AC1C 625100F03A08F933 37303904F02004C4 A5AF2A2E122EC143 328D2044CEADD08B D6A558E139F1778B E0BC4EF0B3B7DBAC 4F97B7F2BE16996E 3D2297172C43A526 FF5C9DEAA27D6695 CAF254EF6684C51A CDA756BE225C4A37 637AD6521F307902 02CFCB11471A8C94 643F84B85E1382E0 C549521883436A19 3653936AABC4EF09 D1F1B14BB22C9824 F1FFDD1D563C5F22 16F043F2B6415B1B 629FDC774513E695 4E9ACE072A31FD51 E59FCBE22C1EADF0 46A1880ACEDE20F8 65144E5B31EE86BE 165E577D1017349B C5D8BFFFE5C95243 E1AD07ED501AAA55 2174137E18D6D05D 8B474E0A4AAF3DD9 A248B0DC97506921 37C00A98DBA84DC9 76A0CE33C27876EE FF38F796C42EC01F C9AC70EBED441B16 C6BAF24DF665CDE7 1A8C57CF76F12196 2D587E7211A4B2B8 41F9A43C35077913 2DE6A000ECE1F49F 263089232F5C8D25 63254D6C1C6D2A90 1F18B2ED5AF7E9E0 30CBD694610898D4 D8358D3120C327CE 01E7196E307857C9 94CE43A70714169D 4D4D21CEE44805B6 2B235912A53E9420 0BECD79748F34B58 95AA96A1CDF3FD42 E5821CDC662567F8 8D41E5B0D26C85CC 773F8073B80CC7FB 905D51AAF3FCC2E4 19EA9AD42EC1A1DC 56E259AB23811294 5F0CD7DB4EEF87C1 CCFF41FD628CAF3E C505253F3611FF0A E2E9CBC9F4BE4E0E 7678BD8138470E1F 2C857AB6490F8261 767A486EFC798009 CF7A4DE0F0E12EE1 C39878A64E40F7A7 F39834A88D6FEADF 5991D9C671CEEB7D FB558EE9D5AFAD01 2360DF81B9579A58 30CD62496F30A977 D22C0EB785CDD0ED 5AFCBE8AF98CB0B1 9BF8616B1B26FC9F 85C87855924C61E5 EF4D8316913BA9BD 0723583B9839493D D2FC018DA2E1454C 954A03C90AE5BDD5 52236B41F4469ED2 4E1EC3CCCEA8F6ED 60A4B48CBAE55C82 D3F652BEE40DE04D 22081A8CDEA3D7ED 8045C51F2F5D962D 899A619DE63DC9CB 3BDB28FF7FC81657 46D997055A7321B8 4CC48FE0CC53BE39 B344BBF85BA8680C 43B2583AA79287C2 0D5AE8E8FC2C4057 1B171371EFFBFE87 DF68C7C2929444A4 F6951CE4B70C7DD2 0FDDE040D1F3C664 E22EFA4AEB1512E0 909726A0C0FD07FC 0558B2A770505D26 9637B447682D549D 74BB64C4DF23DE6C B2701D215D325E27 EB7AB563D29C0950 664F59EC7E63BCCB 8AC0CEE1F2B08B0E F7A4C04C1C1D2EA9 359BA9C77FCDE948 0BCD2EDE9F5713F9 D405F46A1A4C4D12 D30F51FD3DFFCD98 3B593C4541E3F438 DBBF4AD82A96A3F2 DCC3F1B9B127CCC0 9D5742860A751F17 863AA94CDD189915 29368FA048339D98 2C853C6AC5C14A17 307C3E44EF28BD62 6C338FAD12538D20 88B31DD701911DFA 197A757B7DA371CB CF3D7F4C8844D15E 69992DA4748A005C EDDFD2D45033AD16 35D94994F45124CB E44455D942167652 0BC405B0DD339FC9 F0ABFB42E71B11E0 900BF6562D225D39 F763090C227F1D5C 3D18B804963B0A14 725FDEA8D5BA843C C7D998F3EB9704EE D71A7EEC54087F80 B4C54873374C5773 2BB8F0FB37877218 CE190F965EA0752F 7744FF5334CC5D72 7526D0D96FAA6DC0 62D88EBCAF603466 99F463A15FE61819 D05C586D6C25D70E FAA2285F7C9B448B AFB2AF6BE8F60CE2

Read the ciphertext. Strip whitespace: 2,960 hex characters = 1,480 bytes = 185 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201212041011 (name+title). Key = MD5(password) = 6c519f8f86eadd49e5327b16802f6611, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 46 GUIDs as hex (shown below).

Decrypted: GUID list

  1 abcaf0d3-c52e-19ad-a585-0aecf67923b7
  2 6cb539e9-ba21-5227-a2fa-fe358054820f
  3 d4990340-2f6f-2137-b403-8d02e6a6d0c6
  4 e9a8b289-ed08-4448-8ce3-1c9bbebb9e17
  5 59393690-ff54-4f40-9e3d-134b9f908140
  6 414118c9-11b9-81e2-901d-3d608ae2d9e3
  7 39eaa170-8e97-0c85-b7bd-a0d7a6c8e3d8
  8 3e576549-08a3-8a8b-a20d-b4960ba3a342
  9 ce578db6-fb4e-08bd-a05d-ef8c817695cf
 10 7a121506-07c3-0e97-85c7-d2f29cb7dc56
 11 558ea878-d2dd-22d6-b7b4-f515f751199b
 12 3ebf2213-3986-782f-bad6-65f88eb73f08
 13 23ea954d-af2d-82d4-82e9-544c9c0c1975
 14 ba628120-40bf-593e-956a-b6e2ac8a15c2
 15 e4376f3e-e701-079b-8aa0-d4392816963d
 16 f85b9cd3-70c8-0a8e-8404-937e7b82e4be
 17 fc6a9ec3-9374-66c5-9fe8-a90292f65945
 18 5333801b-a7c5-2736-aaca-c9e8561c058e
 19 3b40cc06-7a0b-4f2e-b2a5-1818ef8e540b
 20 6cdda0a1-6680-4efb-9e97-26d040102732
 21 c922af3c-e4be-54b6-9734-c2a92f60fe4e
 22 d2e296dc-25de-6f0c-b4f7-35b70cbf30c4
 23 06c9b930-f341-27b1-ba2b-86202686640a
 24 16060a1c-3d83-6dde-a4bc-6ece964a0ccd
 25 46fc1b91-f66d-69c3-aca0-7de869e21781
 26 c49ba839-7632-2277-afe0-e333d63c0d23
 27 f36fcea1-abf7-5d4c-8c17-aa64947df3f9
 28 3131338c-3acd-6ebf-ab28-5371780b7666
 29 59b9693d-50c2-5e8d-8a92-2739aa821897
 30 670522f8-e82b-7304-98a4-44531a15c570
 31 c011260d-2cc5-13b2-ae4e-f145e10e8314
 32 f057d0c5-29bd-58dd-a9fc-02a696ed5d2d
 33 66f4c775-9230-7455-ae57-747a92670f2a
 34 6e65bb57-756f-58d2-b23e-2dced6f44aa6
 35 cd1c7404-51bd-1264-95cc-644e5fe145f9
 36 47ec3aa2-f60a-6669-bc01-9183822a35a2
 37 2c50e8b4-dc79-0342-b832-e44148165938
 38 090c7666-19f5-809e-9f70-9029f3d1e75b
 39 1ea45c70-dd31-0ada-b63f-a672c9363ce9
 40 277db0de-533c-654f-b7b1-e696e7f14370
 41 e85b0a6c-287b-7ff0-8926-26ae0e38da19
 42 0574d5ee-133f-726a-8869-d4fd408fa345
 43 3c056626-16a3-5881-81a3-b4e68dc7ed4e
 44 b3e9b6f6-b84c-6606-91f5-945979fef6ba
 45 920b9ab6-3c09-3692-a3bd-bfbfc0e63890
 46 6cdb0ba9-0828-31cb-8a5d-555be705395e

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1524480800278500624456266256571575160806775633. Exactly this sequence comes out of new Random(623).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 36 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 46; the post has N = 46 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related