201212060400 14c8ao

explained decrypted filler

seed 389

Metadata

Post ID: 14c8ao
Title: 201212060400 → 2012-12-06 04:00 on A858's clock
Posted (UTC): 2012-12-05 20:00:06
Timezone: UTC+8 · title 04:00 against posted 20:00 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,152 hex characters · 1,576 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201212060400) = 671d6471c14045bceeaeaf3a97e4d26a (name+title)
GUIDs: 49
Filler GUID seed: new Random(389).Next(9) ✓ verified
Run: Run 39 (seed 1,106,402,812) (seed)
Draw: 60 · predicted N = 49 ✓
Machine boot: 2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 8
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

C475ADA66CDCC588 16ABAE20DBDAB0A5 64B7333929DF9FC3 02ECB54E5A16FD64 B9386BD1A944DC27 436C1490231E40DA 21EB31FB8FC68F91 0A2C29499A80459B 30DD89C06B7CD6B1 D83510C61ABF60DE 566376D3C497D88B F787C0E6EA816094 A749E6C142CBA939 0ACBC4FEF124AF82 1099E44AB403AA2C 29D0DDCBA22391C9 4907065FB4888BA5 D9E658B56FE06A0B 8A1F338AA1ED1498 E849B66276D74494 5A6BA54D3225E2CF A15B494AC372778B E4931CD6FA2D614B 0E4E208FEB9AF599 B65A56B18CB4B061 E9B8600021E38146 0A6C7C39EA72FF74 E1554F7138FEE525 40AD360C6BECF01B 849A8FF4B31CA931 5A2B3A1415F68AA8 E1A93B690AAC7150 FA8245C3E1B4391F 9AF29B828006048B EA71544A17ADCF46 9BF8BBB47D60E7D5 F692A2FFF1B2265E 324F1C1269CA54F3 F3240E92DB8B50C4 E694EC5088998778 803F1D6391ACD4F9 F22CB9DAD7668338 FEE9FAA290C849C5 105DCC67D8D977A3 CC9B2930EE877A93 752154DAE0E7219E 0B18103FDAF30BB6 D5F492BBF14F39F0 50A67AC83B5F5723 1B21CF1AF4FAF555 6FCD2EB89B15C197 C9B387E480009B9E 1C4A117BD8C8D936 6BEAF4C7EAA5372A D2BEC60B00975484 90E3D90741E85DF2 73B6495BBF42244B 573D6D2CF700459F E202DBCC3BFD35EA 0A68F21658ED7124 273E16B4A293D906 3A0FE93D0E1BD459 518B1CD247F66698 99FC0E3AF51A68EF 049F7866A6FBDEEE 138587994C8140BD 394752C3916D6BC7 910CBB10434F71D7 C7605298A9DA40F5 2FD728AE099DDC0B 19C0521C4A3EF198 3F59B4382038FCA1 0293B29E316F71FD 2649A67B3275F866 3A63B617032DEFFE 1D5FD95E715DA9AC DE41F99FED427CEB F196688526CA1153 8F650D8685BC527E E00BFE1D94145C02 9E366356B8BCA0A1 1E8A4F425DFE9277 6915C77E7299996C BDA29A033D132F63 8443D3DF23364ECD 98B2ED5C776A2080 2219E424F3113E85 4D2C3AA47DED77D3 270532633D9E4C77 7C8C736FBB34149B 585CC2E765590D2E 5FACFA56D271ADBF 04A3C3DC9AE1F20D 907B6D2251FD4C5F 100C177648BA8B11 67EF8E62F32055DA 0613A0B5D573D8F3 5F74F8346D2EEB63 7EEE3E4846EAF168 D351CDD4E18B9DA9 E0632D59BD2346D4 1775492A83067627 FCD0D74E4E5CECE4 07058DB7A21FE5B6 172E7276BB714517 B5AC6129BD5EFEBF 0218A8653C7B37C8 9F40644577CFEC98 705695BAAE4DCFF0 57D28C55BA8F8075 78A61F666489E82A EBA42953ED0F7890 405526D3797D6F4D 7BD0C3C457139FF9 2B4424A769936D9C 21C803B3A056CA87 1A1C10AD2FB66D12 46309CFB382BD3DA 1D41028701448A26 10ADBDCAEAFB21E8 2FA517F1E3F5BCAD C69FED560DBB8CAA 82478E538FE64A02 8B73BC26F2BB6D75 2533282A37F2C3DD 7D88C876B2FA2F8D EEE1AF79A489C95E B1EBE1633EB2EC73 50EC39328055D927 CCF1B3753812F139 6593BC5B003BA440 0353CE76ACD16131 D3C9EA9DA2FFE89C 5EA93680D482CA4E 32B5F47F554874A3 69EB77657DB2DE0F C1C845BEF1BCE405 49C070B1EFDC71D1 013BC35847D8E989 EA44A1348793A304 CF3C087E71B92F90 253B0136F8815F4B 757697C1D7D31873 16558B143F1D2108 362158326F120D0E 3E0778111E15C839 437845A5EC422E68 A478A2F56D7F39B9 4C68C58293694A1B 2352D4B37D094994 19341992E1C26C4D F9CEC6964800715B 65C8686AC763E288 C77869244689FEEB E8395E7BCBB87A3B 9F1C53BC545E41C8 1C7196C2910602E2 C0A7F01CACB0D420 DAD08C7FA0D19495 CC612BEEA950E9B7 8AD7E0951127BCE7 76520CB65EAD1757 1330D33DBDBDFE6D BC028C8766DC4EFA F934EDAF077C4677 6BDDAA7F8D2013F0 6821EA58773B128C 9ED2F9A821939823 A6306D1DBD0151B9 C02A08EA5F30D6C1 309BF95C22F1B0A9 A9A427F84FF22CC8 D9196C13A6F04FC4 DF0DA7BC24C19D5F D0E714FBF58EB104 457B3647E39EEE21 FF58554072259A40 91812F3ACE360A7C 9AA5D5E818640D53 0967DE3B647DC008 CD56FF1194D74BB7 F41837173A414AB9 3D9AE4AE36D2CFF8 EAAD4DF52E4F7F2C 39976865FC5DFF34 8D091F675E132DF8 C6BA3358F56B3CCE 15FCCB76B6537634 59EB019C47C5BBF3 7A2EDAF760C7C608 820810387ECCEDDC 10256BBEF7EC6730 1388017FD837DC81 4789F739EFEC769D A1A705D622F3FFBE E2B78920116A43B7 F3C5DB08BE294A40

Read the ciphertext. Strip whitespace: 3,152 hex characters = 1,576 bytes = 197 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201212060400 (name+title). Key = MD5(password) = 671d6471c14045bceeaeaf3a97e4d26a, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 49 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3071ec1b-0376-871e-8f35-d25699590b03
  2 b243d56b-f0ad-8758-b3dd-384b04a8cd94
  3 e4aaf2a8-5df0-63d0-8c72-bc7865528151
  4 6590fc85-58c5-59a9-9eb8-3fe867cb3fa0
  5 2a8265a2-8ff1-7229-81d2-f143138ab24e
  6 72a2cad4-0380-48b4-bea8-394254b49f55
  7 128cc1fb-290d-1c70-9a87-e223bbfb88d4
  8 f68c6e11-b951-57ca-a6fa-69cd69a86567
  9 45b1d845-e789-000e-9ec4-c662f6e7edd3
 10 47b0c74c-651c-628e-9763-0afee453fb05
 11 4de83044-3434-7ca6-a287-41157a7d15c5
 12 93f6a934-fca8-11b3-ab85-3c218def6577
 13 2c6393ff-8894-0290-bec8-5812c002db45
 14 126015ee-4d99-74ec-80f5-c338bcf650e1
 15 a9355ebb-79ed-25a3-ab26-42b550ffe72a
 16 448ac1a1-603f-8775-9a2f-e1d6e525838d
 17 cc89d707-3c2f-3224-aac8-fcd20ecae1d7
 18 a0e0f38e-7d93-1753-af4c-4b0244945c09
 19 a0de1117-7296-1750-8dea-0ddca7cb46e1
 20 e739b793-0bd8-80fe-9ecb-62012b66b4f7
 21 b319e32b-baff-4b92-95e4-6abd1d890b3e
 22 1a26214e-0cec-2d92-8556-f3ee733b58f6
 23 89eff682-a137-62d9-a6ea-cd668d05de1b
 24 c7ea6c7e-dae8-81b2-9a7c-2d39b1e96667
 25 0c1620bb-6c50-7014-952d-1257c5372074
 26 d19d134b-a0eb-6473-bba6-4c4064d7589b
 27 aa0dffc7-380c-3cb2-96be-bdde02bc8764
 28 584509c0-1dda-6b14-9574-95a62ef4b903
 29 6126702a-0489-87b0-9e86-d46b0ee3d76e
 30 fd847a47-a97e-34f3-8217-8ed066cf12b1
 31 5e546d3d-3354-75ac-bb7b-b19fef908fa1
 32 5a3b7eeb-c5f9-8538-ad94-ed504e3f328c
 33 fa628c7e-35bc-670d-ad9e-cc52c3c42756
 34 de4741cd-661e-65e4-8062-8c4084cea01d
 35 5691fbc0-c49a-469d-8bb3-ee5ed1a57a84
 36 692e2d06-f4b8-5564-985d-24b5609a6a2f
 37 cdaf48f2-0291-27bb-8825-31a6df9a7cd6
 38 897f73ce-84b3-40a7-b04c-11f0384b0cbf
 39 3e0da6c0-4764-857f-a1b8-e6cb1c87b1db
 40 6fc0213a-938f-78d7-ba42-fcc553e41b2b
 41 3ac8e558-b619-128e-af6c-030712c3e59f
 42 4deed26e-3640-77c5-9df1-1d3e7f0d0228
 43 32f7fd0b-f694-6913-bda4-5b42c78b6042
 44 7ab1957a-9965-2362-9675-db007b68f3de
 45 877b75be-751f-0e7a-b12b-b5f4d1434458
 46 2877957b-35ec-38cf-bac0-9f3cf0b2ae07
 47 475966a7-3802-67b2-876b-46f19df06e68
 48 b73e590a-3fae-47bf-b702-8037b6708af4
 49 11acc7d4-93c8-1181-aece-e6c15a316c68

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8865741506710728311842687636837866452487176203641. Exactly this sequence comes out of new Random(389).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 60 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 49; the post has N = 49 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related