201212072000 14fv2w

explained decrypted filler

seed 0

Metadata

Post ID: 14fv2w
Title: 201212072000 → 2012-12-07 20:00 on A858's clock
Posted (UTC): 2012-12-07 12:00:27
Timezone: UTC+8 · title 20:00 against posted 12:00 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,320 hex characters · 1,160 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201212072000) = 6e8888cf93740b9d1ea79256163b52fd (name+title)
GUIDs: 36
Filler GUID seed: new Random(0).Next(9) ✓ verified
Run: Run 39 (seed 1,106,402,812) (seed)
Draw: 80 · predicted N = 36 ✓
Machine boot: 2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 7 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

ED288C8559F75E0E F8BD2BAC55113780 CAE558341B5CF7F0 621E6CA6B24FDBF5 42E1A1F45AE60630 B5655CB6D4FC180C B5A3BA191344E0FB 21C6A3E257F7F200 C6059C5706055A8B 9239170809A3474C 4BD073177018E250 73F4C84DA782D5DD B2EF9A8101D669A1 5293A527F7EEAD20 365BF99955E98B43 1FC7EAF25D974655 B9EE1435F87D7173 C338E898C4710A54 79858CE543843965 A13263D547BC96E3 580E20EC7DB68C98 41065EDDC2D7F371 9D2ACB84F7B9460F 642F2BD2AF8B34DF C5BC30A0B0577E34 8AC5BF771C09FB6A E035D05F7296E862 A8995C3DE5E6F1CC 8084FAE176F8E8A5 4E826EF16FDB2658 789D2902603CE801 88A0098BDB8DE329 C90DCE7E52A42077 337C53BA765718BA C263CB3B4A6DB993 A14F60749D515B07 4B1C24E1A77B3A36 1ED1AFB16C9F8703 49D495DD46FE3C4A 26B71FCB37C50AE4 DCEB3609F9798467 4E4726B229EA140C 30726BDAC24B1B31 9EB3F2085FA3006B 8D3F14D4AE482B42 8ED8532B2825BC6A 5DBBE854C00E4417 FCC34554EAEC190C 3C50D79177586692 89F724E6C5910DA9 2B23B8412F50C291 77A77C46835A4143 105A68C2089F02AC 5A3FE7DB232B4537 64912C1B09B1847B FDF6BDA51FB72536 5A550FE83FB480AA 14445474CDB52CB8 49C74115D9E09C95 3BC9D4550FC6FE0F 87BC4457B502283D B4BB39DCD2C682EF 3D18B8B155A4B1E1 6B3C20595F849B53 21123790A848D9A9 A986EE6869D77F70 5509E336F5C385B6 86DC8212E4BA5CB8 C6CEE591D7E6E007 50737C62074CDDF9 27F9BECAAF028F12 355A61FA97A2E255 543DE8E0BDCD5B76 89EC9B89D7264276 4FA0AF6B7A8165E3 8148731E2277E0A3 BBE2273825D2A05F CCAC1201B37CA3AF A6F3496C9EA6BB65 0E8256F6547D07EC ED79694429BF7696 D9A7593932406B92 AD180E524327FCAB ADD1070B65C9CAA5 B8F9A85ADC3C218A 923F1B41518635F8 751F994EF516F496 7A782D0810E4A5E1 3D4FC84F91A93F07 AD1DC26CBC0F6D48 CE7A2DB41CA7EF6F BC1E207ADB969FC4 2422D80A2BEAB0BF 9BF288F6CA20443B 9E47921EC21A5F7A 0B9B01E85C85A9F5 736D483C4155E566 F8C0C4698446F582 60924A5E17518994 6E689147526E3FBE 03F1F81FB61E56C8 3F4F1B5A6DD3D8B9 CE6AFFE808CD6C6D 0CBD20B533E34E52 72DD2AFEC5AD1F9E 45C2EBED66254F08 66D100B253FBB6E1 A542AF8B3B95AFB5 EC2FCD31459DF37F 9B33AC9C2D7BE834 8D6E743B6870F09B 3AA15BF9271DEFC5 517132065AC69EBE 8F11A328CF62FB11 A691756BFE2DD776 52A60076C6998FC5 FE813E4972394920 265AB3357CFC1892 7F44B31C9AF7817D 8F6227498749343D D513B5BFDD03EE63 052512D6C9F938E9 AB95AD143CD6237A 43217345365004F1 5F6A3E506A160901 C61F58E80091DE50 3C3CC3E615219007 CD482544E76A9B24 CFD2B0C70F63BBEB 54348DFD4A8F99C8 D4F450C52374E519 AD288C408DF90411 53681E8CEDF7E82B FDD514A50894A666 6A787E78AA10FF43 2E2F096964AF9D7E A10A78E3043967EC 3C9A4A1EF4F80DA8 1F8D441F65355EE2 D4717AD3957A95C5 25B9529B28589BDE A462D36D715D52A1 FCAAB090DFDF62E9 549A839236D8F48C 67F6D29A804651F3

Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201212072000 (name+title). Key = MD5(password) = 6e8888cf93740b9d1ea79256163b52fd, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3339fadd-5433-65e3-9288-b024c9cc0946
  2 ba7084f1-7f84-776a-9c04-042517aeec9e
  3 a1730ea2-0b2d-6347-8969-a0a315a814c5
  4 447b4c2b-03c3-5a55-8827-e3b2d15337e9
  5 57dfe11e-2652-1a9a-9aff-4b685e2a4016
  6 5a4b0f18-72c5-528d-b48c-aa42b168bb3b
  7 95ddd32f-1937-8d9f-a222-d8bb825f1a6a
  8 f049b9f8-001e-3c7f-ac28-d90aa5a1475b
  9 d9abdbe8-af52-8acf-924e-7c6c678c239a
 10 c153b1ce-b91f-2758-818c-6f0b06f67213
 11 77dc509b-2d20-2461-973d-116d6497959d
 12 aed20e13-eb5c-4f30-9e05-a3bb5d60fa1f
 13 0f5a1f32-a128-5f10-84a9-acea3cba3757
 14 dbae4e76-0016-4fb2-96a4-d47d32c5b365
 15 320a4eb5-9906-82b3-a675-1e01149cd338
 16 e9ea409f-42ab-0e21-8071-dd93530149ec
 17 ca96d965-e3c5-7ff4-9a86-7a943c681fb9
 18 e5ea3ef8-a8da-8c16-9326-cdb881537203
 19 6af286c8-9e7c-6665-b49a-83718f53d696
 20 de0a9b77-c50f-2c11-9dd0-0d0e80429066
 21 19beb76f-89f7-7664-a75b-80721c98f514
 22 23599712-8568-7a54-bbba-7eeb200ebe12
 23 bc9e7d2d-6044-880e-ae41-5426723cd167
 24 9b786eaf-160f-00a4-9aa0-9a8aebe478b5
 25 a414d727-362a-6b3a-9a84-de61dea9bf54
 26 3856dfe0-a2f6-4161-a48d-63f469a77f7d
 27 9929c6aa-4157-82c2-9a46-facba0e88242
 28 0350b890-788b-6879-9aa1-0814d6e30c99
 29 e89496c8-5ee9-4734-bf5b-6fd2392620c9
 30 ca86a6c3-0400-08cf-81cf-255a06ad38da
 31 4b3b1176-9a7f-1c6b-ae89-7657c8e73a08
 32 605a05d2-3494-4a08-b7af-29552c544705
 33 1fdf567b-fe26-2725-9c36-ea68ae5c56a9
 34 ec66407c-5dff-8dac-a9a3-dd2df9d75cd2
 35 4ba058c1-84ad-5157-9835-9be8d5a3194f
 36 4e19a62d-9516-65ac-9ec2-ef1d388f5fb0

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 676515838224548078627780648640142856. Exactly this sequence comes out of new Random(0).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 80 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related