201207040236 w0rit

explained decrypted filler

seed 765

Metadata

Post ID: w0rit
Title: 201207040236 → 2012-07-04 02:36 on A858's clock
Posted (UTC): 2012-07-04 06:34:09
Timezone: UTC−4 · title 02:36 against posted 06:34 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs: 48
Filler GUID seed: new Random(765).Next(9) ✓ verified
Run: Run 10 (seed 38,548,093) (seed)
Draw: 33 · predicted N = 48 ✓
Machine boot: 2012-07-02 09:51–10:51 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 9 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

3C6907A07EDD0BEB 00B8A433348ED98F 28EED86BFAD5A1C2 14CFD75CBDDD3ED4 284B98A60BC96772 C6BE79AEF2336EB9 7B83823DC0C76E30 88EFB104BCB55360 F6FF23443B22ABEF 9B60ECC77FB9727F AE061155D763E468 929629A4C63DDED8 99192D79DB0F4330 15E8B0DE137B1DA2 78237EB0EDDB7A88 E892429E7A6EEFD6 DB7FCD1C58A2AC57 898A3961FAADF948 B19EC78FA4B95D63 D80A9BD5B5DC6C6D 0788DB7EFF849DFD C5945EAD4B155EEF 836BCA5CE8377F60 8D081D82D97A68A3 FD4EC003901C9F42 09A56EDBC0349361 4FBFD0C1CD80ECE9 84090B6648E09C3F 77D2A15B85D2F2D1 A6CBE873A0EF2F7B E0DBAC142D69AFD3 BC8C0CA5704A818D 5052EBE8190708D4 16E07F1810179CC0 978267850A5B02A7 D79CCA57A2DB57CA BC57557652BC3F4C 6509E01EA7A8F512 80B77EDA0228BBFA 77B66B529D0F932C 27FCE985563344B4 646C6CB81674203D F320E08C972AAF78 4B9BEC4F12887D2C FE67440D6938DB17 E04863513C1A75B4 066CDF5BEF855F30 215922BCC8B5AAB2 881DF68FBBBD3C29 E20F5FB82D81479A C23852FBD1398EE2 2664DDF3D9A1F937 84EA0E4A4D469907 0E62223AD7D22212 DA74194A1D597792 39BD5DE82BD174AD 5C36A7EBF4FC75CE 5569D9354CD0BF12 26BCC9AA5E323899 5C9A57FD02F605A6 F7EB6F1AA10060DA B7C023E85383C275 BD0E557CCB440F05 676D57F24834D220 3FF11CF9A8143498 7C371FBF4D41B8E1 22E01E152FC955B1 0E77FE5D33FE5536 A3A33C235E71D86D B2AC75E9D843046E 5C9F02E26CA042F4 58B440E55163827B 86D4BB5F48045F23 934222B73D9B9897 7B8CB5B154EDB90B 077AC78180E0FA68 9CD5652028E31C3B 56F62AD438EC32F1 4E073FEF01DB9BAE 467A1B897BEF457C F2E3A3DDA20BE993 074561F399D56136 F790D076B3956560 7BF7DE7BCA2E3B82 F10FBD14DB6BCB41 7EFBD963A70B04C1 5B30FB90975A5F39 3BFAAF6DC1EC0004 03A7CCF52E9B21C8 F12591C7DAA0C583 E7C9AF150B765325 D4C7EAFEF0182B54 278767C7EB63934F 5A9FD834C894083C C61B7EC6845988C5 247EBFC9BE1BFE84 B310B3577D5E9915 1185EC4C6BF28F6F 759180B45B06C64F 921451CD9A93A773 006DF9B9A713B299 13322A2125541B23 7DDF98BFBC1CE788 2EFAC887E3395C80 B2127D284580EEAF F8DFE7016A15215F 5293D8A2BE23D8CF 05117CD89F4CC424 733C71FCFF6CBCCD 6B9E59F89063BCEB A1233BB2AE66AB20 BF53C58828709292 AF6DB832B8E0E77C 3A72A3A570E53B10 678E29FD3F807087 8D5DAD81FFCFBFC3 FEDA97809084B2D0 78B6B14D5565CD7C 4F7BE06BF99BEFAC 935C1A7B2E2AE5EA 036F27A95BE90AB6 7203E6945337EB0A CE4081F7778542DC 2918F50ABBB11D34 8F265D208EB2CAD0 5453EF9034256DB7 5DE2DC79185C1DF9 493C0E6FADF2859C 05EEFB59B1B0F34E B2A4B37A70FEDA8C BDF1B9866ED00D00 A1679F3BBECEBF60 0E5B7DDF046A64AD 9721A2278D2B0DB7 40BD12597FD5D097 5DFA6C49A41BE4D7 8E038FDE4CE82C25 3376CC2F9FA6B1AF 1E75E94B558646C9 C004A6658675E458 CE73651377CCDBDD 3D63FE1BA31760A6 7EFED2188FD60984 04B9D52A60E86437 5E14C66DD837FAAD A7D4BD1B188F8BC8 A1291A6D808CA1A7 83588BFD07FA8D52 C915E069C69B1A63 78D89C97D23A4A67 25E075A6E365C3BD 99D71ED444444004 603A3E6CA10AB27E E48215B6C857EAEA B6B3A2304FC3F802 5E81A23023CEEA41 A29126E85FB7EBB6 9970E2000D1DEF74 825EEBB5D0F34FC5 493D678EEC3DA8DC FFFD2950EB265DE7 C39583F6E13D82D9 7FD3FF3F940A2A04 2571FD96013638AA 3D056DB1835AC64F 85188515D6DDE1BE AF58D318E8B7443E 9CB1A0FAEDB795D7 37E6839D7FC17B53 37C3279D6A395D8A 1440FB60FFBF811D 9C23F72FD5ABC44E 1CCC3BD657AD61E2 600CC2953D9B47C4 7C1CDDA1ADB0F6CD 059D70C90A4C0C06 89D1CF4F74EB0D36 81717284CE3BF754 5D4BDD64AF324240 022B1B13F42D447B CCD67CF86B57367F 253BE1B47500F948 D178105FFE645C8D F6638899590541C9 C47D9C3A5C12E0B5 58808A13A6A8C359 F99086AADF72E792 12A911D65A192BB2 1815ABA55810F667 2745ECF104CC0446 94BC2F02E2ED5EE3 E0FF4A3F27860ED0 5DACFFBA8FF64DBD

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d65d09e1-7113-34da-83d8-825871ec7ac3
  2 f80d2f44-06e4-2c1b-a0ed-a01b8c233d69
  3 3dcf2fa4-5fc0-42d0-a18e-b42a55f93770
  4 2e7314b5-267a-78ee-82e1-2f0df3773e85
  5 cc054a18-5ac9-5ea8-9484-f969b248571f
  6 97028f11-41fe-0d00-ad2f-6d527503dfd6
  7 b0ef88d3-dc8a-6bd9-8ad5-8ffaadff06ac
  8 0089716e-66bb-2118-8fc8-2ee125beb613
  9 4f3e7cfb-ad93-5569-b999-a5cc22c948b0
 10 7b924a34-a58c-3e6c-9cb2-86a4948040de
 11 a8455f2f-2f98-8ee1-898d-e75ce0c2ca43
 12 0ab3f83e-c288-6d36-8ece-3d5cc9cece29
 13 e4427126-6df5-4b99-87c3-d54cf49078ed
 14 ca80d2e3-06d3-4a7a-a3a7-464b7031f1fe
 15 4726e042-121a-4ed3-b6fb-835454682456
 16 ea464549-9b21-7237-8dd9-a38f9f6d0e75
 17 8364d10c-9502-3530-bc0b-0986471cd673
 18 d84eb0c0-a928-2faa-bd20-65eb6c0c9810
 19 8963d80f-e5b5-375e-aa62-36101c594d90
 20 5e0b37dc-83f5-4dec-b0b0-86d08f82a588
 21 25545040-9228-4a11-bdc7-6de0fa92f4f3
 22 f8d7dcc9-cf32-4973-bb02-c4830ecfc042
 23 7cd97dc3-cb75-2dfa-874a-d3789c3d475a
 24 6738b73d-dfa0-2d83-812e-90becb5b1423
 25 22bfd8f0-95d8-666e-95f3-15ed2d34c6b0
 26 c9878c66-be6e-5af9-add2-afc664ad4626
 27 8b0860a6-1b9c-55c2-b6e0-afda21a83975
 28 4b5896ed-1d75-693c-bc0e-572142859008
 29 2bb3a0b6-732a-76f1-93f1-2609aae9b2d0
 30 04c77dc2-02d1-1b3f-800f-7a5ac25cd4f4
 31 5cb313e5-5898-5d48-9247-0b1092a7e118
 32 ae0917e7-098c-812d-8ae6-af5041f3209f
 33 e02cadf5-1dc0-8345-8243-b931c6d16164
 34 b2a1c72b-151b-1c46-80e6-5bb8615dcd6a
 35 e5688fe9-8377-60e0-96df-b25e5a50e3e1
 36 af9005bd-75fe-85e7-a801-c5506225f4b5
 37 0bc827b1-7032-6a22-a785-cd7a14bbfd51
 38 6f561904-5091-6c88-9028-cce163f9d442
 39 b6c70962-3a87-3d05-a94f-ba65298f994d
 40 2282ffea-a8e4-2b62-a259-f6422c595604
 41 9b06ddc8-c838-7d5d-924b-e32da0589c90
 42 2346ec3b-d107-2f00-837a-fa37dd5349a9
 43 f2a88f3e-e5a6-7a23-b4b8-ce885cab5978
 44 14c02c7c-0f6d-7a60-b5ab-acbc9ab93eb5
 45 57d35824-a6f7-266d-8a47-a19700299936
 46 79142cae-7f2b-42d2-834c-cfd68cafd85b
 47 37643504-90ea-5c0d-980a-14cfd7817ca6
 48 93c49bd2-f613-3e79-9480-55e2ec311482

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 324750625386444732344422655671588168663272772453. Exactly this sequence comes out of new Random(765).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 33 of Run 10 (seed 38,548,093): new Random(38548093), Next(8,64) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-02 09:51–10:51).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related