201207040336 w0tnk

explained decrypted filler

seed 390

Metadata

Post ID: w0tnk
Title: 201207040336 → 2012-07-04 03:36 on A858's clock
Posted (UTC): 2012-07-04 07:34:09
Timezone: UTC−4 · title 03:36 against posted 07:34 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,024 hex characters · 1,512 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs: 47
Filler GUID seed: new Random(390).Next(9) ✓ verified
Run: Run 10 (seed 38,548,093) (seed)
Draw: 34 · predicted N = 47 ✓
Machine boot: 2012-07-02 09:51–10:51 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 8 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

E92891AA83C2F45A 0DDE305B17ED1FD1 B9B0FBFA825EC94B 3DEA96A95C1C5614 BB29276F01880D32 B8997D4B1E524469 1F9B7EA0CCE8BFE2 920F706120CDF74B 82B830112D0BFCCF FC2A6E99B3A7E888 BCF51EE8ABB22405 4D4BFB94465A325D 2BCF5733FCAC98C4 C8FDCE54546A9752 93048C7501502670 E9232F34A003ED25 E0FD54235054CC19 D925BA3611C0B3C8 20719E72DE7C6B38 2AAC9D88C0E93D1D 58A581CB8EB6CABB 8F833770311F7B91 EE899D5924D57298 4D24FDDD0ED5E05B B181A321CF8C478B 71081814D4B4C06A 3BDE72ADF65B617B D8D858CAC8414A5D 29D2F72F1A7C4976 E1DF53536BC696AD 37AC0D51E81E89E3 F5FD1FE98D3A8F2D D50E03B1820EDE5A 5C1D63C0B9DFAA58 7725025BD8A80695 D5FE886619813098 13803FC9FE58D449 938B6930E165C371 621D5615F699C716 C88D3169518C1E81 0A824B9D7C71AE93 418D18238506080C 415C3893CA7E0EF3 BBA0702B17105D42 FCBE64C215A1F966 8A505DE7E378E06A A20B92E02378B3F7 D607F4B407D3DB3A E053BA358539EE84 84E6923B892091E2 541A3D3403598842 A9BF463F5583B8E6 337CD4B051F59FAD 6E942C93DF062C5F 95FCC4F765F490D7 6E23BA6C5437581A 820BDC13BE8ECA42 8F9EF7BFA4E4DE86 90CD7451B85BB02A 7DAB6214829B6D08 B0F400C2193CF50B 2C5614D730A84DF7 BA6ADAD86EB6E0BD 2735B5FEF0A13CD0 BBBB2F5336F7B891 08BFB60CB6DF2E7E E48663FEDADE8E5C 28142D36EB026B14 7ED6AD357113AF68 7649A3BEBC3EB635 4580D99C8582D403 BE9E72EB24A183DE 153EC5295F1260EC A76906D388D76A2B EB00C01FCBA5F932 2449497DC9AA8047 BB4F73E11874D0A9 189A78F1D5025345 CAECC4B0C565A2A7 ECC1D595470485A0 8FBCB1C03F0E50CD B64C9B29E105ECB8 A3C8C51B4ABE2F31 DF75109B9385CCC3 E1287912F3F78C6F CB3A22BEBC1A8D1D AD79D99337E9EBBC AC65AA47E263C3C9 B362262869411466 11CEF0CB25D57AEC 6008BD548D27C196 617D261AE5628F96 45F417DB672341B7 D15184774D8348BD 61FFA1CE31828F58 5BA52D4535BB6784 E577F3142ADA870D 86E58B2ECB04992A 1B06870120806DD0 73295B0288AC9F8B 2F68A9528DFD2DE9 CC1DD49EFB6B05A7 6157DA49788AE3BC EB6654D98B4A5759 55CE2C9BFD1F6A72 99B99A011BAF96FD E795B2097E8A9A77 59E046DBE3453380 35073A8084EFD28B 2FAF34E7EE88CD7D 0C40A894E6412F22 9CB62DEEF43694C9 984F749B8BD905F5 9FEB47C41DC9F202 C8E435A6866923B5 82DB18CDB122DD63 F862AB77509727CF 180992030D3BA634 6E9F8205D2A8BFC5 CA4E333295848B0D AD1ABD21C08C805A D9E591C2BDE4940B 0588EF78CD280701 E8B2CADCD19000A0 BE91760723ED2C2F 26B9D4ABDE2A4987 CB545E05D12E057D B4B0CEF40AB9B755 D7D60259E675CDDD C164FF5578DFA3AF 72C3929AA11CC021 90C877137D887DAF 30B11A1F6871C92C 297471A31EC9CD72 310F99D6A705B12E 31AF1EB0BC881E73 CD4FF0CB7AAB2026 9C6E7044FC1C9B1E F74E7C45DD9D5665 D5BD6044D255268F 326A58263794A18C 0CCF7C7F09E1A766 C01AF5EE24851944 779B94799DD20D42 ADC1334A5C5CFC97 C7A473BD0D78D8E0 E485AD47018011CE 9D337346F878218A F8B811D21155EED2 574B2E1BE1F49CF4 DB9D9F74A9A5976B B56E65EFD04D7C31 4283FEE10FD217B4 0AA78F7088C0A301 356992C4830A0C62 B81A3A01AED4FA9A 7540D5BFD2D4A8F5 8DBEF14E6F9CD1E6 335A93AD02851C7A 6BBAB84B43217D8C 4B424134CC3C5739 1EE84C5181E211A8 FA7B1D4F38B2579E 0D9944F251242937 FCA7C8198836ED02 2E7D741FE9620344 CD011DF608D6E135 2B54BDDBBD6FE638 728878CD3A85E02C BB0C6E1159F48F86 9D22D547EAFEB8F9 CC9AC7E0313CC18D 9B78DF94A481762C D1CE44E6D6CCC905 6CE2458659FCF0BC A33650D232293BBB 89501C1CD5A5BB29 9E369A000592E050 8AED36E4DEFBB257 5E771981839EAFB4 EB431D9FF2C9B154 316C31D2CE455E6A E56EC95EDACE60E0 07C8C212BB92CCC1 382F9C6FC2CF084C 1B0079A499D35F73 9CCE97C5148C1275 2BAD7377A4638575 5DACFFBA8FF64DBD

Read the ciphertext. Strip whitespace: 3,024 hex characters = 1,512 bytes = 189 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 47 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4a4af1e3-44fa-40be-9395-a5ef982d8404
  2 712830ed-73d3-2714-95c4-6080ba68d951
  3 69ce9b49-cffd-3294-9c9a-ea9a0d5e04f3
  4 2c935099-0ddd-78e7-8c15-7aa12f326f54
  5 d2b19f23-0ca7-20e5-a141-19bce3b31151
  6 a61829cb-2c44-3b47-91ce-171c9dd8c224
  7 afd56ec9-2df0-5a75-81dc-35850343e264
  8 0b808c37-8e84-0ec1-97da-d8f2d8a715f6
  9 64137c01-478b-20e9-8381-a1f3d7c9367e
 10 dfc90f60-f3a8-0b50-a018-3ad2efca3fbe
 11 28e0a3bd-2e70-575f-af02-5ae38b0f790e
 12 2b5ab9fe-64fd-8979-bbc0-3c9ace32ed4c
 13 081d37a5-6046-684b-a570-7170aa2de327
 14 a6f63768-a7d6-3c84-9427-cc009c49bbd6
 15 34896bc0-8e75-8758-90f5-9436d45f9d2b
 16 e43de332-ab6f-560b-9c99-ff8aaa082e91
 17 c5b15fb8-dc9e-7add-afbc-b94c67c4f149
 18 7835e8e6-69c0-710e-9be2-95e76773742f
 19 9b080abe-39ef-262b-9c9b-ddef3ff42653
 20 37584bc7-b5c6-2f73-90b5-8f34564381df
 21 db6d27ce-3460-5286-bd2f-7c86f952474b
 22 89379970-40de-44fa-8d54-8eb1507a298e
 23 c2713210-c17b-8be4-82ff-c9faf1f0fc1b
 24 2baa8f4d-2081-25c2-9aa7-9b4a90d7e3bd
 25 241b7fe4-2eac-884b-afcf-bcf211db40a0
 26 01ddcba8-d4c3-32b4-b900-a2ef26ead58d
 27 4dfbbe5f-1baf-2c27-8385-9e1fedd6452b
 28 0732d9e9-3387-37bb-b3f1-f43f117925bf
 29 d54053f4-a360-28e1-ac39-01e43e7e271e
 30 ffd5b872-299c-1dd3-9148-5c852e584795
 31 d6e8f6b5-c1c7-199a-a6d4-370757950d95
 32 fd7ffc77-818e-1b1f-bda4-b7de001314e6
 33 6e2faaa7-49f3-13df-871e-af37848ab4de
 34 62ee88bb-9bf4-6321-b506-b0ab2a07afa5
 35 967ce0d4-d679-7ce3-8553-8fe86f146ff6
 36 3020ab4e-dd16-5641-ab8d-8ede3899bf3c
 37 3e2363d0-cfe8-0bd0-9e22-0104ad4ceee5
 38 62b62e68-72a3-1235-bc1a-99233b0830b6
 39 90463092-294b-1a40-9871-4173e2b2ad69
 40 9f578544-c7d6-3bcc-be5c-90c8cfec1561
 41 b35b4f8d-39b3-85bd-a96e-4c6dea950db5
 42 e0fb41a4-8760-0382-bf5b-02d526ad7413
 43 e7e3c066-ad09-2c76-be5f-849e4d6844c5
 44 f2d9ebcc-0d84-3b6b-bb1b-3b381c3ccfa2
 45 6a6983a3-a8c5-475a-9184-fdb864e4438a
 46 7bd1db13-796c-2be5-a0c7-b56697443a8e
 47 de9273df-9bf1-0276-b985-dca00c4846d8

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 42372350205863857722548283232111167501138023420. Exactly this sequence comes out of new Random(390).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 34 of Run 10 (seed 38,548,093): new Random(38548093), Next(8,64) per post. The RNG predicts N = 47; the post has N = 47 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-02 09:51–10:51).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related