201207081323 w7jb9

explained decrypted filler

seed 981

Metadata

Post ID: w7jb9
Title: 201207081323 → 2012-07-08 13:23 on A858's clock
Posted (UTC): 2012-07-08 04:21:44
Timezone: UTC+9 · title 13:23 against posted 04:21 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,024 hex characters · 1,512 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
GUIDs: 47
Filler GUID seed: new Random(981).Next(9) ✓ verified
Run: Run 15 (seed 117,733,640) (seed)
Draw: 3 · predicted N = 47 ✓
Machine boot: 2012-07-06 08:59–12:59 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 6 · 4
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+namerun: seed

From the post to its content

As posted (encrypted)

414ED921B119CF82 CEAA29191308C6DA 46C2DF31A1653D05 BE7DDFFDB18B96EF C8F47AD475A7FC57 7E2723611C5D86C2 E4B8891CB9EF3247 572CE2B43CFEE4FD A0EBFE985B02C0DC D37901874D9BFEE7 D8ADB2C8ADBE5C83 DDC66C152C874E0E ABBF95D5F0D3E687 80DC43D92600D771 0E8C0866CF8570D2 D2F97FE58E3C9F70 41ABDD9F5B77E7DD 5117AF9F2A1BC886 F05C5D489F9078A6 DB7A0546CB642313 938CE0CEFE387170 BF8B8DCF34F7373A 82D653035ADF0061 5ECB8F0F19F57D9F 3714FD346289C610 084218AA1428034E 87D23EA0C80601FF B31E4B1EB52FDC1D 3112BF224EA587D7 68AB9E139BECBB4D FF411417C0E55E28 D5508FE95724E533 072E9C1F03D42ED7 250133D4E58A5398 180E679946F5B8FE 44697DC4C9B5941F 98BBA92AD0F7C12F 92E0EBC9A0D08A50 7D1166DDA9C1E84A C6F7885925E8E68F 24C6BB454ABFA7B7 41EA988E399E9247 720000466B42BFD5 F2F92A0953FAB81B C8BD5845D76DEEAA DF6195A1E263128F 376C28EE6C72DD8B 75535AFE9F52E9BA C9D458B42C9F3CE7 7455D9BF510899F0 8770A64D33DE2F4C 90E7C0A61AD77571 40F653C5788B37BF 17D42557EF62C826 F4722ED9536C6366 AABF03BB27326178 3D6F277FEDACD7DC 2698758E28017774 7A48EFFF87B63ABD 314479CAD006E8A2 2E3C276A392661ED 353152551CC96062 7BC4EA2C03F47CC8 43174718881C316D 30351C1A37EA5988 2E14159D13F62EAB B8AE73E6E882D6AF 23C2D45A9ABEFC82 63773676240D9BF0 6B91A59B5E6C1E86 DF25188A85F913E2 F8FEFF72C65A5ADA 4375623F122F6FC5 0EBECFCA549DBEBB DE7EC9FC84A87746 FBE2EC547DE54769 DF8221305525A3A6 1859EEC848F08B0C 9A2722EBF2D36B90 498EC6154C9279CC DD00F73609EF7DB8 C2CE348DEDD1A93C 8320AA0AAD7219CB 7559A37E2197807B EB7E0DF2D536C47F 126EF3025C1DBB4F DCC2CA1BEEC2E6F9 0751DB8E0BCA2EC8 6E7BC9AD609E61D2 D13293F93EFE9E71 2ACBEC8E24742E6C D594FE890E1965D5 477BF55ACE53EC47 B4298148F9066A2A 678158F2E080FDEA B6EBC25A55A08501 215137A0AB2DBCDB 8EB38BD6518E2B93 374CC5CEE0BE73FF 6438A80E0A27560B 7B1EF637B089D865 B3AD9D4A27234A4D 4952CE9CD5FB28B8 071DC14A28A27423 1D468302325EF028 A472CF1D4FEECF9A 36C68BB1EBE09B46 DE2A6A7D477F13D8 623843AF5F0EBF17 7624C88290EB06BD 7831389383D590C3 D8CD74BC02C4E4E4 A296360B990EA1B8 271DFA92FFAFC981 5AB318EE37134FCF E04C3D9BCD800C89 22C8F9E77C5A32A3 5A71F8546F2D040E 81DD475EF167B595 8B63409C43C083A8 72981DDC521A8A78 E79B9C4622818AB3 893DC09A3973A542 9188086D7249A1EB 2145C8EA248931FD 788A200898851CDE 87A7670A71E477C2 349982520EC917BF 5C4AD4CB574E5B72 D9E9C586AA696E2A B9CC6F796BE711AC 3C9A40538F6BC9D9 3DDF5597700609C6 A52DE7CF6E17F883 90034B0C8F782FC6 9DD6E6307481C9F6 9776F219DE015ED7 4067EBE39C75A46F AEA5D1DA5227E989 DE6806C105138825 190C8707CB9E894B 65408B0DBA847CFE 9B0400FD5606D2F4 0096715BE1946142 10FB19C3707BB06C 2EB836DE99F819E8 6F923CC7D4ED71C1 110C3745C9E3B913 C3AC8B6C94BDA2B4 2C6AF2C099340F44 49FFFECBE34C4FB9 AE7C53B2DF6B761C 92CB9DB138F7B4DA 5FA0972F29448B02 FC6A241BC1D9F185 67FB4FB97C9877DA 3FA1827A4BD45375 4F989D286127D86A 8748A80EE4BCA55C DE1358BED5BA18DB D528B3F1D6E4DD55 BED25B4BB1189D53 7D31B4A46011928C 4C292FA161640222 EEBFAB49CB4B4C85 CFFBE28474842460 AC0E052288CBE133 A4E887FD65D1193E 36015EFC4F3A55BF F185AA2C8624CFD2 E233457BACE83B7B 4DE14E5F745C2A55 6F5B19EF27EBE4FC 3566112B43D71D56 31C4D70D9B3A8C85 11AB827A820A95A9 606E50D4A096E6BD 4294EDE6A3DE624D 69BBE515D4CF161A 36050005D9E126AC 3457B569A18AA89C AF9EF3E64DF2D5F8 32F319C4FB6D9198 6C27DF599AF5F5F6 D7157B72E0D696D1 893A41DA8C9A53A1 1E193044219BAF54 4A2039D2057657A3 12ECFFDF2899BD4C

Read the ciphertext. Strip whitespace: 3,024 hex characters = 1,512 bytes = 189 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 47 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4e5c3d87-fcaf-2542-9c5e-78160c9d4d76
  2 aab86baa-4865-5196-8041-82d4e61b7cb2
  3 daa896b9-d9f4-4ee3-addc-6e3bd3e6f139
  4 e81417ac-5100-8305-826d-fc06b77a8f14
  5 e9812029-9a2b-1cf7-9e45-2e2e7757ce22
  6 0c94794d-c603-7e0c-abd2-62ad336da489
  7 a3975a89-9d71-4fe6-b653-45f2afaaa296
  8 473d7baf-5d53-5b5f-a8a9-aa770af606fa
  9 f14ca874-b3a3-35b4-8881-54fec9370f6d
 10 7eafae09-9e03-0b08-8951-c8e292a120e7
 11 93c61e12-45b0-04b8-9d31-7dde9073a695
 12 a035fb22-91ce-32f0-9f92-e76f572b64cc
 13 6c522573-adf2-0ab4-a289-e60ada17bd18
 14 05157c11-4912-7a53-8c05-b4fc5e1bb941
 15 939bcdf1-5416-5491-be5f-dd148cf48c21
 16 4dce550b-dea0-63f8-9d44-55028c2f6364
 17 1e62fc60-9caa-2dfb-a8bb-386d7f220dec
 18 6fb62ea7-74f2-1a87-bf65-bc737509fabf
 19 6452353c-2e15-238b-b965-b33406dbb35d
 20 326bfa51-33b3-1762-9617-cb800eafbf67
 21 ece7a60e-507a-1545-82d1-79d7ec15da12
 22 0ef37fb5-a8b6-4587-944d-4f37fb3aad4a
 23 e7035c68-c8f4-7a17-aa3a-b2d8a84319af
 24 337578b2-99ff-654b-9761-e020a788eb25
 25 dad5219d-68a2-7303-acad-2935b4f7c133
 26 8f280f51-aa11-4da2-967d-782266310c26
 27 46e7eb65-0aa1-315e-8407-f327499e1b36
 28 3b48f892-a434-4423-af32-e9c4c29a99c3
 29 df353444-0a11-469c-8f35-1fe1e30b8599
 30 492e3978-e154-1776-a8e9-12cfcbc59b05
 31 57a0af89-3fde-3c52-a157-a14624452a2f
 32 b90e2b89-adb9-7880-a5a0-6a18780243f3
 33 aa57d7a8-ee64-7944-9e19-02dae4695844
 34 f55f3d0d-52c6-58da-84b9-c44e520a5185
 35 88153673-4f8a-138a-a847-7ea8b773e55f
 36 759c2d2f-308e-2d08-b256-c634ba9236d3
 37 a9939864-2126-5068-808b-3689643d28af
 38 91f51806-9843-8061-b646-289c7df55225
 39 e5d4beec-1306-3f85-82d1-2e264acba9cf
 40 99889402-7fea-85da-b1a1-3d5aaa4025a3
 41 1a6b6c81-59c6-50ee-9211-ccb14a8d9865
 42 22e08b9e-9f16-2239-aeda-2a696a0dbfcf
 43 d6afd238-2353-3288-b898-65335af630b8
 44 063aa90d-0407-231c-869d-2060b4076cf5
 45 2ff99b33-b1c1-186e-bbc6-8af5dae7452f
 46 e501e947-dc72-6a4e-b4b9-e16b0ef04911
 47 372e22bf-cc33-013d-bae9-baf53e088352

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 25481745300307562121147674344137751258385232160. Exactly this sequence comes out of new Random(981).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 3 of Run 15 (seed 117,733,640): new Random(117733640), Next(8,64) per post. The RNG predicts N = 47; the post has N = 47 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-06 08:59–12:59).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related