201207121302 wfan5

explained decrypted filler

seed 105

Metadata

Post ID: wfan5
Title: 201207121302 → 2012-07-12 13:02 on A858's clock
Posted (UTC): 2012-07-12 04:00:56
Timezone: UTC+9 · title 13:02 against posted 04:00 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
GUIDs: 44
Filler GUID seed: new Random(105).Next(9) ✓ verified
Run: Run 16 (seed 39,036,328) (seed)
Draw: 0 · predicted N = 44 ✓
Machine boot: 2012-07-11 17:05–17:10 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 1
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+namerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e82883a7-d8fe-5cde-aacd-53afeb480823
  2 60914103-887c-52d0-8984-a2a19f2e2e97
  3 2c1a8161-0124-1213-a707-d5ed5cf42fe5
  4 70f9ea78-9767-8a69-925b-cec6cdbf32ec
  5 452fa642-fd21-5c1b-8eaa-9373ee3ae758
  6 1e0ab8f9-a958-20fe-b807-1761b7412008
  7 2ec7e90f-b061-8d19-adb7-a4855c76ce9d
  8 057b6606-a677-116c-9d94-7cd890991262
  9 d0875322-0484-898c-93fd-80ed54f2fcd2
 10 b625cd51-49fc-85f3-b014-d66da964bcc6
 11 ec1183d6-7746-5798-a76f-2a5d2ee24794
 12 8f573d10-1ece-36bf-a7ea-4af32b61fa2d
 13 c75fb130-ea31-7bcd-be3d-c6ab7436a174
 14 0cbffebd-c833-00b1-9512-405fae785093
 15 e0dbed16-5f81-4118-99a6-93d2c3fffa97
 16 28b0402b-200f-5bc3-a850-3b4f24d6a049
 17 771a926e-81e2-04e3-8e5c-8cbc8bd7b729
 18 01580978-36e0-08cc-840d-f377cc0eedfa
 19 7788f463-94d5-4776-91e3-6296edeaa714
 20 0843c18e-6af3-820c-b930-82a466571a14
 21 25bb6460-8056-6f03-94c5-3fbaefc1a65f
 22 a0c28bb3-d89a-5c51-bfcd-f8bf220a56b9
 23 816373df-06a0-610d-9323-5a2ed741045b
 24 57b01aef-0492-6a99-9816-44203320a3b8
 25 a51c8741-da52-8b90-ab13-9c58bca1e2a9
 26 9501aa6b-e740-0d64-9c53-fb827f77114b
 27 4156e15b-ec25-153e-aaf1-08534a40eb03
 28 74801ba6-afb7-6436-bec1-f3869f52d598
 29 0d97e5ef-a69a-4afe-9e3e-627253e8067c
 30 d7044a16-ce76-521f-8a83-c46f8bf2cbfb
 31 a89eeeb1-d97c-84d3-b081-ad9e12b7ba2d
 32 9640fdc2-f431-0386-af92-72ad0a85ea5f
 33 a96b87e9-bcb5-4e5d-b8ad-ce8f503cdc25
 34 e0039790-951e-5ce1-bf7b-31a8bd1ea8b0
 35 b174afde-9fad-2dea-b6ab-610681a18a2b
 36 83438e1b-27b3-2c01-a44c-8320c511c4ce
 37 2627bdde-2fe4-0e9a-b7d2-eb96c2c915d1
 38 237ab65d-c2cf-89c7-8775-39d76324694b
 39 eae934c9-9d2e-28ea-8c43-a12d5a0237fa
 40 ff05b70f-d4e9-59ef-89ee-6f0d5af786d0
 41 1a9c9ede-b1de-160f-ba2f-3cc9b5517554
 42 b79ed115-6120-706e-ab91-576a991b030b
 43 17491b94-4089-17f7-9270-b4c96c37bb12
 44 d1a8864c-06c0-1948-bb18-14c3fc28c3f9

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 55185281885370450048656680164580452208251711. Exactly this sequence comes out of new Random(105).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 0 of Run 16 (seed 39,036,328): new Random(39036328), Next(8,64) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-11 17:05–17:10).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related