201207131130 wi3nf

explained decrypted filler

seed 830

Metadata

Post ID: wi3nf
Title: 201207131130 → 2012-07-13 11:30 on A858's clock
Posted (UTC): 2012-07-13 15:27:58
Timezone: UTC−4 · title 11:30 against posted 15:27 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,728 hex characters · 1,864 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
GUIDs: 58
Filler GUID seed: new Random(830).Next(9) ✓ verified
Run: Run 17 (seed 38,757,453) (seed)
Draw: 3 · predicted N = 58 ✓
Machine boot: before 2012-07-11 16:41 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+namerun: seed

From the post to its content

As posted (encrypted)

5D4FE340D3A5117A CDAE4D63AEB2BF31 A0DEDBA3D2F26DAE 4FC07BC94C3BFDF4 54642E6849B8BACE E0EF48A702E69C8E 28EB906C8BCB45EF 00A9AAF94574555B 39705CC91EEB73D9 22388121BF1ED679 C6312A243AD57A4B 8A7E389DB22A1A66 15706E318A514A56 F4BA4B1B41B61F7B F8ABD8C070B58753 0BB4C5F959B22502 14BA14C6934644AF 0124EA32E388425F F8779EF4D0BC547E 9866B14680C050B6 95C5F9AB1256EA8E 3AA4C4E59C76FEA4 BEFED8C1AC13B835 3996F5C6548A6ED9 2EB6804D84A936F8 938F2324D24F2E19 99E0786F4B7561CF F3C1C0B2D8633084 870E4349929D45BE B42A734D37405B61 2E9713631473BE19 D75ED180DC72935C 724F916BCD72620C 4ED9A94B941561ED BF49BCBAAF9A8BE6 9F88D38D4576C172 689B28EE53CF28E0 7AD9BCB2AD5FBA7C 2B098F654C51904F 4CA28B90062311FF 1725F274BCDCE67C 13CF7091FB2B6A3C 6F7FA8264277E702 71C33FDC599697AE 93DED1DCF58B6629 0298AA63B9A760ED 72DC63A9AA0DBC29 11A11B269C070025 D45C892EF739F3D7 658F41F3D845A85F 96DE76599FFFD40C 3E2DA833FDA5DE92 0A3A3B3E86534C7F 98BC15889C328A36 FD0A6BF6D633E840 655F2E62BFE8B327 DD4D4B45608C9E5B 11C28A259CFB34BD 18A6F9F15EC82052 383A8C63AA68A6FC 3A268C5AA2F8F9DE 237611970D310B6E E2F065718E7A7068 AB94B512214C9651 0DF639E3646E2542 D25410F2D4F446EE 69B0955BFB19D5AE 36BD4F5A72CB8418 7C437B4F5D74E2C7 5A12562949314816 D5085E9D5C647A6D 9F46819228C107CB F8D36B60F037B242 3999B70C4AC51B3B DADC52E178D7393C 7B69CB951B398D16 0F36CCC46E5A35D8 23C9A60275815750 EE003FC4C9DBC59F 64379A1E89E6048E DD54701EEC9E8D55 5E3D9E9812D99530 E1BEDD8D85051851 1346CC0E11E89F2F 1123EC29559E3059 28456A0F750CA401 CEAA64E86BAE4A42 44C845F418D45633 DCC84B19BF48DD12 6479DC004F71A8E7 DEE67AFB47A89522 5898AB6D816D1AF3 FC03C112E558053B FB0B4CA9301B40B5 BBF6596D3594F720 18109A4BF108F789 C3F6E445774E651D 5C9EDC302F5D7807 243F4E959BBCD9FD EA6E03F0A9FCCE45 C2E52C52B87923D5 A1A49C83DE1B9FA0 B515A51FAF935540 2D05F7756774AF84 57E28C5C16E7F4A8 E8F090E37363D4F1 E0B1BA5029FD9253 F04509BFE43BC314 4C8E251354214A71 FF1743D2ABF6B9E8 8DCAD4AF9E321DFD EE498BAF7CD22D70 9F1312AC5E1496D0 4BD7CE45A3820F6D B44E26AB73E42E82 48E7692A64F65FDA A76BB2D0FA4E0296 EC15104E22F2C811 79894164F9ED7936 31380A647E2CE9AD 1C965A19AD94D997 C12B61C244F05A56 89925C6D2A73D7A5 04B476742B263D30 A38E91EB20E81D1A F9A72BC679AF3B9C 30B12FD42D96DD6E E9E06DB818A4E03C EF04E339BA12516B A8088B3FAB33C4EC 9646355DE647E3D4 C41F261133BCEEB9 160828260313ADDF 9A3842D945A0991F 5F2530261D4B5EBE C0C48619749F1CC0 88A0604A2F1B405D C9C30C33EB58B116 D3BB3F4C577474B5 7C33AE7DBB9D825A BC55887686E24644 D98613B0F4CAB215 BCD64714AEAEDC8E A58B7C0FD7DAA73C 9057163EA7EF1FAD CE0C449BF0F18DE8 2F19179A5336FD1A BFDD41785BD87861 5CB4E50E57255056 ABC69EBC66DBE5F8 6919D268D2469EA1 A0E097C53CEA23A8 23E892AFB1A4D868 82E364424F30EADD D4F77DFDF6F13E0E 992CC63B1E607EB1 8E433DF1BDBA3180 AC6316D82925CF47 374699C5AAE9D51B 02E0CB1C86D407DE 0BBD3FA3DDDFB227 6655F0DE8D4CBB22 5575C1C8A82C2A83 4B0DC32C0AA8C93B 5B4C9A5CE9A7F677 57EB5DCD04AC5736 707A330C90675810 54DDCF7273D61808 1477DB7147613558 03ED57464DC05B88 FED234853E875308 1048A9F15D2D8493 B8869D8C1C6FBC23 2F6AC1288E85A17A 3B058F66366292C1 FB92BB4DEF8857DA 5EDE022B1E2DFB37 E61BF756FE37158A 378BB6058150365C 6A7A6312C9BE501C FF07B1CD79AE309C 70BD60CD7B8A3606 9472F46D67F7A87F 91D16CB39A417672 42D3CC5F4692DE8F B4D08E6B013D24CE 4FB237A0513EB699 162918B716647551 E29F76DF5B04D5C3 BFCC12302439E584 C441EE6CAD0CE49B B180643FA5E568F8 8A77423A07F21488 EA166668EF08A73E B60B61A8976CD67E 71C9DA63664AA851 16C0DF4F3F67F895 A634169C2969ECDC 880CED3323671BB5 6151723AEBDF785B ED4EAB321A8251BC 4105CE2CBB4C8086 48ADA7BAE2E5AE4E 317D3AB38B231001 7F5A23768A02255F 35ED4550E8AA24A0 05C9127249C6C8E0 FF38E4B704C9E1B0 4B1F295FEE06660B E1AC824132676B1A 7B4FD1BD8A3A71A5 1A100F84B78E79D3 8817D38A48E46EA4 CCF114665347362E 50602D655D581593 8611A746BE61C3DD 40F480F7906A44B5 762F775A2AD0DE93 C0823A60808E99A4 5CCFD6D8D8098520 589B9B5FCD5D6806 60D7A7664899F0CF 8695CABE6E5C177B 9E9FFCB6D2EFC890 C9EB7C52D29399D9 7DDCDFAD7A7432CF 2FC20775AF173FD4 95DBCE59C7703E0B E91067BC53B57581 AEE38BE0C52FDCC3 6DDB6DF262007BB1 1609B6DDA0652A34 12ECFFDF2899BD4C

Read the ciphertext. Strip whitespace: 3,728 hex characters = 1,864 bytes = 233 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 58 GUIDs as hex (shown below).

Decrypted: GUID list

  1 28a643e2-7a2b-3526-8ec7-63b4954326fd
  2 6920f41b-24be-3e58-bdd8-b5d66f99e8af
  3 8bfd517b-d2d4-8f5e-b9de-b52d975d32cb
  4 89b289fe-dd4d-6e2b-b2ba-5c293bff720e
  5 9c3ceae6-248f-8e50-b7eb-8bcad1942fda
  6 561e574c-86c5-8d79-9af3-808b7b1a83aa
  7 6d47094b-0526-70dd-8a6f-3e0e7b04ea0e
  8 d934af7a-6424-7d1c-b7a2-e07efb851373
  9 a161590c-5910-53e5-b58f-2b4db95e5a38
 10 4b44efdd-fee7-3fea-a476-3a5326ec8e23
 11 fc265d44-6cde-71d2-a27b-8893453efd63
 12 a9b18c5f-d81a-424b-a05f-7b6225465084
 13 96b96fd8-09a3-198e-be62-60fa079598bd
 14 baeb5512-b772-2e5e-ac1b-75830e72656f
 15 98bf9a23-b5e2-83e5-8df1-8909f72c9532
 16 935095d4-62f8-3f8d-bfdb-dcc6643c867e
 17 4c3533c2-1a02-6459-8db1-0189761f65cb
 18 0125ec3b-0f6a-5e49-aa07-388117c2d78b
 19 c8540f01-abd1-1298-acb7-935c1827879c
 20 247b4ae8-5db3-6fb9-8f47-286a371428fc
 21 14318f27-b862-09e7-9b31-9fdfeda6a015
 22 bd65935f-b684-45d6-b50e-bbf90ebf6c80
 23 50fd90b0-55fa-262c-a0ca-b50c1d57311c
 24 8da3dcfa-f467-8910-9aad-1b289a8256ef
 25 59d418c1-055d-058d-a5ef-85a7713bf07b
 26 426a599d-8cdf-3835-9267-51e48a77fd38
 27 5cfdc9aa-9596-42b9-8d5d-34a125ac3846
 28 6cfcca15-2c3e-856b-940b-353fb3f3744b
 29 cf2735fc-763b-79a2-ae49-8798f9f5e08f
 30 17ba320e-4e69-4810-8b18-8bcc051d41f3
 31 4f5c2bc3-eb2e-5534-a06e-e9eb24ec5db8
 32 800885ca-5cc9-06d9-8ceb-eb5ab56bf42e
 33 68bd6993-ef1c-06fc-beed-2895cae6b42e
 34 f6610144-1a91-7281-aadb-9aecee8dbc87
 35 b1d578e1-ff1b-41f9-a5a5-fd2928fef286
 36 e7c7252b-d0b3-630a-852d-0e8b42d07cdc
 37 8ebc2e57-1559-58a7-ac6e-b1d4dd59b339
 38 43dd7603-4f4e-0b4e-8827-cd12c8775da5
 39 47e8c08d-7777-4262-aaf9-244bdd377bc7
 40 d6dc0ca5-b17c-26d0-ad20-248b6ef618a6
 41 f469f91f-ded3-602d-aabb-ef770d12edda
 42 8d80386f-d01a-22d9-b83e-3bdb4f87b6ed
 43 1ab6aa86-84e2-0c4b-bcd5-bcb42c3bbd0d
 44 ee0b5d16-e0e4-1b54-b80c-c0b22a5221b9
 45 24c41485-68d7-4546-a1ab-3d9589accd37
 46 4729d099-f0bc-6753-a795-41d69a8423c8
 47 2b34203f-62a4-6119-bc0f-45e2fe6631ac
 48 88dae0a8-7908-4de7-a5fa-cf024ba98770
 49 e2f78cda-d65b-221b-8537-39b779e80c7d
 50 1491c471-edf2-8c00-a4e0-750e954f7d52
 51 b8a35dbf-a67e-7ff9-909b-e0b6e765f8b5
 52 eca733d0-6602-7e6c-a102-9a47dd8952f9
 53 8091f377-4352-7f4d-9f30-e65c45caf50c
 54 60dc75a1-834d-542b-9e37-069e13bdb084
 55 802566b2-b064-3fbe-8b22-becc37a8a12d
 56 a0137343-58fd-7032-97bd-8fb565915e32
 57 2584c04a-80a5-058a-bed0-60af2e1e6aea
 58 5e8b05de-b480-8d6c-8e9f-f22f6200b065

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3386887753741283651604280348745007465042620146642877753708. Exactly this sequence comes out of new Random(830).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 3 of Run 17 (seed 38,757,453): new Random(38757453), Next(8,64) per post. The RNG predicts N = 58; the post has N = 58 ✓. The seed is the machine's uptime in ms when the app started (boot before 2012-07-11 16:41).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related