201207161302 wmkbh

explained decrypted filler

seed 199

Metadata

Post ID: wmkbh
Title: 201207161302 → 2012-07-16 13:02 on A858's clock
Posted (UTC): 2012-07-16 04:00:52
Timezone: UTC+9 · title 13:02 against posted 04:00 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,896 hex characters · 1,448 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
GUIDs: 45
Filler GUID seed: new Random(199).Next(9) ✓ verified
Run: Run 16 (seed 39,036,328) (seed)
Draw: 8 · predicted N = 45 ✓
Machine boot: 2012-07-11 17:05–17:10 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 9 · 1
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+namerun: seed

From the post to its content

As posted (encrypted)

F0567BDDDA2C3208 83ED1C69619E2A14 CBCD5CDF2B6F6E7B 48618CAC12EE1BF9 446A0803E57EF2AC C3189A3349A156A4 9E602830AEDEE9FD 8BA43DD7A999611E A8D467207B4378EB C13810C9B59FF9ED 297FECF57E5D6613 0AB26CEB8A1E5F99 3319A2DE54255062 2D6D7482B3028342 3D412A8597120449 8E3B00F5984335DE A40FE26A226A9A4F CFA3E72ECE3CC298 70A00EF734CBEE0B E5EE136B55BF78B5 A4B3357111221C2E 038F3D962B07911B 5AF248C660CD05F3 C4C51EC246BDFFD3 666C2A496D056B4E 7E86A344053DBF29 040E9F323524513F 0CDF69BB56CB6162 AA0D3AAE2091F1CC 84845C5938D280EF 2C115A9C2186C513 7477C06D80C689C3 D8D7F274A0F954AB 439EC82B93B5B3C5 35944EEBF9239A29 888387FEAD0CAFBB 2354DC08DD77BFBD F3A46537433249DD B0538A20D42E9C75 92BBF9B65BA47341 52DADB51F56AD6F2 B5791754A29BCA84 33B1979B41692D5C 017FFC7C60160427 ACCDC66E03478C0C 6E6E7C13376A1DA6 7EAEFEC222DA543D 8E47E0D94A22B47A CC78DD479FD569E8 AF9FB40F261BF60D 7AB173EE3E693D86 D8E78ED1CF149597 960CF714F63E5A77 727DA14B60B36AB4 2CA91DAA4CFAF4FA D2D7E4D8E18A1617 B72C101BF3E929C8 06B42624E8E8F0D3 16FCDDBA2485F0A7 6B45711B6BD291FF 5CE60F4F9855C029 2228E5FD85E879FC BEC87D99A6EBD430 94F4FEEDC146B446 CC6B85A1AA1F807C CC67B267CB07EBCF EF3A734858CE16F3 75DF24A968BCEDEF FBD81234C534D918 71B9EC5D37817024 73DE38BB591300FA F3862C2EC1EE1490 46E6AC02D1653755 151EEBB403EE02DE 07DC9B3A3FA45ACD DBDE7FB14D36A438 0F32B229B30BF1C6 ECEAFCE0F1EF2C37 109713D46C9F0B3E A007D372C575FD88 8C5DF86D0AEDA076 96F0FAC3F02B14A5 0F20A9A7D4F9C7F8 5B0918C70C86E309 F8CA3B95722C7ECD 10BCE94B4D615E4A 05C310EBCF6A76AF 0166E621E4C48BDA 2533040B2FDF93C2 C1AEFFBC64955E4D 0C2C02E16EEA0BBE 57244BB519F73FFC E2BF2162957E0002 024CF3F0C18B63AB 768EA92EB44BA54E 3B08A53CC5B14A1E F8B915A4153EA26A 0DCDF0FD49253881 4CBBA37F9CF80D32 5F8AC4820CF7F79F 7B3D4137950C86E7 E16B8EEF87230AA7 19C76046E19C6502 29840273391007BD FBDE03FD54CF0601 61E9BAEDC9BFF978 C21B01F75DFCFE58 89FCF1A2460A130D 5DD9B063B66F59E0 0C9B7B25AA091AE6 D51F06BD320FD19D 744D6947DAE8CB26 42CD170D4CD1FFFD F15355C2722418BA 3D7B881F196B613D 76A0494ABB946E3C 3884EB3E423E57C9 7516797EB0920A7F B01A32AC36BE89E4 BC90399F7B1CDD26 F432244BAE8DB4C2 63D6D97F127DBB97 3DFAC27E444B5558 16929EFFDF4914FB F1CD93512F117077 15E281B9D4E67F16 A3DF4CC32D613A26 42BD26DC0F19D3F6 B90C0B958E435F03 72469361D83E475F D23E342DBC2C325C 774A7A4D9BB2B2A6 38E47BA288499ECD AE8CEB0410709F45 E16BB5E7EAC5461D E955AAA880F27A7B 595D103D2CDC32E2 7861F91EEEECAAAA ED31D783947F40FE 1E43D8A64AFF882E 63F67072B910F08A 18E4720AADFCBCEB D0A8B18486DF5D5C 0EE0D10E5D61D69E 7B05E9FC9B301474 4D6A28DEBB09CE19 9289C435F6E23C6B EE4DDAFF245A71C8 AE365EC7050561D0 9980F50F11EB7E77 304B2B6B098464AE F3AB54ABF26EC318 3486FD949EB410F7 DF7ACDFE39EEDDD2 BFE33466BEF25778 1BE42AB78A72313A E280F4927B56AB18 5F7F2D6A26D01A61 5BF60E1C88BA1904 0D24C5CCAABBA646 F3C52AD5EB43259E EFBF056C37EF1705 33CEE420E84A7208 3A82ADDA08D9E82B 89920160751C34BC E7040836F22F55BE 72433BE50E09A297 B678F260966E0069 3C7EF177DC64BC40 4952326AD9B99F71 649E94BA21B62B6F A44CB9173C0C7B14 749F7F82D61795CE CB6789F7C38B93D2 95F60DC80DA7EC4C A1D6A8034BD8C9FC 2A899F8363717C70 414FC632FEFBD182 D873AD69FA1AE83A 0CF805647CDA9EB2 12ECFFDF2899BD4C

Read the ciphertext. Strip whitespace: 2,896 hex characters = 1,448 bytes = 181 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 45 GUIDs as hex (shown below).

Decrypted: GUID list

  1 bdedff84-4b86-615f-84b0-5972ff892776
  2 ec7610a6-a318-1bb7-a3a7-34152c12d15f
  3 5c9aff81-0259-7d33-94d8-4dd92148aaf8
  4 c50f4abc-8f3d-0a40-b660-2e1cf949fbb5
  5 4a9da20a-c88c-0cea-b679-67a858195a8f
  6 3afc42b4-0af7-4f51-bcec-826478edafde
  7 553f88f5-952d-0567-9fef-8780a313deb8
  8 91625af6-49b1-2ff2-8a0c-16acba4d7306
  9 80ce4efe-eb4d-527f-9202-dda3b7fafd0a
 10 c1ac7059-1a72-53b5-b947-28fadd212987
 11 196aa2f5-7525-8cb8-b9a8-3dc2d047a771
 12 abc090c3-9d65-71b7-963d-a06178b737c7
 13 6db93531-dbf2-34a5-a554-778758da3359
 14 228bc0b1-ec64-0451-8608-9f559a4111a9
 15 3828ec58-6e56-2bb4-a902-9461244a9d71
 16 853d68dd-e04e-2049-a697-bca951d27fe6
 17 a9afb587-364c-4146-bf60-13654595e9b0
 18 383ed35f-b6f1-3804-85af-e7bc108ddf14
 19 542d54a8-cf5e-0d5f-b4fb-6ccca3564256
 20 e3b4d0aa-40d2-32ab-b759-71142b8690f5
 21 8e95fae4-c39c-2131-89db-11125a7509c7
 22 34eab201-6d0a-6b34-bd77-c634a566c34e
 23 9c46bfe2-62ee-53a5-a7ad-4db58123e2ef
 24 cab04f17-15bd-4d0e-8ed5-20784e6e62bb
 25 6dc42785-bf99-1eaa-a86e-7fddc082b5d0
 26 6c618859-eb1e-4dd4-b01e-66a6aed500dc
 27 80f8f76d-fb45-08f7-94fc-e63abb617cc4
 28 765783e6-b743-8eeb-b66c-56f37ef25e12
 29 ef64fe9c-d076-494c-975b-55cc94672998
 30 19cbefdd-56ed-3628-8fa3-2ba5fa9a63b9
 31 38b46de1-0063-50b4-9dea-6ab073a249d3
 32 0b506acb-7fd5-76a6-a79c-4124861c3559
 33 56a1f55d-21cb-22c9-87e1-4a89d5f455ed
 34 7f02e4e1-91d8-8eb4-be45-0274ef822b61
 35 6d986e94-c77c-1460-a12f-c18ce52b5998
 36 fa52dcfe-4521-3df6-a68d-d2bc3893878b
 37 cc410d97-8c30-7d9a-af61-09a02005f035
 38 74052448-a66f-8c53-952b-819c9983cbca
 39 47144d5d-c5fb-3f01-83ab-6e74e845c858
 40 0cd6ee44-fd1b-887d-b67c-bbd4af183a9d
 41 127efa36-3fb6-2c55-a5c2-2f818f026fc1
 42 d86e344f-80ca-014a-86b4-4128eda4dfbc
 43 e64a980d-ebf2-863e-9435-034e2c9c35fd
 44 fb697e7a-f7b3-705a-8037-fa36be7a6f7f
 45 266fb454-2425-7d3e-9b35-a97eb94bfd25

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 617004025587302243032654140843572813783820877. Exactly this sequence comes out of new Random(199).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 8 of Run 16 (seed 39,036,328): new Random(39036328), Next(8,64) per post. The RNG predicts N = 45; the post has N = 45 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-11 17:05–17:10).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related