201207172330 wqnyr

explained decrypted filler

seed 127

Metadata

Post ID: wqnyr
Title: 201207172330 → 2012-07-17 23:30 on A858's clock
Posted (UTC): 2012-07-18 03:28:06
Timezone: UTC−4 · title 23:30 against posted 03:28 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,152 hex characters · 1,576 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
GUIDs: 49
Filler GUID seed: new Random(127).Next(9) ✓ verified
Run: Run 17 (seed 38,757,453) (seed)
Draw: 12 · predicted N = 49 ✓
Machine boot: before 2012-07-11 16:41 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 7 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+namerun: seed

From the post to its content

As posted (encrypted)

ED0BBE0E156AE38A 7348FE1C7A4EF350 47CF2A683B464033 09BE8568C6C50C38 DA38CC3999CA9E44 1D35CED69F1B89B5 391C6DBC61C01374 3073759750275027 9D926B626371826B 32BFF576982E9003 70D3136AF85EF2E4 DEF6698E487D1AE2 7FFECF6680C87718 3185BC7372B2AD41 13C5CF867EBBF0D2 08AE2CE7DDA46B7D 333EA384EAB01F65 8AC088D6D858E156 D841C57E5013A97C F5BB52CA6A2C1A3E AF61E68F1C8A891C A2611F3E5BC6A04E 61E1D8BAC5CB660A 4397557933FDFDA4 0A955594F85940A7 EFFD61C7A7D53745 EBBE789EA000FCFB 258677C3AC7C51B1 001049D284CFF27F E3A6854442EDD2FB 9A5922D10D1FB0E6 487B766C4654383A D88F21F70828D5BC 6A95716CFD8C9D39 D6E77F31651399E7 5502873C56940B96 8739408F77480B92 3C5831F6485B0CF5 85C116B59EFFA48A F3B5A6ED4C6DD5B8 8C19E17451BAD55B 3E97489BE29702BF 48FB02048C256E31 C0AB64B8BFD6E05C B751EB9F427A5A68 681A5FC557AC89F4 211EB83A8A58704B 8B1B8770985075F8 4F77367D20DA1F4A AF1A9C184EF82FF3 BBFD2F9C8B36D684 6EBFB8894DCDC54F CEC47FB307F89562 F945E41AC76D30B7 C90661F033B99D9D 34543DF917AA5D80 97B5C9D5604DD3D9 76755667FBBA7401 9018460B10895F6A FB7668C020BA682E 478E608458829A92 AE68F92FFE982B8C C7A30182A7C25B35 9DAA1B5413C2230F 25EDC92AE38A4C1C 9B8B7C295E7982A3 C46D6442C980336C 22A416EB9B290EAA 5249479B303F3F81 654B9662ED3F8DF5 5C719082DC47BEFE 0F636063FCB29D76 CE2F40105EB7A6BD F02F99E53811AA43 1B38B3D7C435C4A9 BFAD082DFA1D8259 FFDA645741049BB6 C5CD22D0B80129B7 DDBE199DB37C622E D0C640AF4F0E911A F9D5EEF111CD7BD9 01FE02BBCC14DC59 D2A69075CC1DCDAA EE82553C415C2C0C 1CD0DA630572FE9E 2E049B15D58F8E73 03D9F622283FA9E7 FA35E1596E007852 7C8A6B38FCD672EE 33C1013066D8F257 EF39EF6EAEB78EC0 577637B2C19DE5F2 5D0A4F4C7E3E0B2B D5B14379759974F4 6FF62FA109688469 606941C398393E0A 0CB8DCBF4DE1DCC5 C7FA3588F6344974 D63E02ED081E732D 9BE4593B72CE9212 20DAACD72D0AA22E 428393EDD3022CFB D3989ABDED5ECD98 F3EA99158DAB6A1F FABFDD319E734779 56D2B309A0F0EC68 8EB16F880AF14CF5 3CE441E1324B8674 CBC212C71AEFEDD7 94F7CAEF023270A3 958B2DCD1F842B50 70185C915B51F637 02B0560E86D6C137 695CDF47AFBF2965 DCB5362BA31E991B E59C9A18434ED039 24300E32E86D7D37 B6D3C697EC4176CC 879B6A93FF854CED 09E8408520A2A152 0AEBC8301013B8F4 EA265F2212450528 1855F50A19E33E4E BDBDCADD56052668 4FB3089F2D35D744 302166934ACB5A1D A5951164F136F795 E11572793AC7F61A 28BCD5511E13AF0D 103C07FEF24666EF FCAD122C0C3AD153 ABF57924B6FB71E6 3E2B57A75A8CEED4 0E9C60D3C953A8D0 ED3B422911AA3012 B65AC457BC8862C1 C7E4D0C02B985A09 4E131E5A0F55FDDC 6420C2CAE2DE207A 56D70899F1387831 9B917519C8625D9C 26D70AED6CFAFC37 9B7A7C8E7F244E56 F1DF90171821B0DC 6577CAAFF0CECEC9 006D37DCB633B875 5161EBB498E93780 527211E49392A765 E0EEB322DA90320E EA5329AF204C1FC8 8896FC87B9C77662 9E2B239D75C3D9BD 31CAAAE24D6BCCEB 567D777207894F5C 9BD4536CCCB9E918 E2E805196E7F961B 1D3743990C4CF01C E3D4469029C6F94B 4AD87C9CCA5459D7 F0F60E5B94A67343 04C0A3EEF71C1EC1 5171362DAF053CC0 421B180B8B793751 F9E480C06E813B0A FD5158B65CBA5EE4 415C38FD7F344BC9 3A018693F2138D9D 1E22298620D5BBD9 15C8542BEA26CF79 2EB0816792F81B74 43B3C0A03C78CF05 9A6297A366C4BF17 87D3846DA8B47C1F 6639463787093E19 D31CF74983EB5EC5 C92E8D6BD7E39C02 36F184456EE9E0D9 992FD0A28B708402 7AA0773E3B0BE7D3 50737F9E802C8BE8 F7C6B5CB3EA7F1AF 3E9D64EB82DA5301 1A1F6E9DE9DB0C96 4BDDCF729A959A9B 782C0A02FD30400C FDB5FB5F94059144 79CA856AB6541786 F9F12A2C41C66249 5D04851E652578D5 107D71DD4E863341 8E754AB56296F9A4 1A5D82154F7AC9F5 ECEEAF61F3C19416 D34E826A7345AD77 D7882DB845E23CCF 59283720903881AB 12ECFFDF2899BD4C

Read the ciphertext. Strip whitespace: 3,152 hex characters = 1,576 bytes = 197 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 49 GUIDs as hex (shown below).

Decrypted: GUID list

  1 409f5a6b-53f5-0e4c-ab4b-4a93d071b173
  2 ce5b049e-3bc1-0f32-b54e-f70d2b02f213
  3 ee03d350-ecec-46f1-913c-095ca0c8c854
  4 a3e3b737-fb27-5a0b-8add-5c6b530af0f9
  5 db64c3d5-9963-42ac-9a6a-fe4475fd5193
  6 53743860-d69d-415e-82fc-a0b7a45a0a9f
  7 4066e8fb-4a18-7a67-b317-3605f53c30d0
  8 d2383ac2-5dc0-1b5d-86a4-0fb834cd5e7c
  9 af5d4ee5-96cf-61ae-b2ac-c016ba1441ee
 10 1b103c25-6cd3-0304-87c0-b37f63cc75f5
 11 0c13959b-bdf1-7692-9ff5-42c1a6b1e2f2
 12 933ca9d9-d1d3-55d6-aa63-9d4d3d59fcc5
 13 79888ad4-c85c-8ed5-9938-c3c6fc596114
 14 4b5cbdc1-70dd-4968-a933-2105a58eb638
 15 2387a388-0f46-7b84-b918-e90ed81b77aa
 16 8c0617d1-acad-39f7-bddc-3042d177605c
 17 eef03fa6-d246-2c8d-9e74-961f54918f0a
 18 8e54a96a-216c-6c30-bae7-772a39cc8571
 19 cd979315-3ef3-16bd-9120-94aeb047d026
 20 8560e699-baf2-4235-832d-bb5b8233dfc4
 21 910cf01b-4994-6eea-9624-84e23d382d25
 22 98659a8f-f53f-043a-a0e8-e7a6b3182450
 23 99c8ab84-3a9b-42af-b6af-71cbdab3b5eb
 24 82306b72-983f-3375-b9f2-adf88a380113
 25 1a165800-7c01-1e82-8f46-49ea0ebea4fc
 26 ed34cdfd-9120-18ca-b674-d636f3119f97
 27 6d596b94-8627-1db0-9788-42852db4af5c
 28 05ae56d1-5e18-375c-9847-fa68bcdf6ebd
 29 18b64db7-3dbd-58f5-a1b9-3834040ffc19
 30 0c0490b2-c5db-3fe2-96ab-137399a0b8a3
 31 155e782f-3a0e-0edf-be1a-23cb806f7e09
 32 4147a084-154f-86e8-a213-990cdfbc09ca
 33 b93ec60d-c559-3f10-b375-8735566cbf75
 34 09e496e0-3ac2-1619-9fcc-8e98d28b0c4e
 35 dcbc9c53-a611-8082-adfc-c7ddc2b3d293
 36 2d1b227b-8bb4-21df-84d0-6a5d76d2f291
 37 efbad959-be30-20e9-bcc4-89ea8f3dba34
 38 7cca661f-a7bc-836c-b519-0dfc298341be
 39 31b1cd62-416a-0acd-b047-25f11b90c8b7
 40 f7b92da0-8728-0db8-a5cf-e7a4322cd311
 41 4e9f58d1-f6df-0f11-9076-17f68a2d33a4
 42 f5d3fc2a-c6a5-8255-9c30-8103d6aa2f05
 43 e535d5ca-3dbf-7464-a446-646157c4cc03
 44 a824e50b-3d97-5ea2-8c52-33e57985c43c
 45 91de9f0a-ea54-7d38-8909-049aed8ebef4
 46 5384a375-aeef-5a52-980d-156cd61d1a49
 47 f4b6d545-48bd-491b-b37a-539e4bbdb327
 48 771f7133-8a48-4e4e-ad61-a9ec807d110e
 49 9246c58b-5b49-4214-8f78-304abcbf170a

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0045447160758473261460431113530831822800087575444. Exactly this sequence comes out of new Random(127).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 12 of Run 17 (seed 38,757,453): new Random(38757453), Next(8,64) per post. The RNG predicts N = 49; the post has N = 49 ✓. The seed is the machine's uptime in ms when the app started (boot before 2012-07-11 16:41).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related