201207181130 wrh3x

explained decrypted filler

seed 49

Metadata

Post ID: wrh3x
Title: 201207181130 → 2012-07-18 11:30 on A858's clock
Posted (UTC): 2012-07-18 15:28:08
Timezone: UTC−4 · title 11:30 against posted 15:28 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,704 hex characters · 1,352 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
GUIDs: 42
Filler GUID seed: new Random(49).Next(9) ✓ verified
Run: Run 17 (seed 38,757,453) (seed)
Draw: 13 · predicted N = 42 ✓
Machine boot: before 2012-07-11 16:41 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 8 · 4
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+namerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 2,704 hex characters = 1,352 bytes = 169 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 42 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ee7ac77a-12a9-2a47-8779-4257fa8bafc6
  2 f1e9737e-cb1e-1467-9059-dd4d672b6f1d
  3 d00e1066-0410-0828-90fe-176cf83a20b1
  4 3636f41e-f31f-0801-8af4-cac2da9753c4
  5 21b039f0-1552-2918-b6c7-f89b3ca8e3dd
  6 85c75b49-5042-3028-b362-372b38a7f5f4
  7 6c0aec8d-d473-77ab-b001-dac9119483e9
  8 7c742de7-3a04-016d-887e-48bf71da8ce6
  9 bb21dfce-e91a-052a-b3da-e66d8a75313a
 10 d8566da8-571a-3c70-aea1-2eda8684b566
 11 f2819814-75e3-3fb1-9ad3-216097faf063
 12 6c877c51-e7f4-6daa-82d3-c0e79c5df88a
 13 545f78fc-e678-293e-8698-68d1c68b9fcb
 14 feb3449f-b01d-8d93-903a-ffc549434121
 15 023c31a5-85d5-2773-a58b-7ab99ce10968
 16 7f3106a9-fc1b-5404-b78b-b5912c3b9c1e
 17 5f14f0f7-862f-4f11-8ff9-1e02adfefb03
 18 c7ef0711-8993-37ea-9478-c6ae6f55d0a1
 19 abc1db0a-5a57-0717-8cf9-92ea1a6feed3
 20 8633f3bd-cd54-2fa0-b9af-14d33b901351
 21 32540da6-e50a-2576-8276-65eeb2338de5
 22 8d5e23ac-aa43-7b9d-995a-17f1939063d9
 23 0ae63401-ab51-28ff-880e-d805fb190981
 24 04abc893-79a9-107c-9e27-5f85eb75f0ac
 25 e4619642-721f-4ef7-af08-092222be9cad
 26 241ebf2f-7924-0209-8b7b-d59b544ec6f3
 27 ab33dc33-c38b-00ab-850a-386ba5fa8a43
 28 369209a9-3cf0-0fac-b300-c7b766fd5368
 29 4110f6de-28e1-0cec-8872-66e5c2751360
 30 f47063b3-6895-412a-b6d8-42d2dbec067b
 31 3e2ca82f-0325-2875-a409-c27868cae161
 32 c8efb09c-9ab7-3bab-be6b-125d805f5fbf
 33 237acd6a-1ccd-051a-a8b7-8ef53240778c
 34 df4f82d3-0f87-133e-8202-721adf38f427
 35 19d56aa7-c507-62a2-9635-4b7896ef0e8c
 36 9ab2c98b-c99f-7832-a45e-1c97817c8359
 37 13d35432-1794-5aac-ae1c-50229bbfa358
 38 e1dcf6e5-582e-6a7d-aaae-d3b47fca2c2e
 39 20232ba7-fd97-626c-ac03-0a9eced3a13a
 40 0fbda74b-038c-7bc9-8214-f03393e779da
 41 296a633d-fb27-1e0f-9c39-a90c118a540a
 42 4898279d-61f8-2aa2-a021-41c46bc4b7c5

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 210023700336282543022721400004230167566712. Exactly this sequence comes out of new Random(49).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 13 of Run 17 (seed 38,757,453): new Random(38757453), Next(8,64) per post. The RNG predicts N = 42; the post has N = 42 ✓. The seed is the machine's uptime in ms when the app started (boot before 2012-07-11 16:41).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related