201207302350 xfisq

explained decrypted filler

3DES(name+name) ECB, 57 GUIDs, seed 636

Metadata

Post ID: xfisq
Title: 201207302350 → 2012-07-30 23:50 on A858's clock
Posted (UTC): 2012-07-31 03:47:38
Timezone: UTC−4 · title 23:50 against posted 03:47 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,664 hex characters · 1,832 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 57
Filler GUID seed: new Random(636).Next(9) ✓ verified
Run: Run 20 (seed 267,961,078) (seed)
Draw: 1 · predicted N = 57 ✓
Machine boot: ambiguous: 2012-07-27 ~21:13 or F 06-14 12:54 (probable run, 6 posts) (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: seed

From the post to its content

As posted (encrypted)

AB9E0F4B1AE8D73F 08D11A959ED459C3 40DBAF03081EEE69 3F4BE99EBECC138B D0A29197B5E1002B 7BA8556B7A52601D 541EC9C95D19F02B 7F647607162D8359 7FCCA9B34DA4E251 C4238576903B319D DA845D747368872F BFD10718DB276913 D7D7ED4B1A708F95 93F3AA4E804252FD 1A1CFC90CF3A66A5 2D0F09954FC6B733 5BFB209BFA9F1CC3 BEC0E3E3C942F7B1 FD7F88C5F936CC00 DC70847FA5C2FB45 3F5AFEC53ACDF570 99AB42684D275F6F 0C23DFC84E0E6F74 6EF04B92D320DFF1 0F05663624F18107 7A2161B8671792AA DAD26A2F5979AEC4 5915FA4AAF543299 5F13E0CE8A0F9CE6 62C9E0389450956B 88A91036CF756D76 273FF0D3ADB12CFF 51950D5E41C511B4 790F4823EC7BEE02 F2D9935D5C3315BF 065E91084DD4513D 12F97C4715334103 DBE51C7C7A31D843 67B3E0CEAE020DF2 6FCF0CEA4537D903 86C364AA7BC0D2E5 82BBFD8D71C5F2AA EEFB13F51229E6E3 BC9098B8494BC65B E10081CBA8C1CA7C BF4D42C16496A4CE FC1BF33C6CCB91BD 93B823747C0D1678 2B876F5ECED3B100 CA282411BF34F32A 424749F817C75A3B B8B765B9550088EA DEB65DCFF54572BF 12DB6DDF6594C7EF C065C961E07298EA 349E33621E7784A9 2475AAF963C97763 FF7DB1BA2D3DB762 6637B5E7FB15AA24 328D9DA972E444E5 CE9E504642F66E26 045BC4548D192B08 DA1C16694FBDBEBC 47C5845043221538 6A836C189B98A18F 421DEDE277230612 961D23E7296F13E1 EDCC2D3217D75CCC E215CA3F43C1B4DB FF99129E291854E4 291ADF1ABD6B8967 4A6FCD1D302AC852 3697FC6DAE6960DA D6B77A12446920DC DC6018104D2CDA59 7F425F9DABF854EC 2E1A0E3DD6A8A321 F4C132A3D7D1C13C 7978719F5E12EFD9 E604C1911DA04BFF 33E7FF539CD5A994 A89D4ECDE5B12FCB 2644FAE1C72993E4 CB0285D1A7F2319E 38E2B326493471DD 8BCA6A50C65AEC85 3AB93A259AE1DCFC 593826C71A069009 9B9A6AA8EF2EE327 16461BB713593EA7 66D29EA65EDB5358 1041EFBDBB15E84D 2289AC0AF8F94702 B5815B5BB41C1EEF 1794C5BB905C8E77 21B9FD7CE9868C11 9FDB17817ED43DAA 2DEEF874E900E628 2A759F5BDBE13F2F E6AF19FFB081F122 99310EAEA955C37F 36FEEFAB2BC9467A 057666DB8F1F9F12 047546CB6C82C488 DAB1BE7765582BCF 20E96FE20F9C548D 933FA6D8F9C7E3A8 F929A7EBA5846E3E 85EEB41F93D37CE2 EC4FEA98DE4B3F91 E784BCA3F678E514 DF588911BED24425 8AA47E75455C1116 28EB9DEE0C80CAD4 57A2A6806095E6B5 7DAC0DCD60DE42DB 0CC8A7A1C63D2697 85FCCFDFBB089158 32796C4012807625 F7A6C865C2F143D7 B2F932BB4F0D5B98 343BD3B08ABE2450 CC18A2B54AEDE760 066304E741457BB2 482AF6448128E6A7 02B44EA7AB0944F9 B9DA0B0C4DE2439E CB2376A6BB814FB7 4A59A8121C130D5D A81390BF6A3978C4 91729EC974943A03 6CEE6FDF67FE7A9A FC26AF0A51538FD8 5AA483593DA6CF6D B9525F990BBC129A 861B0DB9E0CDD84F EFBB09E0175460F0 2189F5427B378829 08435FE1AF1B6F33 44B6742ABFD9C123 57FFC9389552D8CD 35D89F64AB6A473D 07F0BA91F76F1EF2 F9F09594FEE59123 D795FE37CBFC4B6C 42EF512DF07C1DC6 6FE266284D9C7A44 F17F81C786DF9726 DE080E698C701495 DECF36F6C43EE9D0 82A8E1499838E11F 5F7650D9871C00C5 84026E22EF2684C3 541F96F812A50F4B 13D37A8155818DA5 C87C007A488DC9F1 EC2D9DE1BA4BDD5C 0DDE7DB0CAFAC99E BEB223F964E0980F C37452541C11AF79 D38138DB24C4611A 63514CA54F242843 7D8F89BF0B8EFA3E B6BA6444E1E46439 520F144F0363AAEA 11D0CE00AFFC65F0 B586C78876CB7CDA 5A56494C7ED22F8B DA0C8A364B5AE1A7 FD1C7164C553D0A9 E0C96D922C6B9AB2 8F3102AC0539885A 0A446933689137BF 8E05A34AC81366EF 70200DA34D292675 93C97FAEBC348480 74EB300F7E4B2EE5 41B619D3AC99904E 16BAB35D8E114F85 0DE9C1A01398999E 0FA807A37A43E887 083EEB147F2B678E 031C69314EC529C8 4683D0D030F68C9C 4926569B8CAF9B28 6AA40D3E7DBE3AD6 7B07C7374E94A974 36F7648F5CEC6945 44C16E964F93BB5D 8C5C16EF73599E58 D4ED2B137D4E953C 1F40394EFA5B7427 64CCE40071D7F6BB 406A7CA4A9F77E60 A8EA4B8EDB094F04 AA025CD6402E686B 6C899C7D689B3125 3153C3108DA3C9E7 320499C090C7EFC6 C0254D3746CF3CC9 E574D19612F739B6 F331D976E155100A 602210E6FB1CD1FD C9C1530A8630152A 093704F17E358336 88B1DA1EDAD6D0E7 4951BC9D01999997 4C61779E1C3B3FA4 94BECCA41EC2D6AD F717E3F73BB7D8CB 7A330489248CBE39 0BA90B2EDF36C273 4F0484E10C7E9814 8804B1ADF880CD0C 5645625D85159CE3 6F4B03FC5CCEF410 130BFBA894C36806 DBAE26F72117FB36 F81B9C79A2379D0F 6C95EB15C8F5BDCC 915443023772F584 62258A0AF8BD2638 E81991346F0DE6D7 AAEBC109090E4013 BC6A12E039EAE9E5 4BE900CC38451DC2 73E393AB9950C9F4 A22723089F648B2B 12ECFFDF2899BD4C

Read the ciphertext. Strip whitespace: 3,664 hex characters = 1,832 bytes = 229 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 57 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6de2a4e1-656f-8d4a-bc2b-f25dec160415
  2 74993f62-ce38-3d91-864c-c90a4519ffc5
  3 b583df05-2333-24ca-9909-ba2cb1e52b90
  4 6e527a0a-6048-276c-9b2f-2e67298a83a8
  5 6ae081bc-85cc-34a0-800f-0f05689994fc
  6 94038d55-cd24-3201-a31d-0adb7c673027
  7 9008aa52-7afc-7f34-b8ff-1485c8d5306d
  8 9b6cd00c-6cc0-4a70-80f9-b4744160b42f
  9 df73ca33-5f02-5d92-8c8b-e08877ac088b
 10 a608f74b-8466-7b30-85d1-ce2053cfdda9
 11 07a4bf78-6761-793e-ad8b-66d7e1984ae6
 12 b8cbe6b0-84e1-076c-8cdf-8e531e9a708b
 13 2ee13de9-1e32-7e60-b203-62079fb6e175
 14 2ef6d4cf-47f5-30e9-ad6a-91e89a6d7fd8
 15 3ee1c71b-4472-1c38-989e-18052eb47371
 16 08cb9130-64f0-2d60-8bcf-336aeac7a75e
 17 1b76de9f-4c62-15db-a7c5-093785433295
 18 8b48c5d4-da61-2dec-ae8f-2b4ea87c03d5
 19 05f84f00-2e35-8d9a-b2ff-abbff363abe7
 20 023d69e4-d815-50e4-9fe1-2c0d8d4fd7de
 21 a2f44f7d-d5cd-23ad-b8ae-be016a71e414
 22 b302b62f-d49f-7203-913b-6900b69ff7ab
 23 acc7dc6a-d27a-43a7-ad1d-b27c854ed491
 24 05056418-ed0f-1145-84e6-a0e5188e7033
 25 5bf0c9d9-5588-02f4-ad9c-13ea153376aa
 26 f91c7d8f-9bd4-5873-a8d1-0fd8e69a7e25
 27 741e0049-a7ed-6bb5-9495-4df1c9b3a127
 28 bf58d9a3-ff47-6a1d-9e85-83a817c85110
 29 adf49633-b9e8-16af-a8a6-9a2401f90b4c
 30 df8db160-81be-202d-b263-4fbcee622646
 31 a55ba28d-ea51-8771-b0c9-7a0d78b50f3a
 32 17b29037-7411-8413-89af-1e66471b9c4a
 33 97bc1a2c-06a6-0d0e-b8e6-92b14e9daf8a
 34 9f6b4eeb-5e29-8b96-be6d-b555afe5ccaa
 35 90d9c5fa-a4d8-6d6b-9e3f-866f0c9e83ee
 36 af90b576-7241-2278-bbfa-ccef91254d9b
 37 d977eef1-b3d7-79d5-8e0c-5d86f4537d00
 38 b7b29c74-ed45-71e2-8d34-ef123d6a2a94
 39 1c424c44-5301-20ac-908c-736061d186d3
 40 49d4c1b4-b54c-04f8-8850-745c4b7ef362
 41 26cb95e0-87b1-654a-af36-026552266335
 42 c55c8d72-3b1a-34cd-a758-666e7a6a34be
 43 31175d86-5b63-0752-86ba-f8be6021a4fd
 44 61056e21-c39f-261e-af69-f425f01ae311
 45 37858eab-bb2b-2392-ad01-aa4dfbef8271
 46 f0406eb8-6b94-7f17-99e5-90f6f6a7668b
 47 0e3c1a00-8ede-68e6-a78a-a827bae48aa4
 48 613fdec5-7e9f-36cd-8130-b75f792b9c39
 49 a8d13e7e-df3c-2e1a-a491-4bae013d225d
 50 83151330-7ad8-256d-90da-ac3be4bea77b
 51 0867e3bc-f9ef-22ba-860a-cb07273a93e4
 52 1d7862b5-8997-3b38-9002-a863706c0eb2
 53 2ebfee6a-97b9-7220-9922-82d615d890c4
 54 bed7008e-5491-0f99-9497-8977cad8a38a
 55 5911a4ff-72fc-4134-a360-40aabcba2124
 56 99420175-758e-020d-8edd-a63833d3f32d
 57 87004a41-606d-83a4-8ac3-2b207b572a17

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 832233745770731212852741056612880862772063022763222370408. Exactly this sequence comes out of new Random(636).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 1 of Run 20 (seed 267,961,078): new Random(267961078), Next(8,64) per post. The RNG predicts N = 57; the post has N = 57 ✓. The seed is the machine's uptime in ms when the app started (boot ambiguous: 2012-07-27 ~21:13 or F 06-14 12:54 (probable run, 6 posts)).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related