201208011205 xhllk

explained decrypted filler

3DES(name+name) ECB, 56 GUIDs, seed 385

Metadata

Post ID: xhllk
Title: 201208011205 → 2012-08-01 12:05 on A858's clock
Posted (UTC): 2012-08-01 04:02:36
Timezone: UTC+8 · title 12:05 against posted 04:02 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 56
Filler GUID seed: new Random(385).Next(9) ✓ verified
Run: Probable run 2 (seed 377,361,921) (probable)
Draw: 0 · predicted N = 56 ✓
Machine boot: 2012-07-27 19:10–19:12 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 7 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: probable

From the post to its content

As posted (encrypted)

0CBB6D1B6C3D5598 08FD82984D5ECDC8 01FEAC1F7AD3CE96 CB3D5E96E2A22031 BC841538953A4471 7D358C710FC5B421 F133E8C2A669E6A2 92271591E56EA6EF 0B2A0D36ED88F8BA 14D78E8C01BD6876 88FBA12368EDE94A 8FC371CBA81531F8 378F917C7398521B E955FB6D36E59035 28AE38D118784295 ED13C2C2C21D6416 A40DB425EED68EC8 19B9E18CD3B7A4C8 086C94740E61905F 2AB1810B8057E26D 53C55A5B31FC61C3 507B4E8B959D31CF 8D4A20B1E163C39E 367187D538F03DE5 2C3585D62369A6FC 0AFE70AA27119ABF AD3C493475832D7E A16D0108EE450489 4C52BBA4DC3363B7 593D7BCEB8CE9EA9 BEEF8B0A247B4F9A 3E424F502D75DFE6 DCBCC52D863C3D63 DF5F2002E8980AC5 D3E8DFF2D7596EC2 EC669AC127BDA545 D82F28614BE0E5D4 260DBB6EAE00A9F3 CEDEE640AF8F691A DF67616FC82AD1F7 E230A15D68264B99 D67A3DC35A0E92D2 18CBC2DE29800757 EA5A0165DC63BE4F 62BBF67DFCC4A853 25585AC219CC6CF3 DAE101EEA9BDC0C9 944C228C75A1B21A 1AD398F89B71519E 7305548DAAF10C07 2F0BFFC03E5452AD 49445C26FFE52C3B 8EA78BB72074FCA8 B01C1267C5F91FF8 F778372A2475FB8E 52C579B399495917 0FA01A32431229CB 2F6C010E82602E66 67374801A71CDAD5 8722C9EC507F3CDE 39721752F9FE40D0 67A56AEB0554BCF7 7ED2B30422A9B9F6 F176EA826E0B975B 14CD3D20C696CB52 8B10F4DBE66BD32A 5B3706C53A6CCDE1 2979805C49DC78A8 AF23E663F96FD433 891B06D15C489C35 ACFBE681CFAFA78A C602C83BCF9A33DF 5C006059E5C699A5 5E19117C87F5C21F 01EA7285DD382F08 DB01B0C16EB6F4DB 3C94ACF184B33DAB AFA307D4EE164807 BB4F4FD0A6A6491E DD50A3DF8E793566 58E0CAE231F5749E E276F10720FC95FF 9317A96ADE1F1A67 3530DEE25D9E46C3 D8C0250B49A0D332 67F69FA05D49F508 FE0C82B20E70DADB BC0D232A2E28A928 781064A00F1AEF32 E8E8A16F62B45677 5D9E7ED017F9C807 D75A1D53EB6B0596 3AD77EB1ADB45221 9231F1EDE1A20AF2 D5E3C2C171F59297 6C66FC49F287373C 48B0BB19B67F3917 027572D67AF9DDC8 DB8696D203AC563A 0974EFB0BBA1E5DE 5D2640B554713120 C8DAE4E09E6D6254 D759B7E4B406A981 C2B1FE60DF75A9A3 A2C347612F8F1D41 A835F0788EBBBD3B CF0BBF0EB0888635 085C9BFF214A820E BFEA181ED0BBAC0C 0CE166665014DB36 C46AC075CD8A0D3A D59645B266504B9C 534E3F4F24D32194 58B73E50F1E2EABE 919C3BE4C0B6590A E299DEC0448DE973 94D12A69E33258FD 541A4A3E1B57F6CD 76508D1FAF1E8CBA 9E5831812B3EFCAF 4AA26B29EC0A0E6B 7DFEF149C285446A F4ECE1776F86E51E 1237CF61D3441DBE BDFF30D3A82A1723 145E14D0A15CE70A 8FB689EAB864B7EA AA18C09080A0B3A9 FBD238CE8A580093 0036EB33649BFC8D 6D8D8B350C9C12D4 6124F49198EF1A17 D10F68288D4AC5E8 9768CD5FE4C978B3 3C2CBC587CBCB8C7 75D77965305F65C5 895347EC2F088342 DDE9F2B346928F3E 894BAF3D3C5ADC6F 6F444FF4BAECFFD7 E6ACCFABFBF873D0 E5E9AA5790517359 A5DC109D7C256332 B471FACCB2F317EE 4A2251ABFC838A41 4A9BD49AA1D5EF61 D4EF6AD98DE29AC8 157CD8F56BF76419 062AF54290FE5E24 45F0EDB0931C6327 F4A1EAAE72CC21D3 98CBE22C6167E01F 46A8A095ACBC3ACA BF49DE769DEEAEA4 235C7D86CF55821F B2624F75FD5FCEB1 4E89B6DEFC57075C 8E718279789D63E6 CC7EC8493D16C32B DB23A77CE1CD9166 57DD9EEA6A1C4E3B 041D19A49F3A9D57 432A98A1C3BFFB3F C1E74F7620511206 22838D8868E68918 7D11DBF0CAD24916 08B9661F6946BA3D A8051CF3A03D052C D4B673136168852E 55AAC8D773A62CAE B66E1CF9DD2839A6 F719081ECACF5997 F2E0459CF71D56E1 846B3EFBC73A9BD5 499084038C52F961 2B13DF9C748415C3 6FE771EA6CEC9D7E 372CCD4212C7CEAC BE129E4D85D58743 D6D81F20F8122B85 F70B8202B59C11BD FCB071040C2A439B 6E99EAE8D839DE73 90EED4FFD56BCC86 3D3498A791A68344 44EC47FBA9E4429B 895A23A5BC395DB7 6BFC3D82D01B8724 63D9619E2058C7BF 3EC3C72D0F5C68BC 79E32E6DAA0FDB91 A5DFEB9276C31528 6E22ACDB515CD5D3 2C4DC2E613C7E6DA 495C03707E27D609 EBABAF94408DF5D8 044D7D90F34033A7 AF096FBC5603F7BD 890CB2A8402CC25B 02BE53699381287F D5E222A9AFB9CA88 F99873974B0ABE5D 54367244562070D5 EA2A6F46FBB58DF4 AC4B55BEB26E177F 4EBD9D320F3ADD05 484397EFC6A3D563 FEF6FA42496170C0 B21B7E123A0CB826 EB5EE0E574F7837F 371105593D1C7EBE A516BE8C75A8A20C D3EB158462A69DC2 6E3FAAE9132F1D1F D409A764E9AF6E5E A010AEA494E84BD6 7B6C8E5DF480328D 242187D3221106E2 692E9094FF52C483 F6AA7CF9A4298680 06C8709DCF41DF4D 3F24021B86A9DBC3 A73FC0D839EBCC5B 385BF9A7680FD1CE 12ECFFDF2899BD4C

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 101c59c8-dbb2-7229-8ed6-3fa1e829a19d
  2 da0578fb-a878-7efa-8935-a8fd3641beb6
  3 4736cb2d-d88c-7b6a-8382-333b692115b6
  4 604997de-00a6-6124-a1aa-a3518d03f4ee
  5 91ac80b6-1786-0476-9c18-3afd231ab9a3
  6 65f08c18-2828-0b90-a0bf-3804441d92af
  7 57cb4555-7510-3e66-a6ef-aa29ae59589a
  8 009396d0-2902-5a90-89fc-969ad16f82a6
  9 88602bbb-5127-50c7-98ff-059d56da0532
 10 5efcfe86-f034-27a3-9608-ebfdaf1771ac
 11 eeb3fc81-53ff-8d29-8270-8f956646be19
 12 8e9e08b8-d28f-0f58-83e3-0de639b0cd20
 13 3ac37ddb-c1f7-27e4-9a0a-f2c366b9fec7
 14 769e132f-4628-6a4d-ab1c-8f1d72871007
 15 599127f0-b406-442c-a8ba-451dd4c0a640
 16 0fe705e9-d146-4e8c-8235-bd002ec8676e
 17 7a986af8-9624-6179-99d1-83d72f482244
 18 bb3b3516-f1e6-6dac-b1f2-76079718b737
 19 9b0cdb4d-9c62-08f5-9d86-b89115d79138
 20 3ef87ac4-a0c9-39f0-924e-314d6217a8a4
 21 b5fdae04-e2f1-8c3e-81d2-761590993900
 22 d385e736-9cba-2b08-9627-4c6b3c434313
 23 a6151425-b32d-0284-a864-e7c57737ce2f
 24 c6fe4dd5-a691-49d0-a5c2-480acdf5b052
 25 1c5f150f-7725-3fdb-8a9a-af87c647f32c
 26 add8e3b7-37d1-12c0-9307-b50cd3acb5a3
 27 be9da2f7-6008-8d2f-bc0e-343c9127269b
 28 2489f377-a2f2-2751-89bd-57f31b2d6485
 29 cb2b8885-4b00-7513-86fb-91456e77fc05
 30 460d01c4-ed39-1098-871a-19560ae819d6
 31 320b42c0-faa7-2175-8dac-f874b37b95c3
 32 efdff974-c06b-7117-8385-8d7a2d85d735
 33 dee66b2a-25ce-1c03-b1eb-17780bb5452e
 34 a5954ff2-2f85-51d1-aa35-11daa39315aa
 35 0254e694-f507-0a9e-b58c-60b3aab7d081
 36 7e0a2728-237f-4364-9ef0-1fe76d73a408
 37 9f180b6c-af40-804e-a736-76e0403291b2
 38 acccbdcd-fd95-6fa9-8acb-82c67ce405a1
 39 05a8a772-61ee-2a5d-b72c-d8a936aa7602
 40 72759d41-b0c1-5e08-8e24-47afbe58cfe3
 41 5bbd38d3-6142-0ddc-bd15-98bac7eb83ac
 42 109e0ca9-0cb9-6361-8aee-5e5b800d9e5d
 43 2a46c8d1-7733-3e49-a4c9-732ac1c3fe30
 44 de0a645b-9204-723d-802b-344b9f6b9c51
 45 61115244-6a75-8b39-ad10-a54954912301
 46 c3189a3c-b66b-77e5-9a8b-62ea15445061
 47 c594280b-7f1b-2986-8297-9dabfe1e4c90
 48 e7a2cc97-208f-4f06-abb8-aa0a40c88bb3
 49 6b6aa713-a96a-6916-b851-88d687d65c9f
 50 a3204b7e-6ae8-0c37-8b1f-73f16a89ff92
 51 69a30ce1-86fc-153f-9d22-e74421ff3454
 52 f70bdf76-39ca-2e79-a9fa-b1feaa096dcd
 53 b49c12c3-5b06-3c79-8bf9-7766803312a3
 54 b899cc3c-a613-81f8-820d-f7f4d4aeed1e
 55 affe719f-d4b5-2109-877d-a78467e0008d
 56 a750ca22-bed4-5ae5-a335-d9a143d6f17e

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 77760035528026446603820431827127150486250637872460123825. Exactly this sequence comes out of new Random(385).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 0 of Probable run 2 (seed 377,361,921): new Random(377361921), Next(8,64) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:10–19:12).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related