201208011227 xhmuh

explained decrypted filler

3DES(name+name) ECB, 42 GUIDs, seed 151

Metadata

Post ID: xhmuh
Title: 201208011227 → 2012-08-01 12:27 on A858's clock
Posted (UTC): 2012-08-01 04:24:38
Timezone: UTC+8 · title 12:27 against posted 04:24 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,704 hex characters · 1,352 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 42
Filler GUID seed: new Random(151).Next(9) ✓ verified
Run: Probable run 2 (seed 377,361,921) (probable)
Draw: 2 · predicted N = 42 ✓
Machine boot: 2012-07-27 19:10–19:12 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 5 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: probable

From the post to its content

As posted (encrypted)

ABF313F5EB30F984 9A09B50EC45F469E 05A02E71912DCC51 7C86B82B55CB7A3F 041865B6555B8B4E F22E7AB720377F2D E87AC077E8DF1A3E 63578A7E2D8BAFF4 675748366A0B5C3C 5A97947109C5B9E0 C4E280ACB5973EAA 6D775C36A97E2268 E22835888B7B9F59 E8B95F01E0596A51 E663E5FB6C04D37C 05EF7172BF41FFF5 DB3DE69364ED8784 5A2EBF6D45307FE7 A9D48BEBD7CD63BF 1E209257E2AB15AF C62C44B8C23AF37E 8500994B3DBCDA35 1EB8CC8AE66BFDDF 6F02A8EFF30BCD14 C8A5A5C8814B8D64 CD9205BEDFEE486E 6E1EBCEF6D7C89FF 85F9C60887CF932A 78272D7A7D0DD8D5 69F45D4F9206BD4D C0FF9EBFB86A62F5 A415BDEA3DA0DF04 067B97F1136D231D 969B51F3AB2E5D67 087785BE57B1E2BA 345614C1EF08A001 A56EABDA5EB6DA3D A2DCE2A6D55666E4 A1D157343CD2B563 8843DBC441DFCD2C D5383AEAC1DA36BC 01C76299C230D9AC 60EEF24321B7057A D50D0F8048364EC8 031235D1211FE1D0 9949FC952557CB66 7CF462E6ED883BE1 373AE999555BB6FE 78F297A06F3E6845 F44EEAFFD5BE9013 1F343A0F3C948525 271EA492EFDEAFBF C86452A0C7ED50B6 9B10024A716469E3 DB5221011FE9A0EF F89A77B671CEDE19 158ABAAF460C9C04 5239D1D96A99A857 E8E728922AD4A250 23FCFDC731038AF8 EB8E310D2F89A0DF 9773B3320A252088 4E0182DF5A700C0F 189CC2AED25D5B0A 87574624DAF04067 F663D06923EEBCD8 096ABAF2825E8D25 E6D556C612804A0A BA0F3AD974869096 65A37C5B3EA7642F 1AA934C4488605A8 2A92B4013E101AA2 B6FC3274CF3C648F B41E34F0448EB216 0C028C07093EA55A 8E9138DB8B3EE2B2 EE2CE9CEABFD5625 3ECF8FBB4B736454 BAF5266331905604 A288C94CB0B10E24 1149CF7869A7E112 98090B9AB0F0643D 584EE7E03FD699FD 9B6A4DEDF6BECDC4 0C27146A7FD11D89 191072943723A9A0 24C69DBFF12D880B 71379131215E058F 63A350F56318A644 E8B4790F6628827E 72BEF1BDBBE5C2DC 7878ADD58464B1CB 442114C1E71527C0 9F962D3ED650D4D2 6053E7CB76E1004E 2D62108368D75E92 3A5EDEB38970633E 81BE4F8C813BD1C9 A2175614F8EE0634 7A2281A05DDAAC8F B5DFB76197FA0D41 F65C9D9668016223 46F88B61AF815895 2EF164CCF6F92F61 75379BB96D004F23 27BC72EE5465F480 B90FF5C5609F03F9 23EBF83ABCF2C9B3 B113BB8E811CE18E A1C60FAAEF17518D 24BD9BB66FC0B403 EFCF7011D168FAB3 D247DDBA3C779BBE 651A96FF4B6CDEEF 498F6B07E693A05C 7F69CAE49927FFBF 678C278A6A42DD4A FF7A16E83514B725 343228493465DFDF BF1883FBDC5ED3D3 BAFDE4648F3305F2 C4F76FCD20766CB2 E71AE2639F605BAA 41AF90BF04250556 6CC5CFA7F39D6483 F045C16D59EBC476 A20A5C966783C4F1 B138E945AFCA21E1 9214CC5DF611B907 B394C4FF4CFA1435 C835BA117F405B07 62C446325F0D50A4 FE0E12764E2443B4 B9CB5CB73C1CA176 A376FC05B9CD9497 A8DD7075C858B902 A9CB3AC2D602A776 E8A9D086E521414A BD96F49DCF065EDC B5A545F03C39D64F CD29334A16411902 8164A84212CA2D92 10EC4AB6156F1121 0533D2FB2C03A427 ABD5485D1B5C7016 C47372E336924E78 57D624ED4E4C963D 057CF5AAF05CB910 21C40E26CDDD719E 8F9BE6E8D2DC8694 CD28B0D901F4A424 81AD18AAA8EBD032 F20685B5471F4366 7EF44ED77BFF5B41 6A8C1FD53F681D63 7C4657AD9A849B8D 383433A0FD73736E 1BDFFF307B9DE939 73344B415C402DAD 9D8BA5A9A0F11A61 B5A65E8F4524339C FBBD554D628C3AA7 94DA824C64FA242B 704B39BD609FE0A0 28860C389EBEC482 2538506E6C77CF30 0A6A20046A5A52AF 2277D7B66D24E8F5 12ECFFDF2899BD4C

Read the ciphertext. Strip whitespace: 2,704 hex characters = 1,352 bytes = 169 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 42 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e1aa051a-9992-591c-a64d-0d600b0f4247
  2 d3172f15-36ff-1923-b7be-b127c1a26743
  3 67da12e2-35dd-2c54-b89e-42d568e8a206
  4 5f1c9152-67b9-7dc1-88dd-77ccde7ffa56
  5 a77e3f1e-86a1-3b9b-a6f7-20201a6bef97
  6 7467ffdd-16b2-45d6-86a9-d84637ae91d2
  7 2f64d200-fbdc-56df-a1a6-59c437890e6f
  8 52af3068-eb22-158d-84e0-d525bacb1918
  9 a208a5e6-4301-5b92-8966-9f5b9ce3fb82
 10 23ec8615-8bcc-847b-bd08-538b39a42780
 11 69892032-84d8-4de0-8b62-b6eb0b9e0d7e
 12 bca857fe-5230-3c34-9a17-2423cfa7ccba
 13 6f144873-251d-32dd-b1a3-64a3865d7fca
 14 0f1f3331-c552-0b14-8aca-78c54c367ef4
 15 85dbc834-b0f4-6496-b6e9-3f7d888b7840
 16 f7a04fbe-628c-21c1-a435-67c1ebd71672
 17 d05795a9-d915-3fb3-925c-5b1613d05ee2
 18 cd35055c-1895-50ea-982f-5231179cb891
 19 518045a2-8e10-6ad2-bf7f-c080631f7d95
 20 b3b32a7a-5f7f-7850-9bb6-5a62319840d6
 21 2da10a57-ac27-7c86-82a3-2f4e4f357ee3
 22 e41f566e-a9cc-8396-b73b-ece54689487b
 23 6aa1c932-b6f6-479c-8a89-157326dcdbd1
 24 b7e518f9-8c3f-7054-b9c8-b0e5365c10e0
 25 99df3de9-05a7-4ac6-adf2-582f4b97b0d3
 26 d0c9a7c1-0c4b-5837-b3df-48b1fe341a71
 27 01e7f667-0ac2-6372-a6b7-67e1cfed64dd
 28 6bfaafe5-8d43-235b-8be2-35b95829a5e3
 29 4fd8a2a4-f6e3-2b36-bfa4-b0e6328a3704
 30 7b8fb855-7c94-6f37-b965-2a7608d9ff0b
 31 0fef19c5-862e-88e0-9909-000f561b25ee
 32 abedc637-583c-29db-b668-20c9df34f18c
 33 d7df9955-c0f5-0f69-af4e-412e3ef5d8da
 34 16229c29-32a5-6198-9e45-a90e9ce8f89b
 35 87cc0cd7-e5db-36d0-903f-4dc446c2e23a
 36 3c246803-23b0-2b35-af1d-3c2af8601cd2
 37 d49385b3-64b2-13ad-81ac-ed4d41effb1b
 38 a3277cba-e294-231c-af25-2a638dbfab5f
 39 6bec5de5-b44d-17d4-b492-94bade78c3f6
 40 d5ae289c-dfda-63bf-bac1-491068726ab7
 41 87ad145f-2a2c-3504-a5af-7dcc10b65d31
 42 7b54c184-cc6c-626b-824a-e806422cc271

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 512734515843306235677847456226820632121636. Exactly this sequence comes out of new Random(151).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 2 of Probable run 2 (seed 377,361,921): new Random(377361921), Next(8,64) per post. The RNG predicts N = 42; the post has N = 42 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:10–19:12).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related