201208011238 xhnhp

explained decrypted filler

3DES(name+name) ECB, 56 GUIDs, seed 901

Metadata

Post ID: xhnhp
Title: 201208011238 → 2012-08-01 12:38 on A858's clock
Posted (UTC): 2012-08-01 04:35:41
Timezone: UTC+8 · title 12:38 against posted 04:35 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 56
Filler GUID seed: new Random(901).Next(9) ✓ verified
Run: Probable run 2 (seed 377,361,921) (probable)
Draw: 3 · predicted N = 56 ✓
Machine boot: 2012-07-27 19:10–19:12 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 6 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+namerun: probable

From the post to its content

As posted (encrypted)

5643E314914C80D9 8013E36BDDC711BF 8EF24F06D8AD9890 3EE49E0A851A639B 9F1200ED9AC3EBDE FB517448639C356E 07B45C6598EE7BAA BDF330F0A6ABBD6F 4DCF7718F94B36C2 00C815C892231DF5 08CE13DDFF85049B 8AE52D8FE9D05A26 A9A909EAB13C7E2E 02552D93F1B75DD9 B35A6F97F083A9B4 A2F33149A5E72210 125C61F0EA8DD3A0 C2C2CB68D0DD8CFE 01D84364EACA1FB4 AA38C71C66BD6944 82DF250CC1F79940 53117F9AF4E63C43 942F29CE5836FD23 E2D04E250D6660B4 DA64FAEB4B408633 4C78A686B8DF0826 19A09E25E2A9AA74 BD634C1C7C034627 F70935F0858AF770 78E9E6AF9FE5DC09 D4CEFBCC0EF1E4BC F7C5CF63FA142775 190F073FC586CBF0 7B6F77BBE8FF39BA AF939E301B84556E FA9DF6744DC36BC9 B00FBD78366FAC70 25DE16FF20F81898 127A231FD8C8E198 A78A3E94CC3C2544 97335A826E565343 143EABF06DCBA628 E85C4F467CDBD491 79295C262D6C46DF B45C223113100F44 144FD3972048F543 091B6FED356AC344 EE624BA11CF8CBFD 8D4871507787ADAD 591CC10B3425DAFF C14B188ABF951D9E C4286CDE1EF6CC80 31FA32F050B49E20 42568F62A0EBDD2D 6D5B588932DEB451 AE330A43A7B31034 279629B99756C33B 21F89DAE133CCFEA 8434E5A49D06B83F AE33ABC1B54A9C44 B8EB1D378DE7342A 44A6CA91676292C3 40D52606BEA1D027 8352D6098F55D47D 547F0D9E458A7BDA C2004C2D1B1CD10F 49B6E688DA75A0F6 922E04F544E675DD BFF17096CC428EB4 888B07F89B3F6D2C A42C065DE6F172DE 1C0169F9F5D2A1B3 88F8844601FFC4B6 CB1BA5FEB66C9E3B 758FC4780B270C45 89F583677510FC2B 129930E1B8D7A575 B3DDC13B7DAE342A C1B7F143252C2A25 C44B439858FC0E43 F00CFEF9992565B7 8353211DEE38F72A 3754727775462E1D 77F345EEF6606E9B BCD91176E96A106D 72076CFEA606A10F D0CEBD427E16559F 3FCA496C457CC652 06471C3A2155766E 76150CA16AAC1B87 B5E62E7B02C50C24 F374483E084C4849 22118FA4986D08C8 97F922B28AC74E80 9129BDC9BBAE821D 634221106DC10309 896DE7DE786F5906 DB111D9A041186A7 BBFD872B7A0659D1 1F0430DCEEBCFE4B F77E0EDD1AE49E2D 7B513655E07F1993 AABE3DE7BF767BCB 4AAB5C882F584A46 DE4C70EC9020F441 8F74E1BB0FC4497F 3D09F5C09297B455 8A07632D6BD25111 8415A1B29EFD79E0 FF99AF7CBF5A2BA6 68773D17A44319A7 B0E74585DB45861F 963455D3B34E380F 4A5B37B037EF8CE2 F7B3DCE932F8BD47 9682DA8BD695AB70 AAFDF96871A22ACF 3319324B86F90E70 D5A0FE67D3927F17 531F9A54881C20C7 71CFC91BE40A1EA5 4E73890491C88CF9 EB2602C6AEEABFF1 7C2B8369F9BBA9F2 7453D8713557BECE 0F052B02842ED918 CD913F28C8143589 77774F3343412B7A 7077D678917CC5F9 B13818D3D0A6FC6F 4125760A2CB9ABE4 D51D3A867B481268 98D5766FAED16FFD 3E6DE34A4EB1B47E 0C50975B02DCDCE6 61CBE96F5AB2C16F 4483695896B95B05 545E9ECC951C74EC CD36ABFCA4BD9DD5 620F07F236926DC7 3258197694A122FF 3F61E40A19F086E4 D3AA619BF6934C28 CE3167FAD774D477 2349AB0E32552B63 2F83033125E9D464 DF420D25C604EA78 882095858E1B0602 B09030C4DAF7DFEA 76DBCF7D500893A0 0B47E3E6E6F04AE0 755FEC9B0AEC0359 D7BFB0E51F609997 27FCDFCD21B465D3 04268C59FCE28C9C 86463FD4E431027E D1272CF0BC512A0F 2982ED2265873725 393610A05B68ACB7 5F616A335FFFD677 58D88AB22B77163D 1384AB22F0C1AAD4 B62E9F7AEE6C40FB B7336F639DED2C0B 8FB12E4D1DCD6593 81F4EA3D1F5FB8E3 21D216CD3C003BD0 91815035D078E39E D8B5075773330224 4C55C7234ABE168C BB332BE54382C0DD 905696A72E18C2AC 8B4997B85229584D 02EF148FD4098537 850C84CC4795DA3B 8B469814FADD5217 F7EB259370A17716 AC738FF86998A52D AC0BE1A18F4A5D40 5AAF51261A0F1626 2365F0F1E046E36A 1F85A19AF13727D9 D1CD49D95C6BBEA3 2F408B947F7FD0BA 5CDB61D96389A1D8 AD0BE82BF04F725B 5189F322DC0D31A4 CE12E7F0C17790E9 6C04FCA6DDA1B2A5 A3450A6A3AEFEF8D AB2E0E0994327F52 11A2D000B84D84D3 216F6522D08CE73F 49ED705E33964C38 FA6733D91F3DF777 F87D1C98F4FD4683 BB9A0E5A18A9C7EE 881B1E2B8FB74F4C 71599E0D9694FBCB 4487EA492E10F73B FC71C8AE9342AF78 C22A4B79206051C8 82A789DA3AD4CE57 C3B40FDE6345D160 0542A88AC6ECF3C3 C2327C254553020B EA37AE4B8A1158DB B1DBCF3D658C48E2 B3A2F4711278F04B 2BF24A1B1287A453 86C262E4E1E2D697 5BCFF651A0BA1AB9 8C76C9AFBA58FAC6 8384041E1052F2B3 7B63DE213B67EC0E 9DAB5154F9D5A9EC 96E9C26FBB0DC0A4 A9702B0B590C8362 5129732623A453D5 B9FFF6D4C49A8EDB 029ED825E354DEA2 4F753C8C37FBDECF 19745F569C3A61D1 6D7276BEB9D9DCE7 12ECFFDF2899BD4C

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 28195ac4-3840-374d-809d-87e19e5a791d
  2 67a4f156-49c5-1687-9937-ef6e424316af
  3 88ebd9cb-37ed-5aae-bf8c-03ac6aa5db0e
  4 7db4b6dd-15d4-7e05-b4d3-131831bd17f2
  5 44992205-7fd9-8fc6-a36b-e415158f54f3
  6 8493d16a-95b4-8558-ace3-04621725acc9
  7 55e629b3-1fa8-564f-8cd1-0dd538f5e490
  8 01f97721-0c79-46d6-9a48-8f172710fe46
  9 2f0150dd-2ce4-4757-91e1-31eb35093a9f
 10 17a67810-bb2b-40f1-ba84-e115e4c691d5
 11 7c1612ab-c951-0f81-b335-98612ae105e1
 12 d697e156-5667-845e-96f4-7ddb3b25c2e8
 13 251f2eeb-a7ef-0609-aa1e-8d1ed462c9fb
 14 903f1e1a-e6d9-13b7-ac27-f9f33e87201c
 15 bea596ea-9223-591b-9b6d-1e712a9e662b
 16 2235b0fc-16ea-6c32-8113-7b388914ecfc
 17 6dbedb4e-85da-579e-88df-33b0b62e578b
 18 52781daa-c73a-5fac-afbb-28686678dab1
 19 ab9d7f44-6b87-06f0-891d-511d6228d6e6
 20 f322e774-068e-10a7-afb7-0323d451ee8c
 21 3065613e-4348-4f5b-b5db-598accb8f8f8
 22 00d0b04c-6de7-8955-a539-432023225a6e
 23 de51bbef-a506-209f-919c-f75dc4cd0940
 24 a75d1cae-9a67-7933-a858-0458fa690dff
 25 caf3f50e-7cba-089b-b6c1-1a7987767061
 26 75651a43-99fd-0576-8bce-1528271995d0
 27 6bdde2e5-f665-5231-be00-7c5cf6db07af
 28 d7e40142-dd5c-8234-bd03-e76097f6a292
 29 b63f0811-a78a-3fe5-a2b9-4b2979271ff8
 30 e4f4b877-6c71-6fec-8bf1-77654c285cba
 31 04e948b9-bfb6-7f02-bea7-db9b15a45f25
 32 695cbd10-b17b-7aa5-b9fb-8307ede0353d
 33 5ceca38f-f4d5-5b10-a0c3-52a01a9cc753
 34 3a22e935-5b1c-548b-b68e-74652a7bd016
 35 f110f9e5-a537-2b00-aa4d-8da8e289e71f
 36 5bfbbc0a-ece1-7f11-8c43-55eb8e1ad49d
 37 8a2a94b2-c79c-34f7-91f0-32a9ac5cb986
 38 7547b7d5-fca1-3faf-ad17-82f7fba8945a
 39 ad524d21-e194-581b-b3a8-9a9d1b2d8f87
 40 b1297ef0-b45f-460f-81ba-016a704e29df
 41 b91cc3b8-7c6f-178c-bee3-26db10e27406
 42 ecc24ce8-6ff5-0092-9c1c-a2f28c0815ba
 43 e6f8f52d-716a-58d0-a1a1-9e62dee77c15
 44 913c9f47-fe56-222c-8cfb-38dcae5e4b74
 45 ec1e556c-9a86-8e20-bac5-7a70647fdedf
 46 2a3f6a93-0dc0-2f91-b041-72c8c9a53694
 47 dea6dd50-0660-700a-8934-85d4232f9143
 48 e91692f6-d87c-549d-b730-bd7ecaa8080d
 49 1c6eca67-9ac7-15b6-b8a1-0a4c0b8bee6c
 50 1e005531-d5ec-2a06-a72a-e310b9328021
 51 f2b6406b-1d5a-0c51-b90a-d2813c4764ad
 52 c5ddcba4-ee3b-70d5-a7ca-96d3030887dc
 53 49d040f6-34cd-3999-a843-5c67fba4f4b4
 54 88353cc1-4d9e-0850-b164-eb3b899b36b8
 55 c5267e45-9918-5dc5-9e45-a94ed96ac34e
 56 47733e22-4a15-447c-8311-fe5905e88c1b

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 31578854440801565501482700583677552733541052827512073054. Exactly this sequence comes out of new Random(901).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 3 of Probable run 2 (seed 377,361,921): new Random(377361921), Next(8,64) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-27 19:10–19:12).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related