201208170418 yc2zf

explained decrypted filler

3DES(name+title) ECB, 46 GUIDs, seed 322

Metadata

Post ID: yc2zf
Title: 201208170418 → 2012-08-17 04:18 on A858's clock
Posted (UTC): 2012-08-16 19:18:38
Timezone: UTC+9 · title 04:18 against posted 19:18 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,960 hex characters · 1,480 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201208170418) = fd18b6201b51871e57f261e24c598be0 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 46
Filler GUID seed: new Random(322).Next(9) ✓ verified
Run: Run 24 (seed 39,416,093) (seed)
Draw: 28 · predicted N = 46 ✓
Machine boot: 2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

B81E8B2486F11AD4 9A4CFE459E9CCA2F 4381B8316EF1C0BD 8BC3AF5CC988C2D0 3642EC9C027509BA 85C4CBF57E3C9D11 3D979A9B92FE0E8E AD134C5A6980280C 882773C6F03D291F 430221A196E1A8B6 DCE09396DEAA7ED3 6E311C48554CF45B 2EFEF00CA886605D D3CA8EB2EE476A8B E89FB8C667D50934 19F49AE65E7C860E E843AF91A70E1E62 35B3D3108B2E9EB2 FD6C59F8D0FFF7CB 61A1ACA5A5D8D8CD 6722E3B76431EE82 90F67A25CFDE77DE 06FC68E8FDC9E56E 1FEC2532A49DE4CC 58CD0D2659C2F629 CF1E19F30BD0EFF0 3AA9ECCB10CAC85A 8E066AF15B61137B 06079FBD6433E567 FA5F972811901F16 6B09855DE5973A7B C37AA6CE9C449774 58801131B4EE6319 67448D9C9B12F19F D705704599D69B90 000A9DEE3F8725D6 854E7E3D2921F007 8614DC5D37607AA4 11268A3B6BFD37E6 29735B25A69CD951 3D60B20BFDD518A2 EBAF07F15E83FCCC C38C7DBFB9091AF6 61F3541FAE606EA2 66C693ADD3E7E9A5 531B77B634876167 1010C64080A0A6F3 C366504FC71BF984 32C6CA68B77CB6B8 CC7C83020EB8E4FE 3143991C715B1340 46BBB1F58582230B E87BE2CFB2F17B6F 53F32E454A97AA86 1A0042B580B127B7 96294C34A1268160 085D1824D33F16DB 49B7646569A6CA5C EB11BFFFA1554FA4 7F4BB41C8660382C D4F51068777B39E0 2447FD783AA23559 C91C8A1056204F8A 71AC340ADC0ECCF4 1CF3697F01A26E8A CAFE66DF31CE217D 6E923FA331724F51 68C229561103C662 4574E18357B5043D F4A2BDD0BD92C964 DBEFE2CCC96D5F1C ECB77E35E9D4B5AE D8B85737B40794F6 B66F7F88A474D759 BFC08E315CCF84E3 589B737E9FF58642 B2E1FB5FEC329AB5 7F31FAC46B5F5489 D8EF3E71CBEB12A0 48AFE2BCDAB7A1DF 26B17B145C9E5E90 33379FD29A7988DF 61DD29EC19D472F3 C4C85625E9117724 6D0F7B7D83E8D5AA 9852E92A9EBAF16A 51474F54DB0B98A9 8EADCB5B44F3CDE2 6EF8C25F4DA0F49B 6180FE907825A083 64F5299F28653348 2805287A901180B5 2A9E8AEF8B628106 29182BF6C571B44C 443316B6905C2C5E 6F4474654D1426B5 9931314BD3203AA0 EC9F12B9D53D3271 04FB7F236FDE8617 99ADEA4EE1093971 38AA5D2EB3E9D061 3A78F56CE5730307 555F67362EB9FA83 3EE6C268849159BA 43211B0CD8091A30 346CA1F994DF4E48 8B4FA713406EDA31 F0639516DD0E4376 045E0C476FA86D73 2ED03C41C8852CD2 579964961A90E257 B142EFBB3F138F75 4C82B8EA12121D24 E040A707430EFAF9 22A7F552E5A17CC0 0D2B252A709E021C 0859170D26798FE7 849027F384D4C260 A6FB44E2883C71B7 28129EC088971B50 731BA91CB53EB479 3313589218AD338F 7C57EDB47CFFF692 A94E684B8E14CAD8 8928EDAC19F945C0 C68D27F05026994C 3D24A1DA53869E9B DB9A6BEEA8F993F4 4D3C1EB3E261DD97 2397D8DA2F41F7F7 AAC571F2141E3174 A6088580BC73B8D0 B43C4E576671090F DAD684710411D08A 3A347B3326EC26D9 A5FA7DB91B601C28 E6A87D4F3FCF9EBD 5BE801AA5CBC3D44 CA62362D1732B3C0 687869FB21839D4D FD888F2E99D1C02D 9A3AF26CD215A8E2 3CD1A9C7B48164BE 82A6950EC82AB187 E8C622848124031C 65E3C3C353427062 FF719E0B30E4E962 341CFC2562F4C38C DCE37E004F82E597 5033B197A41DB13C 538E547392E40912 C8A26A71C3B20D21 56802CD4B0164CE7 1BB1F7EF43112078 288B3B7F604C2D53 F36F31B53BAB5F7E 86217057D17C9A7E 15ACD0F5478A871F 529A90B0943CD67F 310958D8D1BBC484 6C626B5803347C10 BA376FD02DF0EE96 3E1AD3E88DCD5B5C C8FC15ABF76C0722 0D6127E642C1DB4A 3AF61D0EF1880AB1 889BEAFB624D777B EA2701787663C8AE C0DF822C249B3769 FE367B762A01E7C1 8B6DF3F60688DBFD B420F182907BCB3E BA5BE0D26047C44F 5A5A7573AC7CC780 207DDF87A97DA21D E4B613D328020E5E AA703464F390C65F DFC9FC9B890E7C8D 955036E4E788DE2A 2B94A77395ACD895 FE081BF05A779F00 A78CB52F74FA7071 105615EFEA83B0A5 AF8179D0716D9BC0 DCC7CE89DAD4C050

Read the ciphertext. Strip whitespace: 2,960 hex characters = 1,480 bytes = 185 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201208170418 (name+title). Key = MD5(password) = fd18b6201b51871e57f261e24c598be0, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 46 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9ca9ee42-c14d-8f1f-adc8-cda2124b0050
  2 700ad1cd-8171-2ef4-ae6f-8177abff7ed9
  3 74210571-0cb3-70fc-a69e-8bd44b69b369
  4 02c5331b-b328-2ddb-83c3-123d9b041d19
  5 9a6a76cb-de4a-54f2-a1f5-40fd8c1ee061
  6 f0fea81e-9ed9-82df-b83a-03627f4ddfae
  7 1dd5e18d-aa7e-1551-aff0-10ec33aa601f
  8 17af7a8b-43e8-8bce-b939-1b120eac415b
  9 01431815-15c4-7ae2-aa35-d22e737f4fd6
 10 2d7cc570-4e1d-0fa4-9bef-1069739cd2fc
 11 62758549-d478-474b-b023-63040a3b7f14
 12 d9783d66-8bf2-7b09-babc-80a5c4042f9e
 13 7633cca6-ba65-88f9-9d65-3f1fc30219dc
 14 ff030064-c30e-8b07-be0a-81f16eaeedc6
 15 39763e31-9024-315c-9f83-d81b82eb5940
 16 e729513c-26c9-1d4c-8348-4547076b90ad
 17 2370e31b-d10f-112e-b53e-7e15e1c77635
 18 19986fdc-a74e-59b4-a3ed-1e962c18972c
 19 ba5cd18b-de02-3bcd-9faf-8d1a964d6bd2
 20 ed908905-9ae3-8842-a1c5-ac44e8b748bf
 21 96d0d42c-c03c-5aa6-9c4e-96d0841aaaed
 22 c038a8e3-7884-7d61-90e6-acceb1590dda
 23 8f91f53d-9fe5-300b-b220-83430b8d59fb
 24 99a57ac3-f1cb-455f-ac49-c998ef8c8492
 25 5bd9a551-b475-2491-9384-97aeadb12585
 26 2e143728-4af8-52db-8280-ad10b4cc5fdc
 27 113ec29a-4daa-7f6e-8d92-b53cd246c35c
 28 03dfb9f3-f5ad-17d6-9074-285d09b5a33a
 29 f43d350f-3c9b-4579-9c8f-226e9aa4e9bb
 30 7b5ea37a-a173-39bf-aba7-f9a704b113e6
 31 6dc3cc1f-a9b2-0791-9b69-17d6807bd300
 32 a2fbb7bb-958a-2357-a117-4bade4a05199
 33 4cd84fb1-ab37-76ac-9572-f242e73feb46
 34 fe42b867-2010-063c-98e9-9e39009ffc74
 35 0c1f0bab-08b4-0e86-811e-25d986e628b7
 36 4b92da0f-0a64-6756-a68e-a7356efb82f5
 37 9b6fcb14-4aa9-61cd-b633-bf88b2010911
 38 cd4ea24f-465c-7b99-b7ce-6a02c043ead4
 39 cac2a663-0ffc-4b43-89cf-784742f0239d
 40 fbedcc01-d093-7752-99c4-80f566df226e
 41 e7ed8371-f098-637f-a226-d7062dad4557
 42 225a129f-1cbd-11fb-9db9-5b3d2bd9a251
 43 ae8f6255-3401-3f93-9ce9-aac73f6c2cbd
 44 97bc62b7-9a3b-673c-ac44-c22e0a36b54f
 45 e4079dd4-12ee-68b0-aec6-cd0c40e83ba5
 46 759f4690-a7b4-3c68-9e82-7f0f6a028ee0

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8272581870478831153857342571430270066747613663. Exactly this sequence comes out of new Random(322).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 28 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 46; the post has N = 46 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related