201208170613 yca3a

explained decrypted filler

3DES(name+title) ECB, 46 GUIDs, seed 136

Metadata

Post ID: yca3a
Title: 201208170613 → 2012-08-17 06:13 on A858's clock
Posted (UTC): 2012-08-16 21:13:36
Timezone: UTC+9 · title 06:13 against posted 21:13 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,960 hex characters · 1,480 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201208170613) = 92b7c11704e2c9984edcc7d826a3e13f (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 46
Filler GUID seed: new Random(136).Next(9) ✓ verified
Run: Run 24 (seed 39,416,093) (seed)
Draw: 66 · predicted N = 46 ✓
Machine boot: 2012-08-15 10:18–10:21 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

3986F911454C3400 34FFE377C0E3998F 3EBD4DB635391E6A 0C6C8BAE0B359C44 C1D509CD159BA28E 391F98595D5598C2 DF9DF03934236F13 1483B9B0FF41FDDF 93B94336322E293A E8EC600CF39201D6 5268E32FA56936B8 E85C9EB87B22C258 ABBF87EF654553A4 6A6C15F8DA46EE8F 2CDB27BA0D097FB4 412DA2EDF97E7D75 46E2DB7A69B4AFD6 0B1DDE7B631C3671 6B8EDC7C76C880E8 AC444E63B4EAA66E 898730175C82CC97 189AB74D2CF174FB B7F717D6CC07A172 4A3D59EAF172BDAB CBF216F2CF94F719 6AA230C535EE2CCC 612ED01D6F614542 1385E7B07F1D67F1 3A34533361DBD015 1921A9574BF34381 2A865BBEA06241EB A9EA5890E6224B62 1C68A528F1491C75 447FF54DE18FA111 A0916D5AFB5A2ED6 3A59A7F714047445 36696D36E53D1884 2B748C502002FC8E 4ECFA7C19006381B BA943E02E1AD06D2 6D4E3CDBDE7C9EA7 F7834880E46F18A9 4C532BF7EEC1B6E3 F3CB62671C05EAE0 C9F1FC0BEF707DBD CAE1928DABD281A9 566905A812BB6FA8 5F9A94C5688AE207 A5939990A24EA7C7 0B754AA230F5C078 E60394FF2D1940C5 C73A67A6FF33C652 02AB1BA1B30A3B4E 91A085B170AF3C07 AAE9954C5171DF51 5C87AAE222F7B6F2 9D61EA5FC2BD75AB 27B6913F20CF20DD A6A99E714EC0D381 46B8329E09B8F90D 002A0FF6CE4C8AAB 62FB40449EF743DC 4BEFB89838722BA9 44194714BD35D0F1 CB449F9456545B6C 3C64A9F5BFBB4E4D EB2A66BC4724C369 1D3DD3B647339FE0 BDE4CB51D1AE46D6 1DDEF1A58A4BD51A 62C2F569B7DE7512 DF3298F541B15CB3 742F3C2CC37E361A C46F984F345C3DA0 5C82DDC8CE3CD0A5 D72DCEF17C48DEE4 99D6D843D3F570C0 9B2B5D88FFD53259 EA9FCF59DCF4C34D 34763B61F8B410FB DD7E15AC238A4242 12D302257C5E1F25 1F5EF17808A08E17 19940F521339187E E50F69647352B349 EB767E01B7BC535A 6840A2A3A7B58EAD 49A36D2801C816C8 150C2033694B80FD 53A33464F02456FB CF25A10F1EAF3AD6 4FD020281110C40A 4907EC4A80B4F06B 8966ABD62EB8BC30 43F2BDFC7DCA4009 12885B6BCF875352 55BE9B5B3B9A7573 06DD786C88E5010E C5044736B47BFC7E 62C5B0DA3BF09F6D C650061A9A01B5BC F16A962488B8AF93 D93BFEEC766B487B 92EFA09DCB496BE5 F436483343710B11 AA5E87180C83C714 42C7D0CE3B176A57 FE85A587EF281DFD 5FE24DD78DFBD166 1B96D21E1CE6A061 838295A0C1D9A7CE 4293D86AAAC80631 D44B12F5D80CD3B3 931A073C092FAB78 3FEB4FE69F96C179 8550A867DA843FCA 3936E83D878E7034 4B1DE6A8B60EDFC1 33B09ADFE9F5FB46 7B9A2B7F4EAC4C43 1C1A10F6FA9C5ED7 17017AA90D245B04 145F694AEC7F4E4B CDD2804F69BB7298 404415E8C31EB672 D4E57532E0E4471B C2E91C6E9A16B7C9 67BAD7238D529046 D72C90C69BC7E5A4 0CB0115670092215 C939FA24D6224BC0 126A758DCBFD7AD3 A1484E909ED34472 56A3EEDA75D105E2 262BC9E582073D91 AB1097109625E1A7 203927CA435DA78E 6BD0CC15E4861AD4 93BC8B9C9F22F16D 8F8828AE8553F0EE C16119E79C8ED13A 25EE1C832613B775 9CEBFD363C7DC43E 73EC399D59A10D99 8C8179460D00DB4C 15769574EE2AA011 2FDACD694ECC1889 0D055515F4F59480 20953B26AA4781F0 812A361BD2E9669F 78DA5820A346FAD2 5E991DD718982B45 C9BC6749BB91A6E2 B63A48DD86C2F937 26AABC97FFB89404 242FAC2C3AFA269B 5A06CB3C60075118 75DF64E66967D906 CFB19221A1ACD9D9 C0092E61F2475439 143173F28508D233 41AD519EFCB9B325 5D7512C2F6743761 54B222C32A138534 591AD21B4778F32C BEE034ED4895986C 7221D12E502EA61F CBCE0AFBE69AE6B0 B38FFCCAA06092D7 C4C6FB5CE2555D64 4C9AED42F909E25D F0AC8F428233510B 749B349F821ACB3D 40558C4FAD4C0874 5B8BC35FF4636FB1 FBCA19BC8EDA207C 9484B8E7CBD37291 198929B891608241 373F870318A02B6B FE62C3AB16178F17 A82EBDA70C169A17 DDA9032B13B8BA26 E68FE784DA5A5232 98ED908091D2D1A8 81E4E952D2C68886

Read the ciphertext. Strip whitespace: 2,960 hex characters = 1,480 bytes = 185 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201208170613 (name+title). Key = MD5(password) = 92b7c11704e2c9984edcc7d826a3e13f, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 46 GUIDs as hex (shown below).

Decrypted: GUID list

  1 bfabee6d-7077-65b8-9b63-2f349e531d00
  2 ecb1ef39-f674-688b-adb9-ec4d5179f83d
  3 a0ac1e52-9953-77a0-ba97-542933c6774e
  4 4574772a-b4bf-51f8-b413-709ccc028375
  5 a2dc1bfd-e5b3-5a41-86fe-b3f4017803ea
  6 a1a0ec6d-340b-3167-a6f1-dea60b7153e3
  7 b18ad58c-eee3-749c-b848-7650ea183c56
  8 0204f03f-e7d9-64e4-9e41-9fc22047f06d
  9 e86efef5-cb2f-73f7-81b3-8de5f1372bea
 10 804d3b5c-4f52-3684-a2dd-3b321f959d33
 11 c2113fdf-0c17-44d7-afca-779b500a770b
 12 e0b33560-a42e-528a-ac2d-1adc3cfdec45
 13 61597962-fff6-13ac-bec0-e8288b399aa3
 14 22ebb5d2-1a0a-29a1-b293-6cdeb98e3672
 15 895b0965-7c14-15c0-b796-d87d3dadf84d
 16 0191e9e4-f839-8303-b3ba-aac96904184e
 17 d97f7683-8227-09b4-bb22-e5e04b82d11f
 18 f85dbef9-6467-2ea1-8305-4f56e09c4578
 19 4039d0db-eadc-350f-8f6d-d25259818b5d
 20 2e66d2eb-5bf4-8c96-a749-f8ad68e06a82
 21 af737340-00a6-7d12-9ebd-cdd80291bfe9
 22 dee91e0a-55c2-18bc-8f19-fc643d194840
 23 71f94960-16ad-8395-b898-5cb3a2c66fe9
 24 b9c64fb5-cc8d-492c-9d52-a3a0aefd498e
 25 24004c95-fa23-010a-b459-d604a0fe75ad
 26 fc4b9c86-2946-8767-a6db-965734620138
 27 010d9942-bb6f-7c42-ab6b-86f5238fea40
 28 30a075e1-7fe9-822f-aacd-f71720555001
 29 84664308-4844-1417-997c-49b439c2c150
 30 0d7fd1df-a63d-595f-8904-3d5c48b32da5
 31 792f457f-46af-3627-b152-386a4b4c525d
 32 8996f635-df53-2a12-b345-a905b616f6a9
 33 ddf48217-4241-8a9e-8149-36cc9d1483fe
 34 339bf84c-0bfa-335e-a78b-d20338fbc40e
 35 cd51ea2b-c45e-1821-9dfb-0872b65464bf
 36 0cd9899c-749f-5273-a76c-9d325a0c38df
 37 3d5e4e4a-d1c3-641c-96f2-0797284a93e6
 38 253378f3-6999-07a4-966a-e18fe9516713
 39 505bf0d2-f6a5-5065-b444-7a790aaab443
 40 b5143d29-222a-1832-a8e5-560bfe335e0b
 41 00df6e1a-09dd-86f0-a759-c9500506e21f
 42 4841af0c-330a-4fa7-b3db-2d42a825f445
 43 1c842eaa-6e12-8726-a6ad-8a18606e9c1e
 44 0a27df28-4971-532b-9e4b-6b64bf50209c
 45 542d1bbb-a246-5b5e-93f6-ca2eeba0e95c
 46 86c2c246-e8cb-5231-b491-aa36121f46f1

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6675537673451218023871840878153283156051848555. Exactly this sequence comes out of new Random(136).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 66 of Run 24 (seed 39,416,093): new Random(39416093), Next(8,64) per post. The RNG predicts N = 46; the post has N = 46 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:18–10:21).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related