201208170343 yd8jb

explained decrypted filler

seed 156

Metadata

Post ID: yd8jb
Title: 201208170343 → 2012-08-17 03:43 on A858's clock
Posted (UTC): 2012-08-17 07:43:31
Timezone: UTC−4 · title 03:43 against posted 07:43 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,512 hex characters · 1,256 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201208170343) = 6ab428dc4e60d2a0cdc0928c3b6048d1 (name+title)
GUIDs: 39
Filler GUID seed: new Random(156).Next(9) ✓ verified
Run: Run 25 (seed 158,297,437) (seed)
Draw: 8 · predicted N = 39 ✓
Machine boot: 2012-08-15 10:14–10:24 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 2,512 hex characters = 1,256 bytes = 157 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201208170343 (name+title). Key = MD5(password) = 6ab428dc4e60d2a0cdc0928c3b6048d1, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 39 GUIDs as hex (shown below).

Decrypted: GUID list

  1 63920cbd-817e-22b4-a9bd-79e502cbd10e
  2 b972c0cc-f324-5452-b064-98cd5465e9b8
  3 021ba1aa-dc8b-7539-a28f-0c4c64ff0d1b
  4 0021784e-ac39-7ac1-8a18-e5ae46b955ba
  5 55dd976b-0c16-5b54-863b-a4e785821fb1
  6 568622f9-c566-7717-814f-c4ab836fc95c
  7 1d0c511d-f908-7c8a-9ecf-249d60f09aa3
  8 70a3c01d-6cd3-654b-8494-2a2620bab96e
  9 2328f013-b501-2192-b221-36f0bf44f328
 10 043b3bd8-1a57-7d9c-a22a-0f36effa9780
 11 14e163e0-90df-1bfa-af98-48ae37caecbf
 12 99e57ba5-96f7-2463-a903-02c064ae08f4
 13 fc1df07e-a252-7ccb-b3c6-17a04fa07e1a
 14 b7193df6-00ba-5bb5-a2dc-bf2112d8b5bf
 15 1e957865-2cda-1643-8fab-83febfdb4e9f
 16 e20f15f5-2262-44cb-a33b-4e433d75b762
 17 af843b7f-e5b5-3d07-8a85-769da2bfbaf8
 18 9a60a031-3d4a-6232-9499-4e6c396330a4
 19 dfb0d9a0-c2b4-84a1-9f68-eaf89090506a
 20 f6f2ae03-7bff-6ab0-bb97-ac21fc828e0e
 21 0aa00f17-1cb1-4e84-90cc-a2d4c3fa81eb
 22 380749c9-169f-192f-ac3b-17d82a27a722
 23 d9815b98-0b99-3813-9948-2ed343ed4a63
 24 0eeb7d1d-28a1-4c3c-8002-8732c53cd563
 25 196867c0-d3ae-8918-a45b-3fcf70e76385
 26 9c405fa1-cacc-7bcf-be2d-793f3490fc4d
 27 a8071337-d1b7-0b6f-83c1-d5e75744652f
 28 8aafd582-d74c-3c03-9f5d-d8fb22f579e3
 29 32ffdc0e-0f7c-539d-ae10-14091ed6d702
 30 e6f41e81-0ac6-6c41-8b86-22b93a93afd8
 31 2cfa8917-44bc-7b68-aa20-251bedaf66af
 32 3d6bcca3-fd68-4d7f-b48c-8b18f166c079
 33 66b3ff12-67c8-0ed2-bfd7-d188dc602f7c
 34 e5d7433e-369e-801e-9767-eb622221a7b8
 35 2be2d5cd-eae7-11a6-be5b-3209185cb4a9
 36 98a84c83-3ebd-45ff-9ae7-307abf0be4ca
 37 a479767c-bf23-21f7-b9c8-223bc9b9fc28
 38 06b05a41-c3a6-603a-86ac-04726b0b185f
 39 58eb9df4-dfa2-0415-907a-445769623755

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 257757762712751436864134870356740814260. Exactly this sequence comes out of new Random(156).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 8 of Run 25 (seed 158,297,437): new Random(158297437), Next(8,64) per post. The RNG predicts N = 39; the post has N = 39 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:14–10:24).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related