201209041100 zbajw

explained decrypted filler

seed 854

Metadata

Post ID: zbajw
Title: 201209041100 → 2012-09-04 11:00 on A858's clock
Posted (UTC): 2012-09-04 02:00:10
Timezone: UTC+9 · title 11:00 against posted 02:00 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201209041100) = 10e648a13445939e2d6bead442c41ba3 (name+title)
GUIDs: 44
Filler GUID seed: new Random(854).Next(9) ✓ verified
Run: Run 27 (seed 1,337,299,625) (seed)
Draw: 42 · predicted N = 44 ✓
Machine boot: 2012-08-15 10:07–10:24 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 4 · 1
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

BEF29501C036E88E 0794264C22027779 AE510CC8E8C66BCD BCB325C6FE5E9F48 29CAA6FB6CF1D8E9 BCBBB685C4660E4A 636B2724A50CB51B 5CBCC21672615EE9 C7FA8A549C4670A3 CEE428BA4A4AE468 8B839E7C916B9699 7EB1771384BD28F8 53AB1E020648DE48 F200D444B0A69BF6 8633B416250873D1 9D4BAFFB13C4B8CC 12C8D58F3E602F70 0B94F5ED4752E426 457F41811E3B22DE 026E1ACC53343BFD 446667A0FF0251CF F592F1330E953244 507D4227BE083AC3 85638C3DAEFD0941 41EA07354A40CD80 D4081FA94B25B049 437C652087E63897 0ECE3F0312522B2F 35D546FC830A8C44 7A489BA5473B4A49 83FD8284C232666A 5CC12295D36546EC 982B9D3B1B87A937 40A8EF278134CFA7 5F0667091E36C3E5 C43D95B9A9CAEDA7 4064A89AB8821EBB DADC1C045C9E37CB 38E023D3AF941BA6 981C57A429836FFE 0E1CF282913BA8F0 1A81E3F8044B395B 2823958A0E49E293 217D594D90785965 8B7B08E9E9AD1CB7 030CF859F5040039 054E10F3D5F97C46 D01E34F237E64370 889C66E3BDBF11C1 ABD6C31382F0733A DAF16FA6226CA79E 3C06B209DCFD6F89 AFAAD128E0710AF3 A5ACB9198B37050A 7FC056A053EEC49F 7A091EB369FB3E01 2DBB32967D3154CD E4FEB238C3CA7D10 ECF46A462460747C 218564C3780F1482 F772664EBF1C6601 D6A22CB97FEC0A57 0C100A475A9B5624 831AB1335624E7B0 55ACD921085C7BB5 77BD1B50C1C5A5E2 5333B5A66C4CAAD1 52092F6700364C8A 92BDD04AEE95BA1A 219F3296D251BDC1 D7908586AC657D17 D59BF53EC30364CB 1F36038B02EDBC46 FFA23C07EE4E8219 332F0A75F4B95061 E48F9DAD132644CE D84761E81E09DD6B F4E93A1196D26B35 CE341E747201FAC4 347689891EF9696B AB9FF62D92ED7097 58ACA8702E8D12B2 E5920FF3DE5C8F47 16F90A7E5F2EEB4E 48FFAF03999C0308 2522F5E289727881 D065961B9F42B535 7D063A22184D893D 6835389FF5C89421 307F9B666AC5A272 86591117CF62A6F4 8D6DA3463D831B74 C5A8339F924FE7D8 CE1EB4925835F81C E370B275B009A8D0 1590D42B877DF451 777F3DD8C35A4DE9 A738C87EA9EB9C1A F0672D3A497C4B1A 0CE8D68E6C9EC8B5 EBBD5907ADC806AC 9AE661FA8286C916 B304BD907C238BB9 A79C9AB28C5DA552 2074515D756DF169 8EA92C04B1B40201 C3699A6D58F5D7A2 36E39D5F58AD5D63 1DE5EC499A7D46E8 3F1EDD94CBC32E48 11A73440A333023E 413FB891C2045F29 D0185223A340C968 07F1E96D21F060AB BF976781EC7E4BCB F7CD9B3CEA084AA5 94BE1ED327719A92 FA25C14F18285A0F EE3E352F4789A743 348E874CBBE14F15 1983E3A15EB7E909 0963FB5F14B0C768 FC35E9DB8907C9B2 892FBD41CFF70BE2 4CF8BAD90AE35A48 DF8A07C7C41CF0AB 2B95E1D19635E979 BA6B7CDE39D7B7EF 7BB746647C43C599 606398625D190FE2 C73D784B83A1D07F 34757EEA1D210E95 E0FC03F156747BF9 E8BCCD3502F6AD0D EA9156BDC43A5DDC F1B1BC10470146CF 716F8BC89C3B92F5 826EBA1CA494C0AD 33185CD03813D497 5DCBC308E07F61EC D6AF4D5661CEEC9B 56CF03197A30E498 864047F2BF20DD22 BC2819C114DCB124 BD7BF1082A9E16A2 27486959D2D59F96 879BA9F498278B9E 227A15C9928978E8 FBC93107B5B8CA03 C7AA6CC384CFA273 601623BE72B66A87 0162A6EB372E8D66 C3335DFF033240BC 3D67A694C00840BD F36B1E75E9526841 169533FADD283ED6 8036407DE3B61DA0 981C883508B69A12 4BF7B6DBEFA7F2CC ED05DAEFC0F94313 E4E8AC5C1DBED4CA 55B4AF58169CA22B 5C8DFFEF0A1E2983 11DF7DDADF822F08 5394DAA17AD885D4 8931EDF410F95ECE 4DD7D9909BDF1D25 E1E15ADA58510E2A 2D1A2A809A1D8889 082E87419621E2D8 36E7BDB5FFB165C3 A4D565A86FB96E57 342F4ABD2A0F781D 9B6878D7F3BE1CAE FCE2719B434611F5 874A9188DE1BB5BC 6A4AEE3010AAD95B

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201209041100 (name+title). Key = MD5(password) = 10e648a13445939e2d6bead442c41ba3, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4befb367-d298-75be-a430-eb5bda89dd39
  2 d53fc10c-01b9-34b0-985c-d5f3a8692c5e
  3 1f71032d-7f15-6985-8081-2948ce6e3a59
  4 abf86191-4737-79b4-8a20-8be7714f1185
  5 46559952-6f2b-65e1-a611-593c949fb746
  6 798af65b-6b8d-7f19-8320-f0a0113f73dc
  7 13286dfb-0778-4b66-aac2-61d3d46fcf9f
  8 0836a548-2b0b-7c8b-a9f6-2e93a0873259
  9 86011e34-6319-5c71-aaac-01b02260e4fc
 10 13552254-0894-15e6-b5d8-80cad5b40c55
 11 f1d10d67-6868-42c9-84e5-dec672255466
 12 c72a872a-85a4-1ede-b566-f6c80c5d6ca1
 13 5b9db739-0379-6ffc-a779-6faba0de8b44
 14 14dc7def-74f2-63b1-8e16-7d993241a96f
 15 80a621e5-68bd-63e2-ba54-70fa30d4a646
 16 3bc3c8c6-f38b-33c3-aef1-7643fcbedf9d
 17 1240d622-90db-7f14-8749-2c49c6e9ba79
 18 633ac617-c9dc-4ae6-b390-f03056d0d813
 19 08850eaf-6d2f-73a8-bf65-0e5802dd05d2
 20 18a3fec8-1eba-8462-87e2-a72ce7d348a3
 21 83616bcf-91ae-2f30-99a5-dc86cee5455f
 22 2192faca-65c2-3df3-8bca-6a29121cb395
 23 98a0e914-413d-24fd-8c78-c38e61738620
 24 1978d5d5-3a4d-3dfc-9ad9-16917bb85089
 25 781f3592-0afe-37c7-b9e3-287e74adb214
 26 06887e6c-e5af-79da-88b5-f699414da530
 27 1adcb97a-934b-1b81-ad6c-9b0964d2089b
 28 9fbb5290-e25c-7ed4-b07d-772960f2c8e1
 29 66563ef7-bab5-3bd4-858c-df5021058973
 30 6cff92f8-f98c-7dac-8c3f-2510aa2c1ce2
 31 ba9df082-bfd9-4f24-8472-f51b6bf324fb
 32 1b05fbf4-1d66-33eb-a1fc-f35c4c0a9a21
 33 80b5aba5-2426-6390-9f6a-c5df2d983c51
 34 72ddb99a-082a-3b31-b34d-149b713bf422
 35 742a35a1-621a-765d-9b5c-aaa2efc59d96
 36 c26b63fa-b9ed-61a9-827a-a6ebb51291c0
 37 954eefd1-11b1-3343-889d-80c347ecdcd8
 38 50df8dad-36b0-3132-a936-af2f81d85f2e
 39 dd5470ca-2713-5490-a85d-d33d4e6658da
 40 ad787825-480e-71c0-bcfa-02305988cd0b
 41 c8852896-15c5-1c58-af61-f5e54938b09b
 42 ce174065-9dab-8436-80bd-3888d7b96586
 43 da9efe0e-13e4-61fa-b867-71d3ae777290
 44 a5de540d-58d1-8b7c-962a-16d96791a57f

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 73676747514166637478232337173743637633571868. Exactly this sequence comes out of new Random(854).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 42 of Run 27 (seed 1,337,299,625): new Random(1337299625), Next(8,64) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related