201209041400 zbkva

explained decrypted filler

seed 76

Metadata

Post ID: zbkva
Title: 201209041400 → 2012-09-04 14:00 on A858's clock
Posted (UTC): 2012-09-04 05:00:25
Timezone: UTC+9 · title 14:00 against posted 05:00 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201209041400) = 9a23786bf30f741d5574bc220d67ad15 (name+title)
GUIDs: 56
Filler GUID seed: new Random(76).Next(9) ✓ verified
Run: Run 27 (seed 1,337,299,625) (seed)
Draw: 48 · predicted N = 56 ✓
Machine boot: 2012-08-15 10:07–10:24 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 3
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

CA5CF562945BC361 94031FA79C9B9FF4 8A13FEA3AB4A77A0 6F6D4AB49C140C99 A13F3F36FBFFC790 37045894A5E5A8A1 FF7EB7020BB4E5EF C58DABA9B42BF195 A22E170D2ED1A306 67EC8ADECC4438E8 461360A42AC9D6FC 0BB9759E1D852336 F14C526DBE99AA44 6EB7D99690819E34 2E1305F518B81658 1203F864CBC6EA22 9DE4215A2FBCB218 A08EDEC95C9293A7 9A3B9E42CBA295C6 3F428E3A0197E0CA ACBB69832D40078B 3880DAF494387DB2 58C92E1586727A8D F3E8A0330C7499E3 CDEE1D4E0FCC03EC 6308994CE9A4CD4A D40E6F4917AB5D59 42CEFA29BC958E4F EE8DADB5F29F8A57 87327493F019E3AF 9C01F7851F32A6D8 A87CED4C5CB845D1 3A3C2755AF84BD59 8AB576789387E24E 5AC92DFC03B372CF 7D2A5D62CD8EF147 957AEDBBA8F634BC DE960F9A64A8B338 8A7A6F84EE2F135B A7812EB7572FF692 3A0F34DA8306508A 3E2E29EC98A0F714 964415DC3BE63666 B147AD39A3875441 6526A8D64340ED5E 0F244216E8454E92 95AA6EFA531168AF 5C1EF1DE660F89F7 BDD72AEF40D697E6 92BD38E6F7907753 A3F4D0B423C22DF0 C8A3107B846BF973 D98ED461E360A0A4 487A7BCDD8C8EE4F F2BE66D8C209183D B8811613EF03807B F9A036A70DAF5A56 C04DA8C4ED710724 F59336A8270D4000 9DEAE7BE3B5CCF37 DC9BBA286B0987B2 5D50046FB7E85687 AF01CBA22F1AB31E 91A2AE4EE0BE6CEE 350465EEC6EA5627 2ACF901735064115 DEE9271097B2D4D8 77131CF84897E4B9 C855637DC8028956 58021FC8D5512D57 C64047E9D5FC5D81 CC6D9D631E2DC5E4 46485358B08B5A87 E94353ABC38AE7F0 E7EF06F8ABBC45FE 4585895869AE811B A1963699A66A5AAC 142A111BF6E91DD0 B298335E065C266E 1705AE378E9E25AE F8D3603370456D6A 6A6373E6D3A93F2E 11D709B95629A588 52A7BDD6D8067434 2E8979A2C913F1C5 4C46DB8C38811213 049CFA1E3100077E 5F6EE272BEA0EE56 7CC64215E20C6FE0 6C3B594560C71D45 750D4F154DA1BE5B BED1E4FE1B1D3AF0 F3791BC4ACCE7D10 43C2C2E1DE237F19 AA2038261B6F5075 B75F11FBB3F2F70B 124ACCCDA6D9AFD5 F769D17D68A19101 8E14D6A941A5DA53 A904C0E0A4C25E2B 15E7C7B2888A749A 31E2BC13228BE987 0A9F9E99ED1B9AC0 E505436794EE0DBA 11288545CD08922B 28CC8E32091D1361 C526E7CC55D2B9FE FCB83C2545B4F49C C792B200D2851B79 FB48F0CC816A3FED 213A163F7D3A6A88 269C60AFD610475F 544006488A382526 95CEB20C91A5C167 5CA10525FFF81846 F92FFB7CFA68F508 97B736F5028829BB F528EE9D2AF9A7D3 028A5E988013C04C 3B50E5B7E6E5B2BC DD08BF081C66CD14 D2DFAA674CE3DC84 FCEF0488BA23A389 F39CD74982FEBEF6 D6641E95FA1C39E7 6893C3092BFEF10F 73C2452D1B119CB4 65893AC0B1A284D4 CFBA115DEDA15F40 FF5425BFDEBC9735 1CB7109FA1A054BE 1DCC02243F1A8591 F2F67E0AC0B0CA19 1289F7589870C669 9D490E0459026AD8 FFB3B684F11AD517 4C1B50573F5519DD E970842CBFDA09F9 DEC139BAC11FD48A 0C71C5EE5226FF96 5BA4A8D13534AC83 FC4B0A76D9178977 4E3C4CFBC81BEE61 ABD1977555A1C87B D623CA1CAFCAECE3 55319DB318FF165E 2A61638A064B47C7 B7FF75F6B9D624BB 3060B387CCF614C3 D5A3BC854FB9552C 42678BE688BE843D DEF6C1BFDF88B997 8C673656B21E89EC BF4B61A0FCBFFDD4 C08693945481B4B6 A06F1EB0F728EC04 7BD3A35DC79E6264 5A685971779128DC 0ED0045660AF64CC 8C1B8A0A3B170DAC 034E1024FC65D2EB 5387672F1D753761 B979181D30EF7165 E68BE49F35BEB420 8E52BD220F3A1AA5 9BE37A73A824747E 94527FAC963335CF 79C0C8A8F7C4F304 CF616325773198C2 788567A793322A0B B32A234BA20039D2 0C24A4A4010EF5C0 C05F5F7836A85EFA 498AA958ACF96399 D7F9D71F8B0F178F 869B341B0DD25E4D A4C64B30CE49388A 064A7FB2F06E2704 75E5C356A358B0F3 EB4AE89B24A22AB8 89FC88F970FF0734 49116B79EF5CA8D8 EBB8A59D85EC7708 0D1DD4D3F5B97E19 B7DEAD978402017A 48596281E8E175BA 6437D5F6E648ADA8 05F757B21E67CD81 3700158F61F4F467 1699579EFEC198BB 18DD961802902008 F476EB623474BF9F 6C026846AE3BB083 735056EB2A1C93FA 269A59B27CC86DE5 93D1B43CC790E472 5C022F7073695E53 1A41C696C01E8136 D2111496FEA77459 3AF3326B645F4210 5C42DE167F718DE5 E1986BDE7916D658 E889148E328584EF 8578BE4FB40A42D4 786B2D4ADFAA436A 2C535D97C37F5BDB 60405A8190C83A1C D6FF0DB5B9899996 10939241187A5DC7 2ED29C63C57F2051 3B6B38E06D36C0EE 9D36ACB856264AD3 765BE680BBC72C69 F12965AF19428E69 D0632D09AACEAE24 EB85A2CB5140EE47 D9AB683406D2BF95 569C460D451356E1 9E52D05C2685208A FF28B15043F690E2 283545DE263F0F4B 8DD49C2EAD534FE8 5C08B82430CDDC49 41D559A58A1E4180 102D82ECBE4BE28A

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201209041400 (name+title). Key = MD5(password) = 9a23786bf30f741d5574bc220d67ad15, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c4141adf-6252-3fbb-aaff-e0a09d716cb7
  2 a1e448e3-094d-1699-855c-9f6bc402daf0
  3 ab383c11-8cf2-8c6f-a9a0-2491a463db11
  4 16aa1af4-99f5-7ff6-a522-eb1714c4ff48
  5 7977f4ef-ba5b-4f30-876f-01c3f00a1c17
  6 41b8f516-9ecd-896a-b6e7-9dea2c57c583
  7 d2e05c98-405c-81c3-8e7e-beb1e438e967
  8 379ecbce-0a37-5a8d-ba4c-e257f3df902e
  9 746d6430-00b0-38e1-a5b0-d85557701203
 10 32c676b0-a930-21f3-ab34-58dc3bb12b44
 11 39fd1b2b-079a-2a40-bb9b-7db48b9a2c86
 12 f5fa3c2f-1037-7796-83ba-0467bee42036
 13 7e4f04d9-5fc3-7a78-ae96-a864ad830f1c
 14 9cdc6326-ce1b-0f9d-af7f-ecfa1f8c9d67
 15 bae4aaff-9297-10c0-b9ee-737c9a6d56c1
 16 2b444385-89cc-49ad-909c-cab346c89648
 17 c4c09533-4dcd-7926-9e87-4bd276054ca7
 18 5d6223ed-bf0e-1001-af92-386ab28b8d29
 19 21f93b5c-1573-612d-b9c1-b761b5cf1a28
 20 31a8bb33-94cb-651d-b0fa-af2b16c9fe36
 21 40bea962-7504-8634-b0d7-705e99d49fec
 22 ca5fb280-f10c-48fd-9c5b-89127b9294d7
 23 f00e0718-ad2d-7c31-a29b-93af9168d834
 24 b3044cb1-3f8b-51c8-a129-bb303e5f2c52
 25 786e7075-c645-193f-b2e4-3c09d00c5843
 26 45d5b217-aa09-3638-9154-7e312bcda747
 27 ac3f217c-0a0e-25f4-b3b9-d57c00e8d21b
 28 f37c5745-f352-7b18-8358-2a06b21184a5
 29 9163fc26-20cf-4e43-bcd7-7da0593580b7
 30 fd6423b8-bb19-2bfe-a3b4-16e3e3fbdb48
 31 8a4612d3-b67f-289e-84c9-6f6a474cae1c
 32 4803abfd-2aca-4871-9af7-053c95a894c9
 33 eae01a92-47a0-7e59-b617-40118a510947
 34 76430056-6026-80df-8f3f-99e877aa33c2
 35 943f961d-0ed5-1099-9695-4cceb2b5eeb0
 36 fe26af90-707c-03d8-a4c8-a5a0a48102f0
 37 26419d36-7fcb-863a-9c06-e6f676c4cdda
 38 a9314220-e27e-11d2-91cd-32379e927531
 39 c1fde935-6408-3e5e-8ddc-99f593875da1
 40 a189d8a7-c42c-04e8-896a-d02e47bd36e5
 41 eb872cbd-6094-78c1-b898-3c0ec7942024
 42 5f3c1ec5-0bb2-71f9-b214-3d5543dbf48b
 43 37afd02f-079c-5fc0-862d-10761ae4899b
 44 290598c5-b4e4-7721-af25-48da557ba5b4
 45 3b79ef64-1c4b-8e92-a47c-52d8d02a3960
 46 459ab61e-9123-6057-bc74-b28312fff10e
 47 4f0fdeac-7bdd-18f3-9b56-e1f4abd7e59d
 48 9aef8921-8191-596e-9e4d-6f85fd97cc4e
 49 43ba8b07-e56d-524b-b13b-c5513df8b910
 50 a152122f-9749-2c81-a1db-0436b5b574c6
 51 515fffab-752e-2643-ab32-b6dd201eb50d
 52 a72cdcb0-d568-830b-b045-97b7f5ca974d
 53 3cefabff-f6f0-7799-bb02-07f0a362a865
 54 3f557091-7fc3-8565-8a8c-46e53c923bbe
 55 2ff77ce6-a96a-3872-b0c3-ee4990b24829
 56 79a60e54-6da3-84dc-9d8a-f773feb054e0

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 31874885322770147166847513274224781081307757861552287838. Exactly this sequence comes out of new Random(76).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 48 of Run 27 (seed 1,337,299,625): new Random(1337299625), Next(8,64) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related