201209070230 zhddp

explained decrypted filler

seed 711

Metadata

Post ID: zhddp
Title: 201209070230 → 2012-09-07 02:30 on A858's clock
Posted (UTC): 2012-09-07 01:30:11
Timezone: UTC+1 · title 02:30 against posted 01:30 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,896 hex characters · 1,448 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201209070230) = 238fba3b2448d8f6fdbf9cb47e6be891 (name+title)
GUIDs: 45
Filler GUID seed: new Random(711).Next(9) ✓ verified
Run: Run 30 (seed 1,932,335,625) (seed)
Draw: 6 · predicted N = 45 ✓
Machine boot: 2012-08-15 09:44–10:44 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 8 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

A670FB440150DAA0 F240F0BF95FA0393 5E6C3F8961E8CAFF 40D55948CE6425F1 01DDF237D6AB838A CE6DE7FAC9AB4808 90CFBEF9E77693BA DFC0B3ECB0CD7631 E7579AB856FED12D EE19927AB7563CE9 8E0CC44223848082 CE555722A6A0C6EA 7F7CBBFB297790B9 AA2EB65155434C84 EC6270EE0D0E61C2 59D5449287C01F4B 9DD00A5BDBADA05A 4516D8D009434664 D26539E41F2474E7 F4274267DA7E494F 9C6B0AFE9107BE0D 97F41D102A74DCC4 F03BFD1B7CF74F4C 4F1880C938C9352C 0D3FE90957BF607F 062AD305FAB8FC08 C5FF5D20FF3D2E9F DA7D193BBEA300B2 18092ACEA0C778C6 17DA03591DE9EE12 B071F950027AE6CA AC1343370FF309FD DD6C822DE72F948B AAFE8DBDA2115DCD CB68707B875F3428 33FA7D6A82927037 07F06ABF4AD66CA9 260297978762140B F3923FB2F7762E5B 55802C331252EBB6 A8A7636938AABD3E 14C99A57E39E29AC 254BAF489B7465E7 B0449AE128DFD230 D152BADE47716F25 D95295D99B705AD9 E4F19C568C9F970B 8669C675873EFF0E D8EF1C86A0344B64 7B92BC25243CEEFE 10E02517809A7B51 278EE073C29BB0F5 5CED06EE05FA99EB A5897725D66F3512 8E878A66C8962B06 6F340A9771D4A463 F0F833939F000AB7 B1BF51F2598DF2F0 36B669B4786B7E4E FD0CB70BFF6AA545 C52C933BF578834F DA2D2288DF167AB9 91649F9D01581AE8 5D561A9ECB81E060 5E1D048992C54A13 F6F68EAE86C92782 5C38CB1EC62777DF 690E672BFC324666 3554AF4DB1CDA768 A45C36564EB760C7 05F8D7C7C59E807D 61DE746FBFDDC887 6AE111E47F83222C 0CF4CB7EA9F5F0E1 10123C5BCE306232 2363D9DA5EC79C2C A271239724572A14 D3DF2A7144EA7162 E07E3DA59C6974D6 A952DD2FCFE589FB 2906F898451BC5DD 96E865629711BA4E BCADB954C544319C 5AF033809B4A5D56 4B7D3D803A2B53A7 02BE00FE796C22CD AEB5EC824DF98E14 75EF5CADEC6D0FD9 C48183834134819B 62BDACAF175A395E CB828171CE7FD4C2 AF6427CBC7DDC5C7 D9D31F9A0870E119 DD725FF0D453914B CFA2873E99F6CF3E 8C63FE1C53694FFE 460AA80C4A2301CF D49E82D9A566B6C7 EDA3B1D0D6E2D53B 431D7BA3250EF3A8 DC8F54F94BAD7FF9 929BBAE733BD4FC1 60357283A6BADDDF 82D10ADD8B6F096C FA1E0D46407F9E8A FEEA76E1E8699DF5 D4B8BEA214235E65 A5CB8686FF20DB1F 07762CCC150E6983 BC30B0D12EC0AB06 010B5FB05CFF9683 76A5852EC7A3A7A6 898774B6720CDD48 CA076E7D1E938901 18319735AABC43CD AA1B14E37776EC20 2C9301CD5434F888 E1FDC55B78D286A8 AC72B4EE080BEC81 F03DFEC481039E8E D04CE046E40FB194 61AF1B85B1AAF66F 36C0FBE0169DCAAC 418684B8D8043C54 D85BFB7AE638D207 10A183A302AC8665 E4674AF67C6E5858 7DA98962A56AD69A C1B97E58372912B7 D1125954B237F268 475F676D862723BC 78B8E9337613AFAA 6B6646D9B5C2D6F4 36D5514D3C9D029F 6F3E601EF38F902D B0E317716B39EAA7 01EFC1B2D4F939BC 826E999C2CAB7E32 C41D120F79BB4F34 3EE0F0AE4F8ADB3C 67E4E7017BBEC64D 07346DC338F05B0F 5D7F9BDECEC366BE B61E8FAFF025E395 F7813CC903D8B1F9 89BD7DE50F028568 F041A652DA342103 42DE9919902447F0 D21842C106BEFF5A 41C2D91DDF6D7337 E2C8C270F2B60DAF 9B6BBFE7AAA1A623 F37C19744EA77237 72017710876E3A0A AC719559A3A97DF0 26659727249F31CF E85D3F125638FE20 ECA0E81A48C1BF5C F0EE119F2892769F E581B84DC7D33386 BD212819EAF71DAD 914B6ECC1F033860 931C35D3213C13CC 8CEDC22D3EAE0246 ED1FD486145BDB54 F7BAB17C29698950 D6BDD9421E6ACCC7 66050E0FBBFA79B4 AFB665850AB925B2 8F1367B1C5E511F7 4D7EEB83A21C18ED 72193C7372F44A87 B714B33E68995268 7546CE6FB46A3917 997157B89F03EB20 EEEEF554F7314A47 D90DA0D3146050C7 AD7B805FF672CF74 B75F62C62EA2EE9D 6E1399268A6EF140 49A6AD4DAE448BB9

Read the ciphertext. Strip whitespace: 2,896 hex characters = 1,448 bytes = 181 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201209070230 (name+title). Key = MD5(password) = 238fba3b2448d8f6fdbf9cb47e6be891, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 45 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8cb0db21-0b3c-1a18-a1fd-5f6799f5de34
  2 28e534bd-ecca-317e-9ae4-21b09869d877
  3 4015290e-40cb-6f22-a26c-81545a2f2f57
  4 64c59db1-0d65-2dcd-a2ae-aeb512fea726
  5 7721a664-9f75-155f-aa42-edf531bddb6d
  6 a7c86ed0-b8e0-8028-a05e-cc9eafdf4797
  7 c5fa100d-7bd0-410e-b0ba-5ca6a51b50ee
  8 47b9e283-bdb1-1bfd-9807-a6c50f21c1d1
  9 1d89cee9-94b3-88a0-8cef-047c7470bd13
 10 3623e12d-3f6f-482c-a1bd-c2ad88ad8997
 11 a8e3ffb2-3892-02b4-b666-9779cacd70ef
 12 1bf78ad8-91b4-4dde-897e-153f677334ba
 13 e3f09b94-12fd-3436-9c12-6a17d5a051a5
 14 7a47fb36-b397-323d-8637-83701eec5daa
 15 7ddd8abc-d834-5306-b9ab-0aa317413c68
 16 0f748123-82b0-0b4d-925a-21f531bab37b
 17 800c069e-a4d0-66df-9de7-199f3c98a2bb
 18 900aebde-33b6-714d-83af-2fca3c07abfc
 19 09ec33ed-0daa-8d7c-964a-33af6cd8108f
 20 422dd5ce-b0b0-5d87-925e-183407f4a061
 21 94e02c81-cdc2-2d39-ae30-f9d69ac047bf
 22 50f69e26-a56a-21fd-a7ef-9bbdd2cb76a9
 23 d8e07dc9-9d55-1212-a4bc-0fd3cf586987
 24 d1bef7ec-0ea8-3a38-9610-9647ed8c9dfb
 25 ef405d76-e188-3fff-a4f7-6f511f44dc98
 26 ec4f13c0-1653-7e07-9da0-b6a09888a380
 27 a52ea632-a13b-2762-9e56-08b76004b55a
 28 c3884e4d-58fe-29ed-ae8c-189a2a319a3a
 29 587914cc-0b12-8674-a21b-3e10cb93b20f
 30 67b12f05-cc9e-67fb-9e3b-e1fbad69b62a
 31 b61dfa2c-22d2-6349-acb4-c97a3846667b
 32 6a563c8a-46dd-69f7-8bea-6bfe403ef289
 33 f051fc55-92e3-1dac-9dff-ed48552910f0
 34 d3c26617-95fd-74cd-a01b-6512990960c7
 35 48c018c9-afd8-8c09-89f8-388aefdb1791
 36 82ba48c5-eefe-5164-9b22-23ceec411a79
 37 28cc76bc-b9ca-8ad8-8ec1-b1336760acaf
 38 d220ce82-f979-8474-af62-8425a84ff412
 39 8bdfff69-0077-07f6-91ec-4e32319580ee
 40 763daa98-61c4-5499-9f77-0c64b71afea7
 41 ed4663b5-4663-3767-bce9-065993baeb11
 42 31fba028-b2a6-2f08-8770-0dc32ee2a144
 43 3c0a2dce-ad2d-88c7-b2fc-497f30a56e9a
 44 2a36d361-d025-6081-8063-b5a7d671aa2e
 45 fad01024-0ef2-6ceb-90f6-bc448e935803

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 136218418404335067852213372286661785880532866. Exactly this sequence comes out of new Random(711).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 6 of Run 30 (seed 1,932,335,625): new Random(1932335625), Next(8,64) per post. The RNG predicts N = 45; the post has N = 45 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 09:44–10:44).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related