201209070730 zhty8

explained decrypted filler

seed 881

Metadata

Post ID: zhty8
Title: 201209070730 → 2012-09-07 07:30 on A858's clock
Posted (UTC): 2012-09-07 06:30:19
Timezone: UTC+1 · title 07:30 against posted 06:30 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,536 hex characters · 1,768 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201209070730) = 1e07cf21c0c387bb47c0d32bbf76314c (name+title)
GUIDs: 55
Filler GUID seed: new Random(881).Next(9) ✓ verified
Run: Run 30 (seed 1,932,335,625) (seed)
Draw: 11 · predicted N = 55 ✓
Machine boot: 2012-08-15 09:44–10:44 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 8 · 0
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

CDDB12CA6E0DE23F DD0EC55C05EC57A9 CC67A7306EE66AE5 8909B21CF4C03B5D 73B866A860576899 A28FC55C36959A1E 5B67E40B4A1F1B58 68A4C93AC5F9815A 5FE22D8797A05FA3 4CFC597106244BAA 1167CE682A50E895 E4A1EE01918D90BF 8F4D2051A41F1550 D68208F8960C245F B56668BA2F74D453 21AF989B581D07B1 2CCC1CED56BBDD8E F2B97EF220978E96 0BC07585E601A78F F18C4D036A46B334 4A94DC4E5E44B192 4FA6F0BC44510C99 DB6415070C39ED86 DFF6BE397915753C ED447FC7CDB52744 2AFBFFB8FB3F6EBA DB86B262768136D0 73D69133DEA669C5 35F22BFE8977BC15 7DF895AADD9A8724 76C136A3EC730AFD 3ED9C39499D1FFA7 63229ECF22AE7FDC 3B8EB6DFEE0BB094 76C82A1A859F5366 82937FEA2B5102EC 97830ED34070FAC4 ABF958E17DFFAEAA 5D417E4B48E9695D 732F0A30DA886AAB 9C5C029EC683225D FBD6D265DFE988BE 772E8CA2D81FFCF2 62909445A6CC616C 2E743D1A906A876F BC9CFDE90AAA291C 86DB9EE6F5D40A25 5D6BF1F5DD5EA0DB AA5D3960F68CB7BD CA2353A6FB9FFC13 FD3FEC157760C291 9B228C8A82A7AA87 3A006389ACA1626C 0324F928AC4C481D DF21F785B8DEDE16 2BF482A911B4AFF6 50ECD00F80A5A240 D21D002147AA747E 658A245CB6EA076D 783FDFF47CA42512 C93D3C545FF9FCA3 0D5FD586F46E55BB 8AA3053BE5CD8F09 A820DDFE53DE4F5A B088F4A7E3D9E0FA 671E64EBC04C685D 2E08B302857C6400 A3E0E1F1D9B09094 3D551AC0D6D7B9C9 B4D9B80438D2A1DC 587F97420808D768 5EA06D69CD5B0E5D C88424F19A95F4B8 D0F7CE4BCDCD02AB 922670D1EA26506F 52D1BADAB15F9DDF 78D7E9DCF6C001B6 96EF98B134809A42 3A027FF916D2AA05 6A6C04568DD40CB2 514FAAA51ABC7742 6F449EC0BAF0E1C8 F515A1D5D44720B4 4E951AF05C505FB0 B4F502A42580F92D 05CC19F8FD670252 F795A4CB930D09D6 5BDA811A107147BB C8FFAC4214B7078F 78F8221DD4C5D584 4969A72CA64F0336 0947E6CAEFD35365 55553045AFBC99C4 8B294C0807221226 F7EF055395D8C885 792ED5A241F35CBC A8655B0067E7B5BF 6D7A0329212B9CF4 96E1FA708A9122C0 94BD920C9B4BFC81 17CB90FD381D41BC 667898B796B2452A 3C9ED1C71AEE57B8 9D7EB12DA2BB9C4C 56956A4AFF83B322 8409602AE8760677 9611A768393B20B8 5BE6B5793280A31C 569BB748AFCAE38E 1ED5DF372847D144 343A1EC3327FCA23 580E830CF296D85D 28890AF85E2A828D AE7AAEAF8EACB3CD F51A892D8DE9732F 110AA681DA3AFE6A C3AFF38B32230407 D154989B5481F02B 8C3D0FE2DA200294 2D08F9398C71C220 B2CB7280973C8670 72AAB090C55C6D33 F77023FB869E65A0 422CEAF766560D4F 0949E09A14C44310 BBC30742835CFC8D 3886585FB206EC81 A381B5678D02676D 52BE8519916A1B1E 4D0C7709D0D4A5E4 00A06691FB1352F8 494A1FA7FA39A68B CF0775155FE02DCD A4EF5588AF8FBB92 5D62FDA09E081E76 4F7D95A635F89ED7 BE590B455A2F077A C3D02D56D2160BE0 3732AE543E8DB0AF B862C7DA8280E370 F35E8C7615E83F27 98A6984FB3205B80 67632D62BCF96AA5 2D562FBAE0D0D48C 3B4A25B0B6D88EB5 21FCFDF5D5AC23BE BD5AA3B09B7572A3 75EFF6F4CC51A35D 8DC4FABFEC111195 8A93F4504DE5918E 79CB0BB7843A7293 FC49B5748F19AA90 BFB757A1D6221E4E 6DEC8B11B8BD2EF7 AE72B1505B866200 6119E692A5D6CCEB 78D1DA94671357EF 791916E64487CA8F D5B7BC282A547A7F 847B35ADCED0B992 602D694FDC54674C F2C23486D0846EA9 A6D8F2BB93F52453 343792227AC36625 8E007BFF59F39B8E 98B9815107352F0A A493BA5CD6E486BF AB1F0CAC9FF37F05 8126E24D9715266E C2EAE80853FC0B3F 57F29056EE629543 17E37325D3BC8FBA EE55DE27CEC04EFE C38D9F706C2D6752 5C4A574F42931A5B 692B408D454DBE8B 828FBD6670BF4449 EAF1D725F181017C 8036BDB02356D12A 12D11A12880D7E2F 6C1FF56A35A12CD3 270430DC9174079B 8B63C783C63081FE 23AEAE3AFCF371CD 758031546CA8C5DD 3D27B714B277AEDC 162C9C01DD3089E1 7E39555DA462D2EB EAC58F5600B1C9D1 24222081F395DD9D DC3405964E3268FE 7F3FCE7A16A8EA5A FB8B1D9D9E45FB78 BF4F5034487014CB FC2A8CA82E69B692 2771BE76D099F144 69DE6A5CBAA73D13 28685777873FF8F9 65E67F6D8F03F7A0 6A12D6A186B2395C 6D2A37B09A54473E 6C88BB24698D8CA2 6B556CA306013352 C593A207FEC7D6A5 908CD1C113ABCC76 30DA7BB6A3927503 5A259235BFE4C28A C9E4E0F7C5459DBD B37FF91C587D4371 390FD92C8B13A8FC C3A7A22C25985E6D 435BD85986355E78 4A5B13A30DC962EA B9011D40E5D9C1F6 14D9377EFB35635F 8B88A0C49906A7F9 EB57B74216F850EA 1DB629F816AD040C 54D4C1107F7A89CD C1A7C752EDF292C2 F6A3D6A710BDF247

Read the ciphertext. Strip whitespace: 3,536 hex characters = 1,768 bytes = 221 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201209070730 (name+title). Key = MD5(password) = 1e07cf21c0c387bb47c0d32bbf76314c, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 55 GUIDs as hex (shown below).

Decrypted: GUID list

  1 1fb0775b-7251-81ee-beb4-3392b66c2f4e
  2 731221f0-02b4-2b97-942a-3c84717da2a3
  3 85a53a22-46a6-52b8-b451-a1832e8ea182
  4 a5652884-3388-501b-a254-eb2a2231f893
  5 26396daf-732d-8ec3-beee-8f769bcda2a4
  6 d47f1d39-a546-4b90-9329-f4d82c983368
  7 002bd9d5-94fe-5b57-a82a-43886c3b2051
  8 f59a11ab-437e-3740-9a40-fd5147ada60d
  9 dd05cc89-00a8-85da-a4b5-d418b47a5aaf
 10 7ef6f334-979b-196c-b83c-cfd74d53e793
 11 c30b5d02-bc4c-3326-b968-0a643b0d2eef
 12 9d9c5249-7028-2517-87f1-de49c909cb8a
 13 aefb3865-a9ed-22fa-a2d7-3242888b54e1
 14 08b048cb-9083-7a48-86b3-fedfe300f7ff
 15 ab1fb927-5c36-58bb-baa7-272fe6073b35
 16 9c129ad2-9b53-282f-915c-5f462432d837
 17 6e846a6a-178f-1f20-a761-007176971431
 18 61bdcad1-927c-1ee0-8de8-120504e37485
 19 2417dd44-b863-4f55-b21f-fa3f2f17af0c
 20 1b7f9c93-0203-3166-a261-226efe3e3019
 21 f2df563a-68d4-7485-b834-73640478fc36
 22 80054a79-fa64-8f4e-8667-836c58fb067a
 23 e19735cc-61f5-7c03-a643-ce831388715d
 24 382a62a6-6406-73a2-aecd-79d78f950ca4
 25 9b059800-6263-0c2f-834b-1ca6eb14f9b2
 26 530dd5a4-fe39-1fdb-8b01-4d0725c78d55
 27 95ca6abe-49ec-3f94-9060-171d1f1fd6ab
 28 d3d70362-4cc6-5810-bc45-f5e58ac996ae
 29 d9c82362-944e-86ea-a0c6-872fce1c8763
 30 4b57e10e-4f08-5aef-8cbc-e33440ed3b9b
 31 513b6199-0dea-3b33-97c0-84ce451c4232
 32 fa59e9b8-26bc-466a-82f5-d4edd1fce241
 33 74b21792-5a59-5e65-bee5-d09be249f9b7
 34 ad983304-6698-049d-8606-098df5907578
 35 42057dc9-668e-2a3e-bc48-dfcb146cc7fc
 36 714405b5-008e-8e5e-9805-a510950ccd79
 37 694314e9-bc1c-79a9-b40c-bcd4238b3521
 38 cd84c214-5ff6-7e9f-b4de-1c72fb3fb20e
 39 3fcf8159-dc2b-14b6-bb3d-a344863dfce0
 40 d2d12084-02d0-1a42-a8d1-735fd1ee1619
 41 c2759e83-0579-76ba-a6e0-a9bea309b217
 42 6ceea887-466e-43a4-a11b-1cf244a4aa01
 43 c58eaf6d-81da-19ae-9b9b-7326b7439bf0
 44 41ff4186-c9c8-8ad9-ac86-fd3de119a396
 45 8388869c-43c0-368f-b707-0191911cf1b4
 46 d3488cd7-29ad-56f7-b824-7165bfd9f4e5
 47 8ae45ec4-b781-0189-85c4-26d35b622a98
 48 2fdbd160-f39d-29c3-ba1a-e2fc0db5dfd4
 49 bda4e6ce-fc12-1956-b764-3e385bd15b7f
 50 e420ce8a-e926-519f-a3d6-f5fb876fe6b8
 51 6a32a229-c7db-6668-ae56-10fb138ef9bd
 52 559c6c07-f97d-76bb-8fc5-8463702dd5fc
 53 cbf4d07e-5a4f-8247-be1f-011fcc30eff0
 54 e818386e-ab66-8fd4-957f-3d48d8e5ee1e
 55 25ac4a6f-85a3-58b7-ad30-db13fd98ffb6

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8255845381322752114378770135853450287711741835021567885. Exactly this sequence comes out of new Random(881).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 11 of Run 30 (seed 1,932,335,625): new Random(1932335625), Next(8,64) per post. The RNG predicts N = 55; the post has N = 55 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 09:44–10:44).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related