201209091930 zmi0s

explained decrypted filler

seed 6

Metadata

Post ID: zmi0s
Title: 201209091930 → 2012-09-09 19:30 on A858's clock
Posted (UTC): 2012-09-09 23:30:00
Timezone: UTC−4 · title 19:30 against posted 23:30 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201209091930) = 2718fba70dabfbe0f3627175af2aec94 (name+title)
GUIDs: 56
Filler GUID seed: new Random(6).Next(9) ✓ verified
Run: Run 31 (seed 15,917,281) (seed)
Draw: 14 · predicted N = 56 ✓
Machine boot: 2012-09-07 23:34–00:34 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 11 · 1
Tags: automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

7C4FEE3CA978A3D0 425DB719F0A2183D 866248A02D6364EC 1FBF6688DED74296 39A2947C25F092F3 602A33A75B55E05A 0FB1AEEE4B9863C8 AB6E173505AA5313 412F2A0B543B181C B3081E81FB99DD90 D660FDDC69E35DDA 16E39245AA9BCDE8 12B8B30F117A9487 7EF53DFE72C4AE88 01E4EDB7D8C54B70 26390616E68EA776 42E3DAA7620ECAEB 4444EEBA95CC135D AD3AC34E580F79A4 35EB56B1E6C62CBA 6C9439CBFDA1124A 3267759133187DD6 249EFE0152A03085 1658B742CD0779A1 53920985C0082D4E 725524C7B03D5059 A267CEE8D53628B9 7FB42D39D0BE7FFF 5DD0267B25400A6E F6291E5859F19D20 B8352FB3BBCC0017 8490C42F098929A1 532176EF966D07D8 48FDC8F7271C5C59 EB8F2A41942523AD 4B0234EE8F5399D4 AC2F22F6F1CAB7E9 5BFF56C203677737 71F724080107D1C8 00874FB025B3DB24 E061F529035F42C9 D523B898CA627577 8467879E1CB48CEE 9CBD2046C5F1FCA7 865A761988A00379 D565419B266992E6 27A1E3918240C423 F315EDD826AA773A 2EA6979A42D30D15 8DF786EF7FDC3CB8 8E36A7EAF67B9212 152C9DED3E301133 62733ABD538F88C3 990DB5BA4E7AEE8C 80EFA6A91C3AE6CD 425A19B99BA251CE B56400E3365D322C 6CE6EDDD6373FEAD 8B16220C02FF63DB 17E4E5D3E904BB24 8D84E56F31CB2610 F8F3DB1A5118B52E 0B2315967D4E954D 913047E84234CFA8 CCBECA3EC490EAB9 66965BCF56AFC125 0DADD8B5045B6036 DDCEAD547C626823 EEAF6F23086446FB 3E1E3870B59A6B49 735139AF76ED674F A76E60FED38293BF 0C2C1E0F2136FFDB 7B81895C839A04C6 B7D4CCE5C0B1367D CF93B450A4EB7A0F 7C008F5E21B2E7C2 46256D0E4A5720ED C56C5247CF5329B1 60C887028BD2A8F2 633BCAE5D478485C BFA81BB7AA31717B 60E3884AFDE43BAA 7412C27CAABF6A29 771D8BA3CB3418A6 AFF8A161F6463ADA 23BBA7699E33CDA9 7C7D6121CF618356 CCF1E0CA251C3AF3 E89700D438DCB2BF 9FF2E166E7F0E1EE 45389FA9BA13E0D8 9D3A888962E355D7 F93F22E22352F054 121F53B3875F0374 DE51B57A14DCCDD1 C672F2C9C9016D7A CD422756711A912D E384F4E1FD1D6F83 F92C8A1965D42770 824E3CA59BB7E729 F5EFF2BF82F1298A A65355BBAFBA44C8 DE964D9DC3BB22F7 146C2DEFD946DD50 634CFEF66914A183 A7948867D00C58C5 3A8E2529D525CD18 2F8F6E2FBB77C942 8D244293FB36995D B55FC77D608498C9 9619C0D17E4DF714 F3DF3AC46C595738 FE05B026D336B9C7 0BE3C6C5C098E41C 4CB269FA2D6C2439 5652CD324774D88F D242098E85A62F38 3766048E12458C40 2BCBFF95EA133B7C 6BC97DDD85E4E3DA 147764DAD9CCD4DD 21B6D154F312DCD0 16C6DBED716F8A0E D46DFF1D1BABFB24 F9DBB37861A13065 80204F5E6ABAD172 85F782B4B5C89BA3 B486407874EFE0B4 201A1444B24A0DFA 77ECD6355A628921 0FADF3D80320ED63 7DBC0B909CE1FC82 A6777E2762C9CC26 0687C3B1A89438AC C75D87FB193A28B6 249B467EC570B8EB 13075F62A56B4C1C CA06AF41B06620B1 688EE99D7312A987 832B7204B6B74F56 6B87046430837ABD 1F991FF732B9DE3D C66EAE2FC1BF5A07 747C0A0596B1BC06 1E4429972825A9E7 E8EFDB60CD450274 ECBB957C2EBD9F2D 89A34251CB7A04CE E85177E60BDC476F 20939E753896EE86 4B89F07352C45676 3D22C55F3CD5A8BE 1B774C92160B8EF3 E26A1E14B251F617 F4E03532927222AB 7D76CCC8F0372D66 20E341B1764A5811 1924832E6FA38ECC F81AB4D6B79125BD 7771FD1C058C7FFF 6638CEAFAAE291AA 7C5F4B3F542F45E0 76E099F79FB0BD7B CF8CAC829D254498 853ADA6BCD3E2C75 82903C9129993265 5F12C26FAFCFDB15 20EC26EF88794EC6 B790057D77707666 D48D01448BA49579 12A39F94239837FD 0C03A2A81600D885 0AB7A920CE6E973F 07B6667FCF233934 6F6619A63AF3563B 919428D20CB1BED2 BBB0509F860E827F 3A51596220D82EE2 1C0BF0C8FA7BD2E2 6EBE1F862A781D82 9EB49DC7D16BBFAB A102F63F6397DE79 1DCE6254162111A8 B7859CFDFD3DB52C 9293AE752252A721 FE9FF39506B3B963 C76630B0BC9AAC18 BDBADF957A26882C E470EFD21A949CDC 01D1DC5E363E5FAE B6982E529DEBEDBB B4173BF86E0746ED 83E4891D9C81DEA6 23391B65FF513EA0 02672F989FC83F20 4CF39C70745FBD9C 931C9D74100579E4 EDDBD31095270DDA 0AD06A3B5D8F2809 6AAC8AC2F3F3D736 C77A39AE019EE406 0158244453DF21AD 0CA8D6855C3CA886 2032A0F2313F71CE 4A4AC3CE2972EE13 C74D2EB9607D4D0B 0F81A7044CF41560 4FFEB255965817E8 A32693A3A7DD4018 13E4FC74D2616507 EBAAFDBDC638145A 28E90AC441D4611B 03CB98649826D743 F0EC6BA7571527F8 618DAAF70C998C5D 021AC38E4C5F1DC8 DC142C085A8D9439 E0EBA904F16EC7C0 AE6614E8F78BC5BC 6633C5DBF894F2DB 8C852CF6B2929E11 EB2D9D3DFA6B8F9D E5DA667F3B95769B 9DDECB57DE4851C8

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201209091930 (name+title). Key = MD5(password) = 2718fba70dabfbe0f3627175af2aec94, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 53981984-d31a-7d77-8b01-903917f05201
  2 13262e1e-5576-5cd0-a20e-8a4936f59f7f
  3 d3a23791-4f32-8c0f-a8a6-0c0b6894117d
  4 f10089c3-5a33-75c6-ac65-1ff7d00fedd6
  5 dc85cd23-2904-8877-aeec-6fd6a52a9714
  6 3cb5262f-0b70-74d8-8d68-c90d305bdc2d
  7 20546fd3-178a-51d7-aa06-f2dbcf74119e
  8 66072ac6-823f-413d-bcc4-d39f00447ea1
  9 53b7a31c-2a2a-6c70-86ff-85a4fc703c1b
 10 8058bd5a-9734-461f-bbd7-9f05036ede5c
 11 83c52e62-fcb0-6ec4-a0ab-e7a01ad61c5e
 12 6a3a0130-8150-1a81-aad3-c6bc15522ffa
 13 048f98f2-b00a-6d48-be4f-44f6a20d1f97
 14 93d6448d-8799-529a-8ca1-cd862e52c5e7
 15 a5dae8e0-f14f-1608-9251-7ab656a368af
 16 bba907e5-b8fd-6d85-9f2c-245630993905
 17 f3845219-6637-3788-93bc-29c7d42884ac
 18 21bc3bb5-50c8-6b7a-b906-9669173ec8eb
 19 9782543c-98ef-7f51-8493-37351aee9c4d
 20 1a3ca7bf-91e4-54c3-a78b-18c147681aee
 21 1cfa1983-12fa-56b2-8719-29d63bb71f64
 22 127281be-2368-2d30-9d1c-778578822e49
 23 0c4fcddf-7d52-0472-b4ec-ccc1d835b526
 24 941b3397-aa59-1938-a25c-8d73ed3ffb7b
 25 42a7871a-634c-27e1-b2cc-e6d59543e386
 26 3f1b65cd-b7ad-3360-b0c1-8a6497b43f75
 27 bc10e57a-8af1-0ff6-bead-69c6d8f05b4c
 28 75fe8ea6-5b47-3c1d-9635-a64b2a41450c
 29 12b86393-a8dd-1469-a4a4-099b574d99f6
 30 6719b7d8-543e-81ad-a866-d95edba660a8
 31 c5816343-8968-3a00-9a3d-58c28924b6bf
 32 d80d83dd-da9f-0c2e-b8d3-58940495f25c
 33 1bfcea50-aa2a-639c-81a5-9d5086c2ac7c
 34 69611d1e-98a4-198e-8519-f2e105244585
 35 d3a4582b-8635-65ca-914d-3ba439261ff2
 36 b2bfe7e3-9c72-0a80-828d-ba355bbcc1d2
 37 dfe2ca62-d5b6-0a3e-b0c0-0aede79ed1ae
 38 bc11e4ba-cde1-496e-8f08-02e8e880f0a9
 39 3745525e-9bc7-3f60-b611-c0fc81665ea8
 40 56b4a291-4bb1-3262-9a14-e1cfefa375dd
 41 a0a6330d-f6ac-14c5-b4d9-e5d08f54d378
 42 feac633b-2792-3a23-9757-e683b090e615
 43 7afaab25-b270-40a8-99a0-01f713eda24d
 44 53d06593-d56a-825f-894d-21d16553f149
 45 12b152dc-6c92-05e4-bdb1-e99d3aba0560
 46 9f6dc228-81f4-0885-80e3-cf7ac0afddf5
 47 c6f88eed-e482-3540-932d-84a77c625509
 48 c8fc0528-4fe7-4ee7-8648-5d60bdf6d291
 49 e885a63a-3140-68d6-bcc0-db38490104bc
 50 cb94d3e7-287b-0226-ac81-3473ad1dd938
 51 dcf256af-f99b-07fc-a963-2dd21f8288aa
 52 3bd8ece5-68aa-3cfe-9544-40467dab2c7e
 53 59a98d7c-0c63-8d32-a2b7-d65040e44aa6
 54 b84fe5ed-90cb-63c1-8729-0da39771bcc9
 55 defa502d-38fd-3abf-a512-628bff76b30e
 56 66d98903-86de-43c6-af1c-9655bee1db93

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 75878754646165163675520123031830616004331348003460038634. Exactly this sequence comes out of new Random(6).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 14 of Run 31 (seed 15,917,281): new Random(15917281), Next(8,64) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-07 23:34–00:34).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related