201301251659 1799dm

explained decrypted filler

seed 251

Metadata

Post ID: 1799dm
Title: 201301251659 → 2013-01-25 16:59 on A858's clock
Posted (UTC): 2013-01-25 14:59:55
Timezone: UTC+2 · title 16:59 against posted 14:59 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201301251659) = e8091f51b5f7f8103345d512ab53e309 (name+title)
GUIDs: 56
Filler GUID seed: new Random(251).Next(9) ✓ verified
Run: Run 40 (seed 1,069,639,703) (seed)
Draw: 4 · predicted N = 56 ✓
Machine boot: 2013-01-09 05:52–05:52 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 6 · 1
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

0D453C6F886A3190 AF20F275095B15D9 49D02182DE9C3A5B DEEBF407910DCECD DA3F85D167AB84F6 6D4E6B0A42122AF1 05D3F1CCA4B6B1EB 440362E1B3E9E5B2 FF761FC4E705B4D8 A79C67B438D4D903 D6F25EF8FF71F120 DB7054F2E0179082 3D96ED352AE0D3A6 05E38AA23CA95068 FB9F95EEB7443EE7 74DF2BE7910C6575 D86A6A793D959D0E E0829CA5187999A3 7B968EAB22186B5E 03146DA0B33F0645 06090A7ABAF22B1D 45C25EDBE0FA2F81 CACF23E223AB8242 8CCF20AB4963F55F 02F6702F162AD413 33A21F8C1E262AE8 6F178F6D106F1C36 64DB94207C5155F5 3AABDBA820EAA484 319BE38FCD80AD03 EB8CF866B0902981 248793DC37EEE9CE 065A012C23E1551E 23273DA3EE1FC270 269B3749C554FE0D 40BA5C516AE92020 B17E8C9295863839 68AA003FF3776949 D3D936DB6EF3C529 009A483351813DF2 DD4065329BB7A65D B37D8DA9FCF664B4 36F18F21E9C2B994 31AA3AA654FB3554 FFC3B41D129C2AA8 39FA05D31826AFB0 780E8D9B290BF594 7AD2A1F8D304DBB1 FCB519366308F044 9585827637FDAB6B 481C9841AAF452CB BF7C799FEC9FD3C4 27FFD33302962701 C091FCD873A92E40 5D6D769A82E423AE C8FEFADD059945C5 9B5524A3DB6ABEEF 7794C04FA2F13752 76E7427CA28DC44A 4CEAEF4A4FD2F28B 162B36E47F19BF7A D59A0AAAD2832782 CC8A83E6E388EBC3 83014CC4E9198323 208222132BBD588F D6A70A40E925131E C1A2BE8BFDAE76AD 3B367E7A36777760 D6C58290F43773FD 017F5861E8A38F9B E31267BF916C1A07 B4992B27302207B1 96DB0B3327968E96 CCFBB04D0D919868 C811093F1326C338 342ED30FA1EEB783 F4F22B1261E9A98D 3E8A3DC9114F8A09 C078B5C5E40ECE5C F0B71A1A1B4F38F3 E985B5ADC6D27209 3F4D91158ABB48AE A051BFC7094127A1 E281B6DF1561412C D6F2F2B03BC3F9AC 0C9B50C274C7D973 3BFEB769E98D9D4B F06864EA0F3A14E7 E77A87E282623CBE 862B7A9E47C503FF B972A6049C37FA8F B29B08F9E40F782E 0882155019CBCCF4 1C53157302458807 F1180AB70528D076 366628C6386B44F2 D6B9417C9D6BA600 9EFD5EA75AE313A4 D4CD0C839D698C13 D8DD2C4619019313 1B0501DB21CC9B0E 1AFE0348BD049762 818D2B82F1D6B867 BEE9DFC9C4A28319 3B1DBCCCB131431A 871A74A19AC54778 B1389D27AB371CD0 EEC00FD4CBE7353C 0763151393C2525A 3EDAD15A676D7693 581A252BC66C009B CA3227AA8AEE2317 519AA50DC05586A2 CBC41206B8589AA2 776D9B6F25E8B49B C11CD9EF63ADE153 8D355D3250ED6EDD 2D40351F84226192 D52622164783A29A 35792D5B21E85774 32D867BCD3BBF84E 250A116768659B5A 06DFCD7AB3F3CF98 8C747DDEEBB6A09C 810CD0582FAD04C9 465DDEE58259D13D 022C8EA31A9A1CA9 2834B0CA756FF9A2 411F4CE8E5A4120D D392D1F3FDCA95A7 1BA4B431FF166979 3D44B00B7B9AF99D 9CA4E6AB54CEB337 7D1BDBC35A9C32F0 CF3F2D9AFFA40D62 16B0D9546450FB39 6A7C8790FF73C87E 43E8DB11F0ECEB99 7FA7474C5F7AEB30 B33E7E1907F0383C 167D6B582EB8BD84 C806DA3772B2F3FD 795DD923B231FBD0 9F616F0598B36590 8A10641C50254D76 5822B6659D69644A EE0FFF99976A45E5 BDD4FA6CCC39CF4A 05DE0A4CC263C707 5E92E2A8B6820A56 FA96399F281ECCF1 37D0BAE05968B8B9 E569D1BC0BA869CF 796E5BED521FC609 2685EF6FEF3E2D67 D1B9CE3988C24FBE D97C8CC8316515DB DB78E7F8D9868670 0F7740809EBCB68C 40BF3AD54EB37EB5 44D68A9842D48D57 6491081D486708DF 1A87CCDA028E2198 C86937FD79E58C44 E5295D5EC20AB57E BD1377667C9F9136 F86E3B69EDA06CA6 35D90C0147123EED F128AB4896A25C13 7ED1B19034E790DA E419B6BD21279914 B3B0B911C166F447 45AAD97535B08F31 C179632909FDD149 E37869C53A8B1717 6CCEA55B84F2AFF3 56942D45CCC2B036 420907B6F6EAA0C3 D88E6739F74B639D 39994A327854B871 2421B2C715D3DB96 A125183F4D4A41C3 1E125CB017DD8588 F240774CEF8DEE37 8E7174E480AA5339 920EA590D1A49D6F 236BBDD4423978B8 A18D30A8C969B708 1B7D0332E8A1DDD5 33823F2CE36A473B 8F500ABB26ED398D 6B6435C4D36BFA9A A174AF686C92BACA 4B273FDF99CB4218 EE4E33179915224D F9C17F183E141FE1 52E04EA3AF495F0F 07CC5BDAE4BD999A A25B672C25B826FB D4DC1B8CE91D80E3 70B6712FEA2427D0 7689B692A491D337 2E0A0857E71E24E8 C29B66E47BBC5E1C 7567CCC29C893662 FA316E75511D446F 16C0C8FF794C3FD6 9B77A2C93163B0D3 32F87C40A443BE52 1147B528F3F40000 47E24702EA94EBC2 1FC57A7206D3819E 81ADF49AECF16132 10F47060A6EC2778 31E887D6B6320464 479656DD3E155D10 BF5D239EA0D12BD0 1F8DA194ED2DF8E1 F3615DB35920878B 060AE5E06B90AFD6 44A617B4B878E56B 294CB8B15F763911 A14151F16EF31B4F C1299AA360F3210B 6432BAAFB2B4E0BC

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201301251659 (name+title). Key = MD5(password) = e8091f51b5f7f8103345d512ab53e309, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f5f993c3-bd7a-7b8d-9939-53ea3985af7c
  2 a340c7c7-d700-4bb3-b32e-a394b8c607c6
  3 e24ef833-5c0d-10ee-9338-4f4e2f8b6f99
  4 5d2bb8b3-e7be-1bc2-81b5-34e8d2ad23e4
  5 a6d352de-0da9-4b67-90fe-582933021eb6
  6 33ef4163-644d-8cb1-9011-1fadb844dfe8
  7 19a8b958-c3b3-3477-b0e5-9a6c7bf3fd33
  8 848ff3ca-5f4f-3c72-8a9f-5cc22db7a05d
  9 a1416a9e-a094-0ccd-a174-b04075b1e821
 10 1b30ecb2-2bed-7af4-91f4-03ae392e97a9
 11 f2a83eb7-8f97-1568-9e4a-fa7fbeb749bb
 12 12be86ba-5192-39cf-aa79-3ea0f6f15285
 13 a9ad9e23-381b-1fdc-a12a-75b8ab02b68d
 14 af725680-1f90-0807-a058-f967f382cecb
 15 4c7913b8-ad12-69a2-9c2a-85cb080e7f92
 16 6f99ca4e-c16e-7deb-ab3e-8f0118c7f4f8
 17 925d029a-67f8-30bb-a436-fb147cd65f87
 18 e30fbf2c-4cf4-5359-8e7d-689a2e363e3e
 19 fa43ce64-1680-4080-8adf-2aa52823b019
 20 90fb0f80-5405-42d9-9e80-dd8b69da54f0
 21 1cbd1343-f492-1775-abff-c03220f30229
 22 3bdaefe8-c515-3b0d-8d88-6f451f1252d8
 23 1c7a826b-25d2-342d-b07b-93ea55783ad7
 24 d9a9b52f-520f-64cf-9987-17a082447e24
 25 2d9f939d-b3cc-2070-b9d9-1996bece6347
 26 e256d204-feaf-86a1-a4fe-1fb7defb85b4
 27 c51a5ca8-062d-6e59-9370-caf050aa6581
 28 1902f851-8e40-16cb-8fd5-742e254fd90c
 29 58832e38-b207-7f90-ba71-94cf89fbd697
 30 c26676ef-7867-202d-abfe-1c39b040943b
 31 cc79df9c-d09c-7709-b996-dfc4afe14588
 32 8c856f0d-23a1-5002-832b-421c806460b5
 33 fd774275-3f04-2d24-bd42-dd923fc892e3
 34 21697041-419b-2e46-9bcd-dc312c8123b6
 35 b2f14d3e-5935-243b-b716-61835e393843
 36 775aa827-29de-551a-bc00-29c9974bfe60
 37 e677a732-3e10-8182-9c3f-fd4c90fae8ed
 38 a8c904b3-7aa2-3ad7-a126-4f868d5ce05e
 39 148c2726-c2b7-245b-a904-31fe3861fb81
 40 904ad168-3eb7-474d-a685-741d638d9862
 41 05feaf6a-f5e1-1fe2-aba4-9de5ec9a2289
 42 fb489ac9-fefa-48c5-8b55-995680c7d38c
 43 3035309c-450e-61ea-99aa-d0c213dac2aa
 44 429d6795-5490-666c-9446-455c60ca3c58
 45 2ad1dbb8-5d54-2f66-853d-adc97c6661ac
 46 1d44f230-0a83-75cb-8bab-ed441ceac69c
 47 214ee109-e82d-6972-9f15-6895bfd838ac
 48 64917733-dcf3-3113-8e62-9a425e2e66e2
 49 2d4a75ea-6e87-6b23-982b-57444b6965ae
 50 47481a9b-cdb0-3e56-83ca-65affe69f833
 51 83ddd771-1657-526a-b30d-256fe2f76a61
 52 670b7034-1864-7da7-9956-df45790f7ba7
 53 c34e3735-1134-0a84-b122-fb82f9a738a7
 54 c6e5308c-a38d-56cb-93d8-76b0a665dd05
 55 9fefc69c-d031-4e27-aa67-8b1b1adbabb8
 56 28a92e21-8e90-36cc-b21d-08582773daa7

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 74114833071310673544133628617275222583241466276363570543. Exactly this sequence comes out of new Random(251).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 4 of Run 40 (seed 1,069,639,703): new Random(1069639703), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-01-09 05:52–05:52).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related