201301311659 17mq4c

explained decrypted filler

seed 854

Metadata

Post ID: 17mq4c
Title: 201301311659 → 2013-01-31 16:59 on A858's clock
Posted (UTC): 2013-01-31 14:59:50
Timezone: UTC+2 · title 16:59 against posted 14:59 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201301311659) = 1366f23f3e06fd1fd0aa10bf28a6da5a (name+title)
GUIDs: 44
Filler GUID seed: new Random(854).Next(9) ✓ verified
Run: Run 40 (seed 1,069,639,703) (seed)
Draw: 10 · predicted N = 44 ✓
Machine boot: 2013-01-09 05:52–05:52 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 10 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

A9EB55024819233C 08AEEB89A2AA4EFB 7634F42F335FD00F 8D464E18A6864B12 C0C90A3D3D0D1E67 96303840B9560B35 E82F0E3D86ED3C45 EB84435CA0355C60 5F3EB62E79EF32D5 E8BC88F2B235F36E E6075E85E91BB093 8B31F552DD5E8588 37D72D5A6C49EF63 5522E750F335638E 9677994E4D5F6EE0 6D05D6D2D9A2B0EC 23436BF4B103503B 4863234971EB2E8B F730655338F80C79 0E2203B127499ABB 914C8C95F0404EB2 B1F4C32952EBB1D2 43BADD284009254C 1D501B356D90B6F1 89FCB62FE5E889D8 EA50C44F5AC9C5CC C352657BDE0A4891 63F826D5415C5851 279D0A9D8BD59672 04A32FEB3974FFD2 78C3F68180E0B9FF B570A7863204A7DB B0812CBD7A1D4453 282E5F9F77428577 2749F579AA6AB103 4576220C3108249E 145E2523531A347E 41A8CFE36DBC0C0A C861DF2BA064C215 AFB76868A9DB33D0 ECB079B6BA334599 3015F685EB14BFFE 39FB55BA13E85E34 C8D1AC60241610CD 540010AF29D82ED6 5C5ED3D19D94CBD5 5F5CB1DF4BC8BC33 DF640CEC9F1462F2 8DE4C8418B6D2D8B 8266AB7A0CC57FDE 4A536C6C9778FE70 50591ED488149F22 DF6202FCD83C8BD6 A166069945305E53 C9D14E77989A2416 12D10CC7624426C4 AAFE57ACEA635F47 B435A12F36BB9AB5 92152E39CE270891 BDB216693B2C1010 0EE6C2E512AC2A3A 201A685187000069 DB3E3373E8EC87C1 3CE684D5C70FCEE2 55A60A494EA094C7 ED94ADBABC7E5A81 986E37999A4FBEE4 01ACB2D58EB43BC9 F1B2096568EEF0DC 4E688C5680DBE1FB 8F29C693C106483F 3A730D5152EAF270 75D0CF0653709152 B20ECF5D112E4DA4 E8EF81570B033185 430B3AA6AC736F92 C7FBEC5E80D3C95F 41E9F5047317D178 17A98A8EB9E0A801 E6EAB2FDCCB269C2 E08623CC24B95DE2 12831149ECB1A02C 329DD7C54DC76116 4CD30888C6CBB530 37B28B7256362F33 856C082F41BCD7F4 55DBFE7A22A2F7EB 2D32AF83EDB45A4D 4646E6AB747AA1EE 487D3BF3388790EB F57398596243600B 6D2834D88B9AEB6F FC1F3520BA86CE17 89CD7B1B95356945 AC6D94611388FEA7 B118945331DCC5F8 E34081A4C6727A34 33C829FD46A2B24C E3411C41CB62C4FF A6357F557CFABBC7 C67D7CA4B6380E99 AD7A7DBD921238B4 9CA861AB3CBB395A 01836B084B01E10A 1B104FA88385D767 5B8F0EE6586B2E60 5B4833DFE7AA1216 C39AAE15688522E6 D4C42FAA39B250BC D847AB1141C54D57 896917213CAB81A1 84E145E9D4D64804 2E60F0763077E9C7 614AD47AC2D30579 8DD9DEBF8E55F440 9A838BAA7345A8A0 2B5BCCC5103466FE 61BBB636DD6B0265 20BA088A7FAF890B C5D349F01FEABAEB ECD14F0F8224DC82 F2DFFFEAE14D75B7 A7EDE52ADA0A20AB 08C4B4C0A981AE2E 25DF557030681B59 96F89007524FF082 97A04EB096D337A3 2AA79A0F93A66341 66414DB371AD4B8F 538BC04113A142B8 C74B4C62F45695BB 3C3EF13B04D859E2 CF44BD18DE043C0E FAFC6A44D6F161DF 3550E1E427C710F0 4AF5CC9F78BF14DE 6660877159F0225D 64A42223A020D6F4 056AD9C6FF6C3A30 10FDA0A6966242FD 2B413BED15D55975 658D74F01F0F7E62 FCCC02246FFB20B7 7A078E0713B2BDC5 AF34293074AA2152 744E230482720B61 EA4149CBA41A1EF6 0D31CF56063800BF 193062F2ED07740E 5E6C53B719F4B976 507CE342CA4A9FC2 00117815C1F71F57 0F3B8D62AF58800E 77DC4230197D0611 037F0DCD4B5F30CD F69B508D8C96A6B5 A0CF8DF9C0EA023B 61F61441FCA2B8D9 DAF3A27C6A1AC89A 0A1B5057B3F242E3 5176E0F191326B0F D5273EA107072D12 097417E5CC932524 6B1EE4D0197C3CDD 127F800503CCADA0 C7B05EB3C9D5006E A5370F2BC87B513F BC6D24ED35A57096 FF24495771A9D6FC 0E728D1780B42CBA C65EEC75DDB38DA6 0F9DBF65B9B3238C 26AE6CE69DE538EC 20DF3F29B9251A4A 63994B64939EA3AD DC395C91BF28A9E6 D44E1701D3EABC3A

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201301311659 (name+title). Key = MD5(password) = 1366f23f3e06fd1fd0aa10bf28a6da5a, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2e75c841-eb23-703e-b86c-9e596913ebf1
  2 34631d4d-0756-3f5d-967e-01a3bbeae123
  3 41e439b4-7350-667e-a8da-2d368eae8a39
  4 7d81a8b3-1dc5-7321-9f53-9fac9f0c6007
  5 256f498f-cd7f-6b66-8778-058b35870e6d
  6 89d7530e-6ddf-7d09-8c7c-0476dc3e6f84
  7 965dc3f6-aca5-487e-8c49-8b74a2958c67
  8 cd37ddad-3441-7652-939e-7ad6239bb200
  9 d2cdad55-115a-5941-95bf-b7c4f0cc2874
 10 9de0b591-e4ef-1b25-9c05-ae2fcab87154
 11 44c3a384-f666-4aa2-8fc3-8b44db4b3191
 12 da350a7c-a3fc-17d0-a0c1-3b12ab2e1812
 13 818b16e9-b132-6b40-ad25-b8a54461e151
 14 0c4900e8-ce4a-6d4a-a650-aed6010f14f8
 15 4f62e7dc-0e58-60fd-a885-81a96c9dc619
 16 683bb14a-df53-349c-8c82-2e97a79b8039
 17 e07f31cc-3d44-7feb-9a70-ca86b5ca0d8f
 18 dbd1a703-e7e3-49f2-ac68-6a0911388647
 19 0a8c4fc4-8900-76f6-9c10-2372ac164482
 20 e5d0e364-9d64-8e18-8e6d-9882acabff27
 21 254eb51a-3d36-294d-b667-bf05b8d35fce
 22 66449b69-401b-3f42-bfcb-a20de5e177f8
 23 4ded5ced-7908-26f2-9bdf-3736594bdc94
 24 a9bde831-92b0-3001-9552-f0e6b7cbd925
 25 c93e7bb7-ede5-3151-885d-902c437c475a
 26 3468963e-2cbb-7d72-ac34-083a3d191232
 27 81246beb-f791-1f90-8e3a-e55ac99b4a12
 28 24588e06-774d-74d6-82bb-5a9c791d65e9
 29 e57d3462-3fd9-35be-909d-5ea358a3d03b
 30 0ca80192-bf32-7b28-be33-1f539cf0afc4
 31 d4d17b90-294f-455d-bc52-a8d2dd03ddea
 32 a09ab040-b7bc-36c4-8959-59ddaf61f336
 33 782c9703-563e-6d5f-bbaf-32238c7fe580
 34 6100b423-b6b1-31d6-896d-80e8cf010243
 35 fb7fdb9e-fb73-718f-b354-2592568282bd
 36 9a6ee5ba-782f-645b-b72b-bec96e1118c3
 37 ea9d5f04-27fe-3191-86ee-57dfe38bead7
 38 8f82a9e5-6ccb-3a4b-8843-db10f21c609e
 39 b05144a7-7808-51dc-a6b9-1f34c024d693
 40 a16aab54-acdc-77b7-adc1-e6259c1c6fb5
 41 9b36f0c7-7b4d-1fd0-8218-62f7c743b82d
 42 77f52f69-4acb-8b58-b2db-c10fbd0445fb
 43 853bb27c-a99b-602f-91a8-283f3eb332b0
 44 621d7ec0-70db-87f7-b569-c3d426f57338

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 73676747514166637478232337173743637633571868. Exactly this sequence comes out of new Random(854).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 10 of Run 40 (seed 1,069,639,703): new Random(1069639703), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-01-09 05:52–05:52).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related