201302041659 17v9ol

explained decrypted filler

seed 703

Metadata

Post ID: 17v9ol
Title: 201302041659 → 2013-02-04 16:59 on A858's clock
Posted (UTC): 2013-02-04 14:59:48
Timezone: UTC+2 · title 16:59 against posted 14:59 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201302041659) = b0c399f419478723219d64d0f50a5c30 (name+title)
GUIDs: 48
Filler GUID seed: new Random(703).Next(9) ✓ verified
Run: Run 40 (seed 1,069,639,703) (seed)
Draw: 14 · predicted N = 48 ✓
Machine boot: 2013-01-09 05:52–05:52 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 7 · 1
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

968C98A878B516C3 A1934B717CBC75C9 5819CA9397EB20F3 303C46D4441D8120 7DCCFF01283DFA45 4425AF1DF354FA03 9BCDFE9E309497A8 D7F059A10CCAF0B3 4D539C5C43B85A5F 11B1BCEE347BA705 71C8BBD4ED67EE21 8E321AC8FA482C24 483A08289DAE0D75 D55A3C0B9D6261EC 6D78BB4E0D6E1F83 0C8F9932110C405E 6C817EDBED4B1B25 C30D2F78D62E5D4C EEA4A35CD236EC78 13518057DE3FF634 DBB389B804EB2180 984ECC96D1B10FEF 4D77A91D411AC153 E1B71FC38A621FAA 7AB7FE07A3E0C20E EB956FD5EAF9C71C 6616C59B53917048 F9FCE871CF6D115E 6BE8898256730BC2 832AB1554F258050 88D001F09C731FBF 8BF73D2E0B5F8AE7 6A3724F8B3BDC4B6 DF9E46CF343E8B95 DFED4AE7092C2796 CF5DE563316113BD E76135A2B8186C76 36B7BE8A7AEB5A01 A3211F5195E44CA6 FC70F39EA48EE350 CF86B2DC751EA3BA 9D97304BA5798EDF 1321418EBACBFFAE 582E0DC9183B794E 09121E8301F1AFB2 BAFFE3AA374C6E47 E58C7907B76910E1 A9C592480512D75A 282EF99166145162 397A683065E9F678 09B3B5A84DB07C3E 85CF482E3B199624 9D86704C736C1253 095A15D8EA6EF8B9 A271823A9960BE49 17B77766232498BA 1DA3CD51765DFF50 7A926FA6434766CA D4709DB045DB8C52 6849E1FDC62A9B84 2F9CFF13ED34AF75 F2A65DC5DA9A12CD E741342A8F4FA138 352374D404914200 D86D6A39216F7412 85FCAC698818A3A3 101C587081CC91AD E3E38D5CA403F98B 4A41BC1B3E609B51 224F948C1DCEB9E2 6C33A1A83705A5AE B1CA81F6653AA44F FBEC50B53C98DC72 4B8F6022E2A7F371 7A75FDD109FF7DCC 78CF033705062DCF B30BE4967526BB80 31B137008DF5E8BF 872AEF80AE031041 51EA5C4E05917EF7 380FBA8342E5CF18 F05A2F39D5B2C889 179DACA772C77343 6702CEB858912CEB 0B26968A693B6D65 F0B0FE2E21108800 58A4F1AD2E566D9E 0FB303D1C4B75501 2E0559D8127E5BC4 3A9AD451B60BC87D CBB90D3945A8EE38 869DFC0E67204C70 D1542A2D8C67DA7D 8CF351C2ABF34D41 259BE1325C1A2D46 4446F99E10CFF29E ECE30B6880E73955 9261BAADD715C2D4 771807361AB518E7 E71E541D1206F165 0E0CDDEB5229DF1F E3F1CB98028D3C70 12BEFFF607A39930 1F2C0DC90897DBEA BC959D685D3FFCB2 B4445EC8110E637A 77065214C84CCE12 8C34741740E9549F E113BC393DC8F599 E5293A3D9C007275 1F64F78947BC06DD A453403F57567A82 5197FEC155F66D5D 0E6F462F2D0819D7 B7DAC72CA93B6A7C 0737F38AB98CE0E2 6327EB939F491865 0192D0BFEC0F993B E7CC52F35D2561B0 11206DAFCE6F9B43 85B6BB7EEFC3404D 9EE5C760FF4E7441 627EB388DFB782FF 3CF4358F6317D822 ADD2506FD64376C0 69048CF372269F65 CD114DCDB0049A7D 19844B10A6FB0659 8208EA04823322F8 6BA405A7CC5A7FD9 EF4A3AB8D1FF6985 0DC09346B703A13F 8399014389180773 FE18178A7155F940 EFE4CF0187980022 6D785757B6E98C9B 61F594CDEF0B5156 2AD58113DA392AA2 375DA643F790AB6F 81B5AFCAC55273E4 39D676820FBD0B15 E2965D4071D41B11 5D05494221C56301 E2DC70F356F00223 5CE58848E303C1A0 BA826F29F7CDA9A0 DEF6F9D1A9CC4D5A A409B8185A1AA1EA 1C4444CEF01F59C0 E951F68DE30CD111 C1548A2069B63132 B6BC62D5C421FCAA FFD1F3245011E4E3 42914E8E6F43A770 425688D28559CE10 499429D68BC698D1 564D9889EC522E7E 3FF70C0A0434BA8D 883E4198D7C96C47 6BFDBC28360F4339 692E00041E9BD7BE 4A2C8BEF2C73D85C 22B636412B909197 11D83B4681AB3234 A4C7AEC96D65B92E B8CD5D7463431310 A31374B136CDAF48 4A8B202F51480EC1 D3D199DD802C483E C38A5B024B39A4B8 F448AB64458A8D8B 099CA5EF29B67565 18F8297A8010BB3F E5C225B58AA3F6A6 777CF02368A0B89E 1F762B4F12B688DA 025DFB8FCC4B165A 59B2DE113248840C 6552F2EB24916A0D 1FAB63498ECDC97B 9DBD14E375F9B534 08A4E8226EB04A5D A593E258BE5E2F01 7E589BB1B9989A64 B9274D5E43C89DEF 8B920504F2C74E3F 3338748172C4215D F094DE2B35BC8F1E 999F1D6E8B8BB5AF E4561575CE337CCB 762D7E1035A5E11B C438B8BB15D4DF69 7F4D33DE45201B6F

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201302041659 (name+title). Key = MD5(password) = b0c399f419478723219d64d0f50a5c30, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6662c156-583b-8ad2-8b6a-c3d64a938476
  2 397a8839-479d-0f75-beed-93a0becbc763
  3 9e1851bd-5394-1a77-a8d4-80d23788ba8b
  4 df2b4146-b404-5081-875b-34dfe376dd9a
  5 45a083a7-93bc-5122-b946-4cc762b3f528
  6 8f34fff9-6d56-89f4-97bf-8e8c8cc1e104
  7 74fdc645-7f61-8cd8-aac2-d8f835e462fe
  8 a7baa577-fe30-1f4a-a15d-18f13e66f2ab
  9 8a7e1c74-f05a-8fbc-938f-401789e71bcd
 10 7ffe09c9-75b0-4d44-a5d0-f6398936fab5
 11 28ab5091-681e-1d11-a518-7d1b1707f722
 12 9e81f997-cc0a-226c-8ebd-8937f698becb
 13 41647f7c-49b7-8ea5-a3cb-4b9aa1695637
 14 78b27818-f913-1780-8070-cef173f02f24
 15 287e6897-7e5f-0e5e-88ed-76954a011e8c
 16 6a0c3687-dab2-0493-a15c-28e4cf1e333c
 17 656b66e3-2187-3d37-a866-90f731ce4f1c
 18 18e07f75-0b1c-75d1-9b94-5fd3b27ed411
 19 31471135-e1df-6807-87d8-c97763bf8a2d
 20 846381d0-d82e-45d3-8455-67bcd5faf417
 21 7068849b-5d88-2bb0-a2ae-4105963d7d18
 22 318bc983-b297-2a4c-98a5-89122d03eb11
 23 3620e386-ec02-7594-84c1-849939fe2beb
 24 589e4e90-1887-57f5-82ab-dd13f1e98bc8
 25 5ed8286d-bf3f-55af-a2d8-6c1304289837
 26 f487389b-dfef-6817-9b7e-fb1bdd5610d8
 27 0a26889d-98f4-3ad6-8708-5d0873767dd3
 28 730caec2-7bc1-23ae-8762-39c22b246a0f
 29 c9ed557a-46b9-6a9d-957a-f1ea167e2697
 30 47298705-4709-255b-a493-f1fd50297c02
 31 3eb75ebe-ffcd-6e51-8405-57527f56beaf
 32 b69d30f0-484a-5dbe-97eb-a1fd69f35752
 33 bfea5746-4efe-8c95-9739-a83b4813d3c9
 34 34ffb937-78ae-5bc5-9164-63378dff042d
 35 e0867410-daae-1da8-b76f-0f661ab126cd
 36 326ec7bf-2341-2c7a-bd6b-b3e86b48c1a9
 37 53c2e5b4-01e6-317f-9fb6-43ad492cb0a6
 38 1dd13347-a303-4bc3-a4df-3f663bd32daa
 39 80dff6ce-cb82-615e-9603-fc39d4bd1816
 40 02122115-05ee-1957-bd32-bb0b959d2be6
 41 8340c3a0-95a7-1469-826a-f68ea50b3ee2
 42 8b5d6588-4845-004e-b339-2e83525b3da3
 43 6147a276-a725-3b13-9c4c-ed69a3a72230
 44 16258b7a-f39c-7ecf-a436-3f92b4445157
 45 e84f0be4-3808-4aa8-8a6d-6b0cb9466696
 46 f7a2a0ce-5e40-71e5-bc6c-e08e125ff218
 47 78e5a164-8db0-4733-85f9-82444e5d2857
 48 31f41333-1a2c-4a25-9a86-fa386e9d768f

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 801558818412810037642275563262658512346110374744. Exactly this sequence comes out of new Random(703).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 14 of Run 40 (seed 1,069,639,703): new Random(1069639703), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-01-09 05:52–05:52).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related