201302242014 195wlp

explained decrypted filler

seed 746

Metadata

Post ID: 195wlp
Title: 201302242014 → 2013-02-24 20:14 on A858's clock
Posted (UTC): 2013-02-25 01:15:00
Timezone: UTC−5 · title 20:14 against posted 01:15 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201302242014) = 465f2ad8b4c9dfe2b0c2ec44d78e7862 (name+title)
GUIDs: 56
Filler GUID seed: new Random(746).Next(9) ✓ verified
Run: Run 42 (seed 983,934,859) (seed)
Draw: 5 · predicted N = 56 ✓
Machine boot: 2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

B71269F36792B4B1 0EF7CF666240610E 8D94B1A4236EB01F 046CC7B2A393CE5C 1B28491B387778EA CEF0BDB8211241A0 B37BB29DE68BC4C6 990EB99F28ED9023 A204F1EAD50A3F87 8BEDB4BB0F63B870 1CDE647CA2DBB28B C98583BCA3D74977 42A3DCF5C5626B9F BD529D919F053DD2 2F9A1BDBB4BB676F C08F69FF9C1C757D 52F8BB155BC182DA 7D435F8AE232D442 C00E7D3078218318 F4C5BC0228EFC77D 3E108F719857D70F A5CF1D3FDC8156DD E3A59C5C298BDB0C 8FB75B8F5D8755F0 8FFE7DE2DC67E668 6DA605CB5EAD21C7 3ADA2820B6FC7CE7 7B787181FBCCE7C2 B5D5205AD2CE1928 28A8ADD25B13EC2A 64C95E9DF3221787 F57BA0F2516B0B1D 111D906583B30934 A939024479C616CA 01F808A9EAD704DB 033318D06E4A2376 080CD6389ECA7B4D 02802928C0DD370E 705CE436200E7A62 298109723E72A412 8C660BC87890216A 31F4CE01E82E0D99 534BA01845F8A943 D02A66AC103AF7DE 4C30DEE419CBDD0D D1B8EBAEBDCF1069 5F1E590D9038D789 57E17402BFF2A582 2CD3A5749D61C336 8A1A5F455B784D37 28590CDDC8410374 71018892AD073E32 A86F64EF852B99C9 2DE87C92C4F87A23 8BB36691071EBC6D 2A33E382218B003A 831D00B3A01A316B 961356BB420F61F1 57E673167649328C 50D47F6B5B5D19CD 94E0022139BB4775 79486913AE33EE0B 13E3DE3F28A067B6 1DD5F6CC2164378E CB18B1EAC3147C59 17AA68253974D5D6 927CFC542317EE3E 66E6123CBAC8DAA4 0FE840BB4C30B783 A430F9F8C22F9542 9D8676A217337A3E D94C8D8060FF90BD D73A25D0C948FF99 7EDBE7F683B10C8F 638A9F10D32513C4 14CB14572497D43B B5EA44D783A16FA4 3D0BEF1C35D8DFCA 943C7C5A14F00AC4 F33A5963444B382A 54BEA4A9DEAF8F3C CB729326259C36CF DF5ADD697FF6DC28 C49A699D27FE60A8 2737BB50F5C68B60 662B3DC1AA357BE8 B47BA7381E117B7D 354B5C0486BBD96A 7F7FC63D4F757B25 A6715BB22DD20C63 DF9F0191C84F5115 E8E9AA168DE2312D D8697E2E49FFE052 A02D863D5D8F8F07 5A6D59FD50B89CED 25C44B2F4C78DCDD 3A4E8F5CEF9A2B20 6409C41E4C18F31D B5965A4341C22BF7 026235079A5FF2F8 211476496A57A868 CE0D810B15EFAEA8 F453384A50445BC0 08B604687BC243E1 92D2655D6F841761 768994D239D32324 87224F5CF3F2B03D 23723482C45B26C0 678852774825E17D 68F039B3BDFC5676 28BC1174C9C4857B D8AC34A6E30FA3D2 9D028B9D43200570 1BC3AFE033B278DC 72EE6372997B1712 7642F657A93C20A1 7AECF6B7A42E18B9 A7B79EE09AECDEF9 B75F16CBD0E10475 92EB9B2D42DE44A6 540F174C2A5D79F5 DD3ADB1F939B2BEF 48FFCDED362288C7 B8838347BA03BD9D E20D23908DC843F0 A51CBD07B191B823 0E6CF608CBD8AE00 FC1759BAEAF224FC E44AA4BC48561CA7 AF8FECDBE151672F 5E2CAC696362EE99 C4CCEC0C3AD60909 D908B527F8AF5D9D 38C0E734A13EF844 F1E6BFCC5F13F7D4 748F21C6EA0DC10F 7F1E1E0081D139DC 4999AA153FD70159 3CD33310FFA8969A 3E39D3A27C4285C9 BDF6919585851886 6DE4ED15562441FD 6A8D990044E89ED7 814BAE28AF247517 5FB89ABCEDA65EF9 672F9A0317B04086 E3084FDD7C912FA6 3422A49EC577F1B4 2971760644A9ABDF 0B4FE01B6A1AB886 17BE6C9139A85CB4 81D6DF6FAB56C96E 591FF00F50A0149F 054D949D439425A8 10B8E5DCFFB5F65B 7D425ACAEAED1090 C7543FE892794337 0584DE335AC63FB1 8C1F62A0E29379BC 2CC6B2DCBBB51FAC 916D722A4DF5C052 593AB2C6D6D63139 1F70495228046A9A 7365490DEC9B46B9 6F91CA69A3E23EE4 FEAD152A13EF5E16 094F34DF67C410C5 0F896AE7569F4D75 4CC54E1463508DE2 14D984987B40CC99 533CBDE6D4ED6E32 78F8EAF2308FC8B2 21559CC85455D647 76199D8E2F89B217 0DE0C52C12B0E74A C1D601DE2BA6AAD2 65F3992D8F4F8380 D1AE7717429076EE 236A506C414C4A44 CCC2CE011CBF7604 A21CE23D35AE3FAF 9C00C4EC5BEA58AD 3FC69FD299F0555A AB802EC7B70EED07 A513093DED1D1661 CBADD733B2FEA731 59DD7CA05CBB1245 49181E8D66022DE9 39B7BB25E31581BD C08B3D3262EB43FA 0B2DA8C9223478FE 98BF79BEB4E2EC42 29508C023F7D2944 A6FA7C6244E12C8E 5B885EAB09D0DF5D 598BF071BFC4BFD2 03A91EC79C930B23 6F641F1A7B01C51B 9CC79463F412A735 000759E68524FE35 F9FA292C0983C077 9B6AF168ECCB35D1 ED0C01A325659EC8 616DFF8CECA03C43 6B989E3DB6A379C7 D9EF189C24395471 DE9B703F9B069001 CAE688CE8EA63F26 EEAA52864AD2A404 28368FFBCB663CCE 3FAC75B9B31706A7 C9AEB5F0DF49FDD2 D50A00F868232B8E 8EB3B9591633862D F97ECC8FD1BB6244 94125CC201B38322 7AC99285DD5A39B8 FE6E158515287216 BE41FAFD425BCD3E 9A0BDE8AD6AC4888 C34125A7709D3A2B 273150CF9641A786 347C84F907DA424F 1DE07BEA2EDF8A87 79DA7520322BC59A

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201302242014 (name+title). Key = MD5(password) = 465f2ad8b4c9dfe2b0c2ec44d78e7862, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9a72157b-b836-421f-9524-0e356a1fda7f
  2 86ba1df4-7e44-689a-ad27-ef8df2e43214
  3 b7c6aba3-b1ef-1e6d-a473-29c83c3a6371
  4 a01ac2b2-2348-7ce6-9081-ec64d8ab4189
  5 1c529c3e-87c3-00b7-adc4-ba0ca4dce655
  6 7355321d-a362-4bb5-8cc4-a860ce3bc6ae
  7 1e503a09-a9b1-1e00-8b1a-75e3d77a7566
  8 ca47a0b0-637a-6ccf-9830-f8d98a93b4f7
  9 880887fc-a61c-21f4-8693-2bfb7f749e6d
 10 619586cb-3579-3ac6-b904-d10b8dea2b00
 11 dd029ae9-557a-82ee-afa4-dc6b41842c27
 12 80c89723-16d2-7edd-abf7-e7f7a8333fa9
 13 c389ff30-4583-4693-8328-55109357c0d6
 14 141f9d7b-ea2e-5178-8f25-d2129eae2522
 15 6c61daf5-e5ce-165d-8403-c7fb75d900a9
 16 bc586c32-78a2-8214-a299-943a7993d61d
 17 503401ca-9da2-4843-9360-8636b4aa148a
 18 097f0c72-ced4-47f2-bb46-1255b5809b94
 19 3c29aff8-75ef-77fe-b917-93174a020495
 20 df494bcf-53ee-130e-90ce-3f47c30740ac
 21 b2153430-dea8-81c6-8073-055548605055
 22 ac1f5303-b44a-734a-b0ca-d5f63b4f3d14
 23 473a9ee8-d854-04c9-87dd-9e58edaa50f5
 24 834994fa-b659-554f-97b0-99309505473a
 25 9e55e41a-dd57-7431-8cec-e26f583963f0
 26 f38de5c1-0691-3820-bf4c-57d7229019a7
 27 cf8ab245-dc32-28a8-bc04-7bd1abfe27e1
 28 7daa7bea-2697-8148-8011-d586584e291b
 29 f0d71bdb-55dc-52b7-85c3-110bb2cf43e7
 30 87703084-36ed-7269-9fa2-aa88c667dd64
 31 491feb07-d05f-5258-b58a-03b0389bbdc8
 32 0d33b80e-66a6-8246-ae22-6c65e5750dd7
 33 b4a86124-b3aa-2673-bad1-1da98644b858
 34 7756351f-83ed-6073-95c7-8ce38ddd9720
 35 03812259-14a0-14dc-99bf-ada29e086aeb
 36 aa81ee71-28b7-09ba-bf13-7c7f32e1c028
 37 d9e1323a-877b-8620-9705-9f516f2c2fa1
 38 e4210cd7-007d-701d-ac5d-8a3cde73b3b0
 39 6777f850-913f-04f2-8549-ff8fae0c5558
 40 39446027-9bc8-4458-882e-2f241935fba0
 41 5a248475-473f-12bb-b4b9-cd2868fd104d
 42 8f4dc351-7439-8226-a0e7-f1f12e16c114
 43 2047e5e9-d6c9-88cd-a6e4-7244d43b5345
 44 e2fb1d06-d83b-644e-94f9-bdae5da21132
 45 5c19ef12-cb3f-2a21-b538-8ae44419a107
 46 8d97bcd9-638b-646b-aac2-24ab8b3e9d30
 47 57b972fa-32de-15f9-bd1d-4b2e8795333c
 48 40c93729-435f-1fa9-8c5c-991e7b810013
 49 f61f990d-d59b-093c-b0db-05b8cc136bcd
 50 4c194dfe-0ca3-7c4b-ae45-cf46cca5c7df
 51 0616a8fc-82b9-04ba-9384-d9a57f44d1ba
 52 43427c05-e353-8c54-9d69-224fc8daff36
 53 1c963b08-d2ec-708f-bd65-27fcfe9cd212
 54 5df77d9b-5c5f-48f0-b8bb-5fea298af057
 55 cbe06d2e-a0fa-5ec3-9c38-7fbdab44b5c5
 56 4e70f66c-c97a-5740-a56f-78fefcccfa6f

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 46170416238745184471870573285758261087041886261107087455. Exactly this sequence comes out of new Random(746).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 5 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related