201302260156 198ww4

explained decrypted filler

seed 431

Metadata

Post ID: 198ww4
Title: 201302260156 → 2013-02-26 01:56 on A858's clock
Posted (UTC): 2013-02-26 06:56:58
Timezone: UTC−5 · title 01:56 against posted 06:56 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201302260156) = 610c9feefc606b80f14592bec5c26d49 (name+title)
GUIDs: 48
Filler GUID seed: new Random(431).Next(9) ✓ verified
Run: Run 42 (seed 983,934,859) (seed)
Draw: 32 · predicted N = 48 ✓
Machine boot: 2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

F665D00C13EFDDB5 D706137B38B69AAF 4D68C48BF475A816 5E8685A237CF2669 F3146DC8BCC3EE20 503E37A7C54AE6F6 4BFC0AEEA736FDD5 EFA1724F0699DDE3 509B0A31622988F5 B9653AF91DE5CCF9 B4E445B383BBD69D 94683EFE5176AE27 27CD9EC6A502BBCB 724210F56FC9B693 E818F0A4E054F621 7A7B19D30CD7119E 9F3AB5166E3F5C75 8B362925D7F589B7 7445CED32FA0951F 37D275146EE6041A 70921A30F7DFAB99 6B664F2CF4353A2A 833CC83BA92DFEC3 FC553C0769CDC14C D8351EEDD564DA3A 793552B5E4AC06EB 807B618082BA73B7 A5224CE05FFDDAEC B8630F67E7F17A97 DA173AD6EB6D40BF C4542F57E21FBE18 1A108BBE8E2921E8 5C7F74DEE62F2471 CC8F55959717DF23 AAC7D1FBC9DEEB35 CC19FE32AD9928EF A7B70FC2B45DCE4D 7B62C737E3C8C5CE F69EAC52C69F7FEB 624607B1077D2B6D AD443D1610290B7A F7B32F7CF5E680DE D69F2DD9B991A3BC 8FA2BE67FFF19188 9DAAE3A9BF99A39B 604F38CED247C824 F2E600D4DF2D3011 01384EC67FAEE6DF 18FA466FC74940C5 6C3D8C760943A417 83F51E8964FE8217 64796B42E7ECDB52 5CF61CFBA2FC0FF8 199AD230F3E8E584 EB892DD6075E4D7E 94556CE3B9657EAE 60A03875FBEBBFD5 092EDD5552EFDFB6 0C01436D970CB9F9 3D71B43180610DAE 0AB4B1C26EA2DEE8 8380A2E718E85483 71E1E189FF1A604A F86130BEB5769539 4C1BDE7EC1AFBA78 BE9631F18C43E215 A352E9D6A2D519D0 6CDC25831092741F 98B55DC74F8E801E 6E9CFA6F6014A2D2 A00F3379E753C709 ADBFBF84635A05B5 13ADAD9118488F0D 7B12267B9C4BBFC5 D8BB504A96C9816E 855F65A058417B4D 6919FF9C9A269A98 FE0D179110CF456C 0C5402E04C398B4E 38FE87A1D1BBBC57 7A7897164B863A7B 4AB55F46CB4B202F 091360EF166FFBBE 87C4CABB5867CA07 84EF0286CE9085C6 1AFDAEA02DD4B839 656852FE038CBB70 4EBF01B01286B310 97D8A10D17D7A854 4001B08D87A1D5E8 BF301FF22FEAC95C A71CEC32758DBD50 4F2B91CAA1685B18 FA6074A34383C32F 1A186EFD363641BD 40310061CB628C4A DA4EF7A1C7662CB6 B0C1073AC33C1AFB 930E8F8D95F9B762 62D04C3BBFA95EF6 3F174E4F23C4AB8C 7193FD455A04F021 A4BDE79AD448D952 182454B595630B3F 61B9AF5FE7C2F664 1BFAD16924D1BF9E 0D3FC322EAFF3302 A21E87C9C9400875 BBAAE4B88716CF98 D1B143306511F15F 0290FFA84C32203A 7101609E766CCDA5 C8D845A547577299 D72A14D9839A6CD7 94BDC370787A4DA6 475D25A6A93DB7F6 797ACACFE89C5DBD 3CA8A52B7AE363B5 9EE4A3A5EF037CCE A1395F3D2C54AAA1 F707AB83EE18E77E 881BDA92AB8CB422 AC70198B7E0ED8FD E55531FDA20B72E7 DC144D043E078D01 EAF3F7B283EF6F76 F7FFB26D59E36EC4 578CC6A34298BB31 5B873CA7F68C2630 6BE35B24ABB8E336 F60FE1960DD3B59D 61EDE4A2315DCD27 1DA80C86EA08001B 157714A94CC66022 19CB53B4CA459867 11540E1DCE3CFB4E AB485C3B1DEB5675 3DF58CE4179E64DB 0E741290328CCC4F AA5241D579E3B5FF D016396B8A9BD81A 7C333DC374E4BEEB 305D0A7E2E903105 FE15811EEBD958C0 B0A56B39461DF05B 10AB2775EA9253EE F1C2444642CF5B5D 6FA32719F887B18F 3B797A700B01AD90 A22C1B168543A57A 4C4531A58EBADF67 7ED7EE007400D5B6 060C4A0C555BC11A 327DDD0DE0F7955E FEA5001C2989B46C 4A4868EC5F05A6EB 7474971584CDCDA8 CB5CD46E6334B954 F65ADE2F3E95B612 267C9244033DE6FA 924F5EAD6D0ED306 BBB42B9ABAE3B811 E8C4D856D4C7D4DD 6E5D3AEF73223ED1 C66C2EF1A23E6FF9 911B2420A2B9C695 CE9573ED15A63660 1510EC60CAEC87F2 F475BD97FA2C2D5C A0D3DDA7CE5A49B7 40D2BD32F35A3E6D D9A1FFF68249BC86 6A9CC7A242C2B68B 91C0592E1F2143F1 1789DEA7AAADBDE9 2F3E9F45B9178996 27F7F446317E20AE 0E546F2975D2CC45 D510BB9961351B80 194727E537B4A3DC B13195247B2F4116 FD31B53F099CFB71 E3F1375CBF5F9051 A2294BAD7DDD2F31 23C3BD4192B5739E E16A8C1CC2762F27 10A9E9CC8BA2027E B3D074D745CCD2B2 2011DEB248FF8F12 B9C4470EDAE71E39 AF1663A7F296F7D9 E67E0AF882DA7422 43534E10199AC6A4

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201302260156 (name+title). Key = MD5(password) = 610c9feefc606b80f14592bec5c26d49, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 60c772c0-08f2-852f-9054-ae8615cd4de0
  2 99ab41ec-d136-29c2-9bba-7a36b41e3513
  3 d03af9dd-dcbb-0b47-834a-e23e10e80368
  4 8dcf5cd5-a644-424d-8e2a-800c9ab0d5ab
  5 338ab37d-a001-7ffd-9d0c-56d312914402
  6 82fb87fe-870f-1166-94be-543ac92bf7f6
  7 a2ce1ba6-9b03-02e3-8ef9-81459bf91c02
  8 455ae463-c59e-6c38-9383-143a2c282515
  9 7b695687-b89c-28bc-b50d-3fbfbbcad6e9
 10 e556bc04-40cb-130c-8e6b-28c810717473
 11 c9565ae7-b89e-72cd-8d6b-ee0729af7f98
 12 577e9f2f-fcb0-8f3c-9e85-0a846472eb8a
 13 b1b9f941-3cbf-87fb-b525-9974daf0c7c2
 14 88805751-751e-67d1-86cc-33d13a1ca939
 15 3b88ce7f-9eb7-6b85-af9f-bffb2d9b9222
 16 1240303f-8df9-1310-a1b2-16704f34bbab
 17 aa026e60-bc99-0dea-9291-46fd8ea44e26
 18 a5f57601-a182-1221-828f-79dce1f15abc
 19 3e5a74c2-0c14-3ac9-b4dc-ff0d8f557916
 20 2eae2b99-e1b4-13f6-88bb-ee0e46f3e6f5
 21 ee65e94c-9d3a-0f47-8f8c-910699138f5f
 22 1a5252df-9fad-5d58-9720-0fac0fb4abc2
 23 91af2cbf-d801-7af0-a13a-2193e805a9e8
 24 a76cb143-234e-5acc-ba25-ee6adc6a8cf9
 25 09e7767f-d9e4-8948-b8a9-ba2651cdf4ea
 26 28b2cdc6-32c8-689f-8b64-31dabbf71abf
 27 0e5ddf0d-6049-4b3b-8f1b-2b8538a70e46
 28 0bd017eb-00b4-679d-b466-8474dbb262fa
 29 38b1bf69-c1ac-5b5e-bd16-5ec0ea13a72a
 30 eb8c9a78-eaac-15b1-a969-af59b1ef6a82
 31 ec32bb6a-bf1e-292a-b27d-c60db30617ae
 32 86d94ab2-07c7-8017-98ce-e4a120989456
 33 fcd4b2bc-fd18-597c-a91f-ab97f1903c7e
 34 6834e8db-dcc0-7d52-a56b-f1584e9181da
 35 c53eca52-632d-1762-a1b4-3aac13644656
 36 57156780-5618-3079-89cc-b19f1a6c463f
 37 e2aa618d-8d3c-03ee-8139-27bd7791da3d
 38 540ea404-a499-0259-bfc8-f1b08aa540b2
 39 3b84e3c9-d23b-1192-a807-ab812db6bf39
 40 d3089efe-3e88-6224-84ae-332e19990051
 41 be2e1530-5582-3216-9ee8-7a4763342b82
 42 7c7a04e0-64cf-42b0-85c3-8507d0d4ca92
 43 bc6fd317-9a18-64c8-9235-6e0f3ea42147
 44 d596bb80-e020-00e2-b5b8-f018ce47ada0
 45 f2bd304d-50c0-1a49-85ce-da8b121c8190
 46 5a4e5c93-00cd-3938-9d00-d22fef029206
 47 1e9741a2-382d-873e-a85a-ac1b2a08ded5
 48 aad2202d-7c2d-18cd-9938-ce22a106189d

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 820471062178866101310575864651285713001634601381. Exactly this sequence comes out of new Random(431).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 32 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related