201302260620 1995rz

explained decrypted filler

seed 309

Metadata

Post ID: 1995rz
Title: 201302260620 → 2013-02-26 06:20 on A858's clock
Posted (UTC): 2013-02-26 11:20:59
Timezone: UTC−5 · title 06:20 against posted 11:20 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201302260620) = b572a7e41d92e65584e1c298af1a244c (name+title)
GUIDs: 56
Filler GUID seed: new Random(309).Next(9) ✓ verified
Run: Run 42 (seed 983,934,859) (seed)
Draw: 36 · predicted N = 56 ✓
Machine boot: 2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 6 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

3B74DE02BA5C43AD F42B2AA5708E9412 66286641531AA699 DC14CDBFE046A1D1 AB1D1B5D2EDD52BC D1C28F72A3D42972 DE33D61F707301BF DF277EE1F950F08E 2990FE88C706039F A888D1AD387604BF 5A91FCBF03D19428 4DDA91DCF17CED37 8A38F775D45EF4DF 548ADAEA4F469DC2 D8237DC38B012295 7F6F1B42E13E85FC 3D9769E67D71013E 34AF1829A41B6A65 0081297AD6C0D13B 27BCC90611BE4604 471F6E5086979E67 653FA5EBACE3B6FA E2ABEFF114CC23D4 6654402E93D4AF88 ED73E75259F57628 4DDF19D562FD6F4A 25F127612202D05E 93AC8C7E5AF6826F EDF88C37808EB76F D3F9E9DC28E63F27 485694AACAB573E5 0C105C827B44CB3E 2A9AF3AF9F214A25 8D03EFBA3D421BCC 56567674E5F0B05E F9F9A11D7FE1D411 6A7A178F0E1B3705 ED9281CD86508906 52276B278CFB8910 ECA61198606635A2 A686AB04A1FCCE96 11A6AF0820DA9E56 C9D6255C9DA67693 573925FA13CE9AD4 DD3A1C2E0B10E50A 4202FD3BA18605F0 1E84457AAC5A178A 7184695B70AFAADE E047C4BEDAA04E74 F6F553A7A1DB90FF E8FABC7A78304EFA B1D5A406577257E1 2FEF92B159EE5DB6 63D2EDB8A5650112 7EAF87724D4F6FB8 977F57F03DBE0940 AFAB18A7EE59007B C0AFF3B79FC1BAF4 B0BC8DCF659B33F3 A11336E126479D72 28B866F5E7B96E5E D7C6A74E5C5704F9 0ADCF0F64A322FD1 895E9B8C296F5189 CEF22FFBE39BA06A 9EFC2F459706D27B 4A48FA18696F3E96 9DEFA4A8678C8261 971523BA1890B7CA 826437502AC5C8AC 9CEBA24750FD4773 C3EEBE88EF33450D 25F336F85C6F71FD 1C9917122BE7F164 5186B32AF61001A0 25911BB0BB891994 EA46F99943013EC7 72D6DBCF0478AE92 A8B1FAE8CC0254EC 1A74A264D403A376 AAC6E4C88B8EA250 89C5EE8EA569B6F5 A357811312A3DCBD 731FD7CA3C556BA7 24EC596A867B13D7 15F14DD39677473C C44049F562C83996 FACD74A9414E9310 9543CFF4C698B0D0 6100822BE8A0D825 47B8D0246C33D530 2B4C09682EF947A4 CFA061E0F4900DA9 CFDB6325540CA963 EA94E489B7102C46 9133F65BA3301780 13F496B9D880CABE 1FAC6B35CC00F092 C4449B9671BD7CC4 11C338A8D9811D30 1533090B2A726B00 5E49FBD103438203 5AF726548F544587 48428C92DB790082 BF4EEA53508730EC 4E01C4ED8816E701 E675FF3FEE0A8714 5EEAA9C6B71A6150 E68C29C397D805D8 FB5AE88C672317A7 4EBB3D545D133BE5 3920F123BE9EEC15 F7AE92511C536381 6E4B5BE13BD6A757 7F18DDDE35CBD260 EDEA0A3558B4D9B1 11D4E8CB65B93BB3 52E632254AFB4D49 B5C5D9D74DDC5148 C0A633EDD8A2430E 3B4711FBBCA3E1AA F4884F3625C75E70 9CE4129980940EFE 458FFCCBC98D307C 7344074406F363D8 DE7AD04E05FA69D7 62F769B7C1C83456 6FF1707CC5211670 80803728F75AF13D DE029A46DAF244A8 6088023A176F1AF9 98E1A5BBB3124EE1 38FA2F32D9885A06 3450EFA4D95BB343 CFE9287653D7EB54 213FF09674716FDA 9E3F4A08AEBAA11E 752B422AFC05BC03 D3D1757A182A4ED5 CF64D29BD5A8D009 13105DDDA264C991 258A561DB1B59AF7 70D50B67BCB4C4D6 C0310A22DD3162ED 482E9ED9F4F3EE60 6DE5C48B01EFC91D 0F2EC9C766B3CAC9 CFCD751FF1D5B4B7 944273E3D23954A8 2F51B3A88A23D4AE 5C15149FED319B5B 66E766196D49CBE1 186B71B555D2DCB0 BB9BC695D6C40A6B 913FF01D0BEF4C78 A7CB85FE09E29E90 18332106DA7451A1 007E955E64B0E54C BE6030E56D774C24 271D1DEBA423651F AAB64E3A236305EE 015E541756C8D509 8B8C8248568EF557 50CDD052976282F2 159918CB00831F09 B5091C236D6B2D2F BBABDF65B370A80E 3B525B437D8F1A74 0F4C2C9D9BE4A3C3 71D90BC27385F5C3 23FFF590F8F9E154 B3A6EA1711CE2DC3 AB842F5D814ECA58 B57BAC9C0CDEE161 E49C5BFBD8CEB156 54C4847EDEB809A8 B989B174667AEB12 0D4548BD437F0F18 7A8536A027963023 B39A027E1B14D647 6E34EAFCB4FFB26A A6176CBC62B15C0D CBFB9CB88354CF42 EBF117924377879D 52BE54952DD15019 8CA7A500271C7771 BBACD8C405E18E72 1AA1ACBEA91851EE E97D3FA863575F06 C28F687BB8372E5A 4892F1C5FC099E61 53AABB76ED8BFC90 7FB40610F4B90674 783D029143331A64 C5A96DDDAB8909E2 132750FEFE38A3D5 9BF9D4271076AEAB C4229A58D2DE5C9D 94A6B584A0AE7FD6 CC01A763202A781B 0231445B1B5D4224 94313DC23833310E D34A141C01388256 5554F8CEBEE014CA D6343916FAEEE8D6 8124CF35BA3697CE 07022B6EBD116BFA 903EFF78D44025B0 E168057ECB9F0F77 6CFC67E08BB13076 7245F431D6D4A7AC 3129D5290F76E95B A8E58A399A6B0C7D 589C38E7019742A7 B3550153BA3E39D2 C4D8AC0F4B75B1D9 76AFDA4016861640 095DF261192E1E2B 60D5AA31788A13C9 FC207FE13182A2C5 89CF8F7AB1383D58 CC226088311048C7 F51713BA131EAF4B A1B4EAAEE097885D 5083178E82B43D80

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201302260620 (name+title). Key = MD5(password) = b572a7e41d92e65584e1c298af1a244c, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c8a6fa9b-8534-118c-8403-251f9b0bafa6
  2 fdbab5f2-d910-44a7-a21a-f8e2e9855f73
  3 2d7d7ff3-6b24-6873-acb7-8e606248085a
  4 771785f9-5616-44e9-8bc0-ec8e16f6be96
  5 6afd4082-bc7f-64ae-8434-2137f686960d
  6 92ad74b4-56d4-58c5-ad13-c3df977cf653
  7 9cb2809e-909a-30f7-8c5d-2844e93d9b8d
  8 1a6305f2-a0a9-4085-9965-ed2136251469
  9 026fc970-5b2e-1149-9d4f-9ea6c9d6ed96
 10 f1a72685-84ce-1301-9b84-69321191a8af
 11 892e7bae-0a82-8144-a379-91589dc2d610
 12 ba20e1ca-c48d-699b-bc72-24f268b857d8
 13 9c494004-ebae-0ac3-955c-1e5c244bbc50
 14 795bb190-5e45-26b7-80d5-fc54ff1bf79b
 15 361fb855-5fc0-2df2-80df-cdd45e893cd7
 16 1e3f8314-46ab-033c-a5f2-61d1862ad6a7
 17 fb26661f-5228-6a6c-a070-acebba18f3df
 18 9c76be06-96d3-5a13-8dc4-8c3ac8c808f2
 19 41c5ec9e-43c3-05d2-888d-af6a5ab60779
 20 e825a02f-5218-8613-8574-19da3b459cae
 21 5c2f8598-152a-7684-9523-9546c46d2185
 22 1bac9787-c943-5c4c-8c2b-d25f41490681
 23 6f464525-4882-1a1c-bcb5-fc7fdd32334d
 24 1287c4b3-87af-8315-bb3b-bb32d18307cb
 25 e5f8bf6a-bb78-8a98-9fac-bc1124a459ae
 26 40d318ce-86e1-2ae8-8e8f-53a1280f78e8
 27 889a152a-619c-511c-9c21-8668a1ae7ccc
 28 24a61ac6-56d4-1fb7-ae23-9e35ac42898d
 29 da4b2410-e40d-87e2-babe-27a8bde20740
 30 3f9e8ea7-0371-8f14-a3f1-621a4a23d2c6
 31 f2c5572d-7273-249a-8f4e-67e88c757edd
 32 6a988d9e-865d-7a80-aa8a-a1879d36a594
 33 42cbe87c-d174-4bde-8987-4fb7d09711f6
 34 748e8b6e-f8c1-608b-9f8b-5907e9215994
 35 b6fca671-0ee1-4f02-9b20-6df69d061e32
 36 848f463e-d76a-19d4-9f8c-15b0bf7fbcba
 37 1b7ee738-3e0f-8623-84f2-ca3bf5ae3df6
 38 f297ee67-5618-8633-9585-4c1631b61041
 39 00f8d085-a365-2f2c-940f-cd7045038793
 40 ddb58265-9b29-3f81-985d-6413d516d6c5
 41 3f21d2b2-e7e3-6e42-8957-aee591376f15
 42 2211965d-3520-5667-b61d-5ef8def386ca
 43 465f8bc6-82a6-8404-903a-ea367e19d2d7
 44 50536341-d5d4-27c8-8f1b-552fef01659b
 45 bfb2fac5-dee9-72e5-8db7-e14337cb2c4d
 46 5a32c11a-9ea3-8548-be89-002bcc261368
 47 476513f6-6437-4ece-9912-146feaf5780f
 48 fc703f79-c543-22b7-be7e-72b181f4b451
 49 ce6f35ac-6bc0-315d-8b29-3275c5cf31b1
 50 f24113df-8d54-0252-a067-543638d043fb
 51 6b726cf4-4ef0-216e-8042-bb037b6150cf
 52 0ab85fbd-1863-8049-8076-0d5ee9f58997
 53 6d6d630a-da87-1de9-9ef2-384bf1c78d31
 54 b31dc3ca-8387-3e70-9610-f33500529efb
 55 e06d1ffd-0678-0e33-87d8-a8753169e618
 56 4f580316-07ec-47bf-a044-964b8834aa60

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 14646534118602206508751882518827464188236582784230281304. Exactly this sequence comes out of new Random(309).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 36 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related