201303020814 19ir9c

explained decrypted filler

seed 659

Metadata

Post ID: 19ir9c
Title: 201303020814 → 2013-03-02 08:14 on A858's clock
Posted (UTC): 2013-03-02 13:14:54
Timezone: UTC−5 · title 08:14 against posted 13:14 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201303020814) = 61f7f0d0d68c18c2a2a57703bd40b12c (name+title)
GUIDs: 48
Filler GUID seed: new Random(659).Next(9) ✓ verified
Run: Run 42 (seed 983,934,859) (seed)
Draw: 125 · predicted N = 48 ✓
Machine boot: 2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

06B60A179221A049 8205827479F59E07 E9B373366B0BCFBB 30F66644577DAEE5 B2C11BAE776A2ACD B149ADB908882DF9 3A32FB9B1E56AA62 163B07D78A55D6D5 B33102622F5C0695 5ED537AE55E15CD5 87EBAC728E8D4D6E FD613409D027A9F4 EA22AA6FCDB1E01F 6C8536BADC8A231B 022975FA7C9DF9B2 75D9C176476D4B85 5F1CCCB5AFA6D82D 9CF1C8A6835F1359 44DE17673D8DC8F7 E9AC6DFB3C80916E 61651FC3D31C2818 1CBF15F6C2699A14 50E1B2DE19C75EF4 3E15960EC09705B1 FF971259F8B457C8 B7034CF725291E59 BDCA68E87935A139 13A0D05C32A30EC2 512C49302A6CC3C1 EFDEAA74C00C196C B20749D0F572014C 109B7A0C14183D5F 3CF44B8ABF5D944B 502291B3A6DDC894 1428AB7FD030D303 62A06CE04D733A02 55A01874BB3F2994 25A38C69615D784E C66052C943D3B3D5 C036DB618BD3E180 89ECF92F8E207AD5 6B426056957E8B50 33F6C6CC181AAA10 D884910296B99BAB 832868DEB5902717 457FF9AA84DA3DA2 75D4AB3AC974596E 4ABDB9840123582D D76FAA8357727F4D 1C07695AE320D1A5 27941ABCF3AC49BB 2C6DA8BCC6E6F341 6FE63E2991356D1C 88A1FAC67B8A4F78 C9DDB8C1F9282013 286DBEB17ED8F484 A296BAA7701A235D 0054EE1145FC2FCA 71C21256DF9879CB 2F3E64164014A4EB A77623703897DBDF 8149CA3AEFC27DED 127526095445AC13 00DB916AE2CC56DA B3FFFDC2FD85789E F96105FA41B262B9 82A385249FF7DC48 BBC6C493DC1E4F78 B3A5839F85638DEF 86CB8E9BC31E7C7E E1A39D75D2E0F14E F783BA7AA81F362E 5CA8AD4BE51692CD 15473611442B59BA 27282E098FA8BE0B 8ADEBB716350F2AD E6EB31AA8118EF32 42B99C4176D8E397 95876DA8D9240309 203DF7A3BEB88E34 820ADF470EE9B7AC A294245702619D66 30BE921163A9A635 A478304C535DEF72 7D26BEC3728EAF13 00F6CA7D380500A2 892870EE9E269150 2875CBBEFB34DC67 F81C63D685070576 AE5EB258A0292752 74B43EE5F6319089 5A84EB5248FC5FBB D59B5AFF71B69560 1BCA2CEB36682F41 5D38A6143777A92E E8FC4DDC40C74C17 59228079881CD0FA C4E9FC9139682CE9 B7235A243853FC74 69C1977107475826 36A9493A6A4F7FCA 4A69C7B83BD7E117 F398BEF3B7A6ADC1 2D80B84A9E591BFC 9AC8F90FB652FBB0 A32E953B431430A6 50467A71C7D6FA23 3BC0AEBC9809C835 CCE73F2DC2022301 BBA4823B5CE570C2 FF68E8151FE5DB97 817460B75E8854AA 5D09ADB806668C7F 87C9FEA6B881F3E8 E964C9A6C12921BA C95D21A71C00B1AC 75B1E075E937F1EC 65920C00374FF826 0D2961CCDF8F0F50 F85031A898D87EB6 8C63DE7F25A6A657 BFFA975294583102 935F129F8782A82B 2FCDEAEC2F30FB3A CC91C66261B3C342 408E17AAD7D36CFA 497B983097B96291 3A836BC960BFE457 9D3E0DCDE875D342 A135876720F1BA2A A52D7DF43F872B55 4A8FF173D4251EFA DA2DF19CF8D80CDA 45A7A5D5F1337EED E27FB7E1FFAF0D2D EA33C4419FA3AC73 E32CD70928CAA46E 87387BBA981959A6 DAECF3A867B216C7 423E6280F8694F2F 1D3186B4B1C6DEEC 9B32FF021AC573F2 C482B92E18994262 1E034EC0ADA34038 80A484F6BEE9CEB0 6B6CBE10675C6777 D8101E578FBAEBF7 FD84A9AF8DE553FE C9238B28C07241D8 82C5F83129ACB0F0 87E3615BF23F227C BDF55697E9593D09 7152410B990FB7A8 765EEEF46C0997B2 666617C278E01E1E 0D53FA62973B7985 1C028B9578D2D3C6 3DF5217376D67D94 FE117BB76671DFA0 C3D5642755CB95E3 C6C15D511DBC6079 9C5A751EF0E6DFC9 E105DEEB47511E7C 379B9BE18B43A641 4E98E5FBD6F5E51D D8C17BE846FA9E8A 09D8652275B13547 D2AFD0A365085F6E B6D2D7644868C0B3 447727310B900FE0 B2E22057AE9D65F7 CD5810205F3793CB 4AFE84D3AAA11A10 36794221833F8C08 C986F2A3EF570AF1 EE71E376DCE0742C C7AF4E6450660AF7 2800EB1B87DD0CA4 ADAAB216443D3B50 1AC0D52033FCE6D7 9EA1CE282A604362 C2A45D52EE720F61 675D149E47B08241 7AD83BACB2BD1B8C 4A7B2A7A35FFAB5C CBA268602A7F6AFA 354D370914668606 A0CCF92793068D5C 3F9F0872ED945A36 DF4BF545222FF9E6 95397652F3DBD8CE 4B2C2A860FC81648 FFDC25BB128983BD

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201303020814 (name+title). Key = MD5(password) = 61f7f0d0d68c18c2a2a57703bd40b12c, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c8097c7e-c320-0067-aaad-98f65e0866e0
  2 ff45a3ff-7536-10b0-a855-8c55d3f42016
  3 b69e647f-4841-38ce-8687-fde0165d47b6
  4 49c9bac8-0313-1eae-93f1-8f165da39f33
  5 0c243925-0b4e-6041-a531-cafe402faed8
  6 f21a79b4-e77c-4993-9450-1b24da4580c6
  7 0b2d5cbf-3c88-1172-817a-01d2c4c95c01
  8 f1557a1b-04ed-0b90-9811-03af6d6f999a
  9 cbd776ba-7c4a-4749-be9e-c3fe029dd1c8
 10 e99ed7ec-8757-21c0-97a1-eabc47009acc
 11 2bcdac35-28e6-7db9-bb19-d228fff4c57d
 12 2396ad24-d582-8d51-ab58-6f4556319c79
 13 939d7fe3-c8f8-5d38-a8e0-b9ed4f186ab6
 14 e43cd6ea-aee8-282f-b3f9-0ad93ae8a17e
 15 0efa3aba-bf16-2f58-a04d-bd5908c6aa9c
 16 f2fbbde3-b354-57d7-b3d3-fc98b9a62ae2
 17 c89487f2-3d58-779b-80ac-357a1e4d0a76
 18 a2d6b64e-6a44-5399-8dba-c5da753bf99f
 19 3d5ff619-4c34-499b-a9d3-e7e53910be08
 20 aa43a960-6829-4bb5-8077-55c5e7f13d4d
 21 4ab66cdc-2402-372a-b29b-c6adfb2765ae
 22 3040b8c6-713f-4976-b0b2-60f1f96ce5df
 23 b859e6a0-0730-3e2c-aa27-2da0d87fd264
 24 c8e8b85c-0555-2a6f-904f-c28f4f19f728
 25 18f6eedb-b7c4-2794-911f-47c0711ef7fc
 26 7a778f50-bf06-317b-81b5-028d825c17f0
 27 d4e190b2-92b2-4335-8a16-a78fa2e6b220
 28 f6fe0f8c-5ed8-028c-9cb3-2274a527f343
 29 7d151c6e-47a1-5eca-9dac-0a0e19804044
 30 d8aa7bf6-f478-7562-b0bb-a743a99a4947
 31 ba57dd4e-e5bb-4fbb-ab0f-77d9672787bd
 32 2c54a521-be1c-0eb3-9b73-65b911b36795
 33 3675ac47-c9d7-2efe-8f5c-cd47cc85bf3b
 34 a55fd9d6-0627-4385-a278-850bd46e8dc4
 35 0be404af-3c6a-67f8-ad6e-b7faa5b5bf4b
 36 b9d6e2fe-7c61-26cf-be6a-9a0fe9d3a70b
 37 e87da3d4-edcf-8c60-8f3d-9befca994d74
 38 8e3058f1-92ab-4188-a9b2-6a8325091d58
 39 eb00b2b1-2ff7-1b33-af87-8a90544eabe6
 40 ac98a2e5-8cdc-1dac-89db-15ad11d33e9a
 41 ada253a6-5d7a-3292-8920-7a803ac970d2
 42 ae200969-acee-7f26-af2b-f434251fc5b7
 43 1b0464a8-5733-1682-8985-72a156c8abb3
 44 702a232b-be81-785e-bd19-4d680f03aa96
 45 8913fc6b-4a41-38cd-ae0c-e45257020ffc
 46 00e46049-60e8-1742-a87e-c53a97682efa
 47 81800a32-63f9-4a2d-8d2c-e0362b609f96
 48 1fb1948c-332b-7594-bb7b-0a522a3b89ce

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 013164104278522575443432234057402462841137173147. Exactly this sequence comes out of new Random(659).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 125 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related