201303031250 19l2ap

explained decrypted filler

seed 129

Metadata

Post ID: 19l2ap
Title: 201303031250 → 2013-03-03 12:50 on A858's clock
Posted (UTC): 2013-03-03 17:50:52
Timezone: UTC−5 · title 12:50 against posted 17:50 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201303031250) = 68e5f090efd94e2dcae170895cb86710 (name+title)
GUIDs: 56
Filler GUID seed: new Random(129).Next(9) ✓ verified
Run: Run 42 (seed 983,934,859) (seed)
Draw: 151 · predicted N = 56 ✓
Machine boot: 2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 6 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

DB9A0ED7AF661F8F 94B26133A1D09CAA 454DB67C8F3C5635 21C35AAA045B2E84 4F8EC1BE8AD7D081 7839ED641C7A44E1 2DA8AAE1BDF3EE96 4B1FAFE51F4E31F2 D0EF05D503545C13 AA0EB9DCB244E707 46027CF0BE06D7DC 6ECB9EA96D91CDA9 28F22D71CA795D36 C6F57E9566DDE775 834CA8B91D494640 263A918590709056 6DEC26921CD8D046 CE8CBB3D7DA131DB 6999D216DDB2BF65 4E3A86749A9A372B 2731F89B6547EB8A F5F203CB2F468227 133D0B16F8D538E2 CB249A927B7D9AC3 99D0694C9F7D77AD C53ED44BE7272DBE 145A4AD93F58F109 C895F6029BB29F79 43BBA941EAF02D06 B5B857B6CE3F9F98 D60BB776144FA1E9 B01416C0FF2630E0 95283FE258E946D3 0C57C50C3F3DD021 16FCCE58536CB485 3D11EE8F9E4A5D7A 2BE7127CA4AEE255 66A31D030A0864B4 4AAC3C54A28CB8A7 8E54BE59F192DA0B 04FCDC412B250C4D CB3DAF7B96077DD7 630759BFC2462230 31F4EDA426DD968D 0D5BB62C56C1553F 9D2E20495C31DDB2 34E97ED4FA0DE116 A2487F9EC1EB7571 70EDCB9AE7A096E3 1423EFF1530DC03F C4BF4B06FDB37C3C B56AEC083475F271 94E94D971F32E079 2DC505309F9F9005 260EFDEB6EE44979 CDB75FE18B6443C2 33E8E8015358E36D 8AEEC40BEFAB8264 857BF47EC419F82E 25DFC63220E90398 3713F4161DB93628 EA5975642FCE82ED 7B9261935DFA7692 86C78CA514554054 BD30A5F006B8DEDB C0AAF4345F2CDC60 8EA4B928611773E6 5DB8C04879CCF317 A53C15AB65FF1B1B 3D9B527C653D0678 F17D8E2968A05BAA F3C451F61C88B0B1 3C080FCFBD9DB9C8 CF5D0862E3F30977 3CA63CC54F353788 078E598FBC10F5CE E95B3842018D8890 8561C37D2A3A6B6F DD4B896B92678E0E F18867076C6D2A54 46AF7F45C890EC70 EC774BF13249D6E6 833FA78C8A92094C 911BFE64FA516EDA 38748A88602EE019 9F6B89BA40889548 5EE9925833F32940 1744AFA07A919B39 7EE0B664EC6C2E19 F0AC97F0D2E945C8 B4EC14D806927C91 B829CDAAC86B45E7 64F08AD9EF14182A BB517E9950F73F55 56C1EC715037553F D4D1818DA33EBCB9 E46172F143C42C6F 0C9C474B959BFF11 A6CD7F992A2FBE9B 8D20794F5AA08685 3B85236FEBFF2589 12E711FB02D28A14 232C45073803D884 FB90B1DEC53E3BE7 CF15C983A4AFD2C2 87577F37032F4728 B9B91DD0B67F6D84 E3345A18AC8D6DAA EFC91F78F76BF949 B38FBCD98A88CAD2 E2E425E1F7142E80 F79E286CDF83CC42 195EDB850ED4F088 1351BD45DBC9D818 BC31B4B52F9C0860 797054A8CC705EAA 5D526F37DEA268AC F16FF01A35408B2F B27CC7AF101784D8 B6537983BA5D8F60 47779B89C64D6D16 8A6F631DCC162CCA F1E0C287C777CAB7 30EB2A0D1F05C3A2 044A87B9B221DC67 6A356D6D15396DCF AF74540853F0BDE3 4A5146DC1D896F9D 458C9ADD43620B4B 61EE185F790EB378 07E48ADA1D855F82 7F7D053EFBF4370F A1BDC36C39E209B6 23CEEC2E57593C10 F5E815DE04FA5BEE D1B3238571DA8597 8020DF4B9C8E7BF6 AB829352A67D7913 8FD42E2D770A27F4 0D2F5F9517C2B919 D0120B7FAA087060 630E3D5E82BA971A 26792CAA7E4E950F B211F70732BF3AA0 6B4F1EA83BB9B3E9 F78C1E438F3CE670 9012C9961CF62111 D414A2C3D0AA535C 0E3E1C73AC06975D E1F4BD81CFAA3EC8 805E04BB261C431C 07BC5C761A2F2BBD B0125D2276CC1F36 2EEAB11C8606A025 F13D9CE354161EED E2E430C10F26146E F23E5AC515781A46 6E223FFE98BFA954 14331F8467CFADB1 0DA6EFC259A729FA EE6E8E91BCBAB163 8D67237974D59BC3 449FD23751A064B4 9A48BFB54C8E7C6D 484591DD15CD33AB 6954A3616C6EAA1F 241D6453D53F4E98 243F05F6A51569DA C65DC2AA42EE4ADF 7D26D581770EF99D D567C1F9FF093E7A 3CD1F66A7C4AC215 5EFFD69B32E635FF D7E66949E8C94D5D 5DD85DBC98591007 F7DB5D6E77B13456 AA537E2B9CE366B7 15B9CE18EE2AE3A2 A08CFF53D79992A8 8AC1FAFA53A65789 AB3E4F787E6DC1BB 79867BB0E9438897 804FC7750B11498C 027CE04679ACACCD F8666489D5B9F69C 393ECD7FFC3E793F CC8F90537DAD9071 C5C84A9212FD4814 A46E4C9AB7C8FFFB 3BC9A70A488327AE 097D9967CABDF62B CFCF32D959856C81 B74D5A44C4B300AD 6FF5EFCD4B140972 5505253B0E90EE4C 866D919B7A8FA317 2BDD997FA4A31F54 8392701D8486D9B4 6E4FD50AF7DAD366 4DBD8382D50D5514 6FA97C5CA664E6FC 62190C9D98768C7B BB158879B63C55C0 5250F56009E9E95F 36B0C9E618F048E6 B3B9DE36D04474BE 3D8DAC2267D8CE7E A45C724B4C5A59E4 6FD209A9BD478439 5857B2558CE9C573 C2CBCE8E781B8655 3929D5FE1FBD59FD 323FDCC8F7A84A3B 5C651B65BE3CE508 5202B378F4A8CE9A 9F90BE33937144E8 D872067B244C000A 239B71124F7F7359 F631ED276B25AF48 B0231CF90D5CDA7F F384BF5C33D88B09 F778FDC67B783326 B8B1EEA35786E22B B7BAD4D8D818C28A 22308B4C77C052C3

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201303031250 (name+title). Key = MD5(password) = 68e5f090efd94e2dcae170895cb86710, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5f65cc0c-fb13-101b-b6d0-b2cc44398487
  2 53344312-b54c-692f-aa36-d3666122fec4
  3 8bfbdf37-85c0-8daf-9e67-9c98b0e8cf41
  4 4e8c3f9c-a953-0b43-a6d2-051e4ff60f1a
  5 ef05282d-9395-499e-b86c-c928b77efc99
  6 7da5f79d-25fa-2dfe-8ab4-b398ed7ed4b1
  7 f0018418-187a-65a5-94b2-6820d4174191
  8 bd7c1b93-2439-16b4-885e-1f9d9702a94d
  9 ec19a04b-d225-8bdd-8521-a462bceb1672
 10 6685918e-e9a4-7b61-8acb-9bd8e869c407
 11 dec29cc6-ff95-2b8b-a7e3-c4324900c351
 12 7593c1c4-6961-1a81-a53a-1818dadd4b6b
 13 a8478e35-6c61-2ebf-be50-8917d686772c
 14 0ef6ac23-bfc2-5006-b0f1-0a5a7a48da9a
 15 7b5eb637-b3f6-263d-af68-f55fafe841d1
 16 235ab17d-33cd-504c-ad6e-9f0c38c957d2
 17 5f2e045d-3707-0161-8ce8-ca2a90dd2ed2
 18 15eb8433-01f7-8ed7-9d00-5ba3fa049057
 19 44585cc3-5786-1b13-a874-1a70101c2c3a
 20 065ae761-7bfa-26a3-b0e4-fd65f75cd0ee
 21 7ce3bc8f-9bd1-819e-9c48-42b55c710197
 22 3c5cd6d7-54f2-4719-904f-0a62845f3289
 23 a69204e7-b14a-77b8-ab5f-2805842b508c
 24 da41de88-2c16-0735-9a92-2ca8657b8abc
 25 79aaa629-98d3-395b-9873-8e9469a23d94
 26 6a11e8f3-3b11-4a58-b25c-31463d3f5a3d
 27 4e0b3d68-0f8d-75e1-877f-48545ffebe59
 28 3961d929-5d52-59d3-a3c4-88b7e237d254
 29 994bf4e5-9b76-1ffc-9e44-aade816549be
 30 983f3c99-bcb6-89ae-8cee-ccc4d2d2e2c2
 31 5555024b-040b-79e2-b41c-6981449c0910
 32 2e548ca2-5e86-32f3-97b7-368978e47931
 33 86782063-35ae-1092-b7d9-4fba78d91b66
 34 f9a2876f-cf30-2e4f-95e5-6f24d2f22040
 35 66b401b7-39d8-6b1a-aef0-22ad0d01a1c1
 36 406e43bf-7bc5-3228-93e6-3102c3c5af8c
 37 010d9e6e-7cab-7e54-8d92-d785ad81985f
 38 285819b5-c36a-2fc9-9ad9-0b7ebae66331
 39 60a92c8d-87e2-36d7-b3ce-700aa3c3465d
 40 4043403d-f618-1c35-a1f6-57c50e0a2797
 41 8999e3a5-4126-49b5-9989-d9afea15a903
 42 13689484-fc87-4360-8426-53558a7e09f8
 43 4f737d35-92d2-86e5-b3f6-65d05fcd2ea3
 44 248a06ec-068c-77ad-b502-91c2c943365b
 45 95c27d72-d09a-86a5-bfb4-8bafa22f47fd
 46 86ed5064-0076-389e-aa5b-e1dccdd183d4
 47 ba279b1f-b1e8-2f80-93dc-c750ac19b167
 48 218d4071-de9d-43ea-bfb6-2f6eb0306420
 49 ea1d31d7-005e-6e2d-a3c0-5f2984a148bc
 50 037a00c0-a828-2d62-aab1-45d4755f23a7
 51 a6eb6ebb-f973-35ba-ad3d-f37856f556b8
 52 b80e986f-f878-7cc1-89db-c48a963ac6ce
 53 4aca47ff-7242-3a69-ae2e-df4bf7c58119
 54 957738b7-5d69-678d-acb6-5bb0a1dbd0d8
 55 57cd9182-ea8b-0a29-8ce9-5e398c717bb7
 56 6a63d4a3-6cab-5226-90cd-5fc806197fca

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 16804261872125250812847034751873126372314487832462373605. Exactly this sequence comes out of new Random(129).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 151 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related