201303041302 19ne95

explained decrypted filler

seed 888

Metadata

Post ID: 19ne95
Title: 201303041302 → 2013-03-04 13:02 on A858's clock
Posted (UTC): 2013-03-04 18:02:51
Timezone: UTC−5 · title 13:02 against posted 18:02 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201303041302) = cb78aa69344e81b9f4f1f4fad522f9ad (name+title)
GUIDs: 56
Filler GUID seed: new Random(888).Next(9) ✓ verified
Run: Run 42 (seed 983,934,859) (seed)
Draw: 173 · predicted N = 56 ✓
Machine boot: 2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

17F98CCBB9A17132 945BC93E13C094B3 CD2F47CFAA613151 E53FBC0EEAB87BE5 A47583620D8420B4 DD68D8ED9AE42A99 2355075E9ED74DD4 2B23051D12FF2D2C AF3FD458AA9142A8 838F29A4F1AB096E 71045F43661998D2 9D5655F4F889DF58 F33C39791CC55753 C265190BE77D9A00 A2F0038F5F3952B9 01739B26443DE9E5 9CCA40637D2DE42A 68C39E840922A8B7 745668A1DA783BD3 B9C0A7057EB3C7AB 7C0CEC67DFAE0FCA 64667770D1D973ED A096316028A97988 80529817FAB59462 66CD303159BA1641 75C5DF0F14FFE88A 4C13326B0A3C5024 D56112B1807F1648 A6CE2BED2F4D62AA EAACD9BFB4B828D8 A887A2355850AD81 B205853B08706070 F32BA9DBD01CA917 653B29E59F4111DB 1E854CCC0BB51D7F 825F36E3C7620B43 6B2477F63C4332CC 828131040A8A3251 E7F5D7212E675A90 E89B6D93D1AC84A4 95EB6F8D87B2627F 5F3C385A7DFD8E8B B3515D0D7C0CBFA3 0F60CA6BC3FE7528 D7BAC877EE6D18A0 59FCEF880B65B0A0 4327FF51F1E6B176 C2B49CD2F227988E 90131A254F9D2436 20F807BD5927071C 874607F5522B9EC1 3E377C4AFE764C49 78B51CCB55A1ED79 CECE04ACA4862A71 6BBAF0028A927430 2CFF584DA3A032C8 E7EA1AE0BBC7B213 972EE162CA6DD946 0BDFFFC33066475C 5F35376D0C1E6ED7 59383F7FE525058E B940D233F9354A3D B59E2F959DA0A5E8 8BE26C7EF80AA3DD 27A7859623D3E0C7 E41822C32910BB07 DEC9844603E4E92E 35DC407A3CC937F5 23A9D3CD815DB2CF 83DBB5D67821B98E 6873528BB1B21EB6 2F790C9D53531034 E8B82A7EB5AEABC9 7177F56C680F1396 E5C29E4E3E261F46 C3F09DE51C39E9CD D84F744C0FA10F9E D4D0845A6B431DBA 2A5A27B567D83F40 5ED6562C2AF868BB B824F6B2CF75FAAD 2DF3570F9E344FE8 39B2602D10CD504C 94297855D240622C EAE5DDC22D09B71F 5D2466B6DD2898E2 8C30455DB4EB1179 09FE2B70BE8D1119 36F6C100441D98B4 88A90D776F157CC2 B88AD861E29EDC3A 27215E6DE4562C47 CF1C173170F04E08 6D089F7FF6B741B0 13C98EC4C0F358C7 7201FC6AC1E7ABD0 03145A281B7AD893 8C77F80F7DF3EC9B 20FCD21BCEA919CA A0F23A742B7A17C3 0CD00601C37A996B 804E8805E6973883 18EF46A11D7BAB04 0EA74DF57CEC432E C97700998BCEBF30 5A9A78E069D52853 843E9A862B40FAAE 4CDB59ED9B44FBFB 23125FA8A5C486F6 5D4DB9EB01F8CB92 6DF90A2584F113A0 A0A4755BEA5E5F99 E8C3A88D377DD36A 48BDE76B526B910F 0AACDE6829C9ABDF 85215AE2F66A17FB 2DE17C5243D85AD3 1886043CAE304E18 18381427A7DF778D E70033A9D97D3967 F6A17C28C3D1C135 FB2EFC183DD2D4FD 690F2201CF309F6E 229D7955373DADAF 2557A08CEDB24676 3A1908B542C90B7F 370A1DFB113F504C 71EDC384D3045C7C FB44ED5F1382CD5B D85CD2AB8F3E803F D60316FD72D65FB4 DBA0F51EEEA78C85 55F63BA2E8A49AFB 7B89C6B8E2BDE4CF 01EA9B461C3152F1 62941E01742D310E 8A1B675B857E8619 C71740E94984B583 546FA2095C42C5A1 A37640821B37AE8A EE44AC65AB8A90FC 278302B9B6D9AE0E 3678F2769F273364 F5392709A44E7DCB B8004A9CB225FB23 71CE5316D5D2144F 052EB2193A8F7EBD 82C42A4F49672815 9B9114F9BE5DCF1F 39A221E090F5F0DD 139E21856F353D90 0B1034F81429CE58 EA9C7D8074EA5171 F4419027AC0187DE 3D3068E6CCC25960 B0D6D3518334FDFD 8A674F70DB87CADB DE75A1503B937F2F B0A561CB55B327C6 43DCE26000B8BC52 979CDE14B19DE144 0808A9BB9182E1B2 BD42D406D1EE8602 FE62E616B9A7A81B D29BD04900D0C441 F8384C2597F29304 9A3F1925AB767621 11D36C1814DC4372 01111BB201427559 27E40D436259B2C2 B33F2B99D666BD90 14DF4747558BD3A0 76A22663EB815C84 94E6460F3F66F327 71BAB4F4F01FFF9C CEB9E41BDBF33B20 1F92C52D97D97757 F82720CBE91F0BB1 37A186FC69D823FF B83C067550F83AA5 9E4DAC1AB393408F C77543F7E1AD95A6 B5C6598CED78F7DE 507575E32A45BD29 64A548671C5562E9 D5C94B1DE262A023 CE2CE6D94B2131FE 1FD2F340767E7EFC 727635CE08832851 188B5751680592E9 D5C1BB7D8EF35380 DD49488258352401 8B8D574DE980AEAB BE7F3009F4C348F8 E077ABA5BC758D57 B83DDDB453AEDF77 0F354F490197F267 5933A80F0AE66DFA 934E1EB5A3D33914 95FDD2B1BEA13F2D BAD4B20F8C91031A 57F2D809003C4809 8F49471461DF8B1E 6433B8196D2A9731 5B26BFE9DA3BC0B5 1A9D87188C5F0E0E 17E3B1C89BE03330 56B39F82716AAECF 43FDC01DA023D152 33B2835BCB8B919B EC16BD8E61DFAB9C 7A98B9F427ABB468 7A2633ED97C1CD5A 1CFC6CEE84B1C7BC D89A92937E7E5F23 97CCF24E45028DD2 D84AF2CBA40A9EA7 1D0AEA5C8E3383B0 73704543800E89BD 8495F358848F2B48 44C8488C091258CD 633728FBEF8A0CBD 40E3DC8EEB3BC618 3434A088FAFBCE5F BB175C6956A37F55

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201303041302 (name+title). Key = MD5(password) = cb78aa69344e81b9f4f1f4fad522f9ad, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 de0caf2a-bcde-5568-aaf5-26d3e1a9540a
  2 cdec5535-2605-3cd7-a161-67aeba8b6eb9
  3 b7789ceb-de22-4cc3-96d1-8bd51ce1e4c8
  4 c40aa7cf-4ce9-09e8-8186-821807329bb7
  5 1c0dc2c2-8eb0-13e1-a928-04db7f033b4e
  6 05fbb9dc-ee10-5000-bbfd-dacdba5380bd
  7 b5f9bc4e-36a5-7ace-8617-632f3bc80005
  8 0566c1f1-792d-8503-b4a8-dd16840a2a22
  9 e5c892fe-85d2-76e0-bad7-78bd2b757e86
 10 ce8d1dff-00d2-60ed-91f2-ccc29aabbe5f
 11 534a0b06-a4d6-4455-a071-350b12f5cc1f
 12 289f4af0-751a-65bf-aeb2-dd76120991e7
 13 fafa483f-1e6f-0cc5-ac0f-adf988e52417
 14 bba5c17b-1865-44d4-ac8b-fd71d0bd84e3
 15 d57c30d3-71b8-5874-8620-d8147a1a7bf2
 16 78dfde0f-2dbd-59c9-bd7f-d622436abca4
 17 10ae8973-5d18-1dc7-91a3-9e685591eb4f
 18 bf5f63a1-114c-4ac9-8dde-35a05327b52b
 19 d5117623-13ae-6f71-9e56-f84ea72ff3e7
 20 216d5168-0421-15bc-8c68-8f8863581e1e
 21 d0650815-696e-77fa-8aee-ed029ebe979a
 22 01070394-0f4f-6f44-a552-ce75d71cd51e
 23 36cb364e-cd7e-0e87-89f5-27943a528b84
 24 b3026892-59ae-2fce-8a32-9ee4eaf5051f
 25 4fc0b872-6aa3-6d83-8832-104cd88880f3
 26 1d271660-d693-6508-9e44-ae647737ff1d
 27 0880d30f-474c-3fef-85e2-6fdc68d516d5
 28 a6edb6ea-fddc-8399-aff1-12532a9af099
 29 13b01153-5d4a-7917-aa7d-17baedbc9c60
 30 8f987817-9bca-20e6-ab0d-52728a716635
 31 022955d6-9302-00f6-b2cc-a2e5661d62cb
 32 5a223f83-c6e5-3dc0-9210-d871dab5a143
 33 c0ea6cad-15a5-3378-acc0-c3305c4a3d3c
 34 08f30431-dd7e-2fa2-8515-5c8894420411
 35 4be9754d-29b2-638d-9d67-2e105343ff61
 36 6ed7b2e2-488f-21d1-ae56-79b58918d84a
 37 b802a61b-8740-5597-9744-e62f4e937520
 38 fcecbe67-bd98-4fa5-a24d-0ba4e1aaa6df
 39 71ce8b01-e87c-38fb-8395-44fd9d2e366f
 40 329a06c9-3f15-1564-a161-21e9a078e661
 41 7c5ca9ba-a167-1718-98c2-f7f636a9171f
 42 1641741e-a5d3-3da3-908f-df0948775e72
 43 3d57f534-ffd2-14b6-ad9e-971c24e6f00a
 44 315c9ee6-71d0-6899-b6eb-8ef3c4f60207
 45 1210eb01-456e-09ab-aecb-420c677687cf
 46 69a98c2b-3f81-7f0a-8a93-e60d1634b2f7
 47 802d5826-5f7b-4b19-ae9e-e98a5ad4e30d
 48 0ef9ab5d-6e0d-3908-bcef-08c6d0d82668
 49 ba16eb68-2329-83c6-a523-c0f94252de30
 50 af5427a9-e4fd-5af2-8ecc-8da33761b56c
 51 cc6be6f7-e861-572c-80e0-74e241fa0b24
 52 f2533446-ecaf-8c0d-95c9-d2e4933d5b48
 53 f014bb5f-b963-8b53-8c10-abaf3016a051
 54 126fbf74-38f0-34cc-90bf-52b4307a1720
 55 d028f678-94bc-8106-9706-8e2263155d68
 56 a276d5c4-ff60-8115-a684-05b35c70805f

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 53401578764604551461760266387203326254311316074385588388. Exactly this sequence comes out of new Random(888).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 173 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related