201303051738 19qiah

explained decrypted filler

3DES(name+title) ECB, 44 GUIDs, seed 490

Metadata

Post ID: 19qiah
Title: 201303051738 → 2013-03-05 17:38 on A858's clock
Posted (UTC): 2013-03-05 22:38:49
Timezone: UTC−5 · title 17:38 against posted 22:38 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201303051738) = 645b073369f76946a4e6853f11c57725 (name+title)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 44
Filler GUID seed: new Random(490).Next(9) ✓ verified
Run: Run 42 (seed 983,934,859) (seed)
Draw: 199 · predicted N = 44 ✓
Machine boot: 2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 1
Tags: automated (decryptable)2013Encrypted masked GUID listarctic-onlykey: name+titlerun: seed

From the post to its content

As posted (encrypted)

163F3B3C216B1183 F4AD2E0196153F2A 27059A187C5EAD5D 46DD69F4B9E70186 DD73DBA2C3D56964 2E9B7423B03E82C9 7D003A062809E5FA F2EE7CB3F56F24EB 2FE091735C20ADF2 3D0D88F0BF9B20D0 BFF1AD6A15FA0D7F 58F9D9C0301D47DA C5D12A8BC44F6A8B 9AB7FC8E09169973 BB58EE3E68608F84 49CE5C3B57C00F8C 2B53BD59842BB120 13470A9775FF8A5A 50E4C774EB9E605F 313EB9DD1D4C2A52 D2ACC01922C6CDDF 57BD7157AD852AFD DB747258CBFDAEB4 09BB0A8D2017C534 2CD05F4D9FA34825 B5804CA1550D4F05 A539B20BBFEB70ED E9C528769754453A 56C5706DE742F008 6B8DC308E7E75B24 8BB171F6828CD746 2E28F1E4D9F520BB CA88CB7A40144351 883A17671266E0B1 5F7ACA14BD54D723 7A31D5994A8AA0B3 690D92188E40508B 677C48CAF68BE9AC AB1F5C03A8C6F169 D5BA66610E2DD831 CA889634F3723706 3CD3378384885B36 E5224896D4511CA0 DCA48BB97C79F4C2 248198454449ECDB 0DF03F941311D1D9 32723EC1E8C2C6B8 AD63AD4FD3427203 305A0F3E14ED4BCF FAFA82CDE3C689A7 D0EBA4194829B274 D604372A97848E21 C04CCE7FCD248A77 2F100C3C5F03984A AD6912E332377ECD C78B7523A714843D A5E30B1C31139F66 94607A52CD103D47 DB8F5052D9509331 D9DFC279F702D40B B9E865E50F23DC43 960D84879A8E2A19 7FDC3E06FE0FCDC1 BD190DEBE362C2A9 21FB8AF95565B989 DE5AA3A01E3EACEA 61BAE6998812D70E E572EC6E6CCD725C F653C038F1BA7DFC 6581047F130738DA D6B0FD1101F4C295 53BF5FB4267381C4 0732388F2BAA1706 D1603BF7132DE1E1 672692EA13E9092F 55BF881CF4D1B735 9CAF16B1AF536137 AB6C141BEB47B424 8327E67AF05AD383 A11A39772FA4A5CF 812E7636BBDF75B6 5ACB21D9C86D7DA2 49ADAC5EE7060E07 BD3C33DE8A8871B1 3DB08C14647AD8F6 54AE8295BBA9732E E4DDEED2A89C9736 64DBF9C43DA15132 DA5E8D96CAC76482 FE065FC8B81A4B47 120A2D8E3D132DDA FAEC37ACBBDD2472 37887A1F569C33F4 DFCD62F4E1800B2D 1644062A96C84E3C C597BD002FE504A0 B78A3A267377B6F5 3346BFC86204AD3C F4C901BB4E578283 3A393BDFB74B996C 87CA9BBBC1FD95BB 13B9CF181E192829 ECC28083607610B1 ADDFC8BA8AE2CB47 C9BDAC7C6300CE9F 6C2C7981808FC8E7 7E2BC760BEE0E271 6FE93F2F46726FC0 7C2CDFF033D4DDF9 170393B37BE88043 492105F5CD2C74DA 63850A397B5E0475 3934EF1FE80E13D9 44293480A7409699 636CEC2493DE2AA7 1472F2703BBF6B71 EC9B0C78DDAE6CE2 D6766C13B3CB1C71 00B37F9B0B357F8D 3A39D19400547A34 38E5FB6968202452 8465A4F513DB01AC 5319715DB8D26FCE 2E2C38D5773870B3 B9225C524EEC333F F804870A2957E9CF A6B6F7D26659CBDC E96E9D8CF6933FE2 AA96C6512CA72E32 78A3B49E8C66B475 8A51E68C906033FA A48240301CAB3CBB 4F6308027F876D75 64503260DA90F435 2DAB7593F1EB8171 648B6770E9B4BC40 1E23F68917D17D65 BC605C994F818D2C 8D6148AACCABE6DA CD9EAAA403EB4A94 AEB13DC5BFA7A58A 13BE2B798C6A02EA 11BE3BE653F6D7DA 80B2156DA6B263D8 20547B2E43C2F7E6 01A772240390D945 1A032F31D95F56EB 6DE520337D93AE8C 329907D41E0DF613 18B882A20A8D3718 68A072FC1E5D73DD DC0CF9893DF3D619 B37AFC0A63AF12F4 F30B79F21BD3E3F9 4885CCD56129E24E D63752C7DB4348AC DF291A8271F92D8D B599B56FD233BEA9 B7B80D8A3F13023A 81A837737DAF675A D64C964B1BB35EBC 85C89671C7FA42DC 113C09462B3324C5 AEB295AA6313ED9C 79A5C0C6D17B4C6C 5E218E6338B2378B 1696E0D687D478AF F1B3C7A168E1C528 91762FBFCF5A31E1 5B4CC1929BE3A000 05B04E569CF9E807 F3DB20D127E3796E 658C03D368AC0355 232511E246030501 70F7613282EDE0AA 529A494E353292E2 66D50EA326C9B53C

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201303051738 (name+title). Key = MD5(password) = 645b073369f76946a4e6853f11c57725, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6029c4ad-3e56-6eb7-9952-c4dec8ed5656
  2 b6d99d3d-a332-5fde-a3e4-73a662cb213a
  3 a50f50fe-bdcb-2718-94d3-2d510d529e26
  4 7d08854f-1a75-1c3d-be13-a5c456dace0e
  5 337e3c7e-46d8-35e8-aebb-edcf8e90ab15
  6 a6838068-4709-6b9c-b9d6-b68a2c601ebd
  7 99ec8ec6-56ca-4dbe-a5b6-75a98c5dda66
  8 091b208f-f748-2283-abe9-133c80b07701
  9 c969d0ad-77fd-5049-b628-3826750acdf1
 10 175e46e2-1f65-8118-ac48-2a19ed24263e
 11 522b506c-6ee2-2b9c-b081-84c47f46031e
 12 6d235066-ae74-0efc-bb45-510a7d40cea7
 13 9101eef9-74e6-4b74-8325-6c264f00d891
 14 f9a52c80-8533-3d88-87fb-5266c4d6a173
 15 68d50ff6-e2af-83ae-b38d-dde4ec030e22
 16 db3357e6-953b-0351-9cb2-c312059934aa
 17 6e664bd9-cd3d-73e2-8fa4-0486f8fef12c
 18 4308e3e3-a4ae-7d79-acbc-7926dfccb96c
 19 c1a0a69c-3cea-8978-9e99-c8d9171cfb04
 20 fa91b14d-3c1c-0487-bc87-fe4c3c2564f1
 21 3aa7984f-302b-88c2-8a20-8b6179f741d8
 22 674d3a89-99d3-0e80-99cd-f02189a176f9
 23 e4d8bc82-aa35-7f63-9862-4c2fa6bd025a
 24 b4a6ed88-2a3f-16e3-8d73-4926eab1bfcb
 25 9664b241-11cc-69b8-87bb-590f7bff159b
 26 c9e10b10-31e7-6372-ad0a-447cee7fddf5
 27 6f238b8e-5736-121a-b286-03d26807d731
 28 39e0d14a-e2ba-2c81-a4e4-141095b0ef59
 29 2932a933-01c3-83c2-96e5-fd38474e7858
 30 0b21b59d-b146-6513-8184-a19dd6024ee5
 31 59d20f92-927c-0008-896d-c4653b2e58d3
 32 473df921-6433-41b2-8cb0-4f0d02a2bf10
 33 da738053-1082-36e6-b023-d91cece0a8de
 34 f63caf1f-a391-2177-ab6d-6cea3869884b
 35 43aedaf0-0a74-6cef-83f8-a24be646f2ea
 36 4adad1b5-abb4-8e1a-91b6-2dcec0c1ecfd
 37 9dd97d7d-cdd2-8f8b-974a-84e7b29f9a84
 38 f102a1ae-e584-20e2-b13d-3bad0e64030e
 39 604b2ab9-4ae2-2f4e-87ed-bb3d1930d681
 40 e4a355c4-4966-17bc-8283-be410cfb8883
 41 db6749e0-3e5a-6199-bf72-892015a6d39b
 42 5ba5a932-0904-7652-b591-c7b4a2a6e71b
 43 282dfbcf-38b4-4ccf-a4e2-2711794532e1
 44 eee09ee3-3cea-6414-a65c-c0e21e7f56d8

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 65213642582043807780807166128604326882216746. Exactly this sequence comes out of new Random(490).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 199 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related