201303062002 19tamq

explained decrypted filler

seed 181

Metadata

Post ID: 19tamq
Title: 201303062002 → 2013-03-06 20:02 on A858's clock
Posted (UTC): 2013-03-07 01:02:48
Timezone: UTC−5 · title 20:02 against posted 01:02 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201303062002) = 787f146c5c0b8e8f1bdd2995f0319bd2 (name+title)
GUIDs: 48
Filler GUID seed: new Random(181).Next(9) ✓ verified
Run: Run 42 (seed 983,934,859) (seed)
Draw: 223 · predicted N = 48 ✓
Machine boot: 2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

8306842CB35A5FE8 15402BFD92B2F36B ABE878B9C1538320 6A6A9BC0D62C9BB0 B4CC2FA27471A8D3 6BC00FC45465368C 2D0B6698F521924F 5C0E266F5D2E07B5 A1FDA5D4E1FE7537 5CC25296F5ECECC0 78A4D3CD1734B0CC D2EF1819BC5976FD D0A80BF800FE858A B112BF4BB2398EA7 1665C15413FFE888 35D8A37361C37239 609D8657AD482B19 502BEF135BF18022 98D9F4163F24DEB2 22E93012DB38FEE7 9BA1696FA7685F77 82EE2226879884B5 F9A1964ED304352E 4216F70A2E535964 AF3F919D7A46D40C 89ED3FF378D39628 DE446301647F83A9 FF3E4CB3BABBF861 D246EF07E845C353 7EF177952B6350EE 6C2964B3B65A8984 F9847BC3A024ADF1 5BD9BEAB0C892474 289BCEFC1378D2AC 31DFE8ADB9721F6F 771C988023364A96 031E3C6B66444C0E 8701CB9333EFC6C2 7A84A96BEB463381 44833F169F7B4653 DC32F3F5F9F8C476 006F524620AF6AD6 06FB8DD901986BDD D760828C50595A9C 9799542BABE55D24 2C3BA2365E84FFE7 3038F5390DD6E97B 4F6CE2F9A25FBEE1 478C7431FAD740CD 190C68FD4490BF43 A29C68A5E1055EC5 605A827EFE060C94 0D6B21A6A2DA2C05 B0767BC361ADCD35 D2C328E1F0E2F1D2 8730ECBC7A1FDA1A DF5AADE17153CEC2 9856F21D3AD380E0 71D9B5581FAAD57F 41C611DF04256D26 1581AA82124BABFA 24B16016C270F701 9FD4258126A78050 BC562890F7B2505B B35E62301356B279 A545A3C490610260 9AB5431AF82DA08F A8023AFAB2E8D8EC 76B66C39FB95420E 64FAD00156045C3F 9EA8C83A6AB3B95B EFD1B669BF34A070 EB0D0E5F0D23FF7C C239EDFC9DA85DDF 547240944D628D8D 5AB8C671B404B994 23ABEAF84BED4F72 C98A37EEFCFE08DC C8BA6F3386ABF113 6243D2F604C684B4 6D980BD1566F58CA EE086D370DDCF678 00EB4CD772F435B7 C9C41EB002F8CB42 A99B82B07E9F3016 C9A26BE0CB2503DA A92F69950C3516A0 80516AD5AE2B52C4 A4D36A7335B9F6CE FDD8AA53C42F0592 36C28C154FA17260 4542991EEC43043B 5C43381FF29870F7 4852B38B5F4EB0D7 FEFA2BF991028349 E355568F2BEB2C25 78C32A9DBF7A3E87 02CDC0B2A2B09F4F CF478CC3FA10EA90 68462798AE0782C2 69C11D2A546ED3FE 95F597116AA4F8E9 262513915DD93D6D 2AA8C4D97AD940A2 A8CDA6A65272E3F5 134E190247F1EEA1 800D4AF8183AB96B BFC1F381212B2A9A EEB5AD5DC38E712D 04366FBB7002E7AA BF2F22D296D683E9 8095AD173E6F1955 6F300603BE9D59B6 DCE137D31701072A A19F1E9D5B65ECE9 2E19007B59FD6389 03296EFF0171CFBC 93356C9937006170 8BC1983AFB76C690 B956207E663EB336 F9AE3950B9B4B76D 8D50FA35718D64E4 196C56808D6E68C8 EB866484DD9D257B E4789162C7D19FB7 2E196D12E901075A 7B363A2C68AE1ED8 E7DCAAED075FBD79 9F52AC35D8C37038 C8DB526936714ADD F9259A6B21877293 5F340851C0078B54 73FB761235BBBD70 F7C6074A535E5026 AD24996B2E94CCAE EA269D378B5A46FD 425E659D18DE85C8 FA9049527B2E2D34 C2809DF6F40F2948 AD218D4E4C87AC29 3E833BEA6E99D82D 4AFF5C3C2D6CF7F6 39CA5C357D6E30E5 683F82FD8049F098 D004CB05E3D73AB7 10DB7F422441C41E AC49E16F8EC35816 6FF492D1993C141C B3B74B3C3EB2A37D 27A3FC5470897C1E 09A3327710B1C146 A12C77E2F1B0CCB4 55A26177D4762847 294A03C8A51C8876 FCC7113FF6E1AD6C 6A306E3265738A84 AECF03F42A4A3A9C 0A52E7AA870429A5 314E153E4BD4C0EF 3D31E4ECC57EAAE5 47FF43938DA62829 F4B04C2667485CC6 8C94FE9A471540E6 32D7AC043296689D FB167CBD37F747D0 EC0C8BB78289941A E600EC7BDDF4A2EB C26B5C7D1C5689C8 D9B05909E2EE8EA6 D9C66B4EFD37C78B 4957808E5AA22E09 D4AC379FE5052479 C2CE038A8CA5202E 3707C9D4FF0C799D 300BEBD16C1C7176 0A36A30F18105A79 A37C6B99D08DF70D 3D31839ECB9E0549 CF89BE58696662A6 6873AA37CAE51AA7 75A71D85B7F2C7FA D3DBDAB0BFF679C9 90914E21BF3DAF69 F3E9ED511EC97185 F0C18DEAB533E58E 84ACD83184B0EEC3 FD4AEC9FE127746E 4CAF89845D5660CF 07D7393F309BA35B FAEB9F9A0C150927 75E59CC66D3F145E 2999E659D0702AE9 4A3543911D6D9FA7

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201303062002 (name+title). Key = MD5(password) = 787f146c5c0b8e8f1bdd2995f0319bd2, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2b1c8094-5434-2f3f-9553-b1dbdd0fb0f1
  2 11bbd0db-ebbf-8c7b-a8a7-ddf82087cfbc
  3 e8e2a71c-408d-2d09-9b1d-628c22fb0734
  4 c57cad63-d5e1-10d9-93aa-d0c6ff71d5c5
  5 3b5b94f4-0814-86d7-8134-803af84e6ed1
  6 edc89f8d-6452-6bbf-afc0-ae89564e303a
  7 b9182151-334b-0792-a52c-c08972edcd42
  8 494094f7-9f2c-21bd-a4fa-39636bfe5109
  9 18072663-ca5c-36aa-bbb5-284d18973f92
 10 00a982fc-82e2-02a8-8594-e6de59d6103b
 11 7486bb75-2663-5f0e-ab44-896279a08139
 12 6d0c4c2c-9735-6c74-941b-36e949556c47
 13 3b84a370-9409-041d-8ffb-b31540a4ca34
 14 ffaf5276-7abe-59c2-93cd-12a74c664cc4
 15 8ad35cfe-126c-6c82-a719-3c4e3582d3a4
 16 ccf6285d-4b02-0513-98d9-c8cb3662f0dd
 17 f87ed423-43f7-81d2-b882-2ee5dbd5c2bd
 18 72df6b3a-439b-1596-89c2-3181aabb8fef
 19 8e1e5c51-76ef-5b6f-87f7-b912ca62a2a3
 20 42018cba-f946-352f-b4fe-4cb33928b605
 21 06c5a51c-7c81-70f4-8174-a5af5185474d
 22 cf5eca20-208f-21a6-9459-69e5068c3f26
 23 e33749b3-521f-51f2-b41c-6b587d86262f
 24 380d7e76-46d1-2a27-9fdf-54d435e44509
 25 710d46cd-0b51-3355-b3ef-36926d548a04
 26 0f7a1485-dafe-82a6-9747-b3b1c9ac361d
 27 df759491-a9c2-4831-b47a-10796b679f8e
 28 83e93e1d-56cc-7352-a1f6-2d7a5fd884d9
 29 05d51a45-8277-4e9f-af57-9e7d46297463
 30 0ef6c89a-3c7a-7848-99ab-bf80702a2db1
 31 c59907d3-e636-038d-9aaf-a8b1630f9c29
 32 f9616ef1-fa81-11a7-9ec8-b6ebb9f668f4
 33 bc1a3ce4-1cd9-02aa-a865-aa008748047d
 34 14b95cf7-720b-4f5c-92e9-c340592e7cba
 35 39cbd01e-50ff-7093-970e-90b92bfd710e
 36 29dc8336-1e4d-5298-a686-604b0c09d9dd
 37 e715f85c-74ef-80d0-8727-4bfd25189d59
 38 7dc5e637-0e2b-6840-8273-9c9a01069267
 39 ab9f63a8-81e7-3f0e-9eb1-27458ec96dd6
 40 c6d92fdf-cb65-6785-b7ce-8047bf8b2623
 41 e4cbad8b-7936-450d-85d5-fa00f8b1893f
 42 bc2c3bc3-c3c6-0079-9491-12f61ac2879c
 43 b3cbc9ec-8a31-6e2d-8b2e-779146e07b36
 44 20a7c02f-8169-66a3-a503-91800a8273a5
 45 a84c9526-ac1b-3078-b447-7be04ae1f211
 46 99cb8daa-4750-1538-a10f-70fc6497a996
 47 755893d1-83b7-85cb-805b-eee88be1ce9e
 48 302f0580-1d1b-243c-b3f2-01ff12f24419

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 282186023056056081537252384747010475863640663182. Exactly this sequence comes out of new Random(181).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 223 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related