201303240659 1avmh1

explained decrypted filler

seed 788

Metadata

Post ID: 1avmh1
Title: 201303240659 → 2013-03-24 06:59 on A858's clock
Posted (UTC): 2013-03-23 20:59:59
Timezone: UTC+10 · title 06:59 against posted 20:59 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201303240659) = cb8b5a725e3fb6cbdf0c06422083f98a (name+title)
GUIDs: 56
Filler GUID seed: new Random(788).Next(9) ✓ verified
Run: Run 43 (seed 120,022,078) (seed)
Draw: 6 · predicted N = 56 ✓
Machine boot: 2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 10 · 1
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

72321DC92F2162A9 909B2B851BD3EC55 FF6F5208BB5EC3C1 67A40B151B7E0404 B03EB50E541F2B61 498B149088D8E3D1 E3A999256B591718 A4BDD0E28952DC61 DDB773D3F4EBEA0D 387D013986B06DA0 5F915448273DBF03 A31C771F6709FDB4 CEC9C99AD7524518 D1801AE3D4C87CD2 9C0316B740109A62 CE84A1CBE8C8EF2C C39EEF74B588ED9D 36935A86F675C807 DE5E194A18C6B99B 0BB2D37D429FA1BF 37610C33357D46AA 63AE91A1EC29AF53 B6227333A8AEDB9A 5D6573E0AFB63EE9 6923E0340AA41165 B956BAE8159A3A2D 366C3D002DBDEE5D B75F20B1E17ED095 E5B2D81255F39D02 9FAEBE382B8C5D42 1969555615D6D79D A3C11E96080A420B 7CB7458D142ACD7A FB6F791915122E93 9427F70B9245EC56 869C2CE1A1EB3CD7 6EDDA2D744532416 D9841585B8ED8663 30215F1B160E86E9 FD832A1E22FE4A55 AF34575155660D4C C30FC8B92C5D9541 217975DF27DBBCCC A3280FC3957CD5A5 2269C6E49DB4D594 A7C27451E9C558FB A0659947847396CC 19B69DD5704FBFBB A0503986C4FB473F 722F5D0CA54A7DA4 8A34ED9670BE83F3 B11A3F429A17CAF3 8B8112C29CE98210 F27AF8C0FC36C883 FD6AA439488BA0F9 4A74058D4EA931B4 E6B31754838C48E0 276C333A45220E12 EC17ECDE4F12A41A 4E1BEC5A8D786133 4F201911840CD899 0755C696FEAF5D72 6215536068E5F5EE 7C96D82FF99D8202 C6A1677597F12EE3 3F459F44963A5A27 4525248CF8DCCD6D 370E5149B92573AD 0D287C378362F706 0EC9508A131E0CEE 981B845ECE430F6B F4207037491512FA CE3D41DEB2C13D0A 7E027BF8D7090E76 BFCE5B4FD8946428 612542DD87E58B81 DE04D6B9C823BB2F A4F4908BC32F187E 2BC05018F5676BA2 4DEECC0D38993A4D D384DEC40FC00377 F5849FC626699CD0 B4C2E2E1B18637D7 6F59EA9E8FE82D15 7DAAEA3055AB3E2E D6702A58D990BC82 BFE60A664C93D7E1 ED492371303CCF6C 4C84130067996312 5D7E007DA12FBE34 B11B7F9194992BC6 0A192EE115D9E1F8 85105E67715ED9A3 77B0E7A8BA99EDF9 B51FD6DB9C27BF83 BD52829A24E1749F 28D627E5373B8DDD 7B7CD86BB1523D28 A32658CBDF21A4F8 9B876136BBA508ED 627FF0840F6C37C8 0FD979E94155F068 019E20FEAF2CDDC7 FB45D2709020F4C4 4E5911695D068B86 642DBE3EFC9DC72D 5FF73EAB625D0941 FCF0017B53CF1D9E 432A99E0E9594A80 126F44682D7512DE 3ECAB2C0B2914BBB 33A20C80F86FB932 740AF9565B8B2933 F159AF4C597447F1 94397E5E578D1E47 B861DEE68DD3E07F 5B08BC07D72256F7 015878BCDA4C3C3D 10522BFBC0B7E6C0 A9610215DE2A4FD8 D0AB4CFB51450E5A A7D4873C2C382DE7 B716DD29562F00BC 68B588E03A4CD699 816B65CD62F93229 A52767DFD90CCDC3 116EF49F3B97DF40 A7966C7616FCF917 6202746E25B16FC2 0B25543E2FB89430 B1D887D8C98970AC 5477919035DF40EA 919BB6116A87474D 7C7C4411230EF3CF FAB2D22F8C5E829A 412991E4E040CD01 5CD69E8D5737189E 051C5F44CC260474 F4FC5E923C8AAFF8 0D596E7E393417BC 1F580A4025169E4C 620B1B2E24CC4D5D 082177BE9C609A86 AF7054490EFFFC70 6CFEA9A72E726C79 2E160ACF2ABDE1DC 341E34E9CD90C0C1 71A22F30AD594910 85A9366C3061FBB7 D93476389D357937 47F5162FC18BA64E 659163946A8DF05A DDE5C9C1E88AF510 E6286C5ACBE2AE94 58571CB0CBFA4D60 D2022B11A5847DE3 CA3BF62C73890F5C A67B66C6AF704309 B52D9E62DE95E08D FB8C1505A2F81182 553C2F815C3184C6 59CFF493B6D6C19C 636A4D98B51EBED4 163D398F4E897A87 905ADB7582D90DA5 8A8E8E5C53CEE6D2 EC1F0E8BC5339AF4 0FDDFFFA290DF2F6 997326E91DE3710A 30B609FE04850533 CD67712487C70C33 201A0B7A2486FE85 13B6097744CF8175 36C3730329B3FE61 B3D1DDFB4808FF33 6A4B1176F9748325 4541A9D2CF3B2DC9 C86A7E5D3888D59B 25CCA93E6410664D D97846F916335688 D5240D1DF7E64A63 98D169F3F1DF15FD 0BAB9C6AC1282087 C849C0ADAF539EF2 6F5CD9D7CD48C63D 6DE01B62AF340A62 2CD1189FB8D605E0 5211CCFA5C0EB60B D850181C9445A198 B111D0289661457C A091D983645889CA 93636527FB7753E9 7AE05E51A6A4264B BFD68A9E0759F5E9 6D4D5A06ADE0D37A C74F17A91736196B 931E7CE406B64B3D BB3FF02840919FAB AED0C2EB00AD1FA2 E5D0230DC4EE626B 38A2510F46C6B133 67D4FA3FA6D7B0A4 82FA345E024C4678 655EEC0472D9BA0F A02CFA7373AC3DD6 4AB23BBB41F3B61B 53DF120EA46715E0 B89726BB86C3621A FCCE23590F41933D 387FB0907EE6688A 00F99B49B5584E28 C4227019CC720631 7E54B2DF36480579 8DDAB03A9748F9C3 A3254759F63F2773 BC5C5AA876ACF9A9 C23D835C7BA62110 0EEB6AA53D4AE033 4115D58EFF0A6FF5 0C18095EA27D9A11 291FAAC18D8B8AFE 04863C8BF6D238EA D8B8020397346582 ECF02DA15BF5F64A 3FCE182479110609

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201303240659 (name+title). Key = MD5(password) = cb8b5a725e3fb6cbdf0c06422083f98a, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 765fe907-5089-3f71-a062-93f0d4880e44
  2 1cd0c3e1-408a-0cb6-83e3-d0f460f28c47
  3 e9c3931c-4f0b-52ac-b633-a2c9194f5393
  4 21682639-7249-67a1-a843-765460009674
  5 28044324-96c6-8853-9a86-e71ea559ddba
  6 082b2371-ac18-1d1b-9ba8-51238d0df18b
  7 482114b0-472a-811b-b0b6-08d23f7ec1fd
  8 89809ac3-01c4-6861-bef6-80976940fa48
  9 23496688-8354-41d4-8c88-2361ccc19df9
 10 b917e538-e1cf-771c-9d12-d394cf326023
 11 64bdd8a6-5f2d-7191-b1c6-98469d0daafa
 12 9e42dc6d-5961-67ff-81b9-70795e2fbd3d
 13 1c0c09ba-e912-392b-a739-6d09eb4f630a
 14 523184b7-8788-3b55-8c86-88aa4120bd54
 15 a7e5dd56-531b-5d43-8937-132a438bc6ea
 16 7d6382d4-6e9a-1f2e-8f4b-bb8ce95ab8ec
 17 60697498-ba64-0064-9b15-d65a64023d52
 18 a9cd6142-134a-448c-9ff5-0a17524b3140
 19 3a115e3a-f447-030d-bf73-8d53b23ef686
 20 144f7f93-eb4e-3572-a044-ab2c7da22ff4
 21 c14caf6b-ef6d-403f-8680-5b5de9962e72
 22 767b0810-a7dd-1b3a-a125-ff7aaaad5a79
 23 cd71d3aa-7e78-1ccd-87c6-bcde0386de9c
 24 aedb4d01-4384-2283-b8dd-d8726e04981e
 25 07077b39-cbff-8412-91a1-9f7380360f21
 26 b5211311-bc27-389c-b8d0-8c52807454f3
 27 6a838bc9-d929-3c4c-bf21-9a1670b78a6d
 28 4fb7b36c-dcd4-8ea1-b621-4fe44d702c44
 29 b6bc5460-6777-17f1-bccb-19234836e298
 30 a8c55194-98ec-6b25-be0c-ded24806f71b
 31 14cf18c2-5e4c-0d45-91df-d899e4262f1e
 32 ee4a26a3-5306-08fe-ac19-b56d0784d852
 33 0430b4f3-6371-1967-b87f-de14ee36f399
 34 c71ee8ce-23cb-696f-a700-16c1e3861361
 35 c439b512-3a5e-788e-a15e-95c3b50a4c23
 36 1e39c596-32f4-8bad-aaec-b319605ceec7
 37 172caf38-deb5-6da4-a4f2-f9e6d70a7843
 38 9cf8a2e0-51ae-3208-99cb-e2ff5d2f9d7a
 39 27ad4f7a-0a1e-2124-a942-7e5cf4d7fe54
 40 780a5b8f-8725-3eda-b81e-7b917b420b64
 41 c9c67adb-125a-4e04-bd93-52d559455589
 42 e3fc9602-7fc7-5cff-8540-78ead87d5ddc
 43 a658771f-e1be-8207-8583-ada371657de0
 44 38e45f21-0085-459c-95c0-c335c90956fd
 45 899fbe8e-7442-3cf9-a505-a024a647fb6d
 46 4843d012-84ad-6e84-92d6-8b4cf8b47cfe
 47 51b3fa8e-03f0-3531-8d31-4df953459cec
 48 dd224854-9331-7a0e-83ab-55b23efbf02a
 49 5016eaaa-ef82-17ac-bffe-a2d9d308c726
 50 71e89bcd-b66c-3611-bdd8-d49560bb7270
 51 3093ba8d-3dc6-8c1c-b0eb-867ed6e91cc5
 52 9f6e1600-c1e0-7c85-9ab7-4f0c189ae802
 53 72f7eb5b-eff6-2c63-b72a-f3512256c09b
 54 729613c3-909b-00f4-a323-2ea9ee4a7f3c
 55 2dce5160-5fb0-8108-a5b0-a87186ca9639
 56 e06fcb96-0508-22f5-9b5a-e1cba9ada5b2

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 30568186477633510403411283381600167863234584363713872082. Exactly this sequence comes out of new Random(788).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 6 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related