201304131056 1c9r0x

explained decrypted filler

seed 902

Metadata

Post ID: 1c9r0x
Title: 201304131056 → 2013-04-13 10:56 on A858's clock
Posted (UTC): 2013-04-13 14:56:58
Timezone: UTC−4 · title 10:56 against posted 14:56 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201304131056) = 346ad5cf8a4cff5ca0e3886d08bf3731 (name+title)
GUIDs: 56
Filler GUID seed: new Random(902).Next(9) ✓ verified
Run: Run 45 (seed 51,450,859) (seed)
Draw: 10 · predicted N = 56 ✓
Machine boot: 2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 6 · 2
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

190CDC71DA9F0CCE D60AC63EDE1A0613 1A94147DA77FF72B 6AA859BAE7926C85 9AF9E2A67EA10D50 9CB7A60D7B1D69D6 2600E245211481E9 CEEF08DCA61ADA4D 3DCE1E761E66FD59 3BEE410107E1524A 4E4254732CDF0939 5CAC94DFB389EA66 C3FC0C6DB6BD822D 34A284644D4CF620 31B5825CDD18815B 21282EAFF4BCF89A 8E04E564C297311A 5B308184EBB20B3D F4AB38EC60FBFF73 1BAEFC0F5609FC57 A423566F5C98128E B3456593BD734481 4DBDA358FAC4B0DE 418D9AC16796AF5E 898FAB7550D7D2BA C08CCF1B2DB4BAA3 F0C7F117EADA0312 46C6926F35ED9F1A 85BC6A368AE79D84 5F3A0E1E3CD14256 ED1FB0A264F37151 21340633E74F2130 7E02528E3C9C3A42 738B122B83D21751 9C3908EA29C5BD06 5694C8CDDA3FF47B 5F528719CD1E2405 D8C8811F1F618601 1244C4586799B42B 1C62D730A12A83C5 DB37C97A56C0ECC4 0D599F0FDA14F1B0 B7B2DC32C7DE332B 688585800A4F4FB0 126545C6BEB3BF2F 49701DAF90EFC19B B39C4B92B0A9F85C 3FC91179379D3DE4 1BEF59AA4DF99D8D EC52824DDC25A19F 3B1483EF863E5979 624ED937C305B645 50EB117318021919 19F37E097756C27A CCA64DF28270DB4A F54D99DCA56C7B3B 9C5F114FCDB75ED8 73BEF1AF4B0D852B C41C2E9ED4BB129F C867935A8984A744 954C188C40C83A4F 4944C50C6954742D 1C95AE730CCC22E1 3AA4F0CBEEF009EE DDF579EFAF350071 4730831C80FBA2C9 BCBD6FCD32F59391 1AFE50EF33ACDA73 8A15932DBBA64B1B 8ADF95F367A1D1F6 374C7F926D0D760B 2CDD13A399997DE1 D9AFE35016F97737 8730A4FDC11D3922 2842EB8DFA7D6C4C 1BB70313CCF98314 7FEC1F49A858D190 833E9064224C3158 D2D8F9BF166E1FDA 5559464A8025AFA1 6A25BD626A850BE2 86C954F283570011 4817F0A1C5E46E9B 19F5F16E0B08ABF0 3C887041428DCF1B F4F3DD8F0F4F86AC 728B3CBA4C435711 F5A4588EE03D09F1 D90658D444231CF4 70319734B76D8FFD EA28D35BBAA99F4C FC2C1C0AE1CB0FA5 FB61DBD6FC42CECF B68469F95D201302 C44EDC7F1F9ACB8E A90EED5CB6B93464 3E642BB49FBEF20D 339352E09E350B8C F37C0F4D6BFF70CC F0CD0456B52277D8 90B5936B7FEBA039 9ECB8FC91C717681 0DE567D76CB227B7 DCFDB970BE7AA92B 9BFCB29F83857682 5D7E2A79EF17E561 FC0C84C2B1DC3DB6 5074DD37CF6929A1 791AE23A57DA6268 FC884B93E4D90FE1 E7F280FA76A2C129 860B9F9AA83D2B1D D0DC5F2A3CFEDBF9 1E64493D75EA3699 6C127DB955E359EA 60E9A77B645DAE55 C42F1427FDF10CAC D96D67C43C699BC4 1A2769EC9065677F A1FE923D21BEB683 358FACC293A21691 65E88788BEBCF839 48E29A66617AAA30 6EBC7580E7108560 074079755A703CC2 DF6295948A506162 1B7BEF95D386FCC1 A13FC3B80B31890B 1F1290A5A6049610 8FB673B697651860 3CD88AA4A0D59F18 04AAB1B752EA2537 40F471627628B717 943F16A07245D880 29B58DCF5390902F 2E608E3E0F0DD9D0 B2C1E9465B0C7256 4169A51921F4EC18 2C0CA2A52A919E69 44FF74B9409A38FC D69D5958B80C0CAF 93956BAB85B2773E 22FAD754E9C8859F 89EF379D7900DD40 D3758B50F2DFCAA9 F01EDABE95ABF65E 972347618C315BC7 240A1C44C410F693 9C7ACCD5683AF7EA 160BE5E079F837BF 720D2663D4A11B3C DCC86228787D1F53 E948C3BA235CA4EE D64E9847E07B8E4A FF185D75A5A82B70 43042AF1A2D3C247 D35F5369923CCCD8 D026D3E43DFF4984 A5C7489D5FE761E9 81D1D675D6268B63 D59F7DC56B298173 BA53BB371F33E2C0 E2BB4CFBBF538A52 0133E5BE2FD86ED0 B14F0BF6C994B1D8 38D41EBA9B0C2C5C EDDFAFB50CEAA656 FBA18E3519CCD161 18FC3489DEBB0AF1 0D56C064A507B6BD B4E360F01F1C0826 0FE02097EA6E5812 E876C382113F0869 BC283316082E3C4F C5E07ED8C5A350A7 FF501A660A8E109F 0C13D966D4E44EEE 5ABA7D738ABE2564 4B350E3407D55473 8090E59427379C2A 02A87553DAA9D2B9 B1ABB932D73C8F9A 2AB07010AB457BF6 25A525C2AA9F5022 BD025DFEDD67DDCE 5F5ECF26E41D6F98 AA58DE0CAD0E5A38 679C2EDEB784B441 592C37B907443F6A 4DB35490CB9B38DA 33A65B84F8DDBE4C D7AB044696BD2990 C2E7B7F4308C2529 082A97D551EE4121 BCD1BA0010A8D6A9 58DFDC111D3FDB35 38FFBFDD81E97382 C18866BBBAF9D693 AAE1B9F83CED5EF2 DCE24AEBB53F9AE7 D6DE4574F9BCD262 F86C59F1F933D4C9 36E2A8AD592522C2 609A52CA6D9922E5 56C62594573F914C E2263104CCEBDACD A683A0A3AB077AAB DFA85472C9F61D74 12E27BC8EDA923D5 9D89624B7F752961 407CE40D43297C2D 1A0EAC6DE6326FE7 C312A4EAE91CBFDE A1F1D3C6189877E0 3E3C023B2B6A4CF6 8FE13F3B82C6B406 17A4D08127FBF7B2 C5B74446CBDEE437 556C876D24601669 473BEFA5E7F4990B F5A2BA49705FDFB0 C4EB5939EA6AC42E 9717438A37CFB933 F7BDE876A406B9FE 0350892772C07EFC

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201304131056 (name+title). Key = MD5(password) = 346ad5cf8a4cff5ca0e3886d08bf3731, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 67a9c6ef-593a-8094-aa46-1691d558ec31
  2 6a66eeff-f040-4fe2-8c23-65ce8445b061
  3 11c3c0dc-dfa8-2911-858e-68638b123577
  4 9f7c5951-06f5-0cc3-bef5-5c0b927e77c7
  5 456b7323-3757-4bd3-b358-26efeaa693b2
  6 c22cb057-abd7-72b8-ada1-2b5c74c3ecfb
  7 065eac39-49b7-04d4-bde8-89c445f0b780
  8 1a15f8f9-7163-821f-9e59-a5f3eb64cbaf
  9 42849472-1f11-5218-b89c-8c2b922f18d7
 10 ee0ff366-913f-78bd-b310-f1d6b2a22b1d
 11 9bf83d22-3070-7d2e-acfb-cc1344f7d5eb
 12 ddcba5e7-5134-6504-a207-987ac0fe6164
 13 ec75f3d2-714f-6983-a95f-6d301f37c80c
 14 f8844067-ad2c-6595-b267-765eec3b5a57
 15 0e6a7fba-2a5b-39ed-b16e-abd3a61b0bca
 16 d3f190b1-dde1-3aa3-8117-65ff3ab116fe
 17 1188e260-7331-0555-9372-9bcb79ca0ddc
 18 ce5f46bd-8b30-2ae3-aac2-c6e1a3e90f42
 19 706336bc-867b-0e80-a264-1f6f6a7d8d3a
 20 f4261852-4786-5e54-b4eb-db6b649ffa30
 21 d2154f1c-3b0e-5bfa-a6fe-e0fa9a5c0624
 22 48503a05-1a21-1c2a-bf94-575f96149485
 23 d95aab7f-7730-3827-9489-f760d3db2052
 24 92f8ec42-9130-1fee-b1a2-46458d67e3b9
 25 bd3db15a-4274-0e83-b2d8-1d86f0c9136e
 26 c1f6a579-cf44-6938-9499-d40a87c100b1
 27 3fcc5f4a-34de-3a8e-975c-f9c7d233bf32
 28 798845f5-c93e-5bf0-a6ab-86c8a4a12d2c
 29 61bb1e82-920a-6c33-9b60-0c9124191541
 30 87d9ddd0-c1ab-43c4-965a-6dc852934927
 31 90ea9c67-a705-1605-8b9d-62c5ec66c8aa
 32 dee01e62-5ab0-016f-8bdb-02fdaf828c4e
 33 bdb60fae-1e50-0853-b60a-966569cb6907
 34 4366e434-d5f5-5ce4-96e0-ad1a5893acbb
 35 e54d362e-3506-5398-9d84-0ef317a2355b
 36 64b25ce6-d859-7ba9-aa0b-a3e8f7a2a894
 37 66bdc5e0-9bc4-1d3d-9c2e-b27620e7959b
 38 be7565db-5c3d-0b5f-a664-37418b8439c7
 39 8edaf03a-b5d3-7a96-aee4-a449ccb2c904
 40 164449a5-6bcd-1447-9307-9413ac733c65
 41 2e45258e-5add-8ddb-b45c-1aabaadcbd10
 42 ef703467-b0f0-2965-be20-40a2f37cc4dd
 43 7b1a17e8-e4cb-15d1-861b-ad22d124a1b2
 44 b59ff649-3efa-3bb5-9630-e0cd0fd97cf4
 45 ab77dce3-c9e5-42e5-adbe-1bb477f267a6
 46 ec9597be-1417-1039-9592-7e147002f0f5
 47 fdbb56cf-5de6-10bf-ab80-7ce93a00d130
 48 488c2a14-8220-5e5a-86f2-8072d2f4cca6
 49 5dd21772-49c8-2d70-abff-2e731a58ca0a
 50 4b34b111-ea30-3b1e-b11e-7f49858aab2f
 51 5a9bbb1b-9ddf-1162-b7f3-25cda856307b
 52 72e87357-b495-2bfc-acdf-24bd1f4097ae
 53 b4af2a82-fe13-1e68-bbed-a104b60e0ba9
 54 5602caa2-1cbb-29d7-a25b-8b3f0f9a66a5
 55 8b35cd39-5c55-78f2-9912-90945feaca8b
 56 b5ae7258-bb73-791d-86bc-aa37ec24026d

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 84204708577666330205513106356410055710718213411523121277. Exactly this sequence comes out of new Random(902).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 10 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related