201304151325 1cef6f

explained decrypted filler

seed 841

Metadata

Post ID: 1cef6f
Title: 201304151325 → 2013-04-15 13:25 on A858's clock
Posted (UTC): 2013-04-15 17:25:55
Timezone: UTC−4 · title 13:25 against posted 17:25 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201304151325) = b735a326684cfc9075496f3149f9e648 (name+title)
GUIDs: 48
Filler GUID seed: new Random(841).Next(9) ✓ verified
Run: Run 45 (seed 51,450,859) (seed)
Draw: 23 · predicted N = 48 ✓
Machine boot: 2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 7 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

51856DFF0553B815 CB95202EE7F185B0 6F6F85AA5B2C87F7 AE188C04503DD675 97ECB73B15FD8818 85F85BE6E9ED5C9F B4DEBFD026B2096C B0A68D8926BD6C7D B97389D1AFCDEB4A D17E467110C29882 D008F48A4DA397DB 758D78ABF41462F4 480273EECD178788 8A906DCE0AB39E78 D7FC58E52C6DDA59 3C1FD0A4501AE072 601FCD4FC42FD1F1 ED9F550404F3B9C3 A3636848C85E8B2F A43C07B55A12275D 9E92B9FF0C3F7160 A629AB92AE5D584E 9AA547C85DA0794F 0CE1924EB57A1370 4277ADE05AF6D6E3 789375F04376D2E3 F45893A961E5AB57 E8E23B2CEAD0FB22 08028AC5B6161A6A A4369AD55D63ADEE 727523FA3C181493 FD5BA911EB6B186A 877B076A8822CD99 30C41E8C291344E5 75A123CEB4BC5258 91299975D80ECD9F CFE7FE5530715F54 108CA3EC4624F99E 3B9CB34A13976C40 655A48D0DE36B87C D10269C8F8A0780E BB7412535704663F 11EB00A0A3F3D195 3E97D9C98613DDDE 3163BA80242DE2EC EC6697B9B447CE17 21581CA28F3EE979 3D06090DBAF31541 E8E7F8E2D4678C03 67334635DC03A102 79F6D4BD11930BAD 926C57F58EB6ED34 CB5A503C5E895552 B3B54C9822CF1A8E 80B6CCD0CEA1681A 1856AFFBE68B9B69 E74F059F421CAE99 3C326BD535AB7937 11066CFE20D24F8B 6E502DC63995D3B1 0557647FEF45E96B 3D565020A2D1C8AE 7EEB4CD131A065CC 5058FF7FD17AEA79 92E8BB80FAE72187 0F53C24D06A2EFDC 8C4D41268071E305 5AB16179946A8612 A79959339DCDD425 B1852C769E83F742 01D08D8E8E43009D 9613EB2301905302 CDCF04827806C991 005C1EDA1D85023F 2676BB8C907F6CF1 7032090E8C0F71FB 9BEB1E49AEFD60D1 8B7960D8925ABB7C CB8B91B9042BDCEB C2D0E6FE90A89142 B15ECF26F2F8245F 60E5BF77972D2DA8 5E4720E03FDBD00D 391A71C1DA024A48 198AD3D3B2CE9730 4AA62EBD738EACE3 3B725197FE68B50C 7D0661651A1EC10F 9428BDDAEC15CC26 E66266B831597121 9B01DEA5975AE7A7 80B1AAD4FBDF962D BD99EEFFD9D0C9F5 61B68A6ECD031435 AF89C44002BAABE8 35884F7FCC6984C1 B1A4F945CF9FCD19 992969C18146B0D1 2F3D41452B4C4311 FA1E925FD754F5F5 BF18603280505366 3E64AB4C86B1A01D 8CF36DB5714D46A7 5D9481BD8FA3DFB8 D30C418C682A7592 64CD90E7DA44C770 0B8E03BC951E5185 57DCAE44B844BC48 AA31A1CDE190AE33 B7EDE6451FEC9203 D2769C4ABAFC0D59 A1F8C18057FD5C23 F68F5A1CF60007E2 FFFCE8C2B9BEBF21 8658B96BA338D0A9 A9AB5F410D09835B 93C80EA52DCC65D4 3EED23E7B2CCD869 07386907B70CF2AA 058D4C2B8016ECE7 7DED0E2B0D016486 7B8182CF3A7E1857 5BB6715385C9311D C0CE23475F98DBD5 7240108023D58C0C 277B95CF01CE8EDF B6A7F4E71BDCD4A6 01DD7B853EBDD6A1 E8662155040CD632 5AA8DC18CF2E4C61 88B3A6DDAED71DAF 3147D8424A61FFA6 35E35073AFEFC9FA 7622CE50335DDA89 9798A61B018103FA 77E5FB1ED906D67E C09D6B826A3684EC BBD45D8A770A86EF 8F1EA9311EBC4E7A A16CE6232D49048B 664C13B347442CC8 74AFFFCFA2D41E22 E77898A430452211 608A852DE575BD88 8C22CE8402F01F5B 344AE298B20FE376 6A947A99D9AC5455 4ABD769B76F4BA11 569B74D41FCAB989 2D41724484C722EE D457B03286A6FC07 C796CE5FA245BC88 132FB6BBCD431D24 54E01D31592A7A38 2FB7FF07F3578931 8A6E65940F9AB3F5 C6F60B857F0ED305 E42606BBC00C6AB7 F3B7F03018AF3E0F E4B1B9DF2F416F2B 8A7AAFA2961A34DB 63634A9C95911F3A D1C038F5F7BE2332 2E2210A7C13DE555 1D441BA98281A8C4 9F1B609C0E2A7217 4430CFF22E1FA793 6C995CD680B26009 93C5B6B7CFA436B4 ED548D9C68F3CB0A A0D63D9A2ADF69CD D23EB600DF834131 04B8F34C3EC9755E 6C7584C585BDE067 B6C59FE8E61C29FD 565D31C20889A9DD B67506B26FE969F9 60614605BA783FB2 B6582C1B00B58B39 9F90D26CFDF8133F 3AAEDC3F71B04555 67FFA7A96EEDDA04 FFC84FA046E95962 DF088ACE942B4F20 C98760120EF1E20A 91F49AC7A8B7D1DE 377DA8739E7B7AA1 B8102FBE69408F4E 296604A391731151 7BA04AD8757B49BE BA65105E36C6E61C 485FDD0377EE36ED DD56862A82FDEA91

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201304151325 (name+title). Key = MD5(password) = b735a326684cfc9075496f3149f9e648, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a72c1f61-0068-0d3a-8ea4-2d245f3c7891
  2 0a92a7a3-acb3-5720-b3fa-f6734b32af0a
  3 c75ce2f5-a903-5121-8146-4b8d626bf476
  4 8a5bd96e-7502-0eb1-9d6c-28e444acd556
  5 ca719e75-9e62-8712-8a21-30c2e2279ed3
  6 f98b3b00-375e-4bd8-8bbb-c2c384f595f7
  7 7097cb38-7032-69a3-8528-d57809d2a8bb
  8 9f4abaa4-4e40-3891-b6b5-498b27c1f3b0
  9 e2d7652f-d344-0101-ada0-89cacb8d7663
 10 edcf0893-42ca-34ff-a774-d08823ba0c42
 11 5aa288d9-02dc-71aa-bc29-67a1447a8267
 12 589cc834-49e3-00bd-a03d-f0d91677ee2c
 13 788f2c0b-bdf1-704e-8e78-16ca421dd77a
 14 1cd37bb5-0914-0c8c-aede-936f9c56dbb4
 15 73740099-b02c-5c91-8d3c-0283a6a21785
 16 b1ddcc13-c56f-2152-b232-a3eb652c36db
 17 f691e734-7cb1-3299-9ea8-24b9d85e6ebb
 18 d6f99d9d-bc75-3ee1-b125-064c0ceefb2c
 19 4915ff74-0b9f-3cb4-ab48-78caf48d42da
 20 f6a6a3fa-4f26-84a8-b527-331a267f44a5
 21 99f3dca0-8065-5046-be19-3d3692465e23
 22 12e6e8f1-83a2-122e-a001-ac27c1b6575f
 23 fb748f82-e4f8-1af6-add4-0118aeea5bc5
 24 9c53b113-8414-7175-90e9-735bb10ae818
 25 14f17593-d929-1181-8ea6-a5dc952f9324
 26 dfb6f43e-271f-32b1-b28a-e237d912b3c1
 27 72c2c7d6-2a0d-8143-8e3c-f5a938791472
 28 0485c0aa-3716-79e7-9a03-c9584572c102
 29 ed91fe54-948e-7da0-9518-4b16a70c3a4e
 30 35da9d94-6ab7-3fb5-8867-0f2bfb1b3682
 31 cd65b3f0-75f5-587c-8b56-f14fd8f4fcc6
 32 2b66f06f-ad25-834d-954f-357ec5f2291e
 33 7fdf4b9f-02f9-42e2-bec8-62aebe45ccd7
 34 286051c4-c541-0091-9389-a6368ab13439
 35 ca0efffa-a7f8-2ea4-a17c-801914169a4e
 36 75bfe77e-9d13-180c-a4d7-0778afcd7412
 37 5e3fcab4-b5df-6800-8298-78243df48dbc
 38 29fa7ac2-62b1-44f1-ba66-5693c6359c8e
 39 a24b6f26-55a7-374b-a5d6-20225471abd4
 40 f6843176-9bcc-488b-8d36-3fb0592d7543
 41 e0141d2e-b146-191a-889f-0be785e20c3f
 42 86525a0d-4189-31ab-9393-f92efe7bae16
 43 ac752bb1-2cd9-2ca3-87d3-3983607a7347
 44 cd12cc6d-e0dd-328b-a271-1604f0764763
 45 dff25ac5-e84f-2820-b68a-197651c5def2
 46 3821792e-963b-3608-aaa9-16cfd2e5813f
 47 58203aae-ecbf-4403-958f-03a1d7706cf7
 48 efe4aa55-c38a-523b-aa35-ac5a6306e313

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 055084630370705233385117138773584021643413232345. Exactly this sequence comes out of new Random(841).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 23 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related