201304160850 1cghp2

explained decrypted filler

seed 823

Metadata

Post ID: 1cghp2
Title: 201304160850 → 2013-04-16 08:50 on A858's clock
Posted (UTC): 2013-04-16 12:50:54
Timezone: UTC−4 · title 08:50 against posted 12:50 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201304160850) = 2a2499cadfa8d5414b9787dd036c17e3 (name+title)
GUIDs: 44
Filler GUID seed: new Random(823).Next(9) ✓ verified
Run: Run 45 (seed 51,450,859) (seed)
Draw: 28 · predicted N = 44 ✓
Machine boot: 2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 6 · 13
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201304160850 (name+title). Key = MD5(password) = 2a2499cadfa8d5414b9787dd036c17e3, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c47891e7-b220-6ef9-9b73-03dc1edf62cf
  2 876caec5-db43-2dbc-b50b-17a53e25d69d
  3 04d57aa8-7004-08ec-9cec-9450d3ebc71e
  4 61404a82-7249-1d59-a4e5-aba4f214fa3c
  5 d8d4fc46-14be-7a45-ac1b-15f2977baf37
  6 fdd27ad0-1747-6f58-9e20-4132e074d419
  7 255be23e-338b-50b3-a8f0-c6a46a01c516
  8 38b19fd2-ef9a-2b51-b36a-a362a1a36594
  9 e06a00c5-0e99-794e-bda9-192d01762103
 10 3f5293e4-d9a5-63cf-bfc6-3807d2250af0
 11 caaafee2-180b-5d12-bf01-9c0bd10b9e66
 12 c8f49f47-83cf-8ba1-a848-c57b181fa722
 13 6b292a26-5a3b-3310-825a-7bdf6e3df2db
 14 ca6ff032-42df-5b35-a64b-6e26445bd94a
 15 e145e4e5-6189-0fdc-b4c2-efe95236e03b
 16 400b17e2-1864-0321-8cc0-fcbc41c7d077
 17 2d601d1a-a5c6-7985-b8b0-8547e4cb1264
 18 8aac330d-9e0d-2d55-8745-6db852adc285
 19 e5e766c3-abbe-8986-8d48-3ecd89ad4f00
 20 d5e25aee-70f4-8385-98c4-b393248ff9c6
 21 9470d6da-ff03-1358-b1ef-48dabd08e50e
 22 74e1c012-c87d-604d-90c6-a12c8a592025
 23 585afc67-5682-0f5f-9e9b-29a2d396975d
 24 564552a6-c2ea-4d32-a354-453071d9e6ed
 25 511c80e5-c1e2-36a4-9216-a9dac5295dc2
 26 8fae9516-62a4-7d7d-a32c-3c38e2f3884e
 27 7e5bc0f7-6378-4fea-bcbc-5f7fab986945
 28 eea704da-f10d-58a5-b75a-a7765b33753d
 29 605ea829-f366-7c3c-ad77-0a6347603e1b
 30 929ec054-800f-8665-8d73-95035cde16f2
 31 844180fc-f965-0eea-bbd9-a02e81440e16
 32 21a7e9ba-2f1c-25d8-b59b-98882093bc82
 33 2f6ecd23-e306-2c45-8a97-b490c9bf9b5b
 34 a1b0912b-1a87-5915-8de2-ecb7d0e3fdf8
 35 484f5d8c-852d-00b2-86d7-f3c52d200802
 36 e46cfea5-2d28-3835-bdef-0abc2f2439c8
 37 c2397730-7079-668c-b37d-b2e2e45b05bb
 38 c0de21f6-0876-2c62-a547-b973738e2d12
 39 42acaddc-c3fa-277d-81d9-61805fa01e7b
 40 ea2e89d4-8927-2b31-8afa-2ca8483bba56
 41 387020af-c567-23f7-8829-8b93cb5aa33f
 42 c9792495-9eb6-3c3e-8fec-455f0bf7afd7
 43 aeeabc68-9176-80af-870e-a65fb7c18f6a
 44 17cdaaa8-0c9f-393b-bada-a481799f3f2e

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 62017652765835007288160437457802250362222383. Exactly this sequence comes out of new Random(823).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 28 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related