201304170022 1cihmz

explained decrypted filler

seed 975

Metadata

Post ID: 1cihmz
Title: 201304170022 → 2013-04-17 00:22 on A858's clock
Posted (UTC): 2013-04-17 04:22:53
Timezone: UTC−4 · title 00:22 against posted 04:22 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201304170022) = d7a5a4d13b4cb69c55f7cfcb94c43da3 (name+title)
GUIDs: 56
Filler GUID seed: new Random(975).Next(9) ✓ verified
Run: Run 45 (seed 51,450,859) (seed)
Draw: 32 · predicted N = 56 ✓
Machine boot: 2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 1
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

64A69B8AEEECED3E D71BD53D33F3A838 BF418C466EEC9EE4 81085A8A36B689F4 692377BB9E051CF5 2BB8A519D855786D 833BD2225E0B64CB B7D367F63AA8A37E 1BE83545D6423A15 9F4935ED92AE4596 CAAB93903613741A 2D624081025505C5 423E00E0B70A2CBB AC9A4BFDF9C0F21B C67205FE575F61C8 31FFA8A3E0BFD4AE 7D3355E39454DF95 5434582A068DCF64 D138063DB49CFB15 9A28A4A2A54F2F85 FC6A37F060C5AAFD 99339EFF919EBA5C 83D392C072007668 F9273BCCB7CCD443 44D5AA9C807550E3 82788B131097EB97 941EA5D4ECAA59E7 608DA6476E85CE8E 72A66C04BCC4A077 307175BA3DF8AC4F 623EA37018B2DF07 79B46DBAA3FF40DC 1C9263B1D4D49ADA 80AF4809393DBFEC 86ADFC07AF1BFC98 DD156B4803958314 560C862DCFC4E3F0 2B556DE0EDAFCB51 68FF8F6611978457 8227E5DECAF69344 200080502E250D60 13A7F51B56932FC7 1CF2432562A9B407 6DD48E6206845B28 82942C1738AFF648 5DEFBC5D321A6A38 A0B481AD56AEBA9A A36CDEAC893E21AF 3AB655A66EB6F2E1 8BBCB10BC0358D92 105E87BF5B86A0DD E2B79D159913E554 540A543C30447065 448B368D79377D30 D33CAA880782EE25 4A26A362CCCE6005 884D4B2EC099FD2D 2BFD65F2274B93BF C89E0CA17017F199 7C1A78A4D9061AC9 D95D0E02D416385F 8AAD7C9EE5F46E2C 36B30F76B12C68D7 ADBD4A9F24216BD0 24EAA4CF4DBE17AF 77293E46BBA84AC3 C6695C290DBD823D 649C9B5AAA771212 321E7E6E2D84F94F 2CD054A6EA3BACE5 BBFA478390E87756 67113A347E6F71BD 8ABA39230CBD1F3E DDD8B213A5DD5C04 A2510B265555A59A FB372268A47BD071 2DC88E947702E3F0 232A7B1EE5C3BEC2 E420ECE5EB2175D3 ABEDC77FA16AAA0B 8509C336A5D32E45 951AADF483FD85DA 0C575FF925AD401B E9489467A98E22FB 56887221DA327DAD C61E603A2651B40B 6B08209C98538974 4DFE9AEEC27CE200 F266036FBD5B7516 C1582BE0798888E2 4CC3EABB25E759B7 F57EA7102179AB5C 974581AB30DE8838 6CE21D0C4F3DF609 ACB598637B56E298 24A856B9BB61706E 054A27F159A347F9 D1EC2F4175F06154 F28F376D20C430B7 AB1510B218D0E3F2 A2DA5454DA0B8894 8232FAF4A77A1B66 FD141C682EAD6617 EE9826F4E243925E EDAE217677463CB2 25327E2B1003AAE2 41DBB56C5415843B 9E5965C6CC8CEBBE D89BE931CCB6DF07 2BECEABCA6C78C99 8F69A4D9ABA7645B 744F231FD3C3EDC2 CD396A028980CC9E 5CF8FE6EF5B36382 B00F19C826A881C8 6B71E1C07AADCDD7 1504CA8EB11196D2 AD1279BC29C548D2 DD4AB379ABAF9C5B 1EF259430D12B182 2E8C30B5E48FFE01 D4FEBD994217BFB6 2580398BA0F4FA92 5A14ADF86BF67A49 800FA893D7A30091 1C1A503B69881FD2 E7A90226DF05F78A AE59655363820446 338FD1B387E7B128 E20AE92A4D102FBC 4EEAA6649205C65A 1A071905A286F66E D1C292E24FACDDF9 C48324B8B90A4837 C3AF842359D68A85 4E542CEF876DA803 81D00A5CC3C9CF35 D3224A2F40B8DB22 818EEFE594609645 70CC1495F1C69F1E 79E310172FEDFDFC D5A7B6BD330FC5F0 1BF065F355F639B4 D456EA2E01DCA89D 54FEAE0F02C6F13F 156072EE4AF6C3AD 7273B3B1B3E41774 C59584D76EBB4E0D 3E69FD38468BDA55 795FF27402651C96 9D63C9361E667B4E E5D179D6A09471C1 CC4AA38A6DE623B7 FA2EBA9B8D277FC1 BAFDD4ADC8E81419 72CB71D3410E42D9 584EC0CCD77637D7 25C27896161A440E E4CA54B8604051DF 2FBE7BE56F218845 98C38B2B09D012DF EE773277ED74719C 2C9D6C47934E340D F266361A8F28222B 0F86FC79C94A1C8E ECA9B6AFA1F106C2 56ACBF0985CD83E2 294C66DB40F6DD7E 71B17AA443864D8A C5CD29193781C3C5 3BAAB71DF5307A29 1CFD7044BE0E733D B6251A085528E54F 9D1282D1E7CD8E59 29FB03226782134C 503F187D0540F4E2 4F7A3DA7199857B8 7904F3007D57828C 452202EF8288B2B4 AA6CBE7F25DBEF6D FFD3C96730D61B0D 580F659038208065 522E0E9889734404 613A1830F12F2866 AF2326CCB1E39D67 9D0F7A8B16F0C9B0 8F1AA3DF1BA1E005 A7D30487F100759D AB6445FD74769EE6 36FC00F726771D21 3FFA83D5796E7908 B9DB5B0386BFA0E5 8FF8775EA079BA9A 9AE18106372E6A3A 9DD92BDA78ABEA99 7150D9AD65DAA44D CB036DBA1BEE42A1 D57A70D21C15CBFE 95D75E6636E83733 BD52B769DD49EBE4 234D891D51074D97 7EE9014010FC39BB 6B3BCD0A3BE1A610 44E85BE1AF1C6FE8 E508C2753209737B 4D7E9AE049EF436B 27C966743BAD8C49 F2F39475E6E32171 27A9CCF8E27C568E 1DE358CCB7F7645E 34A3EA7464D3D077 E4CB5ED2038666A9 BD45802C418203A8 DE90B2AA5381A8FC 6BC7FDC84F1FA282 C02C0095D20FA611 5BE2BC69EC1C3903 1808CEF6D212D4C1 F210213E1BB9516D 72F74F367DEC6D09 AF8660347805036C DE846D1B0F2C8974 E6E42F361A8684C4 40174C13511BEEDA 19A83DC39E8D1A1E

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201304170022 (name+title). Key = MD5(password) = d7a5a4d13b4cb69c55f7cfcb94c43da3, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0320337e-71fb-0d77-aaaf-737422720994
  2 d10291db-b1c3-8ab5-851c-2331ba53887b
  3 4d56fc95-1187-21e1-9874-6a603db87a1c
  4 e25e8e1d-08b7-50a5-9a68-a8c9d111d661
  5 b109256c-56da-34d9-b9d6-d1c10937fbf7
  6 ee741fcd-84d5-5a54-ba59-16730be94b69
  7 be404721-0099-6599-aec2-d9b9021a6a95
  8 c8e7f3cb-2b58-5843-a3b9-292f171485d2
  9 c8cd17b0-1791-50c3-b0b3-e96bce0ce7bd
 10 dabd92e2-0eaf-7464-a8cf-1e26f358713f
 11 ae40c31b-99cb-5705-9eec-010da855f123
 12 c51f80be-1e71-57fa-b3f4-e1ec704f69b8
 13 6c664eec-7405-89b3-a385-b69f6a1c8275
 14 8deadbab-8770-6c9b-bbb3-231147388035
 15 87d030a6-a8d8-48b2-8b9b-a323ca8d4dc4
 16 91ca990d-f3eb-884d-9720-594f8d1860b1
 17 47793669-ea2f-6562-952f-1eafa9445513
 18 0bc5dccb-93c7-496b-afb1-82ed096a0489
 19 3b23742b-fcea-03f0-9080-7213136c0f41
 20 60a8300c-4792-7312-af7d-79d50b41b2e1
 21 c8092e7c-95ef-3551-9465-737d4adb54d0
 22 84bd2bd5-05a4-0c1a-ae1b-a366686a3195
 23 c2aead51-474a-6eda-be52-d718394f7202
 24 35a2c3f0-c922-58fc-b205-d707fd6f4449
 25 1eec8a83-5952-214f-95c1-bfc4ed38d253
 26 41475e51-e093-5bee-b0cd-60b4ec7ac23a
 27 d926e13e-f2d9-1d67-a4b7-b1d4573c6fc8
 28 1e09885f-ab37-7bdc-a3bd-45cbe6e49792
 29 0f298003-d60f-786f-86cc-c03e96ec7c6f
 30 8f510a26-c815-2381-92d8-0c62f467c9ba
 31 544bdff6-e54c-1aab-a6a7-777ed11f76e2
 32 4670d391-b789-2f81-9ee6-ba27588ae6b5
 33 8c3ee08b-ca49-37a8-91fe-90278755604e
 34 b0939578-5970-31f3-9150-b0ed3ac456eb
 35 07da0f55-cac9-0c0c-b241-68a5fe2ca49e
 36 d7fb8454-44be-0016-9d1e-d4e6699ec10f
 37 93fa3ec4-1103-6c37-a015-b9371da96d75
 38 938dcff8-b825-7bf9-bb8a-6cf64a739a21
 39 5a23db0a-5a8f-2d78-9f36-ca4fac6b54ba
 40 cc50271c-b079-5dbc-afc5-9ac833681913
 41 4d712463-5e41-065e-9988-a261c4cb4f78
 42 8129eb05-ebbf-59cd-9125-23c684cb2c3c
 43 c1277a70-a784-85b4-81c2-e390831d4db7
 44 72c07868-a339-500d-8c73-cc96cba6a770
 45 9cf8bd04-f5f9-8fe1-84ec-0dafaf08a9c7
 46 438d60cb-39e5-3231-8df9-7e58420b8329
 47 c30121a0-0050-0905-b12a-9ba567adcdc4
 48 93df9e0a-cd0b-6f56-aef9-f7d7c5a3c9c9
 49 615a49da-94c6-38d4-bd55-9273e5e791d0
 50 2defa29c-ce39-03d0-a0da-a8b2e17bd4a5
 51 d2205a86-9ed7-669a-93db-5e967d893a8f
 52 5f06b868-160b-14f8-b68e-29c8d4169688
 53 13f5443f-d0b6-15de-9e2b-99332306bae0
 54 d33fec38-007f-1775-9e68-2881ebe1515d
 55 fe36fd2c-d85d-325d-b4ae-d7113f8bf1da
 56 8d9b95e6-fd89-0e87-8006-78900e25e13f

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 08253565575586486407306525177212330067250585830630611130. Exactly this sequence comes out of new Random(975).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 32 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related