201304301005 1ddsxa

explained decrypted filler

seed 643

Metadata

Post ID: 1ddsxa
Title: 201304301005 → 2013-04-30 10:05 on A858's clock
Posted (UTC): 2013-04-30 02:05:37
Timezone: UTC+8 · title 10:05 against posted 02:05 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs: 48
Filler GUID seed: new Random(643).Next(9) ✓ verified
Run: Run 45 (seed 51,450,859) (seed)
Draw: 103 · predicted N = 48 ✓
Machine boot: 2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 4 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

E68B548BD754BB85 A583DBCE79DE184F 5B59C7373CA59A2D 225F780CC65629B3 8146C2B70D008E4B 3249A4869C666ABD 77566BEE85FA2466 03F35C4D899B283B D3056F6ED98ED7C8 B44C5E101B24FA37 E95718D47FC0C07A B77E80294EC32FD6 79844FF2833E1C84 3ABFD29CEB3F54F4 5676F5A2FD13FA47 DA2F25B510346EE3 8A8309440522832B D639C6D88C4358E4 063890F898ADDDA0 08B0B19EC93247D2 E302A2115D705A08 1A2542E0006DFF30 86D57BB09EC3D36B 99A4E225A999B193 02463903CFCE3FED DD6FA4C83D34E5A5 97F3689E40CA1333 DFD853901E818874 9B0ADE11E86B7501 4F85A649556DE749 1DD936DFEEB4AB62 64F0B20BCBEB58D9 015E26E0346894A7 5AE0944FE5A5F3E3 1759A5DD5FEF0DB4 FEF564B8E732C0FF 854439A90FF46426 69B2126768D23952 2201971E09119713 3551B1B3156B4E75 FB18637C2A3F315A F029FCAC33571771 0E0A7C3DC0CA88A2 6A147D1F8A9EF4EC 810961FD25E0E12C E3695A1FCB62D452 FEFA99462AC6B922 C7B9704E134BC149 FB5204DB9D344FD8 2A10C007A2A32968 3F79C490276AA05C FA720A02A5D2BAE6 A3F1D4FC55B2CA99 CBB5FFD4649A1C22 C5F4278050937DEC 7B7ED96B473F067A 1C06F96DA89E8602 68D372CA6ED7695A AFB5AE58E6C44D4C F14B29321DBED29C 680960DF6879FDAB EDB733E4FCCBFE16 B9A65E245CCE00B3 86CCEB51098BBA0B 61FDF437989D5D6C 99E7997CD343DD13 4A769AB46CBEF21F 427439AC136766BA 3C03AC831EA4F053 C08596BCCE971222 E2A39986CE2C534E F680B8D8ED2FE7DB 47794E32192CF583 5851FA0C338A6661 AECE99575047CB53 BC9D3E35223E6E39 A08760EEBF6D0462 D287E70E633E9ADF 76EEB37D80C9AABA 3FBF1C9CE0BFAE96 AEFF7F5B381625C1 96AADD144A5F6435 7654E4BD41D32DE7 239160256BAD1F6A 1134C194CC056043 8CC7BA12FF1C3F29 D90A6E0D0D7820B8 D1292D625F560100 42BFF098CB454DBD F82E8D9FCA9E4FC1 5B0E22A97D8D507B 12E3AB38FC7C933B D4294E523FAE755C C116C9B5376D3BF1 637025C15CC06849 A66D99F44602227B B76A28607880053A A490927A610DEEEA 82406E3F1F07585A 448E74E4043AE9EE 9D319CF052DCCE1C ACD72C89B5328CCE 003C8D0A30F40B6E 4AFE0ECFD98CC00C AA8B3EFB56A4255F 029DB8D39DC2339C EA9F76AFD82BF76F ED986770375BAA71 9F065BF3B40A4979 33F6DC4912C369E3 2CA6F70FF0B13970 2A32BED12453AB66 30B4D75DA07E9A82 D7D78CAD6702E899 9DCA8FDA88435CCE 261A38F9B7D8B8E3 CD4BD62B3237DB11 09CECB49B54356C2 70774B144CA481CA A6D4F359A91AB3EA 8EF0BDE0DE5FE5A8 B6CED330909A549F DD00CD481212F310 B628325DE16FEA0B 17C4A1F07687DEB1 837A2F9A182F9F32 32CBAB7C6661D92F E3706C057E422DD1 CB2F4C6EF0819D62 6C6E19655E670F2C 26DFD02CDE2BEA5F 4139BC463FE74C29 7135B7750D798152 E29A66E468CDC999 9DA81C31BA530A5B 1D82659B1673E815 EF81E6843D4F145A 6519C7D378BE3DB4 783406228252108D 48CDECE59280581D 33D1A883DC4E4316 8C9B74288F6AA0FC C624D547F93CBDC6 64A4D03EDB89C43B 1D8E333234FB4BB5 0A09A7D2062B9C3E 536AD72AFF1F8C84 84E2B62BA9B271AD 4380B8966013C5AD 41BE47C94729745E 89102307EBC721D7 47D3B0E746F6FC53 4345C65DED1C187C 364C7930C4ED4161 8F86E7087B693731 4A1A2608A4FF27D4 E49E73C2DC24238B ED25A75FD22DA560 2B3CAFA6C1D94AC1 1CFA4AFB95E5CFEE 8D178D48CC0C46E0 8040376C187A6EC2 153E1E6A0BC438FD 6ABBD103C566F740 763CE6361B087427 814A211EE526B9DD 8226BA50C627D5FB 6B95E88087EB1097 A3CCDD73662F2B4B 5152921DB1C2DD48 642ECDDC173A2D00 20E7187C273AAF0C 494E30A41D87E16B 2F4E0EDD82D8527E B6A7F2BAF352E7B2 1AADCA1ADFD74A6D CE6F10344DFA0F05 DA652F72DD7CB8B7 591AF5806F9C471B 65A13D3028CD5D5A E24FBDB1CF8F5177 20FF7EE42C59C4C0 330A316D3FDD445B C49611074E3AC13D 359D39005D47A541 D2079ABCA91D62E0 81F3901722C7FFE8 4CB289DC1C84231A C9B1CC918B12D985 1CA7937522B5446B 507009FF30D67D2C B8C88AB4CD5ECAF1 5DACFFBA8FF64DBD

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b8026e62-10ff-5690-b16e-85b9f1222db5
  2 241bdf0c-8b89-4641-b6fc-6e6cf29d7703
  3 d41876db-3e85-197f-b06f-6f1b9b22fa35
  4 766660f4-b017-7756-8f69-09074dc90b33
  5 0ecdb443-0f52-4bcd-aa06-83d30f2c96c0
  6 282a2b7c-b390-4a93-972d-729271597cbd
  7 505266f1-ac0e-0a5a-887e-583cfa9c34e4
  8 e1c61a55-4587-06b0-9430-a4f40afa30e3
  9 be09f9e2-c764-4801-921d-969e32dd2e1f
 10 f4d66597-b592-3aa5-8bf0-ff1d7383a81c
 11 71a504c1-846f-0590-916c-94e77590d09d
 12 29184e7b-6659-48f5-9554-c37b22ea379d
 13 ffd4a77a-20a0-5dc1-8597-35a014cfa33a
 14 df35f8a8-1684-8f1e-a014-4dd8f7b735dd
 15 4d13c52f-67a6-0d13-a034-1ef3bbc15a1e
 16 8682540d-484d-5176-85b1-8f172dadc6fa
 17 6b6382ba-da3c-16b7-a4fb-9ddc605e2da1
 18 0802dd6f-e6f3-5e1f-acd3-751c534a2e5c
 19 183d68ee-57f7-0d34-a440-477b7ed7e622
 20 1a52126a-debf-287e-97ce-41a582f0a6ae
 21 1d216caa-1bf9-21dd-a4de-b621f5f72db2
 22 b1fac272-52ad-53c9-8c21-6d3c49243d51
 23 a30b6467-1e0a-54a2-bffa-e85018b0ec7c
 24 3e223096-250c-5507-8397-f47a559b7be5
 25 a4a42185-36ef-6e6c-9616-47a0b00ab1a7
 26 8c6b6e81-05a7-0327-a1ba-4f148f07ffd7
 27 0e0e571e-8f0f-6678-97f2-17da5228a361
 28 73da0e7d-d647-0946-8289-a8044015b576
 29 aefbacac-0790-1e59-b2af-c8a80a4eb460
 30 73121d6f-0328-8e12-97fd-eece424fd3c1
 31 ffbc5768-636c-5736-9cae-c8583cf49914
 32 1f6f69de-8225-7644-91a8-6dba5fd5f484
 33 4e29512e-b200-7c42-9f44-ccb2fa1eef48
 34 1bb0bf65-db2e-0da9-b4a6-83448ec553a2
 35 56cec81b-cebf-1020-a5b4-fa05552ec861
 36 58c0ded5-1a54-586e-812a-1cc886306f82
 37 9ce46f0d-dd9c-52eb-bfe8-af9e63bf5ddb
 38 91062a09-39ed-5305-8557-2ce545809862
 39 cf630ea0-4c38-4c0e-9859-db2bbd285f0b
 40 22027f51-08c5-087e-8f95-2ff54b576105
 41 acc75509-32b3-191a-a880-b4549b0bc52b
 42 1200352d-8831-3d50-92a3-e9904695e079
 43 b6085c74-4588-0d79-8df1-a1077e59b4e3
 44 9d8f14f7-6edd-001d-ba8f-aa881fe2756d
 45 ebc6249b-b558-8da6-ab4d-5f67c94be17c
 46 9e883def-1d33-0003-a5f2-db2afcc5077a
 47 accf5202-0aa5-02d3-9cbe-293f5731a3bb
 48 4afaa5d6-0d74-4bb5-849b-ef9a2f305f2b

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 541744004304580515022555606018577015554013008004. Exactly this sequence comes out of new Random(643).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 103 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related