201304302220 1detq9

explained decrypted filler

seed 59

Metadata

Post ID: 1detq9
Title: 201304302220 → 2013-04-30 22:20 on A858's clock
Posted (UTC): 2013-04-30 14:20:36
Timezone: UTC+8 · title 22:20 against posted 14:20 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs: 56
Filler GUID seed: new Random(59).Next(9) ✓ verified
Run: Run 45 (seed 51,450,859) (seed)
Draw: 110 · predicted N = 56 ✓
Machine boot: 2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 5 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

BE74A275D89D78FC 749C3A071E4ABF75 F11E04327392CC70 D0090E5F2CA5B273 AEED7F5C1013089D 406FA5952C216A1E ED42EFDAF58186A3 A6E85EC80C35DA10 0D15FFFE37B84D92 55FD9210EA298C75 0EB92860F512676D BE7D438D12566C5B 5D3252DA3D767566 FA2E9E822A2F97F8 76D8E81FA843DF25 7211E6457A055A78 D5EF0EAB61DD6B6A 16050AD9F27894E5 2636F22176FF19E5 FBC93141B3B10A0B AF6F9D3C009681D9 91081A51A5D6BF46 66F95585BE6A3E54 3631341BC4B4FAA2 3A800966E9228270 AAFBAE199B3E1723 CB29CDFC0CC40968 6F6C0DD2513F1E15 67BF2BEA8F495110 A1150F8278E2E407 6FE48C8F9570B0D9 AB97EE2FD579642B AE8F050B86CABA75 762F15A0CB9B99D6 95C5856264025F23 C613C2E7B1199518 1B08847F773E0093 DCD53AFC6E1A8A51 44795A79C9208483 65026F188C077B0B 002967ED9F13E475 4D30008321DF535B C8D7DC4ACCE741D1 625213B944387419 6A9B95C64761D01C DF286B23988AFCA9 4B465B2B8A887406 860F515F673A6E38 B52FAF819E1EECE7 E7FBDEE5511CFA29 8355E631A4701A56 52EB1A662E143DC8 E10DD172EE413D61 C2D549E62DBDFA35 74AF1954B6485F8F F739646EC66F7B00 5E72699780EF2D08 C906E39E848285B8 9EA5BFD08970009F 0CF13E82599676D2 BE823E714DA8DB2D E0BCAE4AB7570309 0AE65FC17984E8C7 4FC4B4BCBAB7A380 2B3E61E8153AE837 442E06CF9E2AC369 5272D549ABEBD981 66D4531963073229 F85027A0BC8EA815 A33C5DADAF4FECEA 7B453C869650EDB1 D9735050939CA059 D69F2A0B1A6119E1 A7AA2C20922B284A 3423B886A33748E6 CEB1BD9B425E7B3A 05CA3C9615EDF6A1 9D6FE64F8C993BBC 0281E141AD219934 8B6F19EB0CD8B523 587391B0ACF1A19E 0D54C6EDC145F4F9 CCF505A0D3BBB454 5BD1C183233D015F AD872CF06D577756 5DA842D8F9E39AF4 7B7FC137F1880CEA 8E48BBE3609973C4 8406F056054BD7E5 6F53A48F02AF8FE4 D0031AA390B7B3B6 4420C291BDC7B5B6 065F274D40081A3A 31FF61D35586AC9E 973DEB4A2D6DF8AE 71CC5C148F8EB1CA 30EE2580E80CDC82 688E6196CD0F6172 AB288005C4AD66EE EE8C8F46EEFD4302 55905FABE45BA00C 8B6376DA885AAA50 489D3921FF547F51 AAC49515345CBF38 A7D191ED12BB2E0E 2A46681A3C0929E2 A56AE403B9B879A3 DDDC08B644E97702 FD6D9DAF02DEA9AF 4EE01FAC2FB391F7 7E0A8493C6760433 5A0FE8C0261C6B63 45C9C5AD93DE7B4D C499A62C768F13CC 8CBE7C0CDEA5B285 4A76D0E8C12AF8B0 6ABB3833014B8E01 460FE5FB9EDB97AD 6824D0F750233323 0F3807AEE4E5B08F AF7955880446FDC0 BBC7DEEF48E35449 9DA1E53CAEF0138F 121B9B8059F41764 8B350F682B1C0B46 F61C299462797425 746D58FDBC4CA2AD FE3FE333E5914C1E BDABCDC6A8F29371 CC418BD6365D65A8 D46C26449BD1215C 5E543818CDF88F21 E1B99E4E80796369 26BB5A2F00A4AE1A 9341B95C052BF7A0 1F362A5642C70ED3 0960ABA4DBD8E0F7 96CBEC647B7D3559 3C73297C79D2B659 13F34B5AF9CCC7F0 DCF20DE27AB49568 DDDF49C9F2B31182 DF441C41DC07C549 A500F2CA96561661 379D1A00113CDBF7 E27E86069A74ECAB C73AFADCD2D7EB4E 3C63EA9371ED9B58 D81369350BA51541 7A72F7D6633CFE91 F5661B2FE780B06A 00ADDBB053C7F5BF 05074BC0A938C2B2 3FC652EC4C6B2ADF 631F74AFC4763FDE 172304DB208E2CE7 879EC048E508F8D8 D48AFFDABC4D8DB3 03EBC0B4BD3759E4 831774C2DBE730AA 4F5AF61A83F26C00 093EB972803C60B5 5551CA94D6046C66 5FDE5E5073C51EE4 E87A6F3CFFB877C5 C6B90871FE0F15F0 B7B9D6DBE5E05EE3 9CAE4586AC99C6C3 2AF173AC93B889AD 3E3FCE5257425B7F ED9064B5CC9B7222 66B6C4AF5DC24CE1 F57B32D8AA3DE425 39901A1482AE6771 3B9D864A256BB31A 0A10B9BBB0F9DCEF 7CC3D138A699D6B6 86F6264999A71C06 D9A18226C3CF4FB3 EE0D4B04B20C3A53 909267DA63DA200B 4AE9D3D7CD5FC5CC E610ED1814F71ECF DCD357861C2E5322 AB53B10564BF0A76 12C62AA6C98C7D86 F17B98CAE9DA80D2 F20744FD24AEA6A8 723DF271DB1E2134 A1142C8297F1953F 026CC9D57158B8E1 5635403D56194106 333E84A6303A852C CEB6A0D595564A80 FC3B8A4B90474B75 610AE621E0D8BED7 98503EBBD38E3FBE 800ADEB32767D2C8 DE1B95257444A737 0E378CE71E6F2E3E 7A8095910D3C7A38 69F665CCFCC73DB2 5F5A1650E3E11EF8 2FF9AEB964FB1FD4 D00CACFE1677CAAC 34F4CDB0E91029FC 21E3E394BB29781C 7F27D022C08C657C C9650CD577DDA60A 44F53218E295A0FE F418983E08E35A64 736DBEE29679AFD2 06908714174667C8 819FB2FD16F219E4 E4DC023F84DCE2D1 E9823329AA6999FF 10D73719DDDDB9CC C4BC3918A5CC7B88 8EE9418C15F85462 304CA983B1F31321 1B081825A3E9EB7A ECE933BF8A45899A 5AB9B035FA7845B6 6486F04112CE7011 5DACFFBA8FF64DBD

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9af50f89-9ad6-4f28-8ca5-7f799d58c226
  2 f2ef116e-c71a-16ea-89ff-f39cb8fe4306
  3 e3e1455a-486e-0955-89a6-851c59c86be7
  4 0f58033f-1755-1583-9ac3-aab9a7cda3c4
  5 77b91cd2-4589-7659-9707-3fdb2474c58b
  6 b3f6c59b-80ec-1e3e-9a9b-39b590e4508f
  7 6ef6e867-e757-3ac2-b204-af9778eeafc3
  8 700ea787-46b8-07ea-955b-b8917e3ddf3d
  9 b80dffb6-e708-2d8e-bf79-972ba5be80bc
 10 8feb711e-db11-05c2-820b-5bbec1b6ccb8
 11 b143096a-4099-66dc-b48d-85a8a3622a66
 12 61e2e0e5-a600-4d0f-8185-a2d8f0d04955
 13 f3631f0c-fde6-1d75-aa9a-3036a871f713
 14 6faf285b-f731-18a6-a000-f2cb81a1bb9a
 15 54033ff2-5edd-29d6-99e8-5d89d26592a2
 16 5d3f08ac-fa24-7d64-9965-71f9767ef61a
 17 11703c22-6925-51f5-b831-e347a2a220b8
 18 ae515659-2926-5f39-8136-6249dbc57f5f
 19 9e5a3b5e-f6a3-21e2-a30e-4bdab6d851f6
 20 aaeb831b-e25c-1544-863f-92122bbf08d4
 21 f2cc0deb-a75e-59a6-97f0-88f0a9bbb887
 22 e790c613-64c8-203f-abdd-d008d239f131
 23 0a1c4e4c-6a9b-806f-bb73-c41a17bf129c
 24 8b7aa10e-7c16-5129-8724-d50d60d1174d
 25 413d7752-0f6d-4c06-bb7e-d82135d10605
 26 cd57a750-d3a5-4012-8250-4fbefbdb3971
 27 52c52347-fb0a-5879-a3c6-172e492093ab
 28 c569ae9a-4996-213a-86d8-07086152de74
 29 d30b8d81-ec76-7238-bf99-015fedade9c6
 30 0daf4a8e-7c6f-54c1-80f8-e571114b1729
 31 05bfa8a6-be4d-8153-a857-2a92c7379cf9
 32 78883f02-2c54-8675-bb82-9ea49de79565
 33 e1acfd7b-ccbb-0761-8e85-3c296917e2c9
 34 0cb31958-a7b3-4684-8bb9-513af9d2d6c8
 35 86c3af4c-d499-20e4-9013-8448ed882577
 36 e0c86578-bd79-2620-be86-231002a2eedf
 37 cff478bb-b001-8159-9c9c-ef6491215ba8
 38 acf506f0-407d-520f-af2b-75ddf0aee954
 39 98ec5753-b767-4520-a11b-7cbc50649ff6
 40 e9c7252f-545b-455b-805f-b3de1466e76f
 41 76dbf19b-48ad-73c4-8230-732fb83c24d0
 42 f36da333-2066-08b7-92f7-6d9e3af0f171
 43 fbde212b-dbb7-7b14-b952-dc47cc5c7740
 44 fd0cd22f-87e6-80bd-b13e-fa77aba0517e
 45 cd2874fd-7a94-0d6c-830c-3f903bb7a0fd
 46 e2181859-71b2-611e-9c62-821628c3f8e6
 47 2fa87f49-38a6-3a2d-aef2-ad79b417147e
 48 6d573b03-b47d-3019-89da-c4c2db9b8bad
 49 7b3fe3f9-c3f4-8f09-a070-0e01047fc438
 50 e9937221-eac1-095c-813b-5c4b8ee70ac5
 51 5a2e6ef3-7ae5-26ba-8ab3-a4bc49db40e6
 52 2d509702-bef3-268f-9178-ab2f382c28b5
 53 a891915b-9102-4da5-9ac9-2b2e4cb2b7fc
 54 4032d7eb-dc27-4df2-a6b4-fdc13cbc3f6e
 55 b2e45e27-8085-0bc8-a73a-00a6ad3b9e7f
 56 834970fd-eccd-28bb-8e88-f3a8e07ea56d

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 41017130206411275521528544527588042285447078063380224402. Exactly this sequence comes out of new Random(59).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 110 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related