201305010520 1dfrl9

explained decrypted filler

seed 696

Metadata

Post ID: 1dfrl9
Title: 201305010520 → 2013-05-01 05:20 on A858's clock
Posted (UTC): 2013-04-30 21:20:36
Timezone: UTC+8 · title 05:20 against posted 21:20 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs: 56
Filler GUID seed: new Random(696).Next(9) ✓ verified
Run: Run 45 (seed 51,450,859) (seed)
Draw: 114 · predicted N = 56 ✓
Machine boot: 2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 8 · 7
Tags: automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

C37A35EF87A4602B 350962595B09B9B7 05206C24D3600312 E1BC59B7E92FA70C F0B404818B474493 75DAE0CC93D1016A 61D46A513CDD84D2 7E3B566FC8538FF3 79FEB82A5B170A5E 37E0DE8C9DD5AE55 F38E2C61B7C66FF4 F55F27A1C709B3E5 B41BA1BB90A34704 1B09363FD8EB8A78 4B8F3AA0CEF959A2 639F248D3D711074 00FACB1E8DE7557C 799DCB46D73A74CC 1BD8990769A79EE8 1A907D1ECB7C2234 4D167695C26A008A F9EE4EF71DE395A8 2ADDB233CC37884C C5A4EB80FB490A5E C5C3699EC69A98BC 8E9FE6C2F1835524 D09F25DB2599F139 58F201D6E0759BB3 A52614DE28A4063C C73E5498DFA2B28A 2239C2FF692E79FB AE3E50272DD6D392 5C67700069F8CAEA 4C0F90FAEFA87CE4 3872C1458A38BFF3 257C98F8AB205540 7B626FA4D2AE389A 2FBADDB977DF6C27 6C5444C8C11027A3 EB9BDAB9A5B09114 0F001FF29697B224 1D0DA8DBCCE5DA34 998208FAC5F676EE 5A3982A7109454E9 5DE2A5E7C9FF1356 0039AC3D7E7A6AD0 DFFC3B53FB03CF3A 6F88995A8DB2FB36 0817C0019A4C2A96 4F1565B44F21D1B5 6D64CFB109D146F1 072449E63EDADB33 449A31F69187722E 1BCF9FFD2425BD16 CA287F06DB5841DA 6EF40B5912BB6295 E2452F57CEF3BEF7 F938F2DF1D8C50DB DD534CB96C31765A 9FDBEA9FE03F25BF 5A65159DDDE2E554 3AEA5F4CFDC2D29B 51078C1E4EE62C96 E161B97C7D7E912B 874DED8D5A70C0C2 BCF4DC2A8C37EC09 651366529DBC08E7 04CE8DE784F87B8F 5FDA554BC100EB01 A22EB1C45FA85A5C 31869CB3A2705A69 43575834574B7EB0 A726760A63AA6F4E 28F383A2DD9A74DA A08ED6354C71FD9B A1D5449FD0F308CB 2A391E85DBB72013 8E3AB27EFCA789B2 DBB7509D4C2F3B65 B55D35746B37523E 02454885378F29A5 2FE7B9F367B406CF 22EB14FF6455DD31 D9814ECABE46BC00 9628BF4447AC087B FC1919BEB5CD67DB 3C6A495B68CD714D F2D68C477564E93C 91FD27460C5B3245 25D1981FC38CFAE0 697D6D10716F0DD4 54988EF66B7F1B46 171A5E1281D3134C 944DBAA9913A8D81 50DBBA2F6E58BB40 5B938012A42ADF90 DEE009DF80A301F5 AE114E332FC875F5 D7C48BCA14E33ACD A96779AF9A91E1C9 4C1540D5E05A97B4 5CD5AFFD9AA68AE9 4B4C62BBB5EFBB3F 3442DB51E294DE36 CEC3A4B22F3EF143 4DE18ACF4C75F7D4 031261E73C83A6C7 42B9E7CB560CE7FB 30CA32A5DBE67B23 49AA5244C9D1FE19 AFFD13065AB504CB 865F2171067A392F 80A544EFED06F37C A8D373E970946A42 F650BC98EDC567AB 3C2882F6E0103385 FFB70E08E60F0B81 59E9058FB05C982D 9AE5EAB74DF1C91D A33708C7962C75EC B36DE76CE7190626 138B2A4B3F72DC1B F465D288F6095F96 5A78BE29ED52F800 E5D33EA4B7D0ACB0 269F98FF0E5D1788 4D9486380E288F7E 600E4C642F1D43E1 240AC0D1710DC233 623170C4497FE31C 37E117C8724F337E 8D567B689DEE4FDB C3ABCD93755B693D 5F596FEDF1C6256D 086F67FB66F7AC25 CA3AEC477CCC0569 FECD9B40BE213A5E 59C98D8D7B65D7E2 7D9B5F37EA62CE02 255B2C3CEEBEF84D 529D1A4336D7B45D C8AF82302B2309AD 9800C89D4FDF60C7 D16A93BE97137BBB 320C7272B7E766A6 6D1EE0BE30B7146F F01CCD198BD4F1A1 FD9DE5B0192C0ADA E79DA3A6CC09990F EBBE819225AD36C7 BB21BE5236D73E5F 0741613E4E3E5105 5879BE43D3204930 065569C0AB1CF156 2C178C0FAFCCF4E8 769A4858CDAF9757 EA1BF4BAEE0B357C 06CB1F3F83FB4343 94A8430B7DCFC5BF FC4BA62E2770D2BF D694D56C0B38CB97 CA297FA59B687B29 D8A4B2D49A9A66C2 DA58CF43A77554C9 ACC70BFDCDDE00E6 146A94E7C89E5E67 719D7CA1B82639B2 C97405EB50C66A5F 7356280912E4B3A6 014D956633AC6718 E1C5742C0129FD6F EFF76756909055EF 98E88CE834761C03 5BF6E7A1F8A30D2A BA6B1624C7E041D2 B89F6B6FA7A89A4A FC16352DFC877394 C93E3FB429072372 090CCD1475D38953 1F27A47B5F9EC88A 71D0E83963D7C8AB 610AE8F0D857191A 2162361A300B6D8C 72DA0CF0831B8513 018EA8CCA9332F17 399C7E7BF2FB2753 704C8ACD6D4BAD31 8279E35F37B0EA4D 640109F24AD5E942 BFD555218EE35D32 7F131EDAFD9E1C0D 7C11F793F72619E9 09E517FED9524CFF F603135691FF35F8 39D25153F97DD4D2 34DAD46C590A99C7 4C4FFF6775933D17 DDFC7047ED8083B8 1637B6479D4EB280 39A52A2BE400144C 699F9EC7F3AAACA9 29AE45DDE3852D45 06DCE25066AE26AA 6317BA59D5B87D5C 80F7D69DF4CF2B41 736ED79569E42FD3 5F371FBB8FEC968B 1E7E4EB6BCAC5437 0840CCE2BDF66315 F3D4686BC4422FCE 68658719A1D0AB2D 4E6779BE61F9CDC0 9DD27310482D8B1F 939ACEA73D12D42B 609A5AAF9BF98EEC 9EE8D5898BCF1B21 720D92AC407130D8 AB91B9769C7D6D50 4E63EC0119FAB619 5582C95299E5686B 387E5BFCD87B600A 302497F679CCB8EF 4509E81D95725636 F6EEA47EDA161159 5DACFFBA8FF64DBD

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5cafd241-10a2-34c4-97cd-09dc4bd7650c
  2 74757e5d-9f17-02ce-a6d2-2cde3ded0eb0
  3 c795ace5-fd65-2c3d-bc15-32c1874c0f48
  4 72a2312d-7770-11f1-9802-63181327bf64
  5 c198b803-da01-303f-8d55-55268262975c
  6 b823537d-888f-73b0-a19b-8bb01eb480fd
  7 43e0ffb5-c1cf-6fb9-9593-b6d859855d2b
  8 de6a75b7-13a0-515f-8f83-ae8bd7f8c52f
  9 3c0ad5c1-c0d2-0fba-9c1e-a8d7006b779e
 10 ae0db324-0663-852b-bd11-a9c678c8a8a4
 11 eb8d4920-0f32-0395-b554-2b6a13ca7376
 12 420434fe-6cfd-72b0-8a33-a0b4f137633b
 13 1d39d87a-45c8-091f-8642-881d8f2cc876
 14 fcd68596-6f99-529d-b2e0-5592f543a174
 15 50bdfd1b-b11e-1bc9-ad62-993188b3997e
 16 d8912d91-2e9a-6eb6-aca1-fb0ced4f8841
 17 a574313f-9b15-3167-8b76-d735d98898ce
 18 ffa950c9-cbf5-4904-bb22-3668f6989591
 19 fe0d0918-ee96-40f1-9908-5740cbc698c6
 20 66ccda35-d2fa-7173-a32a-3ecf9ca5f5d5
 21 fa8199b0-6f39-2816-b4db-1b54db330ba4
 22 3cb3e713-3d7b-5265-bc95-d30e0b753916
 23 65c791ab-5d1f-5555-9ae6-1f8725bcea8d
 24 f7706289-0c88-14aa-9342-f8ccb6e9f255
 25 66db44b4-256c-80a8-894c-2431e6544b58
 26 69389edd-582e-1ce2-a27b-a2301f55fd30
 27 cbe1f686-6746-2fab-a841-9d0a38c4d093
 28 685d9c9e-f132-8829-9726-ab3a01950afa
 29 5608071c-6929-7321-b0ec-e6ecdf2b53e8
 30 07290fae-2d84-5ce6-b9be-174aff74e7fd
 31 55258a34-8f8c-1419-8438-87f20fd210cf
 32 2736efa3-794a-730f-8729-0965bc881239
 33 f05f5255-54b1-1306-b99e-16e667c81716
 34 d7ad2bdc-b740-39e4-983f-9670fbdba8e0
 35 b17669c8-6908-6de4-899f-dcdfd654520d
 36 2dd3c4c4-8990-81c6-9c38-8bef724b00ac
 37 d8bed07b-9215-5e1f-8ec3-3aa303851b9f
 38 95dff939-d357-6666-9ee0-da854b514f9b
 39 553ba3ab-08b0-4362-b33d-768505d64a21
 40 3f504162-a938-168c-a568-fa3427d0261a
 41 adbecc25-d736-7df7-9f80-0949c1bb2e9c
 42 2cd540d6-6df2-0489-9fbe-7209fabfd09f
 43 aef989d8-17fe-20e0-8f53-2ecb52f10249
 44 139133d2-3de0-0f5e-9850-dab0a9cb02a4
 45 d86739be-6495-7fbb-a606-ae3f418597b9
 46 dee8fdd7-2882-6336-8bee-aaf665049e71
 47 c65bf649-629d-1a01-8261-1a044253fc4c
 48 07c94b91-dd2b-3789-89db-468dfca0cf85
 49 1a02cfed-5dab-141b-8233-c1f9c8870407
 50 abef1418-8b90-11e3-b8c2-f46d577d5455
 51 9d8c1ccf-2860-2a4c-9077-b25dc4c221c6
 52 a129c6ca-7415-3d3b-9331-57cc448a7ecc
 53 27081251-2947-3e86-9f0c-bf924be662a1
 54 22c1a18a-b395-2451-be06-1b4e10113ba1
 55 e7d025a2-a07d-4386-bcb4-7c2135f362bd
 56 31a8f697-195a-6451-9abf-5d421753775e

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 30213765080705163447255181287517136856417020761311233246. Exactly this sequence comes out of new Random(696).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 114 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related