201305011735 1dh11f

explained decrypted filler

seed 101

Metadata

Post ID: 1dh11f
Title: 201305011735 → 2013-05-01 17:35 on A858's clock
Posted (UTC): 2013-05-01 09:35:35
Timezone: UTC+8 · title 17:35 against posted 09:35 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs: 56
Filler GUID seed: new Random(101).Next(9) ✓ verified
Run: Run 45 (seed 51,450,859) (seed)
Draw: 121 · predicted N = 56 ✓
Machine boot: 2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 6 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

F98EE6EB386F1688 D8ED89F9E5DAE4E4 E8CF81E825275793 092290E8585A8F79 112F6934B6A08B6E FF9F5965248995A8 68CEBAD91721296E 6C1884146DD84E25 38072970516AE69E 40FE6E1913CFCEF1 82A696E69DCFDE1D D114782C33EF02F2 A91607ADBCECEABB BB091A03C4004C10 0CCCF2927A0D0F29 0C4BFF0AC5FEB79C 998BE1434E5F8BF1 EECAC053205BC04A 1C16D3B523BFD428 BEBF43EB5DB1EEBE 85F9463B9AEBCBCA 43C7109563FE4987 84755192E3B952A7 48730086E72B0581 CD48E5EE52BBDBCD CBEFAA34CAE9F69F 3878C532173F7582 04F11FD92F433315 01C1174F392C5B6F A039B2BF8A52D187 1328187FC0998017 FB578A62E7E2177C BEF07EBCAF404D8F 45E022EA0DCB9B62 F191374ABDB5A543 DDEC9287F2D83167 0EEC50769023F84A 93333BFB051432FF 7D6F1DE7E8ED73F1 C896EE0FD40CAA4D CE92CDFCB0DA4C31 1C7A79F6423E9AC1 5E669DCBF70C8734 453E232157316B52 EBB18FA3DB44509E 0852470C1498086C 64230CFDC8FF4B8C 88D980D5FC727DDB CBBDAC772F0F2515 B1242949B3154025 4512FB1E1AF17637 792044E155FC3A4C 2D719545453CFF0D C88EDC28DE20B3AC B097D8EB4E9E38E6 04BE48B77EE9DE1F 63EFBDDC35C60082 BC3D42DA62FD3FB9 E03F783B68B56BE7 D95AF80F15FF7387 63F664CDFA5C8892 5FE1E92DAE153DB8 6A0CDB62D31F9E02 32162951DD45EEF3 30CAE6A4E5FB7308 4FAEA432A42DBF67 EE0A9BFA90BCF8D0 7E4DEA1E0F1CA424 6E3D5CC1D9809ACA 81A7F1A8AD33E487 AB812C227A26DAF8 89DE659C7F1C6519 AB5CD8925C471D6C 6B6AE34EC3B44AC2 49C41AFAB8628812 7544F3414AD949E7 A8954FE25D49FD24 016F146A844DCA14 1A04239CB127F427 BEFCDC4A751F0823 59904303DA0105F9 781B07CAF5934651 70ED821CD87A4094 45054C492D498B80 3C6ABA3D4A7B19F6 DEFC4FEB9A4CED32 F9655DF949AE01E4 195E8E3D60172621 237B7C06F8BEE011 10074E169E7EC046 8E731F98B9EDF645 945BB6BF485687D8 04B3EB4A90DC9DDE 0482177FD4425F4B E3360C2AB8D7A450 69035FBDDDF9C851 FD70C08D33C76F37 16F62445984F5BFC 0F386326FDD18CCB F66DAAAFFA2CC443 3AB70B6ECE083C70 DAFBA3AF45C32387 590E6316B52048F0 EE46844965554A12 E149C24D595A53B0 4319484713D6D2B9 2498EC89C6079109 68E88A4F60F8C185 376FFE4CB1E4C418 B92730C0DB2B7257 BDBD956564F8736D 4D25BEDBD6307059 011BC4C2B5095CED 5614D24F9CBCE5B9 9E62E4AB30929E3C 1340A23517F9AF4E 8BCB9A397154B612 AC3E9003ABC3DF7B 947854EA58338E28 9E9FB6B88AAD1B98 829C997F5B66F97F F5F434AD780ED082 7A6A1E44FFFD4D4E 653A2963B52FF3EA E9657A47E53BC622 CE9473D83E6F37E7 F2D86ABE2C766AD7 FACC8C189168B586 36D374152DB78CF3 CF43BAEC85ED0559 FDF5B6EFDB606F57 55DB1C2AAFC1A807 997DEA6BB58E9572 55505BB7309EB517 3559F17DFC927F21 09F2AA10F05C1CA1 2E27D4CE794D71AE 248793111AAD70B8 C5DBF7838C7C73F3 837171F77906748E 02129F0A78793095 20FA8903929F259C 01E995B9E0F2D687 737CFC49C365A263 9E730FD774D4ACAF 00AF37B156E0FDCA AE5A3A929832081E EABD7766FAB94CAE 3FA844BEBD7C7C5E B0A0122EEEEA9655 55D18F86C5A53228 9B9CD8A1A20D5EFD F2F1D9A8D1E1515A DFB5955E48543CB5 7D033A2A8346EE0C 415747C863D381BA 42F1CAB9BB6DE790 FA2CE46821D55787 6FA4EF91A61DD90F B72FB6DDD9E6A1E1 29B4D5C087037084 42A04D76177E830D 9690CC3707A7920C 4336B7F2FC400683 811CF3FF5C6115DE 3FF318E3F722B0B5 FD66E7A6347383F9 5BB3207F6E1FE666 C633142A95238F1C E47A7E9FBE097D61 A82EC579CB7A06F7 9A45EF9FA8101197 F1C2E44CE6E3ADB3 E19C8B75F330F827 EC58B293DA9C60CF 8BC0E913445F880D A7D231D50DD4559C A44D9DE6EE5FD3B6 7C3823B4A86550D5 F448C96775419E52 A6CDD60D186BA944 1B176DDC733E714E 8F6EBA89C61E10C3 0023C59E13E6C4B9 CC5B291709DB09B2 550A5B0A880EA002 ECB37462567F3FAF 49AB14DECDAAD645 96077F60FCE4C7FE DAD5790440D1F6EE 89CE7E593AA56AD9 93EA01215D812CBB C0769AB45D7E8277 54ECE8D567BC90C9 F2D3DA60356FEF8E FB7709AD5EDB3040 307DACF997C667D6 4916EF27169677EB BEA80992876B99BA C97DA502A36A885E A4EEB989482C6CE6 99009769B2D2AC11 2BB39FDAAB4C6CF0 A753FE2BC928971B F264F685AC71F174 6D00DDCD6ECD8199 4F5F7C2AFCF834A2 8A86523F960EFD55 84B4ABF1DCD88E2E A886BF1E41D88A65 77298EF8AFE08280 46C0C1114A094504 8D4FFCB26A4613E1 532E7C735363D469 AB678BB7DA78E959 2BD53F47197089F4 5BDAEA7D9DA0C6E9 24E3A6883ED0F5B7 F2974C0DE0D38CE8 A6310DC9003B75FA 9773A409F2E1D06A F0B5F87693E33996 C38ACE96C5B8F427 C570BBC41A7CB1C5 5DACFFBA8FF64DBD

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0e986e94-b4eb-4b13-80e0-ed529009edfc
  2 571c089a-0be0-4352-b8cf-3cafb16ee069
  3 0ebd7cc6-7e82-3757-b9fd-c471cced6a2e
  4 1ca6c82b-d49a-1523-ab90-bcb5137b7067
  5 988bb846-47de-719a-aca2-769319348275
  6 d45f948b-15eb-7abd-a462-1d67ab00ab40
  7 cc52c023-a746-18f3-82c7-6177e9421479
  8 d323ad25-9665-1a5a-a196-38a7bf9aa10c
  9 2d354f8a-0b98-44e6-a575-0a973d1c2e7d
 10 e8d11cae-5984-4e21-8c4b-3c694c208272
 11 3ef382f0-336c-674d-801c-ae932e4158ca
 12 f3cb6034-d1b2-22f1-b28b-ab5058589a5b
 13 741972f5-61f4-0ccc-8ee9-9ef6ccec8b03
 14 b39e0790-0daa-07dd-a78d-325fd2b79c04
 15 9e47e928-b1e7-65ec-b6ad-9f9b195ab44d
 16 3fa8a786-f2bd-0231-bc71-4a6482d4e169
 17 8a7843c2-8e7c-2ac5-b492-c0fee6f8a0fd
 18 02960152-7f6b-54db-ba93-34397c981b6d
 19 48617e70-f148-3c30-87d8-e87cbb1a54e4
 20 880d41c1-ba77-3c98-9565-ee15f59fe0aa
 21 3c8a9fa7-c822-2176-8ce3-5755918e4b20
 22 4a1aa952-e13e-5e2d-9302-b4a6d860d8f3
 23 9251cf44-986b-0ae7-953a-a5441c65e4b4
 24 be4d70fe-7c76-2634-ba5a-69a465299ffb
 25 fde8c200-b66d-5570-aad9-1587e8cc7963
 26 4169e4d9-6824-4845-9411-23bf0348bcff
 27 ce4eec69-ea91-6ca2-9d38-5684a84b6e6e
 28 722ea45d-4ec5-2e7a-8f66-eae9d42ac124
 29 ecf31d32-028b-3ccc-87ef-d24d095741a1
 30 e897acb5-6e3b-3335-926e-c71653668e56
 31 fad896e2-8b42-4d2b-853a-845741dbd76c
 32 50d04637-beab-0bba-9136-6f8ee5c80138
 33 21720170-4b3a-8f5f-98be-0b798f73e856
 34 5b69d7d8-b964-4e3e-8817-d287215c782c
 35 a0c3d3dc-bd8b-876a-93c5-f1f19ace3c6e
 36 59f1693d-4abc-12f5-90e7-1027000cc11d
 37 9dd11843-46a7-6f4e-b407-ea0a889d5a40
 38 d9800f94-f73f-18d9-9d20-c3debf20c059
 39 37363dc9-2c69-5959-9dde-af2fc2cdf2b8
 40 e67fc4f5-ee67-23ce-8bfb-5459b6b430ac
 41 6d0b178a-5f5c-0c65-90ac-1a08f6e9bfd6
 42 9f3d3073-6504-659b-9434-6e1f9cd1f4bf
 43 56c28b5a-1990-8f09-a32b-fba15f5df335
 44 dc907976-a670-65cd-8b55-e4e3b3b4579b
 45 94801335-bb61-104e-869d-32e2c79a0be1
 46 74f88010-c701-641d-891a-aeacf5d82265
 47 09b4dba5-6b4f-601b-a0a4-b1415c8d1eff
 48 a18d3b1d-1ceb-0d91-9226-4038e5f6094f
 49 3800b3d9-c10e-0c35-bd9d-1a47977c5281
 50 ffe61944-0c7b-55e3-901f-c7a7ebc2e670
 51 73fa9cec-59e5-18ec-a7c1-dd810c39a32f
 52 603994fa-f94c-2ea7-8383-cb0c301aa85f
 53 ca1b48cd-c5e0-0394-96bf-8df8db1cf304
 54 8134fc59-eaff-018e-81c3-7f12eaa44024
 55 20b693c2-3679-3878-95e8-1f4d047a8e10
 56 47b3a10b-e934-7c93-bdfe-539d494197e3

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 44317711446200602533250254623340848161520686166005120037. Exactly this sequence comes out of new Random(101).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 121 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related