201305020035 1dhmru

explained decrypted filler

seed 725

Metadata

Post ID: 1dhmru
Title: 201305020035 → 2013-05-02 00:35 on A858's clock
Posted (UTC): 2013-05-01 16:35:35
Timezone: UTC+8 · title 00:35 against posted 16:35 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs: 48
Filler GUID seed: new Random(725).Next(9) ✓ verified
Run: Run 45 (seed 51,450,859) (seed)
Draw: 125 · predicted N = 48 ✓
Machine boot: 2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

D61079AE2CA713B6 F9256A6EAFBB6876 799746F074FE4405 8C577D99674804AE 439B4802B7CC6B19 67300FE18FD7F814 50B632AFFAA0AFBC 153E2A5422C00412 7E845BDAC8DB7A73 3D083BC3ED592470 E732F8F2B80C5CD2 0786F5AB189F2C3B 824D5C3F6A6ECDD8 ED86C8E5C9D86823 9E080447400CD7E3 880AFB6E4BC868A6 EF2E118F48B0B2ED D2A77CB1F36E4844 25FC81EF2209123C A15C85C83D559472 B359E9E1490BE45F 4DA945DF6FE0EB06 6F2BC1AD259F6A25 A054678F03FC2929 FD79B58B92DE04B9 8C6576C76F45717D 6730CE04724F7C3E D16DB08791FC0103 0D50E4C9B946A2A4 794AEF5404A55B3D 87A011380E3AC414 8DA0791E8067973F 2CE388BA6A5908A1 50B088D7FDBA6D1D 031B7B9B9BA9E790 39D763322D7F63CD DB92C597D6127BF5 A179D00BBB0AD594 7853C8468D75E6F4 80BD3253DF22B61C A89AE5723F21D5F0 A9B44E2884630176 347E396E3D93AC0B C5325BC4A2B58B49 1A29F82D656969DD 4A6DAD1EF90EE00B CCE31B2F84597D56 3B5726717EE651CE E6C20B15BD01AD7E B499CA4A915774E5 A68BE5CDD99A62C2 85F277128E87A5A0 1A243BF66F5F0D4B E523D84BECF8604B 7D80E6BCA447E93D 1289852AB5FF37D3 C1FE46E06FBDE045 70092B7155501F4B 498ADCEEBCE483E9 C32EB7A416CF7E78 D01DF0B3FECEC89E 6834DF83D0AE4D3A 4D60BEB7ED9786AE 8037FF0ABE348706 2377D1A0178EE87F E2ED1B9BCEFF59BF CEA49632B4C9B4C5 68B179E285E510A0 E6709EFEAA731FDA 1585E9408061BC93 424C39CF27B3A4EF AE3AAE36BFBE9867 EB20188569B10FDA 18B9D5731B2848BA 2D8007D13B002BA3 503954930C109B82 9120D592BD401A7B DB093601C74194FB 63B881F4C17AACFC AA7AA6CF50E0E8DF DCFF54ADF39CC287 483860165E8DB1C3 B9604559482CE714 6962AC71A944E27A 3B59758DA6BB8BF4 B50ED6BA9B47E59B 9876B4C2FE900F41 394355E49E530DF6 EC1C773EE496B64B FDE3C5E4C97CB9DB D88EAAAF934D542F 62ABC9B396713454 20962224AF00C2AC FAC76ADFC2603D8A BADE477691266BBE 0AD5070F20196F17 129E0D7787760873 30DAEAD437D39645 ECAB44D854672AA1 265781C396311D60 3F2F644B8D020C5F FC1E20953E022B09 D94EF55882F87BBB F941E84B147D48EF 64B626C0D544825D FF7091661486F8E7 28B9688C064BA017 F8286C4A5DEDFC57 1AD2DE5B0E9FE288 BDAF83B6578B1978 96C45F4F13D0BE1E 96D1CE5892CD7047 0D2D86BB2AE39F79 F0811FA578176F9E 86C50C07793CC6A4 3B5C315A732358BA 18391522EDE371D0 9C8C659AEADA00BD D88AE9E5B95AEA0B B3FA3D9BD0300A49 69775F46C93081EC 645976891132DEF1 21334061916B30FE FD2E25429E8D186F D7C42BF22E5DD92A F7174430E9BB7D15 4119EDF2B66A2E26 1C2619452439A198 5BEDD7FFB4F8E8F3 0CFE6E881778F184 D2BAA0F795E38325 DF66148E05B783DF 8B4A574B5695C497 57A1BF9875EF9347 90829B5F069862CE BA19E993E6F4FD11 740B9A8F1F217F10 22FE965A4D3927D8 4305C0B28DE57B5B ECCED9B14C6DA350 4D4EE9034D82DC36 35D913BBDD8B08C6 7D12318FC0227B0C D85A11AA990AE1F6 586C60E5A7BE3839 FD08DAC29D33D5B8 8154003C93D2C345 DC47D22F93E59A79 A29C9E79D18B99ED B8FB8289E1C4C53A 7DB0BA5392EFB63D 755FF65399DB3798 3D31755789274848 4D6D273A2BA18BB4 0E62519A466FD881 186A2A3069AA587B 2D185F5762E6BC10 74272F688F74A26B 5BD23D00D91FFC60 0A0C83A20E348AEA 34F3ED7793BB404F 976D0E888F01B7C2 244B63A92A4AA912 5A6C2A69EEC3F610 E2290E8F6BC619C6 CDB304FAC24D6177 C14A9E3715BBDD24 9A77ECB57AB99E9B 91BCE0881F46595A 0ACFF88841518D22 4B7B7440F30C20C9 28EDE86BB9556534 AE7FEA9625D5C0D1 E03F23ADA96E859B F238333FE0384F70 FFBE3BF22F53DC28 4EE0BE04DE02B000 BC16908E3FDF3FB7 58C13392CFDE6B34 A01CC76215BDA3EF ED5CAD70BD90C0CE 524373C10B8A3E90 2D18E2F80687524F AA739B27D4FAF2D7 0A04D97E8BB5D2E5 DDA6822A4AF666F9 E8DE1E2185577145 C84C0AB13AF6E013 7160E3DCBD08B14C A253E66BDF7743FE 1E9130D5A7E3E36E 1DBCAB94BCFA821E 5DACFFBA8FF64DBD

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9c6ba983-189a-4157-a4c1-335ce693d966
  2 ec3d384b-db06-4f97-a7e6-bac2e590050c
  3 0e25031d-1f19-4cec-81a3-bd1a39aa175d
  4 4a4a16dd-4206-2358-ab2d-3fb1d206478a
  5 d8ae6e09-4f50-435d-a18b-3283b5541655
  6 2a56218e-f7d4-16f6-a630-b1239eeb37a7
  7 c98c3088-2851-6b9a-88b2-8e2acd84a854
  8 a8ff106c-32dc-1959-a838-2ed8b2c1e827
  9 8498f402-4400-62c9-a733-d834523da891
 10 25d4f96f-29cb-53dc-a94d-7ed5255e9718
 11 5ea6f5b9-88ea-3945-9b2d-8d60286ab57f
 12 96dead3c-acd4-436a-9eef-9b71b6fe45b3
 13 717da920-812e-092d-983a-332e9124bbb6
 14 5dc47e65-f577-533f-83ce-603068ff028c
 15 6108e054-607e-4a45-9ea0-7fdd7a1a8476
 16 441dfe86-1f9a-774e-be2b-e3ebc218bcae
 17 43210ab0-acdc-5d7f-a91d-2e1ffb95752f
 18 fbde616d-1ba2-4542-8fb0-5d539c0ce278
 19 01924922-d74e-2de7-9708-cd25e6e08c8c
 20 5033d8fc-b082-0bc6-a7aa-700f6d6302e0
 21 6dc98a99-9a36-130c-802d-7933984aa3ef
 22 6f5d57e5-a695-6129-bb26-b96194210deb
 23 1c755f20-296c-4cf5-84f4-67e136bb780b
 24 4ab33cbe-f2f5-2289-8ed5-7ac9c0ec9a90
 25 6184ab95-aeaa-62f8-8792-3696e9265abe
 26 fb501f6b-9d1a-7510-b2a7-7285e157ff2b
 27 06fd4bb8-06a7-28fb-a06f-179cca9c1fdc
 28 21513357-8052-8bb0-ad93-ac5184d2b455
 29 d32f044f-98dc-70a4-b76a-ce5a6db2ad60
 30 0dee049b-302b-89fd-b01b-49b214b3912d
 31 1e20f2de-5a6c-7f6e-b23d-de7b974b58d3
 32 ea1f0ea0-d81f-374d-91b2-310eb3454eb9
 33 5abe5708-b4c2-7d99-be70-4e78fe85f631
 34 870e6313-9792-1f6a-af5e-e9685177a79f
 35 753fe937-0317-71dc-9816-8c28d554f06e
 36 8251bb41-08be-1c17-b647-78816409a502
 37 cf91ad2f-ce0e-5e42-95e4-e93e53db431e
 38 7dffc7e5-aaf3-407b-80e2-dd4adbd351b4
 39 46bac32a-a9ba-43c3-b5d4-ef1ad4b86205
 40 138089cb-159e-5529-a7ea-06d0ab365dd1
 41 4caa4a57-6535-083c-b893-f556280b4125
 42 b96392f7-7a59-1ee1-b66a-288b02840fe1
 43 462bb91f-3784-8114-8268-f303cd91dc61
 44 393c0cce-0841-2648-b8f8-1001bb0e3907
 45 c7e7b684-d09a-1bdb-acb1-116672babfeb
 46 4a9bc183-5e2d-23d8-9555-a2a433c593a9
 47 22361d30-a4cb-8591-9561-29277a288eb9
 48 210957a2-7ecf-7c2a-833b-367447a8ea45

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 444241616534054754201642672878737171544501821287. Exactly this sequence comes out of new Random(725).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 125 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related