201305020735 1dikno

explained decrypted filler

seed 485

Metadata

Post ID: 1dikno
Title: 201305020735 → 2013-05-02 07:35 on A858's clock
Posted (UTC): 2013-05-01 23:35:34
Timezone: UTC+8 · title 07:35 against posted 23:35 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs: 56
Filler GUID seed: new Random(485).Next(9) ✓ verified
Run: Run 45 (seed 51,450,859) (seed)
Draw: 129 · predicted N = 56 ✓
Machine boot: 2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

6A0E3118553730BB 6260B998A615863B 1EA43A6F73D8B652 F345312CB69D2519 71E44CB09EC30E03 36477BDEAD74993D 6E0D327B9269CD4F 9B541557E7E159FB F637BBDAA95D0228 974391D765DC40C8 40346C42E1A6FB31 BFC4CD2741F188D7 F83724AA8519661D 4C98A24D5948D113 3F2766E191FE9A5F D8270F82EAE068FA A2FDC03A956DA6D8 F49D3ACEAC768D57 7EF81F485FF6FBE1 E9E28F8CB6D23A99 2F807898799BB67C 72614E1FC8C0FD4C 71DE0BA08C9E35FC E17E871291E99175 81CD93AFB89A346D DED29F76D003B660 3B0F2A8D168C373F 11270AC18A8A470D B7BE03FE90F5F8FC BCEC175BE07A0561 0623C791393F47CE EAF56BB78269486A 0E5A63AE9EDCE74E EB1D5AE3C0A53CDD BD61E237E9F6DC52 FDD67BC67773014C 921FF15E74682A4D 1A313EBD08FA2031 4D2DBD7ADD4BA8FC ED8E92CEF45E6D0F 9C7056B93A9CBB65 3C5E7F4DAF5E7BC6 FD2C81F3618C066B 96B35DD188BC3CBC 4AA31E2B53CFC8E5 FBDFAE74246E7302 24A80B6D90BDCD69 7A3FDF8671D73FDA BEA26406ABB72F76 AFE20386FB847ADB F1803F0E555F80A6 FA549BB73F6AA46A C08CDC224CB9CA30 CB0437EA2F23CEF0 86C9A244A875F3A9 9289A61B317F0E76 F2BFE259C0872F4D DBFF11F7E22D3073 FDE6EB40C26CD7B5 BF99EE96BE5764E9 4F04E35AD9986B46 84BCECDDAA60C219 988C996BB6ED5484 96A0B231960AE2E9 E672F50EA4D832E2 4184538660820BE2 4F03013392D6402A 8386E54189CA5F27 518520052BE59A49 924A2571B08D7E9B 5C1B759DE3874D28 406B48D3955CE378 F90E946904F2141C 8D55B012534F4B17 C295EF3AD4DB0047 621C5A8C3D5051A8 3A63FFAF46A2BD2F 502A49B1299FACFD FC5766189E50E936 640E7D6C85A5ACCE DB05FE11B7DBEEBB E8E4558BB71798AB 7FC6C3799F10AC90 9668471FD2505E3F 9361028340405CAB 0A574472E4781772 C3051DFD4274B008 E55BC72CCA9A8AA9 77907C4B5E876914 3826177AAE1576AA 8B2A048A69381DD1 71A89DEF90EB8FC5 767DA1D6DA05C7E5 5A14E312ECB239EF E7401C6553CFF4C0 70B949AD5D074D24 201F83516247A6C2 A94BD1B8062538BE 073AEFFB48FBDD85 7C3B9B2C3EDE4F25 9FC8EC125378ACE6 8727AC8734E3DBC8 7D8E373ED520B9CE 5003A49F8361A721 4EE2540D91092766 B9629799D59A7840 96D732F4543EB5BB B405540CDAB84269 2CE296DA78386D09 B5CE6B33C4A55FFF AB72941C092ED541 BBD80819DAED37CD F552507265E37D25 96D1CEB8F9EC8756 1AD18846076919A4 6544505784EFE97B 4D0234F06FC3202B 81BF414E81704238 D33C01CF324E923A B189778A94707053 FF7B26C61B0DBC4B 45376C5FC63D2DEB B5D4CF63541D9A50 A32E907BC0C8FBA1 91EF56558F6E8AC1 02C13EBF54C18EC3 433AF2C5C0440D3D B705ACA375510276 F5AFB9EAEB48992D 38E69F9A8B4DFBA5 860EE18C4CFD044A ACBE5655F751035D F4FABE33A637458D 0CB379582D5FAE05 754B5DA4DEC71224 0ED88E27C172119F 13B25EFB9B5F9EAD 8273A3AAD525825F 3EFC789157F0B1E5 CFD50862ABDBB4E1 E25AF3E8097E9203 D463A2E1EC392145 2AD5877C8669099B 932C6EB994282B84 5A8295B4A0BD2D89 AFFE34419FE5531F 2A0B9353919AD7ED 4DC85F5D99295EFF 73DD185DE6700A7B B59190A6618526DA 720CBA5F0E36CDAB 1B8BE9BB242C5F7F 95014FD5778C737C EC26675142B6290B 03F80C0DDD6870EB BFC27C24159CBEDA AF5777BE77000900 F9DDDE494C6CFEB8 149828A451226F71 AD0FACF38CE49687 BB13E19B1602EAC5 3473BD6B4E8DB273 D5F7B5AB10D538B9 0A267760B34921A4 EBC406FF5873F754 4346E776C97D8C99 041B31B52A960473 202D81795A6613A6 E2CE20104B2C57C0 A3E93D503AF64663 DBD4203FA807CC23 CD948BE9DA79273F 234B413A6453CBB9 846B4439CEEFF5B9 6F98B440BC783C0B 9B9CAF1103704073 E9E40DFCA8442CA0 A5429DDA901D5DAE 8E6A2FC54D885445 FAC89EACB27285A5 1D6953DF94B7E989 C085B7C1E5CA43B2 65C0048BA3AE74D3 8FA9CC0166BC6AA0 5634C515EE156E86 58115A7FFB7E0E7C EFE6D18BEEA7815A 1F430B2C24E03603 C6672846DB265C00 9D6F09410BBFFDC5 A54F15E54D6D0BAC 8FCBFFD8F8131FC0 15F4850113755B31 E1914E42F8A5F2F0 23236F7A26D92314 FDCEBDA66BB27636 33E394D8B019BCAB FF0BCC396E2AC0E5 04D1B2344A26B755 8A668B7A4D214991 A0A2FE0F9599B173 3EB770F3CE5B6F30 08F4759F4F2AA659 CCB18FE5D1CE0BAF 705269858C668E8C D3B475C219CAA9DD D5B0F8F4431AE258 A99674449BA216E0 A9F4B9FDA8604BC3 4EDAEDBB080FEB0B D92644BA1EC4A73A B15124613567364B F89EE23F27CE1309 5772C154E4C5BCCC A4CB01131D76160C D58A46EF840E96EF BA7D986A000C471C C5459244D3DCDBEB FD2AA21B345B69BE 107BFA8D1163CD2A 1E46823C4BD6F8A2 BA9326C55078A149 5CAB74DF09A30609 EC486E8C86CCA171 5DACFFBA8FF64DBD

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f18d7ee1-8823-0b56-9c91-b63f5db50dc2
  2 6b815ae7-3074-1d32-a2a2-efd52345d780
  3 c03d3cc2-d393-6dc1-9e5e-5b37f0d8772f
  4 06eb8dc2-fd56-020f-9bee-a3094deea102
  5 07faab1c-fe7f-1108-a067-5cb74cd25189
  6 6da0178e-4a00-30a0-bf49-f6233cc6b362
  7 2131372b-671f-1e8e-a338-62d1841ca256
  8 05e1a0ad-de76-6e32-8108-6a84a616d24e
  9 98e0e5c3-925e-8b55-9923-7d94adaf4da8
 10 f95d65fb-2611-18bb-93b8-8c22498bc256
 11 d911d316-a5f6-5c77-87d6-94f840a53534
 12 cd4d5a1c-e423-1294-bce4-97e2ea844f1d
 13 ed2d9cd0-41a7-0641-ae74-a3fd9e086833
 14 7c75082d-931f-762d-bfa5-ccb1d9d879a8
 15 0e9fb05d-4f67-4002-b31f-30ad3085b1dd
 16 03a4334e-0a97-8a03-be44-8acd8cd191be
 17 56700e4c-9c49-63f0-9216-ba228ee0fbf5
 18 2136ee44-db27-6f5c-a764-1f0e1d32d7b8
 19 9bbdb5dd-2d28-73dc-a95a-1bc84944a5fc
 20 704b4ad6-3159-0972-bd66-53b320ff601e
 21 9b498e59-6ea2-25a0-8f78-be7fd73a3034
 22 006fa44e-a9e4-7f26-a37a-047f2398ae07
 23 79451bb0-b580-8591-8300-0458eb274163
 24 1a1582f7-fc28-41df-a350-1763d39105c3
 25 32a9dbae-576e-2806-b148-3e8e938b9201
 26 1ec5d3ab-6d9f-4f42-8cd3-13ff30dd0156
 27 e361446e-72a6-81fe-aef5-8339a7f40b26
 28 8454d018-3cbc-1bbb-8884-aeea55521b2b
 29 51d1e87a-7d94-4dd8-965d-e03599dec84c
 30 2f2b0e87-a5b4-6d3b-8768-34c1c1e97a16
 31 68db8249-760e-2f32-b941-4981ebb3c206
 32 02d9cc18-f7c9-1fd6-bf3a-ae48bf523844
 33 c36fe6fe-2d87-24d7-b6ea-7bed018fe7c8
 34 9a4a9837-6285-1d4b-9de2-1feb44934706
 35 44e5f8b2-91d9-8b41-8ae6-6b4c71194972
 36 43f5de18-bb1b-7b92-ab6b-dbab4e5cef07
 37 4abdb8f2-f43a-7da0-9f30-fa022d155c2a
 38 3d63e7fd-f7ef-8661-bbc6-3329f5dd583e
 39 d95d2046-a2ff-315b-8f69-2af1b9c7e1ae
 40 40dbfeb8-8702-3990-b3e0-f3fb221d2878
 41 557f87e6-b934-7df9-a604-89441880a5c6
 42 85032eb3-3a4e-49c0-bbde-4684d15f70fa
 43 999d0e93-9912-59da-8198-e545569ebc4e
 44 723d6893-229e-1a24-ba0c-aa8387a7f4a6
 45 9940ec52-1789-5737-9156-6d0c717e6649
 46 4d8e9c74-1d6a-8dbd-bf46-3ae367bce92e
 47 d14db4dd-68ee-34e4-ac93-f1361369ea19
 48 4c49874e-20da-0fb8-bf11-9fa1a6476b2d
 49 a57f61fd-89b5-44c8-b3da-6addeba2c5d7
 50 0d44d9d9-8353-2f47-9489-86cd9c332857
 51 8756a145-b1e2-6871-b591-a99e539cfbcc
 52 5af7dcd6-55fe-20b3-a221-36b424044036
 53 78dcbadb-8816-005d-864f-ea931d317bf0
 54 cd35aaaa-6eb1-21ab-82ab-80e18adcc41d
 55 86b8466b-d340-2e3f-8ba6-bffb0c5141d6
 56 85071dfb-b226-25d0-b7d2-1a599d7514fa

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 01601316815107486670278424814621218778337451583042620222. Exactly this sequence comes out of new Random(485).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 129 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related