201305020920 1disms

explained decrypted filler

seed 408

Metadata

Post ID: 1disms
Title: 201305020920 → 2013-05-02 09:20 on A858's clock
Posted (UTC): 2013-05-02 01:20:34
Timezone: UTC+8 · title 09:20 against posted 01:20 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,856 hex characters · 1,928 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs: 60
Filler GUID seed: new Random(408).Next(9) ✓ verified
Run: Run 45 (seed 51,450,859) (seed)
Draw: 130 · predicted N = 60 ✓
Machine boot: 2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

E6070619B0C45EBF 1352970ABA0CA171 76C27CDE6BDADA8E 97A840A25F9C66A0 71539549F60FBB40 A3A79B6825647ABF EC1ADBABF04C69CD 404F8CC2DC35CEA5 606C1D6C9B51C703 ACE3DCD027559ED5 8CEDB09955907672 0A9263CE5B5AAB8C 037B14C143283E18 9D0F13B3A447C4C3 DAF74C27DE16BEB6 D24FCCE0179093DA C21EEA29C3A5E048 6413BFEB0406383C 557A43B9C9EB3912 274EC299CF910F72 B9A70DE67A39EBD1 821BE674E44A5D61 AD3D84BA0D7FB93E 1BF0D65552276552 5C357ECD14C27951 4F9EFA852715ED16 19BDABC2A958D8FF 19B30411FA92C4A0 D5FD1BE6F7505EFC AEA9251EB4F981F5 EF3CEA760C589E3C 3CB5495D617D0AC6 2B05F92C49511747 36FC9A5AF429547B FCBF0768AE826A82 9B9367F025961600 DE2DC41C76B2F6FC C3AB2B6878218390 7413B855F76AABE3 82C63BA0AB4A5B86 71CCA38E3C2F51CD 93B975B25D0CC5F5 57B0DA44780BF457 F4168F0D4C481399 2345AFD00BDEC137 675167C49D88B83D 9E84664AC4ACEAD3 C4BC4349A735FA25 AD9FBA27C3E124D1 BC5A8EE6E509AAFA 79138229DB8B3E34 E4A0D4211B421218 F1F7D4F7C548F209 F10BA0250B6293AA 7F208ACB3996998A 0A6BD6DFEC6FF44A 14DF6A6798EE9B10 84F5FB9716676E29 AF058E5D6D74D158 C2A86DB847D11C8F 4B41DF1CFAE63EC4 87C9D36B81BE389D E4A9F4D567D1AB63 F9519E70DC584FFA 4E474A276CF53CB8 243FBD25D636B351 84FF1EAD30460FBE 52097E1E8F6ECE90 971F166487411695 19D379902144302A 3CDB0B22CA75633E E1F16D6A8D2DFC6E 502E59D9E4BEC80E F4D80B2F9F60A2DA C446D1A82DE2C6D1 E7C96140EE1206AC DFD8991F989DE2D9 2FF0352FC577BD63 038ED2A35224C5D3 89F723D211A1B2B7 B62F7BE71BF9AAE1 74F3A0F10B014811 C71F1CC78C9F726B 85805A53C22A23D6 DCC4541C02F229E5 4AD3AA193084AA9F B51C918848AD66B1 4D05F5991C599F37 D2489596B6FF7A39 A7A360D3718D52FD BD140081588DC116 7129A50E68DFE657 8472D72010B009A5 816BE023F8B0CA70 C8CA21068C413C74 FEEDF008ABD40177 22265AFD0926B33B 084E00DB31E976D6 730F861FF6083789 F3DB13957ACC670B 408594FFDEDD2ED9 E4CBE6A22F0D80EA FC57A1D80EF5CF6B 8ACAF7001E0551EC 2113273BBAE4A7D2 2CAE5AF5C1ECDDEA B7F9BFF2B298A322 F6679C5A26882B0B F7FDA433F168907A FBF179C4B1C05124 1A3DE998AF2D958E 9333CE54B482DE3B 72C4A0FA80D2B47B 40997B79462FF973 0A5D383F61152C90 A6E7BA995BC47C87 69EF0FF73A291E95 EAA759AF6B19A0E2 19F2583ACF2BCE6D 6EE6851A8E5AE13C D518DD8F54F1C70F 1B097383C2932676 72B709372B854C9D FA338F55897C0ADD 020C9EDE1EA66C63 0A9A2558C1CEF70A 2A55847A7413E4A1 9BD30F32794B8A64 99551B2FF577D028 490B2D9106E4AC84 559F853B6B5EC54A 2B5F459219C974CE D9CDB43A9720DE15 DBD9A76DCF630095 87CDA574E5A85B5C 5C01180665E2F688 FFF69D724332F5AA A029D10E95421BC3 EEACE46A626105FB 07D3438B25346CD0 4CE2D76EEA918F26 44CCE8D61F7319D9 C14A0F3AC0D90834 D3BCA4E032EF677C D138D596D8FE1396 06935D1BCF747E39 56DAFD0DF1E5985C 6FA78D39B60132F1 851FC09AB38A46C0 71A01095D4E04F60 D68E12D04058F24D 24D16AF387DF30F9 DBE80503B03B5416 A5F099308CC1D26D 29A8E9887A9BEE01 A5D08CA01A3CC333 767CB0CA95B1176A 80416E017C918DAA FD01A95BDB4B4EA6 60FC7B5AFE38AB61 759D74A2E9D1D543 99203A2C0708EAB1 9BB82FFF6D6441F8 B77E7B09106C6282 BBAC6BF000907D29 0824138CB27556C7 1B0E276934A75173 338183BA147D7F3B 05160C754C01284F C1CFB715FF03BE0B ACE5B16BE34F662E 49A80298F73B7CC6 33C47A1FA1912996 0C2E743DA0BC1A5B A7BF0D7AA7A5B06F E2DFC8DB99F7EC5A 1F666809925A2A8C EED947F84028B0C8 E188DBD287EC695C 69B09457065A0F6F 2C66541DC38FDC56 BE1098A24021DC1A BDCFC13A08420154 CA781E0F7C335C9C 602FFB30749A5F5F 18D3F34B8DD3E86C 4C947C2C5797CEE0 1A141D5BB05C92E1 25A2011ACAE88D18 855515372646103F DEA39E86E74179F5 B0613BD149B7B69A CE8ABAE7B55E2B59 B7419B9A73FED58E 0459122C90B8356E C8EFDC0172D20C54 BFAB9599F304FC1A 96F30514936512C2 6C2F129257610801 809C306C80A8C2E9 01DD05FF3C89A5AB 32C4E287646B33F4 D1D9F6A36C63666E 5D389404CEE94436 15814F5B70343D87 9E44989AAC7897EB D3324A319E576879 118DAFAF1DFF1389 06ED4CC138B4EF89 D7AF599B09E8812D 6ABF7DD85DA231EA 14D73A7C8E3D52EF AAB815D9FAB591E1 78A26915A4483667 D0FAB9D059EAB0B2 E950806FE53D8F81 627CB1BFFB9517AE 2FBF36C211BED7D9 49ECF1BCB5264CCA 7A145BB7ACF2B075 3B1F04C66E6A85A9 6DF94D7367F0DCC7 2298A304606A077D 6C84D024FE80C884 CC0988B953656556 5EEDF7145E8296EA 0DF4F074C8F80C93 023160E813122262 8BD0D5346CEC8BFB 619F2E65B20F9CB6 584AC0CFB119694E A599616FB6D4C77F 13C9F9699F1898C6 D0354C4D097B6577 3E9A38B459C626C9 82F976329AD3747A D501FEE0D13DDE2B 4C417B285EB6FFA7 DABABA9C6BC3B81A 0E5115516180E63D 5DACFFBA8FF64DBD

Read the ciphertext. Strip whitespace: 3,856 hex characters = 1,928 bytes = 241 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 60 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b933641f-4090-7ac3-8be5-e6ba1da53f2f
  2 bfed7818-09a3-4f42-901a-c224409b0bdd
  3 9aabfbf5-641b-89b7-98a8-beb0da6985df
  4 fe660d19-9099-595d-a0c4-66339dfe60c3
  5 1c00856c-2326-36cc-b858-b47fcaf533e2
  6 af5e2144-ac03-039f-a718-0d6df9aeedc9
  7 a2c8f6bf-f3cd-6bdd-bdea-0c76dcc8597d
  8 a224c686-4ee1-17e0-ac03-fc80e752f8e4
  9 5a4e498a-0a7e-4aaa-aa18-7fc0ea97c75b
 10 5dc7840b-0981-67f0-82db-50edecb9c641
 11 616cef80-a721-700a-a80f-018ad30858e9
 12 8695e51a-6120-89e3-bc57-f0bfb2be1a0d
 13 72bd3b71-640b-162f-88d8-f2fbe877d79f
 14 cfe38a5f-6aba-633e-88cc-5d368521c010
 15 a2fd0ddd-5ab1-5ae2-b387-277f305fce13
 16 d891802f-c8ae-70f9-ae5f-8b576c7fcbd4
 17 bddc3a35-1b6d-3d8d-9bc0-545f7ce152ac
 18 bfb20960-2d4e-8765-b4b6-bae7e71e3328
 19 ac5f69fa-ce82-63d0-8311-8de625df1195
 20 7d450304-7d06-2fe7-855a-8a51f8ab7265
 21 c11434bc-7ad7-0c9a-97bc-92940c709412
 22 efd3c8dc-df41-8bb5-af39-1b60fcc2e054
 23 1434cc68-c24f-8703-b8de-76ff4a26ea87
 24 3219a833-28e9-5a99-a8dc-564956178e11
 25 fc7e8c16-9631-686d-b72f-8dcbdafecc72
 26 90a728b8-f445-89c3-8ed6-07290dc9e0e1
 27 b5b37429-1f21-66bf-962e-23e29f1a6461
 28 a3154a92-ceda-4045-ab2a-68ecb3d37130
 29 f5764c5c-244d-2172-8d7a-827d7715eb5d
 30 fae4e519-e99b-66c6-a513-8d0679ab45e4
 31 67c01933-304c-7ef2-b1b9-085cad0dadab
 32 1d635b4d-1781-889a-b516-3b9201e36dbb
 33 b0eca3ee-d476-3408-939d-eb58bc9a95b2
 34 fa141208-c63b-1c6b-9037-a3f88d7e9744
 35 a73e6d80-b551-09a2-9086-59527776a828
 36 6fd30dc8-e295-4c5f-85fb-d216ca9073b7
 37 89c693d7-b2ec-8cd5-b82b-04d1a88b3280
 38 285a14b9-aa80-3fb7-8bd4-c733672a594b
 39 4b85bc21-16de-1ee4-ac1e-13d7503aa7b6
 40 7f78d700-fd32-5fc4-9aa1-bafb37bf36f0
 41 90ea6de8-400b-6139-9016-20aa60ff7cd5
 42 fc1b8a6e-ed59-028f-9a24-407cb87e226e
 43 b7389702-0501-4d49-8190-981fd1d78ed9
 44 c37ffd12-c737-3581-9481-d035f2f4f918
 45 5de9c421-9783-04de-8746-501a029dbf99
 46 62c20576-e19a-06d4-8e96-b7854e913d15
 47 84a8b672-ea08-1a97-8efd-976c5aef5d17
 48 9b658486-978a-79f7-9be3-28d31c2cbecb
 49 c649ee5e-4e41-00ed-b85e-73f7c93486db
 50 3910463e-33b5-107c-a5d5-c2e50cc9efd2
 51 fdcae030-335f-7ae4-be51-318f335822dd
 52 29dd8284-cc4f-578c-a434-480dd51b14ba
 53 1ac6893f-3f61-1057-a742-297a2cf51cee
 54 452e40e1-063a-545f-b919-ce2da601ac0a
 55 389814dd-7817-7ba0-a9e3-c23a6030b2f8
 56 ec1787fb-cbfd-8a7e-9d3a-bf1460ffeaaf
 57 8f764931-a004-5162-9d66-1b5f1b2511e2
 58 ba44fd79-bf7a-3c44-855a-096d39fed9c0
 59 17df8534-5be2-8ed6-b42b-cb4d73da7a2a
 60 c65881ec-0cae-4b84-91c9-01b18675c8c9

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 748530614678165738620885686426783104831560430017017515785384. Exactly this sequence comes out of new Random(408).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 130 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 60; the post has N = 60 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related