201305021105 1dj0xa

explained decrypted filler

seed 328

Metadata

Post ID: 1dj0xa
Title: 201305021105 → 2013-05-02 11:05 on A858's clock
Posted (UTC): 2013-05-02 03:05:35
Timezone: UTC+8 · title 11:05 against posted 03:05 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs: 56
Filler GUID seed: new Random(328).Next(9) ✓ verified
Run: Run 45 (seed 51,450,859) (seed)
Draw: 131 · predicted N = 56 ✓
Machine boot: 2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 1
Tags: automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

2341669CC0EE1865 D2C3039B1C8CB979 DE9EF4EA05511742 6C835810FDFB5FA3 B6CF2DEF2F3E3B0D 5FB27849C131FE8E 3999B5AD5B3C7B08 09A4AE91B82C1C8C 17A9C0D3C42BFBA3 83FC9F6EF9D37FE7 8D0D112896B317C3 E3DBE382C32010BD 6817D45BAF41CB04 27D59B20B1C1A716 1D3F3931AFDC76FA 6050D317FCE21E2A D55B15629506ECC9 C0C7117DF4D9194D 86B999B7272C7FFE 561217D9F8ABD9E7 72FB5D3DC3FF344B BC7B4150255E271A 5AA76C90E180D972 592627EDF17A89D0 619D6C51F6D1AD95 01555D64760310B4 5792AB1C028E8C98 A16822C504DC3B34 CAD11E7356E07448 712689E2238FBC27 5E791BB0F13DCB8E FA5FDA5D1ACB56F8 D0CE6DBA4E32A95D 0A9F2385DC6039F7 AD2F3BEA06A71022 32D36C51DF0A9C29 0BDC49AD74C512BA 5DFB93232F1135CF 7D8A29BFBF121BF0 D4E8F0AAC74545A4 839C425925873AF3 8B89CA1AF4A02640 FC578C0B3D94BA0C 0DD367EE7BDFD576 CDDDA6387696AB15 8010FEB858D39D2E A1F5822414E604E4 8A3D73C0F60D16BD 75DD523B20BA2598 D6DC0D2135F0081F 5EEDC0E5E19CC758 6458CEA4C5EDDE5B 061DF03BDAE693A6 C8BB19AD0A4FE0CA BD88285BDBB8D1DE B875788BE9A9EF59 6322174DD08AFBBA EB92A59C8C8B4501 BDD84FBD0A6D0203 46506AB479C1B75A FC44B968890B1A8F 89E23A2C653EDA23 8B68E9C45A8E502C 95EA13380657A3DA EC01C1FCD078D02D 5B465AA6730C4B76 83D7C50C712C4675 EAE5D88462833F45 15196D37B7694E27 0FC58A7AA948414D D15760E3F7CB4E7D 016192F162F73E20 C92EA3447103F55B 3C14AF7D3DA4339A 24648EC72CA00845 DA1B89E05A707959 4EFA0ED361793F8F EEE03F8AC01BEE2B 04FF8E3605559C41 6CD80DD30016DC83 5C0D664F49786EB3 6759F2C0E57AD7D9 FD99947F8E078492 BB03381FEEFAC4F4 0D9382CAF8542C72 68B9CF21131B7328 2C314D74D0ED7C9F 9AC51B0CA80E1086 E1454B8892FE52EB CA1E70CC64C1E1C2 DC7B9C099D393041 A3489CDF8DADE922 20AA6DC207B31066 FB71199D6CFCE781 051A587B96817681 F252EDAA3CDB8A90 C9642F26979B3A5B 908FE89BFC6AD408 7D0B2667FF268B6A 5D8ADA6E44631252 5EF36A13C42CE372 6A8D004E129154F8 761D068F699A33A7 A1EBA32B933C069F 2336413D2A53E6F8 6080891BA37123B3 4A0907B6F9BE9ECA 40DD7E0E64CE4AF3 000C27D2F2F6A1B8 E91E358BD58D7636 7A6FA31CBEFBAAA8 C9445021A361B554 D321506CD0F3B3A3 725447BDF31E7882 2729E8B98F985849 9C502C5F4903AEA4 3CDDC5FF837F6513 478E4CE18B58B743 C476E9DCED41CD5C 194277001B7B6161 0D3ED6DF987DB6E0 AAFF9149948759C6 D6972747E1915D9A 00FBE08B2021D11E F9DF2D6A3F5ED385 054E32729B87FCCA DCECE29A8007F0F8 4483C0715AB37978 0632906FD9C604AA 382AD756F9AA04B6 9C39FF4AB741EF46 FEFAF121CA2CC2AF C76657067CBF76E7 D20C7F1D4C990D4F 040DA38BEEB4E17F 3420D4DF8B0D09B6 0AAFAA389EAC81AD A66A4E7DBA820359 DA5A982C045A84B8 F5BD98C7AC5F953D 5FEEFEA20BE62511 7C34E7D957F82E83 34388844B40AC38B 549F2BD900D6E970 80493118F2D27213 379AFC95D167750A 09561B376DF33CA6 BC715FE8C0F8386C 6819FFA142728787 8ED15C11341E3123 843AE7E58C814DAD 8F63835FFF3E76BD 2B37B1442E8F288A 7036842D93DD85FC A42D2E3194D4553D 5AB7F9C72A1C7FB7 D5822727DCD51D3F D9795CF477B392E9 07C3E829B0C858A5 B27FE545043EF0C5 04FF7065E0D0D59F E01C61A4DD48813E 21A6C34F0F09B170 EBD5A3B5567E755E 551C0B26E215C0E0 F02C87808A08E0E0 C368C638EA94E76E 08B1FD78ADC8123F 390BB814973C924A 8E150B462598CDFE 0F3F01215024F67D 0DC6B5A1F8D62FC0 A69EF517D5B66A50 BD126CC0846F7245 1CDD1FC8D455810C B15ED83896DF5FBA 9E31FD32BE495654 920B288EB7768633 F2D7B304075934F9 DC45E6A891BCE6F8 5B36208B3BE3A4E7 A8D7625AAA1F2270 05EA0AE4EFC0C86B 36760BBF0EE35DB6 D3E657A29C63338C 85015C6212790E57 B49A948B2C42BD20 8C94FBCC070A2C45 E0FDF7B203FFB49B 95E0392071976E43 9B8379C86E44A579 57D8D1F589968856 1B382BDACBAAAADA 6CC491D742D6610D 6CBB80E09796C6E3 BC7FB887D8AA5D4D D408809AACA8AC81 846D670A70E3F2D3 86F09B7EEA70A72D B35254AD2B11523D 486567C42F8CC0FC B205A568731F7566 3E76EEC5F6ED944D 384D25FAD312F328 A15233E7AB634D62 D19A6BF1BE90B4E4 0BFCFB26DA718E5A 505B52ED49D41C17 90D33B7AF38D6C91 36C4AE9D3B7DAFDE 8513FC5EAF66A8B6 DDAC1D247F817455 37DC449A0D7A0DBD 4AAF489E4F9710B2 F409B2F9E6E9E4A4 B1001EF1800259FB C82C56DD7705A1DE E4C24DB3893F09DC 16D7D9D4C7C3322E 136F9E524C9C8437 2517913247711811 74FA1CC47606EDE5 A4865F297FAF3988 E45FC2693D192AD9 5DACFFBA8FF64DBD

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 baf72dc1-f52c-0c3e-a57f-bbace568329c
  2 ab752ccf-d2fb-0286-972e-51c234a75fd0
  3 2d0641d7-96f7-0088-88e2-2d58e0bcf16b
  4 0e4781b4-0942-59ef-b66b-31df563f6abe
  5 46e59534-2db5-2ef0-a449-1cbd2b190151
  6 bba00b12-251f-1876-8435-6c8db685e557
  7 1177b80b-5ba1-7588-a65c-91feab931a65
  8 fb4d0a8c-19f5-84d7-9ab4-63635e9dee46
  9 4c648f34-2607-5ce0-9ab8-2bb0cd9cfe3b
 10 4f787842-e2b1-222b-819e-ea6f0d137229
 11 3b1f1c23-3a51-8af0-a432-bb1ae85d608a
 12 2c5c4f2b-5ed9-4802-a491-4e2606fce331
 13 425f9935-40de-1750-91ef-85661f1363a1
 14 9f447b8d-fbf1-1f4a-b6b7-5faa6e10a4bf
 15 f0d695ed-05d1-51f7-a276-7bc7e05453ed
 16 ed2c0fe6-0358-7f56-b817-bc36421e179e
 17 698caf38-f7ee-6686-93b5-82b530625f01
 18 32005a27-ddf1-3d1b-8ccc-590d8f4e19de
 19 99d2b549-cef7-5ead-b141-2df81e40c9e1
 20 e06021db-d6da-2b1f-b1cf-c235b03ff06f
 21 6cec73c4-db20-3e91-98d7-2034ef0d9da1
 22 be201268-5088-2aa0-b902-2deed95177b9
 23 8549f671-cf1e-31ce-8edc-963253dc6670
 24 220e8db6-729b-5058-985d-064e6f798c74
 25 b12af722-8137-796c-afc9-0dde8df3eaba
 26 627b5d9a-b3fa-44b7-822f-163747c922c8
 27 12418652-45fb-83ee-a045-b443d3acd641
 28 cdf05a48-a6e1-8e98-9d06-e76daa05120a
 29 0ae80b13-63a4-1632-8c33-b13ab3330959
 30 0ed6b88e-aba0-2b0c-b5fc-29c4b53eeb61
 31 09558125-887a-2677-9da8-ae173e00b7d5
 32 613866d6-8102-77f6-9cd2-590681b0704f
 33 47751683-4f98-1391-890f-607ed42b5aaf
 34 3770e4c7-10f3-1e6b-bb84-6864cbd94635
 35 963531d6-86b5-1880-bf07-f966a394b3ff
 36 69f977e7-e83f-85d8-88bf-10f1f5ed3379
 37 42be1624-e6a5-6002-84ed-ae9acb2dd786
 38 52680282-6351-8d81-a129-5032901ca26f
 39 bdd17f76-0c9a-49ca-8652-816dda5c689e
 40 e74e2bfe-652f-1947-93dc-a4957c19c815
 41 34649a9e-0163-206e-8be5-cea28c031f50
 42 bfd471d5-f9b3-74e9-8232-fb99e42dc948
 43 eca5f57e-38fa-7f8e-a237-17839bf0a524
 44 e2e77ce3-2bc7-3dfe-813f-c07ea561f8f4
 45 a1cd84c1-8ee2-7a7c-9996-78aaff1f0645
 46 e41ad21d-a4cd-5e34-afec-b69fd9cec56f
 47 5d4ea5ff-3085-8bf9-b5d8-be393f3ead9c
 48 e7831f31-9fbb-5309-96d3-539af91de875
 49 cec3dac9-f473-1c58-bd16-9b5191f03061
 50 816b4612-023b-560d-849d-12e07730a455
 51 b745b2fc-cf58-4492-a139-3cecd365bc6b
 52 cde50451-879b-48f6-b724-74221108596b
 53 018fae2d-3c93-832e-98e7-49c7b6cd0d64
 54 606e7912-6320-2cd6-99f9-be76f5961d43
 55 c12567f5-4567-70b2-8087-79f547d59a0b
 56 d3bdbcc7-1cf6-605d-8c79-f81619757766

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 00052178528411576352323574881227111868412773758515448276. Exactly this sequence comes out of new Random(328).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 131 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related