201305031320 1dlqh7

explained decrypted filler

seed 934

Metadata

Post ID: 1dlqh7
Title: 201305031320 → 2013-05-03 13:20 on A858's clock
Posted (UTC): 2013-05-03 05:20:33
Timezone: UTC+8 · title 13:20 against posted 05:20 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs: 56
Filler GUID seed: new Random(934).Next(9) ✓ verified
Run: Run 45 (seed 51,450,859) (seed)
Draw: 146 · predicted N = 56 ✓
Machine boot: 2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 4 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

8137B5C047303B26 9D8673941269F448 505FE66431385B94 55494610D87ECF14 D72BE5392BBD48CC ECD5F67D29ECFC25 D68F10E58B3CAE20 337773F2BC24485D D596A3F00EB09536 369DC74D248070C5 80D1BA96775F52A1 67D71824FF933FCB 307D5826483E8177 54CDB3D1D3A8DBE4 702E108EBFC16F9A AC8C5EA34B0A2C71 B6D8DF19781A1A7D DEA775754A8C0DFF B1D9A716EB22596B 55F626785064C257 835D1A97A2B1925C E756976EBA677AF7 2B63757122A7DF92 46982CD839DCD61E FC31BE891B887910 F615C99A4923D9EF 2216CB28508ACECF 6D04D7C6BF734D85 A46AFDE55DE1E27F 387FEEBA1F2ED7C6 1D97DEF823A39247 3D587E1D0E1D1C1B 01FBC636002FDCF9 6F0F2781768FBB98 D60F5914BF12FFB4 52C8250266672890 C25B45F94D2408E3 FE4598CBB24E0F02 D0E926171B1D8CC0 6C429FA7F3E8E320 73B44E535A7D3B28 5AFE0F79AF512CA6 99FDE76222263B8A 6F0E69A73913C774 D070D48233889832 3A911986D2845A07 9EE700BDEF47D32A 51C7F874CE86394A A06182E86CBDC039 A2E2D20E48803BB6 B5DB5F273B908EC4 50A76AADBEA91721 B18E8639A9A0DC41 A75120FA204B97EF D6A2DAEDA67850E8 A86C517CD56A11AA AB5D11C74B98B21F 32BE4B71C09570C0 A2F0C24D927A0E48 4FE925A75239DB56 53DD93D0A8453F6C ED01B9D35214B908 F62BCDDF3FA73AEB 908DD843EB08F412 92B3536C0844A64D 8EFEF73AB5E60821 C754C89FE46BCD61 EAD731AD30E8CC7F 10C55AD1F257F898 CD7547301D8DC0B0 A6379747BB06D8B2 899EA34D2F701B7A E802E77E7FCF21C2 8054E54BADA9E234 179E022349949538 3A6DF709F8C78BDE EB9BC5F1B889480A 00DD69E31393F07C E375B28F2A442B9C 866FB36CA3794579 526D7A3006D83A4E A77787134EC5809E 8BBC380D7800B96A 8FDFD5737340BDBA 04126FA2EA151B88 29C71EC7F88D8433 91791F14F7E55EEB 3F0A6349D19F3057 5DB242A9D5E25925 680F2D811413D084 1C309098E604A016 336083203C7C1A3D 49C152B7712286A7 FF2C0508CC0A5E84 0C998C58DF835CFE 9798E98DAD086F25 26829CDBB938573F 8458C2A07717E3F8 0F17D53DDFF0997C 42F2F82A5CFF9EB6 F084BC944664EE57 5F9025CC9752ED31 41D570E4CDCC7789 342BE31CFBFB7A73 4A6BD2BCAA6EDF48 C210A4AEAA257A15 1B8E5949CCA825A0 08FC51BDAD645867 DB8B7DC939555DDF F3169CA75E3FCBFD 46F6256A1516C0D3 C5DC18E3A578800C 87BE1D6DB32184E0 1F6B74C85E41ECE7 CA9EF4D91F8277D2 245842ADE29B2E91 7911A3B72B53E266 4167C86468E965EC CC4A1A5D547900AF B99098CB88EFDC9E BA3CF501D9E4D78C F3E951DCBB6B69B4 C38B8C8A12AA999D 05E34C25F41B637F D8176756119CC1B2 3C1F8F52A3E2D0A1 BF208FC7A4DE3EE4 35ECF3F20DAC500D 2831848C5A1F4A96 3EAEDC65CC9A44EE F031DBACD33CDF8B 1AC66867FCD6CD93 9931E451DA3F82F5 35B8AB99E97DD859 CFB9D54640DF6E69 36603442223CB148 69AA18F4EC723449 D9846F023EA945B8 3DA3677DE8747915 773BA8BA014A99EA 1FAA24392E9150B7 140717110BA4517C F92110E8658312FB 9180F170D654A8ED FF63D454522C308E 60B379AA553116C4 0F9AEEBC72E6D01C 0BF2988FB9C4CF1B B8A4FC65A99552CF 079443173B3EDA2A CDEFB66DDEC8D4FD 736BD036B8519617 3840BB43B4AE1B0B 29B466D6FAAA79FF 96E61ED4589C2542 B19823B2A7CEB03D 85829C7862C0D40D 20FF4DAA293A14F5 73BE5773DDD31BD6 5C4BC4716C0C2375 F6E3B6C21CB80212 F9CD3FBCDFEC2812 8614F0CBDF2194AC 6502F5FF23454B24 263167B05AE3F63B B1577D92BECD9225 315BDFC534E25EF9 A724D87878233497 06FCE3A7D96D68E7 0A6FB924F7497537 36279900A16F5FF2 A77B59AEACD2D84E DB9E582F4C086F16 561C90A23DA0A513 779A019C4446B786 6EC8FF5F6D906244 40ED52EEA94A902D FD801C21BAE0D492 D161FC43C0D46EA3 D70A621CCAAECDB9 622152DDA6424DCE 71E20C89A8057865 32003B864739712B 6A951374E1EC30DC 976E35C3F16E0D2E BFE58AC973F009CD A1FD5EE5A8FA65DB ADE9D95EA4979FA7 FC6B4805AAA79983 975385ED2C85C4E7 6C6EB39723333ABD AACA95F922FE9485 ED413B0BE5488B25 6D71249B012921CB 8AE295329D105EC2 E2F70120EE1ACD2E A2D42B96E8ADE794 713F4F79C53AAB23 7CE3B20386DAE7ED 21D80EF0430E2F62 D27D5229ADF5677D 715013C58E38205F 9BA59C0462465105 FFC02A942A8CF896 B6A0C3144D4D34BA 797BFB86D2AA13F6 73C71681583C2828 A95CC7236B19557D DDD2545711307300 11D3C8B711BD9CD6 BC89FFB8F86D3CBE 1B1F01FDAD42A93D E6EBCF3A0D2DD841 844466D259F6D735 A38F9B917FC570CC A7D8577048A0CD43 0265BE19EE020DB6 95C97EF6506BC077 ACCC1008683C03EA 01E5887AB269A650 AAD7A01527C7D6F0 E75ADAE2B0AA5E68 522B880099D8E51E B671958320AE1AE3 5DACFFBA8FF64DBD

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 bad17491-9058-6459-bbd8-01bcde3559f6
  2 45813814-37c9-7937-9352-8ec5d9a81d1a
  3 bb931feb-6c3b-51be-887a-04dee971e59b
  4 f76dfe3d-9d62-8869-9d62-31da7e4edde3
  5 b26cae6e-afe0-83da-bff1-ab11ae6158e6
  6 127852e0-72a7-7224-94f2-36f231dcea69
  7 d208f4f5-5288-3492-8b97-f1f44c9b1254
  8 dcbb51df-2920-0b39-b1e6-95d58c9e460a
  9 382443be-fd44-4f80-bfef-4c9907e837b1
 10 f227c47d-2f57-6663-af59-4a62b46d5a38
 11 a35bbaa3-05e7-35e3-b7b6-f4b02804f57f
 12 53439c14-1839-5a86-a944-d917e657dbac
 13 ad6c1112-9ce1-6e3d-bb7c-019393ea27b9
 14 a9177884-86c0-3173-9bb9-f8c0a722e13b
 15 3be5b9d0-bb45-692c-84c2-a94fb57c0f2c
 16 7d032057-f398-27da-a440-44b7be81ed09
 17 d5f90c1d-d6ee-46e6-931a-ec4f0aee7865
 18 33291a04-76cc-0e28-96fe-4f6f26f8604d
 19 637a3716-8a97-8d44-89fb-0a891fc02874
 20 2768ff8c-bc58-83b9-9e88-34ef0e7dd2d9
 21 231629c3-8822-8d0f-87e1-5aa9181ec707
 22 4235686f-daf7-81ba-b57d-0f733289200a
 23 8a97a895-cbf5-7470-ba5b-2c2944cb41aa
 24 174436e4-6127-27af-838b-ffcef483541e
 25 ee0e8f29-216a-2186-b5fd-b8ececc12cf9
 26 94991c77-b0ca-2528-af3e-0bb9f8c59b35
 27 54428b2e-82b6-86a0-87b0-4ef03aa94b27
 28 1deba16c-914b-37d7-838c-d151527f38e7
 29 1480bce9-dd76-464b-be7d-9b71e22b0724
 30 2e47238a-5817-2ee0-ab11-a2fe13a1e72c
 31 8e206788-9806-8570-918f-cad0b1700b4a
 32 2a214d70-02bc-4769-bded-9f5a163118b5
 33 57876320-34bd-7037-a21e-40396fe8b4f0
 34 a0b45db1-c312-3568-b6c3-df98b81dc084
 35 1d42cd5f-d8d6-6f4b-bf27-bae651f8cf0d
 36 4de545ae-05bb-2d79-a711-5630501b82f5
 37 347f1992-2fc0-6723-ab01-b7591dbb0116
 38 2119622a-ce73-82db-8f70-7ce2cc9c66ad
 39 5aba23a8-6acc-2bf1-b421-d827fb14965e
 40 193d4b17-db6c-2441-ac04-a6afdbcc234c
 41 91ad893a-1927-486a-ad2b-8bab1b37ec8a
 42 4a47b863-1b12-110d-8b64-46307ff7320e
 43 93847e4f-2eac-4216-85b5-42f53b9608d6
 44 45cc2b37-ace0-8a89-aafc-9e48e969a066
 45 a568cb75-b1d3-3f91-95f3-43822431a76f
 46 a0d80340-cab2-2d42-a17a-4b0132c0ec3e
 47 e7793308-b5ab-0d37-b2ba-375421af06d3
 48 2c567eb7-7e0b-05b1-90d0-2f82bb7ef8c6
 49 bfff3260-9f57-3094-94a6-21910f24f5a8
 50 57a06095-2255-6f0d-93c2-3c07d7456439
 51 c653a35e-13a9-844e-9474-b62a12da7366
 52 0a2b28ef-c454-6228-bfbc-28dd69367fc2
 53 51445634-4716-3d8a-a81d-6bab0a8c2119
 54 a4992cbc-14df-6f9d-9898-c8d0f9e1a46d
 55 89447f27-5979-1d88-9eaa-fbbf7794aef7
 56 477e8260-834d-622a-ad34-beb3f34d50cf

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 67588730463563624088887222834284736268224148320036863616. Exactly this sequence comes out of new Random(934).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 146 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related