201305040135 1dmpda

explained decrypted filler

3DES(name) ECB, 44 GUIDs, seed 239

Metadata

Post ID: 1dmpda
Title: 201305040135 → 2013-05-04 01:35 on A858's clock
Posted (UTC): 2013-05-03 17:35:32
Timezone: UTC+8 · title 01:35 against posted 17:35 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
New here: Missing from the community archive; decrypted here for the first time. (new results)
GUIDs: 44
Filler GUID seed: new Random(239).Next(9) ✓ verified
Run: Run 45 (seed 51,450,859) (seed)
Draw: 153 · predicted N = 44 ✓
Machine boot: 2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources: arctic-shift · body from arctic-shift
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listarctic-onlykey: namerun: seed

From the post to its content

As posted (encrypted)

E26CBF01AE4CD61B 207D00EC0E227F45 08A6007DBBC90F5A E63A64F76CEBF91D 9DEB712BC9974BD6 3E3B2FC781BE6167 07EDE483219D6B23 55BF2A1D7AC14582 74DEDEE3DA92EB7A EC4B53D7F9D20C44 8A6E4A37B7D84BEE 6064CBEA5154F65A AC35C923BAE8A345 ADACF6ECEAE09616 114207C3EAE4B68E EEEB1059B41094C4 9E14A5D9A73B9A3B 834ED635B32BCC86 4572958C9ADE1BD2 4531C50AE7DAAB8A 99B62CF9FC1F118A 5C4ABFE667E244C4 8A2A480BD6B4F474 F0EE8ABB78295484 6B3EC722C3672349 7D87E86A21B1F3FF F925CDEBC77001C4 DA14180BCF2A675E 0386BFA4AB365E40 73FCA389EBDB0529 D3393E686F752352 FDD6CB22F51B8E9F 14CFC2D348E4CC74 D4F693968DA73417 5AE6FFC6256D2322 A36AEAF2E3573923 047F231DBC96174A F36F9EB78245BF22 3071E24E30FA736B 6540ACDE994B250D 882E5616637C03BD 1D71C9BB07CA37E6 A60CEAE4C310C83E 813A4D5CB6E2FED3 77EF86E1FE214CA7 3AD992C5197750EC 1A12C726A0E4F9D2 F3FA0BF127DA6478 21ED0E30061A1CA1 5D38C9121F3D9479 0EB802B63B694DAA 71B631B40831E3A8 18662ADECCBEDED3 C6AA87A02CFDA502 FF7041C24726ED9D C54CDFAEFAB342B1 EC1F4C4508A7D11A 1B1D87BB6377C94B 640BA77045799E55 CB2BAA7C9B5A7260 0F487A4901898626 1F72EBFDF65FDC32 277E9504C46788F7 9D8A0BACDA608D1F 41AB70728D20A8D2 DC697E36AE329445 9F6414FF58B9DA45 D6928A9771CF4143 0C4EA113816F2EDB ADCA742A0B00C36D FF99F49FC3EAFC15 3C03D48325646A37 37870537D21D8EB2 5F3E11A232DBF258 9200855ED6942AD0 CECF94F21685904D 62A07E7287D9DA82 CB5DC21D6550889A D6C01EAF5D0FC824 06989A5F3FE61CD6 0BCB34237C22F2AA E8BCCDF7A76397A5 7222132D10ADDF52 7DDF3ECEA571D1AC B270299AFB017DAD DFB9169C202C366E 9D5F5A7FA4927F0A 390212692CA4F805 D57C283F54D3777D 6CC51F0E8B0FD85C 77BA2C7F92264502 4795B218AB32494E 9E27CADD776CCA77 0282279F260D3C0C 23853DF2AC51F64B A9411D391E9FFF5A 0236B41E9DE07289 4F0233E5F10B2048 4EF01D2C7F025ADB CDD6411E025A7AE3 C3CD22F52E0FB335 E214A4CB4174956C 36364E3224E10546 2B2E85459E232E27 2B84C130A508601A 53F3AF8F1CCE32F4 C696224801716B81 3FD700130A811E92 9CAC1B3660E8CD22 C1BAAD2633A900A0 B472E2FAAA747EBD ABE394C82C335AA3 17AC14A67D6451E7 793AA0714060CA8D FE86AFAA79A696CB 02A4E08D960554E5 B2323521A970F356 49880008D58780CA E7A78D9C5C027A96 9CD5FF91D23E80A0 C733F532AC77C868 D21AD7DE6323A221 28B61D44C8F1E643 7B677602FE1A6BEC 1907B6336FF968B9 34F0CFA7F60AE6C7 34E9E85DAB38ED69 6A231BBC5FA76CAE 01B2C8DF20BA82C5 4A0BE2CB4AF98A23 17950CE8D8D6F9F8 478EC36B90308831 03D384867D52F164 CBB909A613D89497 FCE967CCA885F341 760E148DDCFE4A23 B02B78F6303A7049 BDAC763933624CAF 8899EB6C8B2535A2 16026A4FFCBF9894 34A0D8758903EA5D DAE9A292258E2A27 FAA35E835F816E81 1741CB01C96DC363 AD24F9B1D7F6E95C B817805727EC6FC4 14CF43490623E4FD FB3C024CA80592B6 4A6A64A2E990EBEC 9F7DAEF1738D26BB 025059C6A4BB84C6 A5AC837DDEFBD6F1 6673F068FD9D6C2F 80DC4EFA01F4E152 FDC56D0F00CA7FE1 0EC9B2C47E264D0A 4349BCBB0F6891BC 996162D2B5517767 AF3CB6C9D61881DB EA17436278B8E24E 83BFA8408F25BA81 16389DEB4BA60213 D28A442FE8D7F6DD C8C3FC8A64D169DF 375E208A2B8F5389 DB565D2149CA8F03 77E99D4E26FBA4E1 4AE9CA065EA922DC A8D0539658AA6F70 A82F0F708DE092CD E6FF421093B1F0DB 25B1E07FFF1AAD73 07F561514E8619AD 653C8A8CD44F04AF 8E7BC257EACF08F1 3FC336D2FE0FF203 5DACFFBA8FF64DBD

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 465fd505-6f78-5e49-b122-20f763a21ccf
  2 f1229202-fee4-85f0-b6a3-08cfe4e361b9
  3 c565d3b8-fac4-7e1d-9e1c-56b33e8b19b9
  4 d56f8513-fb3d-5263-81b2-7f8c21f892b7
  5 04f116e4-b825-107f-b61f-6ea60d0ce8d1
  6 10ebe072-381d-3102-953a-f8f0e9556cbe
  7 32666646-7475-827f-abd9-4257fba46420
  8 54a443df-585a-39f5-af60-4c74bfd9bdc9
  9 c5411030-f32d-4f3e-81e2-0c56766f191b
 10 e6e490e6-82da-391b-8c2a-a8373dc3bee1
 11 5964d05a-6a00-3c00-a330-1b6c17ecba22
 12 4656ef22-2076-066c-8b13-dd83ab29d67c
 13 69ca3451-310b-8093-8c76-8ff16d4eec10
 14 d6858c06-9a97-7ca1-b026-d0fda7f9b595
 15 8ec126f4-f340-2f24-af83-4d25b0aff1c0
 16 459876ec-2678-2f54-857d-150ae6dbcebd
 17 67fc5029-9e9d-2de4-8762-f3cdf139f5cc
 18 7ee9f7ea-307b-1cf3-9e6b-a3be68261954
 19 9a9054d8-4f75-17f5-a126-833c0c8ed560
 20 60c1530c-003d-77de-b69a-2da604374b31
 21 e4b2cacb-3337-592d-8629-3dc254e2c266
 22 cab5a572-42d9-479b-822a-43399bc73ac1
 23 9461edd2-a3be-3452-926e-deecd62ce11a
 24 e26a5088-be2a-49af-a16b-1a7a3025b407
 25 10252622-0c83-107d-960c-4a0d0f3dd2b1
 26 508f860b-dfdd-260a-b925-a8276a1c8065
 27 82df6121-3ecb-3ff4-8b09-7c282b04f4f2
 28 5a0c547a-96b3-691d-8b55-e22c9669f1b5
 29 e8cf6b30-d393-556f-b7be-b17c5245caa4
 30 e0c95d38-4c24-506a-8d77-30d50d435a70
 31 05c6cc04-aa61-3295-bbc0-db9cabeda4c0
 32 7489e92a-d2ac-3857-91dd-100ae18ca7cc
 33 9e211fa6-09b4-3248-a9ff-c18706f9b928
 34 36309048-c56d-8096-be14-ffc8585560fe
 35 20087ca7-c2e4-05c5-9c59-531a88d61a61
 36 cf0c5fa3-c769-1ece-ab0b-04ef113e439b
 37 8185605b-0849-0b59-95b6-80a5386e466a
 38 22417204-a95b-229f-9537-6bfa4e5b4ad7
 39 e6757ae5-de04-2abc-bdf7-63006d48c4b0
 40 13a8e8d9-9246-50cb-9b7e-d20da9516a80
 41 3b3c017c-8ac3-8930-ac24-ef7aafe1e4fa
 42 067e1be9-1ec4-10a7-95d3-dc2d6b9e7601
 43 d206079e-ffa7-793a-ba9e-3dbe1ab76866
 44 6056e588-8911-2fab-9237-761900d7df88

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 58751383433087222117543412365533380102258172. Exactly this sequence comes out of new Random(239).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 153 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related