201305160733 1ef09r

explained decrypted filler

seed 918

Metadata

Post ID: 1ef09r
Title: 201305160733 → 2013-05-16 07:33 on A858's clock
Posted (UTC): 2013-05-15 23:34:00
Timezone: UTC+8 · title 07:33 against posted 23:34 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201305160733) = d33f0238782a0cf67efcc7671fef1bac (name+title)
GUIDs: 48
Filler GUID seed: new Random(918).Next(9) ✓ verified
Run: Run 46 (seed 39,043,781) (seed)
Draw: 4 · predicted N = 48 ✓
Machine boot: 2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

E3993C95E5D3F5A9 8FDCD312685279A5 D6CDD25FB5BC482A AF6C3DC6D9F4088C CEE88124E6CADBD6 2BAE2C5BB53F7551 1B61571BB221CE81 63DD74478A20B4A3 7BE2B313B75882D8 D55649EC21635C54 981F6566B4072058 75B67711E14895AE F9902FAE28A2F3C6 CCD61B7328A308CE 9B8922983401FD0A C8771B322CB618EF 547315B34AFD940D 0385CFA811DE78E0 C1604E28AA017474 3DBD6A3326B34468 E4530CF8E28CD8D1 631648B565619BAE FAB40B7195F71CC2 F334FA8BA5D19260 488B2FBFD394DA14 DFD417C26D295930 007BDB953A0D97C6 CEA9A2311584F6C0 6D6F0F1AED304381 CD7CCEAA190C2BB0 0580300BB73E299A BE7537210E6BC1D6 56AA741ED5E01186 FAEC24F4EDB7BAD8 E8E2F24450827238 3D6773FC51B5C073 0CB494FFAE0518FB 04BBF41FCA73EE93 DB0CCFD8DE12BA53 1657052519AB81EB 2095233168D92123 9F508339590E7D68 B2D0C8DEE0942C92 4D81F40846B9CF2A E2B48381480C3380 7821BD9BCDE0ADD2 042023BE941ECE4D A321A91A0EECD4A4 5B42CA8A1572FD11 4558678B9BDDDD60 B47762F5EC0CE5D0 C8D6C07A9DF32441 6065CD219557E296 54CD910E2936DED9 0927ADEE41C8CC7B BAFC27D189FAD24D F74D42B25167B89C 412A01B353D18D03 03045999392D949B AD2E352513D425F9 81BDB03319D92C3D E3023740F0164D9E 5866E7237BF2BBA7 905363F6B76DE087 1AC0DD3CF830E837 88E6DCC3A81F2C99 CED7ABF0165DB791 4E0E6C7D315835DF B190C5A4757CCC5F 4BC9F71786DC4860 84C13C56103D9044 FCACF33B8FC1764E 36FBF83A73BD7B90 04C1DBE7CB474D55 B9D8B7C35642A8CA 67EDA152FE176505 D19D2B2B60F03CDD F08198128EB3187D 39B32D3E9099032E 74D481FAF120448D F4D7FAFFAE089724 C18847A0EE68901B 493620DF7B92CDAF B069F06AE78D6E75 6A5928E13F0DBB77 B4B89CA822D1F2A5 E86CC9FB8D73EB37 180516AC3C3CC3D0 23E21437ACE0E5FB E912CE41B9627D87 FBA9EA65BB63D920 7999661AA7F2B7DE 23219B9CB907869B 958B0E4FE088EFA9 C9686EE772D56BBC 302965945D6E055C BC28C7CA90128913 3CC94AEB55E2CCC1 202AED2A6AF6CC30 27F5153614E3FA5C 17F3BB9AB0BA38A4 C1C74549F3B39AEA 0BEA9098401B9574 C3CFE5FD6DD0EFB2 A6037A6A6969B5B6 30ADB820580077FE 13825880E322AE11 5EAD07D1FD0467AE B41A499C77D3152F 562AFF6C98BFDF07 234AC77736E1A7B7 25B1118F781188B3 C6DC8C233B046BA6 BFCB2CF445F3F6E4 FD694B62E606BAC2 C3E36E3FA05F9C64 5AB34EFF859C08E6 8DD0CD3301C97984 4057F2E02341BAD4 2C9801782C63B847 9A92085CB4C6947B A2D85AA48667748A 7EAD70DA4CC46A6B 17DAC71753C134EE 5E57F46A8521DFBF A011945E34FAF179 EE18B3DE8745CB68 23EFE89CE3D63715 48DD872C8D07AF7C E35D2E92EE57CF2F BD362870F593B609 89A3ABBE23822A63 614D86C4A15DAB33 88C41F8692B7FBEF D598C90FF60D1767 6BE3C79FCBD9B6E1 8BE9CEE82860BE57 37735B52075E0BBD 87F1DA06C7BBFFB3 CF7D605C85870BE7 9BB19F8CB97958E0 941657467867FF9C 6C9CB37CD8E1EED0 1F695F9ECB731759 5786C9494DEF77CF 4C8BE1B4CF04D662 6D9557C1706571F4 C0CBCC931CB3D209 BA129BC12496C769 9D34967A7C2EF40A DED6696A3D9FE782 DEF8C65BEDF859C8 E779DDDFDC017D45 CE1E88B6C6B0ED59 3880F45D2837B2AE 948E36691094F2BF 2231073D78667313 B68D5399C62FC8E6 68DFB78C19558BED E0901AB5E1CD58C3 902EFC9205C804B9 4419CCDCB9DEB3F4 8227AC1743C71AE4 584876280E37506F 69E5260E5B1B8046 DB6FB548A41FB2F6 AE513B859D88CD5D D5A3ABAEBA61C5E0 9CD81B12A598AD52 160D3CF9844CC713 3B70FAEA113BD055 BB67ACDC53C92748 75ADA955EEF37615 7A2EAC2CC0669D83 F3540F8D6C074093 C2B29B671D63FCBE 91EE405C687767C3 A2F7F9BDE3082EE4 46F7A13298BF9B44 4097B3795AA15F25 DE7EB3AAE165CCBE 5F5A08B057CDD288 6C966370123551EC D5BB0FC5972B57D8 D3842C1979E5A44D B09130F98F7E6E74 9F579A92006168DF 1C27F4EF8FA58B83 A4B285E397F1C1C1 0DFA1700DEA61779 386A3846C4CB6A61 40BCCCFD047A26E0 7C1AC87BE32CBE3E

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201305160733 (name+title). Key = MD5(password) = d33f0238782a0cf67efcc7671fef1bac, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6bb98e82-2287-2dfb-b831-d85e55ea6245
  2 dc290cd4-b728-1e43-b2a5-57e80d831354
  3 be974bec-573f-3e7d-ab53-a33a1c78997a
  4 933f4c86-a103-4308-9d97-2b1113161d8a
  5 35fe806d-689e-6983-bf84-b01774177ccb
  6 b57de7f9-2b28-7b23-83b7-6b5574c1be34
  7 0f6aa21b-4deb-1e21-b02e-0943b845a9c0
  8 f9259527-6fa1-814c-b65c-e4441a6804cd
  9 6178e49b-fcab-44bd-8007-a46b556852a1
 10 04f5db34-9cae-7abe-869c-b2b6dfe5c607
 11 a590bb58-41e7-58f8-baab-b376c4fc5fa8
 12 1dd6aba5-b270-1d36-8554-606b385462a4
 13 9799ac1f-7c3d-6a39-b05a-28d2e85c3a10
 14 870021eb-a773-0391-b67c-35706047159b
 15 1036588e-1cb8-5cd4-9726-bfc98c183cec
 16 3d480855-4394-36f4-8c8e-93e0e730fe55
 17 2fdb359d-e09f-6add-a99a-61332390a884
 18 c17990e5-9a62-1af6-bdc8-c5ef97fd7945
 19 84664527-c0bc-492d-9f21-cc9460baef91
 20 e671175b-3b18-66c7-a25b-093d38ef298b
 21 a851475d-da07-7681-96fe-61a47b296b5a
 22 8eb6a3f0-6946-0aaa-97a4-a04f54cf44e6
 23 207fccba-eeb7-17fc-95e5-93c6facffa6a
 24 71a7302c-5183-60e1-83d4-ebb44de7a569
 25 7faf9aeb-faa5-6212-b4c3-682a38e8ce3d
 26 0f6dc821-7000-832c-9797-d0112121dd33
 27 7470502f-cdaa-1fe5-a5d8-03d839e5d3f4
 28 6e2eaab9-495d-401b-8551-04aa82f29303
 29 9f262b2a-7fd4-02e6-bea6-333ba3cda6bc
 30 b35509c2-470a-3cb4-aa44-a7eaac6b01a2
 31 e777d86b-d484-068d-a88c-3fa87ef4ecda
 32 18e2c7d0-0fd1-2fd4-8947-a5469e2c4eac
 33 64f6d635-0c68-4fdb-9753-2e9d93c07456
 34 53cd13ef-1276-07cc-b6b4-07294159425c
 35 a2fc2b17-3f76-161e-bc66-671dd4a80b29
 36 3336d265-f407-4fce-ba56-30293702693b
 37 b4efa26b-96e5-4233-8a6b-7682e91c0894
 38 0b1e898c-48d9-823a-84a4-8a8e054b76dd
 39 27e3bfdf-b1bc-49a3-9493-a5be778f06a5
 40 b4abaef4-453c-1d8c-9521-7e721adb6182
 41 587eb9cb-26a7-2bc5-8415-7f09345b52ee
 42 516ff8c4-281d-6427-a772-a941137f878d
 43 515c6675-6812-3469-be81-d6fe0e69de52
 44 b8132349-5cd0-1fda-9944-3562f6dc5af9
 45 eac9740b-c477-89e2-97c2-3db561e1027d
 46 ca12a5e1-a833-2a2e-8a68-89698e0acb48
 47 c1cfb419-42e9-5955-9aa2-45c5d20cb255
 48 a1d76555-2e77-7f72-992f-a7771d510402

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 213467184751605361467016681403024014484126318257. Exactly this sequence comes out of new Random(918).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 4 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related