201305160945 1ef9ys

explained decrypted filler

seed 874

Metadata

Post ID: 1ef9ys
Title: 201305160945 → 2013-05-16 09:45 on A858's clock
Posted (UTC): 2013-05-16 01:46:00
Timezone: UTC+8 · title 09:45 against posted 01:46 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201305160945) = 4fb84ed47bff0ebf2e2b83c2a341f2cb (name+title)
GUIDs: 44
Filler GUID seed: new Random(874).Next(9) ✓ verified
Run: Run 46 (seed 39,043,781) (seed)
Draw: 7 · predicted N = 44 ✓
Machine boot: 2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

DCD5CFB13F15B315 2E037EB2E39F62F8 463AC7FED254D923 D984F2DC2C50B607 4ECF1D6C52967C41 5BAE6C8CE57CD637 FBE5350426617283 9824A590F74098CA 8F6AE629D9D02951 2C3D28A9628625B1 0619374D846657FE E04E41CBD28F4651 17A9A82C8CE79898 A9D7AB2C8A3C02B9 7E208E4B1DC08493 AFA6418443288577 FE42BC73CCCAB32B F422D69FA9C85143 E1F4B9763FD8513E 931F4404C7727FA8 44E374BB752313D9 B4AE5F8211D407DB C01CC0E1E09178B7 85A5D35D16F53D66 CE198ED5587CF13A AB95D205FE65B262 9652B386760DEC6E 579003D40BBB1826 4D6FB8DCA13D5A1D 63CB0D565E254EB3 C90AD76B3CC05B53 3EE9FD57041BF4A1 34EAC7C147B52A21 B8E91B14EA23DD1F ACD04A9F843F9864 940EE9772331EFA5 76B98F93EC8DAF01 0F9E0B853CF0E5D6 B8CCD776210B1422 C26365BD489447B8 CFC3BC6C23234810 2FEFFAA670460639 E4AD76C1BDAC6162 79648EB52651CA0E D195B2EE579A79B7 130757C3F38EBE4E E4D31CBA90FD2EBF E3B59FD85DD1AE5A EEEBDD32B93626FD E7EB43950F462872 41D1EA801A230025 83AEB0780FCF5494 7C22D06C8AF24D9C 1E4775CF82B47333 CDC80827F29FD474 07D98F783DE7C60A E872433CCC019EB9 0F2CBE40F362E689 9A428554978089C7 B849704DB5C8A5D6 962805C36803E2B2 465C0C2B08615592 3FCE5BF8F3F68070 57AA3697396C2461 1F591B258A97067C 8C1DA82B8B1BB8DE 0ECC9B9B29DD9E94 0B372E0D9732664F 6FBE2D78C54DFC02 5A424889E06FA7A2 F58DE393329439C3 2E0911B40C791C60 9EA1AF066DFE3B30 7625E241532A1923 1315A66DD85EEBB2 3E12738F6016A1FD 539392B6FCBB3421 C54E4412D5F4BE33 5A012E933104B7D7 D503CA9BF0D2CCE1 008C47CAA7B63FFF 286F5E328A47989A 6464C55768297035 D22F2EBC0C03809C B3E80552643E44BD C9B44F97EAC38B70 CEF2F8D0FD5BEA28 EE4E6201E3A01F1D D3E2BAB47B50953F 1B359C60C5651FC9 39F4D5698A0CF915 49CA6AA1ACA729BF 4570DC64E98D62E1 650292AD3855FE21 8F4E5D8BC27C44E0 7F9E2B92F80A0D8C 63405E6D2727AE4D 2F8A7ABFF6C1BC65 B552C5DB1F0B03D0 A4D4B62E196F658F EC0BB611559F982F DA3C3D369A73E597 01831A4F82A8F58F EB570116C8235F0E DA9131DD2F5F65F4 27BF33B8016E331D A8A3132D6919BF73 142D69EF3373EB28 422D1F6B0188CD56 7CA3A2CFA2A51433 BF9894E18FF27920 C38356808149CDB0 B54BF30466A9A0C3 1D0211455B170F30 7626589620812C7A 88C8FBFC130360A7 89B9466CD92481F0 BD970AF771CB7150 696725D6817CD344 423A827CA80D915F 42CB43E4799E1CA1 A4EF71DF2D3EC87A 07846653A7C6C9F5 C45DE800BF3E1006 637BD3F35CD67A0B 043413E1673DC7AF 189B4A56A5B3FAD6 D7163535A434FBEB C147CA31AE05B300 524751618B507F34 AE668D70B236046A 7BAE779F60D71AEC 4D56B27AE4DFD475 810FF63F9212C192 45BE591F77FAE957 2098AA1DFEA4E16F B8824F1231DFD3BF C01A101B767E5966 EECC013C3F569930 7E256E20540A49C5 A183C2CB44FC1C68 77667C25C708E70A 2D245E343CD85FCF 3AAF6BAE2758B5E1 D33CF6A7CD5FA03D AAB63DB24B74F5C0 4E7F0E442B3E7591 4DF1915A15C3C46B 488F1B85A2328677 0F540EEEC3CFE404 90BC09D894D3A031 AA8E757C405D5C53 1A641AAB9712827D 8BF57779B6F2ED42 A6989B75021A97EC 567BDE052F724F0D C019B18677E0821B FDAA7885CA4953CE 05E3E908CD9175AF 9462E6EB03F7E5C8 B6EFF21585A1278F 433E549BC4DB1A14 120AA8DC30FB3382 03E99CB709341793 0F5F32E0CD897406 0E88AB8C0376FF2E F0E227167C4D4B37 C359F820C00BBBB4 5B75DE67EE026F04 46F76DA3A9FDEDFC BF88E162E1A806B7 841FF093BAEF8C0A 8FAC10F4DA9F2157 925B6AD70EF6A741 810AED846EFFF8BC 31187037B6BDE673 47D871D695DAC9E1

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201305160945 (name+title). Key = MD5(password) = 4fb84ed47bff0ebf2e2b83c2a341f2cb, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e8c08abb-360b-2dc5-a6d1-dff1871adf1b
  2 d2ad6894-0df3-2f0a-8d74-15a5e35a7ac5
  3 b8d33757-a060-6ff8-93ff-30a93c9b9d3f
  4 e22cb352-0e7c-0e3f-b7ed-a15db857a0fc
  5 d174f9f4-749f-7aad-834c-cc19c18c66de
  6 d9a7771b-d16e-3c0e-81f0-5a3bff301cbb
  7 5208c8b5-9833-4b0e-92fc-81bdd7ee11a4
  8 810e6ce5-b48d-8fcc-9b68-c29f4a39de05
  9 69200886-4fb9-0227-b74a-21a2595f23bb
 10 163cc69b-9938-5ccf-897e-4ea36fa7f67c
 11 9186f412-7ca7-16af-a097-b2890edee3a3
 12 ad3f81f9-9f50-72c3-b8f7-a7d69978f5da
 13 81ac5b07-3a8f-45b1-b5af-958cae200e15
 14 b58a1a32-61a1-1b39-8f31-3a623d5a2d98
 15 b85bfb43-e3ba-623b-ad18-c54df25115d0
 16 4aed89fa-728a-7f10-9d45-d2967367ab98
 17 e8d1b92e-e37c-2ac7-9ab0-0e1660b4b0b2
 18 abf99a1f-80d0-77d8-bfaa-e4f23d32761e
 19 ec6109cb-1e22-3f29-98ef-888cc6e7b326
 20 71703185-1245-685e-aaed-b6a3002b3baa
 21 bbc0dca8-9e05-8a72-bdb5-fdba345cc61c
 22 99967c73-75e8-2c6b-8b20-a4b5c65e05bc
 23 1ae6113c-f0a9-6806-a952-b28decca57a0
 24 d3108a5e-76ee-3ece-b510-695de05429af
 25 eb324241-7366-3b8c-8b2d-773820629f3c
 26 3bfa7e09-8157-6455-8102-6c571a3d010a
 27 a6b51e3d-6dca-310d-9b53-921a05fbe3ad
 28 6aeac790-2361-2740-90b6-6856fe80d4b2
 29 144d2a29-00eb-895e-a2ac-57ce5bea5701
 30 d49626a2-5858-80aa-8f6c-7d5aa563b484
 31 ea2010de-d7ba-7b5f-9cc0-fb68ef2557e1
 32 f5e8b6bf-830d-6ac0-8390-b0d32b043d93
 33 f9ff6f8e-a181-6b7e-bf81-db915e976e70
 34 ca0e498c-8d70-880f-9636-1db3ce886f41
 35 efbe7c66-1e46-7efc-908a-e90ef81a54a3
 36 f0000881-7353-5f87-99b0-4b259792f862
 37 6551d06f-0614-085b-bcd0-b3b5f1fa508f
 38 49fc0613-b31b-0184-aee5-b2195672d2a3
 39 5952f59c-c956-0f94-a550-cd9e9dbabee0
 40 e6c480ce-f69d-1886-8362-bf4dc7652b02
 41 ececc084-f32a-4bc8-90a1-02cf071ea59a
 42 cffeeff4-4c4e-4e9e-8bb2-0760bb7853b8
 43 77b0f46f-979d-1eaa-ac6a-67cb78b77f7d
 44 af79d591-b8cc-1297-8eef-6606d286f6c3

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 22607348051741672736826336328876687500014411. Exactly this sequence comes out of new Random(874).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 7 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related