201305170153 1egp1h

explained decrypted filler

seed 70

Metadata

Post ID: 1egp1h
Title: 201305170153 → 2013-05-17 01:53 on A858's clock
Posted (UTC): 2013-05-16 17:54:05
Timezone: UTC+8 · title 01:53 against posted 17:54 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201305170153) = a4729ecc93b4499bd419b91da9f1ebc0 (name+title)
GUIDs: 48
Filler GUID seed: new Random(70).Next(9) ✓ verified
Run: Run 46 (seed 39,043,781) (seed)
Draw: 29 · predicted N = 48 ✓
Machine boot: 2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 10 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

8333864ACC1C5119 CB66BA4A68748416 1570080C29ED43CA DAD1DF723DB5E59E 4EEA2F4B8AAA9E03 F1ABB1556159784A FC1D911C9D42EDD4 10127A79A00A8625 59B3537A5797FFEB 96B63D5820CFA1FA 73391E4C3381CE4E 0DEF24CCD865613D DE31BC8E9D768BB5 1356D8D09D53B3EF 09F4C56A48F5825E 3EF1E48DAF7C1543 C7948F1B77DFD3DF 0ECC92B645111B49 9045DE97A8D9B9F5 87700627EA295095 658BA89BCE0E9475 779C27F3656F0470 85C008F602A93C32 0035F8463CE5F1B1 B954D3DA0634D523 B78F16610FA400E5 177E71A5A8CE3E9F 34E8C67EDA7364C2 8DADB23CF12A3112 9EC2572BA8513069 184148EBF2BDBCE2 1D51F30BA273C8A8 0B1B7DD86BEFCE80 7641955635B736FB 57D51563D131DEDF 7A661030AE5513FE A847D2FC4D8CC137 AFCCB3E1342B4209 BD246B5F127A4871 7FE5CD547ACDB171 5147B782F2B7FF33 E725CC30685CDC44 82EF80CCADAFE06A 649FEBBB53F15114 C505AA00D451C498 0900AF030BE91BD0 925D024A89456711 02CCC0811E27BE70 8407CB1B966E82D6 EF821E435990D057 4D67D15C04BF74CE C405DD0CACF89E56 727A5AB622886760 6000500ADFF2AB84 931052943244B97D 707E3EBD381E8D27 7C3F2916FF6BC20B DBAD51E69A1AB0D6 62098DE7262914DB 212D7F76D9A82775 5A84F935284E37E0 31F004FF856D0D1C 896B56302B49B69C 671902E1B341B1AF D5B1ECD3DF4B275A EFE8805814C20B62 3298CBE1D5B22503 1F8E3314910A9177 7AAA093B85A52774 BD0AA326548C9D2D 4C302508324A4876 225EF99DF5F28FAA E05D0067387FE20B 30CB06EF716B131C C1F0F1DDAC1E6EC4 9C9CD6024BEF8FEF 68A40CC88DD57F35 2B099F28E5B06E1B 20F473BA85D3B52F B09BE84ABBA85E26 621E560B977F3CEB C78B8111A7BD5989 CE8643210CD9864C A6BFEBC87E9CCD90 797710856D13F834 09E0A77FCA227D7B 3880F69D2E3AEDCD 7820E8826967662D DB869A71F122E905 CD99575CADB8BCFA 6E16B19771174DAC CDDC7C185CB5CE88 336DD7CFE6AF928E FBC3E8291AC89457 77F46247ED55FAFA 4632783A608B9B84 16755FEC86742F88 77CB6769AD4F2C18 852B5CE428005521 AC3644C23322EA0E 030A0CCD7D2A45ED 5F3382CC5090D083 5A2711595950D74B F874DC8708032584 91CC36B2A409BBE0 B9C0990B2D73547D ACBCB9936F919CAA 91D4C4E9D7E54889 CE4DF101A4C0C0F8 6FDBE005B6EA9943 CE872C366F88B111 E15AF23B661491E5 17EBD89806301A1E B135BF65CF8D7C36 17FFBAA76CEBB1F0 F0CA1D0764E0EA54 D42D470D8E38ACA1 85343B72287157E9 9EBC4C724BACB4DA 919A98EB28145C1F F7F631C14BC53691 DFFCA732B68ED633 BBDCC4DA06335C4D 9FB4E6FE71023B12 C7EA6E27A0286308 8D95880CB3FB73DB B5583EA06607B675 7CD5E31DC265FF26 EC551C14D68BA8CB 0B6C14B56367334F 443AB2131C2C4509 FA51DB158F4C4CF8 32A7F321B3B85710 F969E077D62AD319 9343729FFA8BA345 18352E0C97036CF1 82DD89BD478D6C1A 1D8B5569F859BD79 CE7AD80AFCE7B531 7BFEDA9A0D183F81 8E44412535BF93EF F00A32C176F9D789 7BB368135FDF068D 4445FC5BA421E68C AA56C4CE07883AE4 CAD92D807410E8BA 88050611A7E88B20 4C297E695B2D8514 954BBD731067C57B E95FA6E5E573CC55 7A340E2EDEE17A16 21C93EFD72896BDA 34BC8DF74D1FD3E3 C8912349FBBF9A9B 582EF6A3497DC009 6C0EDB066B9B78EF AFB771DD90D7E980 6E22636E9680FC58 35341F4BC314ACB5 CC9DB03AC6A78F95 2D8A3E4E55769A90 20B92F1E17F1CAF3 5A1970B8BDBF5686 48E71CD5018E6C1A 358A8C067807357A 7953D5B34B284061 B79CB509F53DB9E8 59FA9BC4E0F12BB4 7CA692073CAC2E99 6FD460D418C9FBCF 85E842F407BE43B2 B554DA8E5E01EE2F 47A4B621C1F3D704 C521AE80AA2ECE23 CBC51B6D6F10043D 786D0A193251B195 56664FCCEDC3DF52 C0C3BB0CF55F16EB CD147D19B0B62ED4 E1C985574E7B2A19 3684A038205A8445 D3327F90F2077F15 122163555D070BA2 097461B1077A0EB9 228FDE856416745C 8EE351E8D0D98944 06158492B13C9B1F D7C4B9E26F6EFED7 A4632474C7624E58 7B84E59D4A92E8B3 7978A01611756415 301EEBB991940BBE E151CB4ED7EE4D6F

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201305170153 (name+title). Key = MD5(password) = a4729ecc93b4499bd419b91da9f1ebc0, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5149d0e8-c5b4-2401-baa0-07d91b8d5867
  2 5269fac7-19fe-3eea-9c86-bf04a40a5df1
  3 ce5c4c26-c0f0-6c04-9270-1ea8a66978bf
  4 ce03a50d-c0d8-4536-9e81-3721801efaa0
  5 c7a6baec-31a2-73cc-8e02-ea248714767c
  6 fc783e0a-65e6-65bf-8568-9c47f023427b
  7 685e4de7-7d3b-21e8-a294-3a8954eb90cc
  8 c82015ce-919d-51d1-a0b1-375da1704c3c
  9 8ea40252-5a0d-525b-89ce-7a5bc00c6151
 10 e99be34c-c89d-0c62-96bb-d6b04e8d4680
 11 74ce5ad5-ec3a-7884-9dc9-a00e3846aad9
 12 bd42fe33-8a2f-1825-b9cd-5f0b98cd2e78
 13 6f8f839c-ede7-6edf-81a8-c084ec534633
 14 8461f436-2615-71dd-8a90-1212bb1193ed
 15 3aa50c5b-9ca0-8886-ae98-68a992fe4c80
 16 e5c1ed6f-df80-639b-9783-26a070475ddb
 17 fc8c3ceb-ce1e-273e-aba2-c756e5ab6543
 18 b4f2649b-d52d-3244-9943-936284f9e62a
 19 26cf6b84-ff7e-57e5-8945-b7b35960659b
 20 250d24a3-78b4-3554-885a-5ccc7862dfe1
 21 ad52964b-ed57-1636-add1-bc049239cf06
 22 331ec11b-5258-0f50-b407-f77ef08f9fff
 23 7ddd6c6f-d4c7-75d4-8028-368253f5fb3a
 24 15c2e011-ba6b-40f2-ad7a-8f5af7583182
 25 fc05ab5a-953f-5dd1-94a3-e96ba23c0006
 26 ffe26314-21a2-43b7-8f9a-68114c857a59
 27 d17bbd74-6ede-18cd-8e05-0d287e313952
 28 da57e704-9e3a-0219-b7ae-79e3cfd824cb
 29 eebbc2a2-f6b9-78a8-b65b-124c2ba54e20
 30 bf05f8c3-f617-4c64-876c-3a07bf17ff08
 31 7f532b01-5a79-03be-aef6-73bdbeb24201
 32 b2f9706b-2b73-8844-9751-debd1c213f76
 33 e368b553-f5a5-4dbe-9dcf-2e32800cb475
 34 af3407aa-41f4-61ea-9743-fbfc9f0615d5
 35 98a45cdd-9e59-0fc7-af04-e4035def208e
 36 b97afaba-5e28-78de-8983-f2258659cb19
 37 6947f95e-79a4-0ce7-be32-bac9c788da8d
 38 7e87ce67-7087-0076-aafa-391746de728d
 39 7b8f9196-6428-2da0-9c3b-7485ee2fda5f
 40 88421995-f523-6bcc-b4c8-da65b59cf8e5
 41 7f6aaa78-2df3-2f06-99d3-569897b870a8
 42 e2f7d3c3-48ed-1117-b809-a332d057d287
 43 adda87bf-d111-1847-9c6b-bfed8a47adaa
 44 4c6790fd-87f5-1109-9045-8985e208d965
 45 508ab285-7332-7022-9ec9-2165950e03a0
 46 48170168-eeba-3efd-a531-73457893aa51
 47 d1d5e832-65a9-173c-a6e4-d9ae9925dbf4
 48 0169d06c-551f-4a09-aad3-ecb3830e4045

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 236476255071678623531074541074084607002621117314. Exactly this sequence comes out of new Random(70).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 29 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related