201305180819 1ejudx

explained decrypted filler

seed 522

Metadata

Post ID: 1ejudx
Title: 201305180819 → 2013-05-18 08:19 on A858's clock
Posted (UTC): 2013-05-18 00:19:58
Timezone: UTC+8 · title 08:19 against posted 00:19 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201305180819) = 9b88a75c11e6faf648ea2a249f9c49bf (name+title)
GUIDs: 56
Filler GUID seed: new Random(522).Next(9) ✓ verified
Run: Run 46 (seed 39,043,781) (seed)
Draw: 35 · predicted N = 56 ✓
Machine boot: 2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 13 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

753BEB16FF35C988 F4EC175C7BE13250 1EB4CE955B05EDA7 90BA3196436D89F5 8D0D2E8252DB591A 7CD9FD16FCC0493A 9E609892E2D06BD0 7BE3D962AD2F5DDE 0FB6879C72021814 DC7BD80B3E443E60 4A80A4333B235627 C202AAA015364FDB F8DAFB0EC09E62C5 536C273E8FA290E7 1A493FC58D6352E7 A21E955306B429FE 825B5D7A786310B2 A9102D17CBC16D61 7F71DCF428DBBF48 5C2F8C3972D5FE67 F5E36F1EE92E702B B3D7B01EE1CE442E A7E5627496CEE6A1 B02BD2E1CB2023CE A61485418E411014 8C7CCCDCC6089232 2EFB82A7A9C4A595 F1F97509FDC9ADC7 986E2F732FBA1535 F237872B91AF2319 0E1049B58FCC0E2B AC3330C337048351 693720F852551912 13429C4F2FDFD4A2 4F03936D398C8293 6CD64733CEBA39B6 3E2025F7706F5C48 F29685B994374B6C E1D9EEFA86E003ED B54600B47552EC7F 896527185FD9C634 8D299B15133B66EC CB04DB1F5CFF7FAE 5A00EE614D01E7C7 DB5410C806C1F855 F9C8D6C3938ACEFF ADD55ED009CF44C0 1798FB7EB7E20A70 839F22D73DC2451B 8E6A81CC9AE7922C D44A66D40EF0A912 A9B9CC66F2AF6EA8 507B9823DF936010 05295463A6C231BE 3B600205202DE340 012EE5D6915F38E4 76863AF34CB76303 8D2693796DE5029C 677A4C781CBE883B 8B5756FD8D93741F 1D6ECA335B08FBBF D5E9A6471B70FF5B A327749E35180AA5 446A6729D371DABF 45846FE85A8BAC65 8650CCC18452FAE6 B1A0F64CCBDE9C10 AD60C599763A2856 202B3C7E8334EE2E 80AA0160158B195C A410DB3A5198E31F 2A29FE31012D4671 61BAB094C5AC28F1 8A742EE6BE626409 A05DB766B184727E BF56787A6D34810B 2B1248F9343DED1C CBB73C2AC1291BFF C7AB4AFF1F922C66 1F6E2FFBB9B882E8 C22CBC10B571BD69 E61D5B07806E7053 F87F9803C81CD43F 90DF245B36EAC485 AB4DCCD7C5C79850 B14E6DD966B90CDE 6A6478BFBF33E449 D9912EC22457B58F BFAF541E6230DA50 C8C266654FC15064 5600C82009677295 8F9B9E62BA5CD479 A3295A3132AE1970 EB6E2895F41E40CD 6B3D74238EC06292 9C3069E2D3127314 E9F9BD1C187CB271 C188446DDFAB2993 B756FB62DC90A911 BB7A44472B775543 13790D8C64D2F91F 01996577B8D20466 927BB700CABE279D 1EE35D630B08E47F 91846B654A6492C7 95B94230ECCDF227 31D8553A01A50662 5A14C0312A99F326 906F3F2CD35B1576 02124C83F6411B5A 5D9FFDA3F1A19594 D07ADE69183C9F70 7AB1DE0689266CD2 8CEBE4BA7DC69A00 B4E3A4BE70D98D37 649303901C959D3E 31453D99B01EF9AE 453E733B25A9403A F9999D7FE8CA2E79 5EA1379C9CBE40FC 73B72DBA63E2AAB3 9DEE7B758495F073 B994B0288E721FB5 F34DFB846A250079 4DF6BB4E99FDCE15 5E2E949B4F327E0F B341928E95889204 431ED6D98A03B210 99AA523F510E33CF 7C2F13C98D001C9C 12B816C7B8D0217D A8F3A27651C92790 271A1AF82233E601 E938DE6B35B2FD6E 69676BC9D38A2815 983EE5191BCD783B 640186E389159164 88622752D4C57280 8C435F0B367C8489 F256CAE816CCAB67 63903718C7BA9DC8 3C17D86DE9D23720 C41897F0824FF9B2 52CDEC2CC0E700E5 E7EA2548BFAC0DE5 DDDC8FA0DF65B16E E946A9CF596BE0FF FD82595558B6C643 F3FEF4F5C09E54E1 0715AA42A817D9BF 2BC65DBF6753976D 40937DD005C0501E A34AA0289059DE45 7BB9C8225923C44F 6C0BA3FDC9D9F904 AAD0A1E7FFCE1042 CEA68B2FE11475B8 71F045E33E080BC5 FDB45F318594C8DB 3FFA45AAB4B51DA1 F4A5CE9B2CE03A70 7ED00EEFEFA97DA0 972EDFE506ED1143 F3713962208452ED 4A2A835CE74A46DD 577CB5A10BA8FAE6 481FA9CE39AC62AF 19C22FD8F05BAC4D 875B5879B80FCBF2 0A4D8F753E2CB65D F294B05B01931953 2C7B156CB7FCCA40 03C00C84485C24A7 3700045B6AE3FDFC 8CA6E376F72874B5 3135A77664AF9BF4 5DCFCF8AC7BA37E8 05943887F7B9F612 3C97DEC1627A31C9 9B21F29F534C9FE2 9E7C13DBBF62A5D8 2E7601E48D072DA2 5E7E6AAE64FA9510 6AF06874EF4E05D0 114292C06F35A393 ED5546D6F5BFB570 FBB48E4CCC1A88BA FCC5B66D263AB932 38F33C40AD15AA0B BDCD5910B2B98CAC F0692643ED8E3645 473F697A4AD88387 BC66ACC704E3EC1F 0A3953AC49B74030 1DBCD03908E53304 6145CE22ABDA054D 47EB1EB3E22BBB94 868652F805F7228E 4558BC825D83639C 4ADA82E1CDF7B1C3 2F2F10DAEDFDDF18 CB2D6AE4D6299BEC 334990F38FD48F33 6AAEB56DC23856C8 9AA9AE6C6D213B5F 8A3830B9252221F4 DB736DB460DE3180 31A2EFA324F9799B A9074671B3FCC998 48C4610BEEF00C6A D43FAD5B1767E225 9D56A4ED3175C293 9DAF1C55F328A1CE 25BAB0068A7FD931 4D34A550A650FC0C 0223E92AE0563B47 C30E7903BB6AEB9D CEDC89D067B678D3 587B8A76BE5067EF 92F3F9AEA40CC472 B790DDE1CDAA17F3 78226E076613345D 86604E6A08C4755C 68708AE4EF7FE72D BFDF79ED9EE0EC1F

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201305180819 (name+title). Key = MD5(password) = 9b88a75c11e6faf648ea2a249f9c49bf, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0916a4f8-42c3-36df-886a-9b3aec7f43d0
  2 3df54bf1-b527-8570-847e-808a083c8138
  3 77c56869-0256-5858-9caf-349e8c6328ae
  4 d955e24d-f287-8d30-b97e-08f139e30f4d
  5 7e82b49a-a148-79ea-9ddc-2511f8a54f0c
  6 8be4c2e8-ed84-66c8-83d4-17bf0530ebd7
  7 c3cf0692-43d3-737c-81a5-a03434e7e34a
  8 333de783-f328-2202-b6df-61596658c04c
  9 0f4a2359-0140-5e00-a6ca-42a2756be7b6
 10 fc92ba5d-7363-6423-afac-6b32e53f459d
 11 d4754d1a-663a-7b1d-a8be-581faabad9c3
 12 92b80956-a061-0531-b03e-2df2be05c921
 13 02187320-fb69-41fa-a0d6-6c905da16fa9
 14 dd3592e4-2dca-00b5-a4db-b4b939fa919d
 15 befc8d64-2c4b-3265-8b6c-fc38fba33473
 16 184549a5-cb90-0019-ad88-66d7292df08b
 17 2fd61a3a-9e2c-2d20-8194-0c342e767b58
 18 3bf45044-5751-54b9-9897-6bb62241dfc6
 19 6f1f37bf-42a7-72d2-b4cf-8e898781f432
 20 45aa750b-27c6-3971-9d93-7faf4304167d
 21 168dcb09-206a-156f-85de-1205277f6468
 22 4da9a0bb-e986-8038-8050-90609ac9274e
 23 0b4467c4-e8aa-146e-bf29-1882a8aaece5
 24 c365001b-538d-3f28-8a82-28307ebdf66e
 25 31b58478-8d47-7dcf-8013-e12ab3fbb3a4
 26 f0dc6eff-9cf8-2946-9d63-7826069e509f
 27 cb5e72ae-5a57-6283-8b7d-5a853e1f9761
 28 fe4a41de-fa49-1423-9c22-a1209a27f72d
 29 e60f821f-1c7c-6499-96cd-62139cb23e18
 30 4e64ffe5-fd92-4f1a-9840-92b12a15d844
 31 3d8bfbcf-8364-81d0-a816-eb9901391440
 32 a6f46ada-0592-8998-a687-e49392c7d30c
 33 3b5de461-2351-1885-a214-23c270c3c995
 34 24e93181-bff9-0496-8975-217cf079988d
 35 9d5888c8-9b05-81b2-bd27-fad003365b1b
 36 6f084fa7-2be1-39f4-ad4a-2a96b3b3085e
 37 3969bb00-a761-3ee2-9a9e-c83e81450ddc
 38 b60df790-2819-1b84-a6bb-4bfacc98d977
 39 2fde86f5-1ccc-6bc6-ac27-95d8b422edf4
 40 bea6766a-19db-32e4-9afd-3821f6eff8b7
 41 c7286ce9-099a-2cd8-b2f2-335de3478d2b
 42 3a1b66e8-6e2e-6f90-8ae7-6c9ac459fd6d
 43 4ef84df7-b4d5-7d58-9b95-9bddfa65e79e
 44 9b041a47-6b50-346c-988d-8555a9ed238c
 45 417bc9e1-478e-16a1-b131-17da94624cdb
 46 8248d161-f6ba-4116-805c-f07dad554e95
 47 a7d1a1a3-df0d-8fea-8e17-63d23f4fa4de
 48 e0caca3e-5c8a-52bd-a7b0-7439da5c78e4
 49 fdd51e17-0964-1c12-833c-1c091def1936
 50 62310c6a-5b04-179c-a62c-1a34988e4950
 51 e683db95-29b7-0260-86d2-228d9655b9f5
 52 efb6d79d-00de-8fc2-8aeb-6b421f561435
 53 5f9cc39c-08e2-8fda-ae63-2e83874df4f8
 54 4c4f4f28-149d-7c28-972b-f4a67936dabf
 55 c2ac170a-33ca-631c-85ce-4465865a3d26
 56 73b8ac69-a77b-4e4f-a9f9-bd86af549db9

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 38587672567040302573181372616488108331632673148511088764. Exactly this sequence comes out of new Random(522).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 35 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related