201305211019 1eql65

explained decrypted filler

seed 891

Metadata

Post ID: 1eql65
Title: 201305211019 → 2013-05-21 10:19 on A858's clock
Posted (UTC): 2013-05-21 02:19:55
Timezone: UTC+8 · title 10:19 against posted 02:19 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201305211019) = 747dfa73804bfde9aeffa0119180e4b2 (name+title)
GUIDs: 48
Filler GUID seed: new Random(891).Next(9) ✓ verified
Run: Run 46 (seed 39,043,781) (seed)
Draw: 45 · predicted N = 48 ✓
Machine boot: 2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 8 · 3
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201305211019 (name+title). Key = MD5(password) = 747dfa73804bfde9aeffa0119180e4b2, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6c100968-e212-1bc3-829a-f7b52a21e9b6
  2 ca04e199-143d-22dd-9845-19d8c3ec3b76
  3 d8878105-63c8-5a41-a65e-af9fb61cb459
  4 546957a4-ffc3-6638-ab03-d4b4b7891d7f
  5 5b40893b-026f-43f5-8646-62633e85ec75
  6 ed2a8627-de65-1d05-bff5-20fb85bb631d
  7 629a3fb9-7ea9-1c3b-9697-c2fbb94d59ed
  8 77c65092-d56b-3e43-9717-0abc28ff5235
  9 9d4e2b35-aa36-1e87-9d06-42e0b02d4c4f
 10 6138f197-fa48-7235-b7e2-2db8b8830b32
 11 b6b17045-b352-6d2a-b16b-6759b354dedf
 12 1f1653a1-7deb-05eb-9283-5c163d1ce07b
 13 ddb9edbc-d98f-159e-a0a8-da80fb705c19
 14 a077b09d-eaa2-0273-8744-2587ea1baf0e
 15 b3d3a53e-bba1-57de-8498-24cfbe35c7b5
 16 601aecf6-a932-4dda-9e2d-2e8802c1a9a3
 17 dc5d35f9-d999-370c-a63a-2d6931981279
 18 e139523a-2c7d-3770-ad0d-24a0fd5f5a38
 19 1f2c27c2-dcb8-7a3d-b0c1-ec13affbb8ab
 20 5513b096-6665-2805-b7bd-6a77f10c1389
 21 cdad5309-ac92-1d2a-a8ae-9d0622e43d29
 22 6db5e0bc-0730-3f7e-a2c0-e3d46f72c126
 23 c5ba2421-a0ac-5b59-a457-88916b67534a
 24 7339bf50-0d0c-27b3-8d0b-5b6a9c7977f0
 25 67355044-c513-02b1-8a05-fdd3d9ffdebd
 26 2b05e0c5-755e-55c6-b206-97aa8373a8e4
 27 c1189a57-1480-881e-b1eb-d411d91407f8
 28 f1b8d2c2-2834-6280-b429-0d92b01c6828
 29 4b90ecff-5348-5f24-9502-13b2b7206f2d
 30 291069e4-2842-5fd1-95c2-827a3ae7b350
 31 e8ebeb80-24d9-162b-a281-4e7722cb271d
 32 f4f9e393-7860-10f3-a8b0-82afc7633d9f
 33 544dbdfb-12d0-5560-8497-954bbbf4fbcb
 34 b80989b4-a3f2-2615-97e7-372c6303d4d3
 35 e0f70456-735f-62f2-898e-9ae28258ec5c
 36 ced76173-36a4-3c58-bbab-c004f7e0ad2d
 37 539c217f-4eaf-0d8f-9c00-576f9777bb08
 38 ca2f76f4-89fe-5cca-8792-9ff7f4ffff1a
 39 95266f6f-a25e-80ab-9db9-388dc5ae924e
 40 d4534988-700f-7c3d-9790-e424ebd38f7b
 41 e21fa645-8a67-4ba4-8e1d-20dfa6cb8b24
 42 740d3784-5e0c-2aba-8f3c-6e3403b94545
 43 3730aa41-a554-87af-b7f5-92c5ca2652ca
 44 e84074b7-11cd-0c15-bcc3-69346094bf4d
 45 1e68e42f-626d-6595-9945-b3d96cda0219
 46 8511fe8e-ca37-45fa-9841-7c167914727b
 47 818c3d57-ad93-4697-9aa7-5e767d47c645
 48 476a2452-6851-313e-9aa6-919c69c90e3c

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 125641131760105433721352058655115263058742806443. Exactly this sequence comes out of new Random(891).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 45 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related