201305231407 1ew0mr

explained decrypted filler

seed 96

Metadata

Post ID: 1ew0mr
Title: 201305231407 → 2013-05-23 14:07 on A858's clock
Posted (UTC): 2013-05-23 06:07:52
Timezone: UTC+8 · title 14:07 against posted 06:07 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201305231407) = e142794e1df1b2537a00d579a861f804 (name+title)
GUIDs: 44
Filler GUID seed: new Random(96).Next(9) ✓ verified
Run: Run 46 (seed 39,043,781) (seed)
Draw: 52 · predicted N = 44 ✓
Machine boot: 2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 7 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

CBAF9408D86B03C3 5C32C01C74D7C270 49E4D9EE0EC97755 C1C194405096B157 C892729487EC1252 76D45909C2C5907B 604663FE8207850D F10F77788E6AC6CF F5CE2B359DE42D86 067EE1352D972CB2 04E67CA2070C2581 F5A075F7C56BBB2F 1BDA243C1038F5B8 B337CF5D58473A4A E3CFC4EC2039A1DA FD2F71AA2465BF6E D69AF9BA00C80844 4BF5A764A5379821 FCD8DBE8EF982AA5 251E0A4D63D47080 45BC59164ACC6D5F 29D952E764CEBA41 A4B56E0F5F827A3D 92B490CACA538F83 2DD3911B4D064A24 C5905F8F81404E4E AEF714D764E0BFD6 BDC1961CC65B75CF 3EFF62B8FE0126DD DBBDC628B4B171E6 7B061DEF486E19D3 FE4EF27A321FC89D 170D28457BA56EA8 A5F244421B564297 F5A77C6DF895E13A 42FF006E6FF0C940 9BC0395EB480D0BE 224926C9713C445E 4F630A0A3458B5B0 15C9A8D9B8B6C81E 29883868D35062CF 30A1B20623AADE24 CEF1E2DA3CBBEE56 3245C944AE994B3C CCCD62CB716AF79C DAA79FDFF1D0C60C 5EB0B54707F68723 5A2851BF9EFB48F4 D043D6DA53B2C6B9 B4682721D16FD0BE E2433D975E81777F 46FE2B366815D0DE FC0BD28622E1031D B4110891EF5EB8EA C232541E3A777F20 ED69C1868C90FE8F 051F7C11305E6CDB 7B83A787DFFE0006 8D68C8C3FAC59059 96BB8F962CB1D01E D2A678A79D35E7C4 87860C357C040521 46D4E17CE5346A64 650FE4E7BCE048A5 A0AC760E7894E368 28CD09E0001BB01A BE20CC9758CBC2AD EA46E30BFD7DDDBD 026059A1AF85347F C592B86CCAFEA23F 5305EFBB5EF9F23C DD4040A1467108F4 A552F458EA4ECCDB FDABB1043AC24138 684278E5EAA8EEE8 E7C1EAF41B6A76BC 6290AD7AA3A61C77 0C0BBF453B6DBBF4 EFF0EFE04BCF9A6F AE94E80EE6B55E95 59CA305E95DE02EB 120FB116A631AB10 03E6A1E10B205338 02A4D058D50274BF 22822397633DC870 6F6135C8587CBD63 6AE082FC9972790F DDD5EDB1A9412EC6 AB5C14BD718B0EC9 378362A3BAD2CD60 D814BEBA34127E33 625723EDE9E3AB58 A7367491CD875338 D9B2730ED29D8535 53CA544D997383BF 0AFF684D4CE2F127 6CAC03EBBC53C750 2B3E5AA40657A692 F49D2E65BF4D8261 104F6B6BAD3EF063 A476628B8ED9E401 6868E89066788CBD D85E792049484498 C42CB77F876A70DE FB30B20E8DDA68EB 54A45E9A54F77F71 B9AFF6409AE878E4 6667244CFCC5C790 905C3C9CF9A8BD9A 7495D907A08070E0 D4A5F25883EC2B55 CC8285F88B974A2A 83B4A3816DF71020 78EB362DA4F3B82E 7F4DD5784DA16948 4E05C45DC194146B 778A63B0FF01FD85 EE196369CA0B6960 4A172AC2F7CC6180 A3C4757ED9CAB334 3B242B9F37D2F347 F1D38B425F26FC9D 5B5910EE409D3B8E 8188E3E01D3402F2 BA22FBA8D7F54C59 B8528B0B5BC7185D BBD6BB86658774C3 36C80734A7F69E12 C1ADE5DADF27CA38 588F6074BBB7DEC4 38A0EDCF9A94B671 4CB107DA1DBF2096 9C391C5E35528642 293A45640D980A15 F2010E0391045CFC 20BB0F00680463EE 8063BC32689C1526 94F60CC876C291E9 6E235EDEDEA53D28 3727E6E1F00C1476 55DE3757DAE2728D AD444780796888ED CD2C60976F8AAC3F 6C7A03F1C760A402 CED6F1A1B2415483 14EED7DFD4CC5F82 DE2CCA46FE46D11F 9BA8A20621C150FD CFA1B83A785BA103 23067216BBC1D8C9 C26C8B962906F582 81C1BBC27D0DB5E5 460F3805F9EDE2CA 865C2AB99A2D3F34 9C47844BACA04980 AEEB4FD9E667A70E 02429B5D74DBB449 1B0C05D453532E44 F39767648B4381E7 421F73235626FD67 65250902C4C81C56 E230BFA88EA715FC ECEAB7B0515FDF28 EA805116F70C0C6A 82A2496873551B46 261193A6F9F0D161 3B77D204D25AEF96 7F9188317BFFB5DE ABA2C3E8817567DB 4711F05F3EF4C220 E44475EE44F4C0F5 9631E74A4CDA35E5 18D8AA2025CB7BE1 703C43CE44CD0E51 D68278D88E01735F 17A948E319F41764 9746DC0C707D254D

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201305231407 (name+title). Key = MD5(password) = e142794e1df1b2537a00d579a861f804, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 00ec2b98-c8f2-7507-996f-45e1c920aedb
  2 f9a62843-3d26-8ed6-be6c-bb9febc4ec58
  3 4d15cc51-f2c6-7975-9108-c2753b1c2ba3
  4 19e424b0-bfb4-08b1-bfda-0b7ba37f385d
  5 65dc7f98-e8c6-4a03-98ae-d6cb689c0784
  6 5916d626-5970-4b50-bfd0-b1de2c08fc87
  7 f43c3353-8679-8122-ba06-0b61531a1750
  8 61e86e60-30a7-5395-b6d0-ebf6134d8c4e
  9 640b473b-3a07-7731-8836-9c5b8d92e228
 10 ae36b1f7-7b4b-61d9-bf23-6dcf67195dfb
 11 df4e9e02-803d-0b7b-ad4a-88aeb4ff96e8
 12 1bf7ab36-670d-346f-bb6d-11134e6d5c57
 13 93de29ee-fe1b-54b6-bd71-0685172087e9
 14 da42756e-137e-325c-bf3c-24aa92f05690
 15 b4c6d870-3693-1d0f-a058-fda667fa8a08
 16 c86970d4-0b6e-8d14-8cc4-d10385a5f33a
 17 6ce2d54a-13da-1e34-b7ed-b5862ab85648
 18 ede447a3-336d-4144-8b6e-4d21859545b4
 19 364f6617-1a0c-2b84-893b-117617b21d2e
 20 2e04e9c8-8093-4db8-90a1-3c09f5360d78
 21 1c022a9d-399b-56c7-8718-523b64fd85ff
 22 8e6c55eb-d7a9-33ee-9432-bdee123d0e21
 23 9bc18ef3-a333-1017-a1ab-1a3d098e8bea
 24 1dc669d2-3d34-5709-83bd-308a4c9e17eb
 25 5dec8439-c095-05bc-a4d8-f4ccded7a0f1
 26 ddc32725-e39f-2d9b-9b50-397bf794478c
 27 67f8d267-81dc-41a0-ab65-269acc9b12f6
 28 e04f0b1c-7dd8-1ae9-9288-9a4dbc1e7ef4
 29 71765d68-5db0-0b89-b104-73f3ca6be764
 30 b4d49a37-3905-3aef-89cc-91a19bc1f65b
 31 18db5fdc-0613-58fe-9024-efbcad873ca7
 32 fab9e43b-58f5-63ea-8524-01d25a62b5a5
 33 284f7263-1b4a-8966-adc7-301127fc9285
 34 798deedc-a447-3728-b39e-842243fb85a7
 35 aa7ac131-8a00-14c8-a65d-7f897d959a3d
 36 3f84b2ae-e662-896b-92dc-ed1a4197e0b1
 37 2c9a5110-21cd-4b27-9447-407a9215aaba
 38 8fc595d9-2007-7c70-b7c3-d02f28aeb221
 39 8649ca40-f850-7270-82f4-6292b913aae9
 40 449b4b55-a974-488d-b498-7ebbdd680b75
 41 642d4af2-72a6-15c4-9bc8-70fbed13bb3f
 42 48260fdd-49ee-382a-bc4e-9f00e42483f6
 43 5f37239f-4aee-0ecd-bf65-be866740fca0
 44 f3b22db8-9004-1a18-8a19-cccb30dd43e2

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 78704485760353181424531502410356831847741301. Exactly this sequence comes out of new Random(96).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 52 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related