201305241943 1eyrj7

explained decrypted filler

seed 412

Metadata

Post ID: 1eyrj7
Title: 201305241943 → 2013-05-24 19:43 on A858's clock
Posted (UTC): 2013-05-24 11:43:50
Timezone: UTC+8 · title 19:43 against posted 11:43 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201305241943) = 49fc89632ba8d656fb297f28a0e6f655 (name+title)
GUIDs: 44
Filler GUID seed: new Random(412).Next(9) ✓ verified
Run: Run 46 (seed 39,043,781) (seed)
Draw: 56 · predicted N = 44 ✓
Machine boot: 2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 10 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

60399EF8082C502B 703461D765D1707A 29A6CBDBF76D68CC 6844027875ABCE14 24BDB6F53EF1B6F7 E4868EA3A05C033A 1097B9AC0D843D12 B7A1A4BD151016C6 564B61A89A501205 499B8F1CAB0DE28D B6D17A19B1A7D7B4 407ADAA20559D941 441A2F5A56DAA957 B91B51E30343AA11 1694F63CEDA634B2 427898AC96D72E8D 3C39EBDF4E50E9FF 74F32EAC307748B7 71984C44819BB086 ED9F0C695B2B67B4 DEBD26FB8A7F45D9 3B6F963748455F08 4E48B410F96C8357 D91E9408CDC89D54 B072D7F09C4BBD4F 3B773A06A28B874D 2E391943F2D79D7B 480D2D77217BA60E 43FEC51D31E52194 47501BD1DC6A77E8 ECF745C3E26D2BEF 0ED087CEC1058B07 B3A6AC6A70FC9F4A 2AF30E9D5AA72882 DF747E75596FB502 33CC9849F3F1B958 13DD4E743B22F852 690DFE9AAD1D4DCC B90D4A9A0FD559D6 A96132923F296A22 C4C92863D31066DF A22D152C81A3D97E E3BA93E1E81C3189 D73DA27174FEA260 AEB66320B3D22757 F1BCB0DDCC27B385 3F502390C35D0113 2C2C33E6885E83CD B46E1E3E16264FF4 D995AD4BFCE80E6F 2091392B995D4241 2FC701E7B27D8546 3B00530F2AA431A7 C01EB93BF985F9CB 76EB3EA723D1F668 209C188024C29EBE BE8FC62E7E0E7BEA 9A51E940E45EF5DE BB65D749A97161B9 5E4229D260F53290 AD7CD7910AABD141 094A8FCB0CAB39FE 84F53790B46E7046 53C7D0C6313FEEB2 B85885A7BAD2B597 FDB60D0170138787 5CC3550840A14F94 CFF94056F344FC01 16F4F02E491FF98B D28320F5BFD4BC84 76ABE481077F4BC4 890085401C32EC45 8E5414A4439E6D85 8592905AC07794D1 1C1D118AF87844CA 9802269CA6134059 7B90BB2965946E99 7D52398F8F164EA2 41617A6F425D7C66 51C5EC97B9BBC0C5 0A25901D6305F85A 9F214AED9CCB70B6 6B07516A1C9D28A4 A046DF4957A47F35 FE851C949A6220CA CA4DE82F4AF1A3B8 5688BF8640ED4045 8941676EBA0A0085 41F3C8FE9B98DB27 C42DABAFB1CE0385 10AD627A2DEAEE89 EF2B1FB1F12C4A77 003435A3FFB6DC56 7A5B0CDBFDEE44A9 633C9FBCA0CA73A1 746241F8A7476B7E DF9A1C0712C19B9E D7DFB9ACD7D24A62 AAAD82F6A5FC1D8A 8917F3786B70775E BC5FC88CF68F44B6 E5DE6FACE67D704B CF719B32B638336B 426F0B9B8EE1FECB 9799486A5B04B460 B583866F98F7A34B 610D6D3A8977E287 41FA1B426CA193F9 69EE29DF6AC471F2 8B00E6C22AC1E419 5B7F0907422B00B8 0554AD7137B1F9AC 82CCBE6F61047832 0EBA136D9B62DEF4 D2F739EF295E3856 6FD69662FAFE07FF 062F3B1CD4E37730 F1F74D424092EACF EFFB73A133AB59EE F199249F747EDACC 7F8E4251266897B2 572718C355AB0AA2 525E30516E8407A3 4F9FEAB29329A960 88841D5A3C4A3486 F82AF5BDEB5C105B 500DD5DBACF52B9E B170B59B67CBBDDB EA2BCA9383D94A6E 0E8BDD302932AAB4 AD29AAD2A6E516A0 6515E23022E4C03B 78AB48CD9D78633D EDA9B81DBEFA1FFD 3D5CF0A1B2DAAB87 BEB14A4596A75D99 0BF3944B78EE63D9 B196B0535ED51673 DF800D56ACC7470D 785444F4C2D5EE58 E686707D7F76901C 487CB0ACB613A842 81C6EB9A7C88802A B6084EB634951F6A B875179DBBD8C7A5 76DAFC4BA25B3B45 3E0C2AADB84FF992 0C5903F8E2868082 DADC1B917EA75585 EC9724E9C5D26E92 7F671738ADB15243 88CFB1A96EB0DDAB 57F0C0F1553F3D0F 69879B26F408F59F 6559E7A348B65CD3 D6DCF8B220F94025 DFB7763423D8DEAC B29381445C3398C4 4BB56D6E2D553BF9 EFAA56DA50681FEF 27FD125267DBA27B 43584A94A76DEE30 38BCC8F890FF1469 B966895EDAB6878A E55DC9152EAA8499 E1006AD29D082BEC 17DA3DE674631A35 80AC53863DC8C346 EE3EDDAAF0521A44 D1271081314F33A8 0E445455F34CFB42 2F2887FC074B3C41 BDEFCCA8B1AD440B 6BE5DA248370F6CA 78A1F70B01A1725B B05921B24DC5A6FA 73137339C2CBC213

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201305241943 (name+title). Key = MD5(password) = 49fc89632ba8d656fb297f28a0e6f655, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4fd46564-ff82-82c1-bcc9-5d16c3806ae7
  2 1f571c6b-3fa4-6e3f-b6f3-ed5e1c71e0b5
  3 3577a174-01ca-6d09-b559-c5e5bc5b89fe
  4 2d8737bd-8aac-4a9d-83df-fd76d4a34e0f
  5 f0363967-471a-17d8-8da1-4b26ff9082e3
  6 b7535916-4d61-5e22-aa7d-60a7eac66a33
  7 c98be196-10c8-4a60-a1f3-156559a974f3
  8 c6ecae2c-12f1-1bb4-8f46-96381f911a34
  9 1968d05e-39c3-89c6-9402-22702fbc8f16
 10 1f931375-653e-1eb1-ae90-ee771f7d2e71
 11 b4b4a723-ec5b-71c2-bc4b-0a94c96b13b7
 12 1e86eaae-0ea3-1f4f-b7b3-8695ebd87f48
 13 eafc7a2a-8205-7353-88b3-4b2223cae64e
 14 60d09624-3300-7cbb-bedb-82a16999ac0c
 15 f01c8fb7-9ed8-3892-95c2-86c9accc6768
 16 42c41fdd-9b99-25a7-bb4a-f878bd42a0a9
 17 f25bfedd-69ae-0fa5-bf54-02599bf3a589
 18 416ee036-363b-3143-aa7c-15b2f3beff82
 19 7a50810a-5a19-7218-954b-bdea66ab8da8
 20 c7297aef-6ae4-7fc0-b9e1-12b1052ba159
 21 d3aa77e6-fa51-5597-be5a-0c4c5d0ddbcd
 22 830898a4-bc20-8c14-b134-210ef19f19c7
 23 8dffad48-17ad-55d7-affa-16db4ef03eea
 24 8414e881-892d-8f07-a12c-ed0950d0063a
 25 29cad251-cc9e-0737-9d4f-7e18e81f710f
 26 40d82904-bc7a-470c-bffe-7f840b5eb026
 27 6fb1b62a-e6f6-195b-ba3a-e86fd773d65f
 28 ddd1e34d-579e-8a86-bcfa-3d0a73c4cd18
 29 2011f581-0857-34f7-afc9-f7ab3ad17bdd
 30 efc38c4b-4935-853c-aaa9-9df28bf6027a
 31 354af542-c1d7-23d3-8387-3dc096ea3e12
 32 8497c7f1-b48f-82a8-98a0-c520ba4a6221
 33 af0bbeef-2854-8a6f-86d7-6501688109a6
 34 2b3e6cad-ab20-2058-9640-8c21d4853585
 35 ceb03d2f-e903-44b2-a09f-3fc5a7d8e6da
 36 bc459626-6df5-576f-8876-5d1bffb7dbb6
 37 6235bf58-ab3f-2bb4-8349-77b8f42ac2e5
 38 9541a758-6b38-180c-ae2d-f535b096a1c5
 39 a84175c1-cf09-8f35-8d06-fd30e70065c5
 40 59ac7b79-2aac-801c-95ff-9edeb7b02e6e
 41 330b68cb-5498-751d-80cd-673734d57ef4
 42 3634bf97-15b9-10e9-8993-8fb0bf94ff32
 43 ef803e51-e701-752b-9906-9d1c7e99f167
 44 26031e9b-2927-8d6b-a738-c9f3794d054f

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 86641541817177320377585804183828824521887178. Exactly this sequence comes out of new Random(412).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 56 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related