201306052059 1frddi

explained decrypted filler

seed 850

Metadata

Post ID: 1frddi
Title: 201306052059 → 2013-06-05 20:59 on A858's clock
Posted (UTC): 2013-06-06 00:59:59
Timezone: UTC−4 · title 20:59 against posted 00:59 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201306052059) = 97b3d39822a66b37350459a8a7a14985 (name+title)
GUIDs: 56
Filler GUID seed: new Random(850).Next(9) ✓ verified
Run: Run 47 (seed 1,776,839,421) (seed)
Draw: 3 · predicted N = 56 ✓
Machine boot: 2013-05-14 23:26–11:26 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 5 · 1
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

786FA6F0640E73BE 5EE14FB6C53EDB68 565823F68A019D3E 4C2932DDD21AFDB5 DAC1E5BCAE042DA6 BAB35314D32AF0C4 AF7921C1540B4290 2376EF850497302E FFAAE69B1CEC2D6A 9F8855E1CBE0F2F4 428FC764A826B4C7 967ECDC248583ED7 46F4A1609AEA753E 1EF1A27649B6DA7D DD091080D033EA9F CDAA2C2A80905494 8DE0F84ED1DB2AF7 CD03255A32969B17 9420A00D34370D6E 5E0EC1DF6103F5C4 33D6CE258FD36C1A C703CDDE7FC23AE7 9ED52F73922EE70F D021A51B530E89EB 4067B2EA81283753 7101D845B4366EBD 57881444A3880C61 DEDFD0223A8E2E8F BB4570877B44E0EF 84F43C98FA84C8A1 EB6CF068B5001241 5EB3AB14AF807538 D21B22C489E1A868 E13864F46C8F7D3B FAE2915B61F07611 D51533BAA15A12CE 832970973A210BCE 9D29B5B1E8224350 B897F6BA326A331C 89DEE9E45924EE73 CA736585649F9137 B6284ACD85E1A975 67CEAA8426A3C659 3E6220CEF9C823A8 2AA74D0048EE150F 8F1022B841136B86 58363A5821A5A254 CD2D517DB540CB33 9595778C04AC58C3 3566BEEAD6690DD2 183529C9B1DC62EB 07714D3CF4B7FA5B B796DB47DB92AE18 2E0F8C1FEB5F0689 85CA09B59129156D F2E111DBA2D50D3E 0E35ADEE64D575ED 2810EEE41332E5E0 AB3F39602D93043B 021A6542027F9A93 610E16D3DC2F3C24 4D9B290B63D5FC16 F6E8B5DF591569D0 D4F0B919DF2A7D34 20A53558F6F11A6D F27C0D67E1AFE021 C941D3DD963BA86E 63FDCE5F9845B57E 46D363EEB7E5B7B9 E92A780A1ECDCAB2 186165848B0D306A 0A2AF7577528D265 4C49C5FEF1894105 5A0730275AF69D60 ED73B85CC426579B CE037E3B7FD94EE5 6F6E62B97F64D827 A1F33C0B41A899EF F292454071D3ADFB 588A3A2001CF557B 0BC7C261645BA916 066C54084FCFE36C 632712CB2693FF24 771DC2BFCB827209 6DAEDD6F8E56354A 35470B3B5A1EDE28 AC9C5C95A4D3292F F20FCAD8130168F9 BDF6AF6FEA754CAE AD0C99BA1125FFCE 5A487CC739F217FE EFE2393DDF6E2BBF F4E4FF4A85FB94E6 43D073F0A46200CD 26095CAEBA1FC506 3DE78569309755F8 BBB9D7BA0EC21B45 E047C5AB94220295 398FDB001ED0910D D0A0E2B151E6808C B413ECD500BEB8B2 E95BF7D57CE8F544 2477A0C89FF3C1D5 5C31219C0A612DD3 D82A003B8F19FE21 3C85CDC5844CC8AD 65236796B50DFA47 22CD0BA3ADEE7964 1412496F49BBFE63 10862FE25B139537 EE0CBF7886A5A098 E0ADB24075035CBD 659B4F07FAF5416D 44B9E14C2838DD37 4E64EFCA418FFD45 7D7A5AA675B8B0A7 D86520404B8F12B5 937F3D2439D157B1 8B1A1512C5CF87B9 1C14B83D959A1878 FDABF1573A64FE11 A5A870F7CD05C8AC A50006FC2376B6C7 1F0E24EC1056616A 368D12AFAA56D72F 9FBF590B8764CD8A B108B8D99EC11BD0 3290D2A34118E3B2 5E89C624B79B4293 0E51F51FF3F8DA79 CB0C03C94EFFB723 4F1E0A8DDC801876 CD5B047482075F05 84C53C4AF15BF7D1 C609EB754CC8258D B88D7B307E26ACDC 49C7B9054275C11E DFCF9C8B7C8782F4 503C6CF3B70ECB45 08C34E359A226D5F 38043961449D0507 801CF7E08EE8F4F3 E9FA8272BBCB1699 4CB482A062787DA0 3CDB38A0BF014746 06B2503DE37FAC5B 39FB4BB0DD69980A E199BDC065E69E11 6B957F4458EA7BDB FD22B90D3BE511E7 68D1ADCE82AD3F00 F167491F1411BB78 E453CFF4E9D57EAA 90C8B9936A84ED2E BF89C146E8AFBCC7 F27A137C65EC84F6 4604C0DF5CB4E5BB E85ED0E154C7144D 383B1FDF42674D43 FF0D9CA49B47B42F 1345093D74377720 9A16B23A3F14457F 1E2DD9BBC44DAD0B 0C6DF6CC0130DE70 61CA25E568278161 34F39CD1F7AA70C7 63D555CFFE060988 1AFE5DC532BA7636 B9AC3D12B3E12A67 4499C23AD8ED3BCC 889756D8A4D7792E 3FFA6C51A577AF49 140A1B2B8F305072 2FA29C03586F8DC6 3688BADF6AE5B1EA E12226EE63751F85 7C99A0719F5586D7 0E7BC01375D018EB C314E2E9287589D0 6D1BBC6380D1DC61 57AE1688B061D686 7FA07D2D560D3E73 31377DD544CC6BC8 C9E9E945BFB4D952 545793A4D2ECC2AA 1E3079E7A670EE36 639B4D829E74C239 2E1B5184823D0957 5D8ED4F19518E9DC 4755E073E9EA4EAD 4B906CD17C165101 7100A53EA54DB6B0 905C8B37FF439BEE 2AB8CBA4A859494A 16017A31C6A5394D 722F5A1294E17877 54D274E29F14FEC6 09E8D9B4BE1FE7FD 044C93D7B5932E52 56FDEB4E1B4B0BD3 59DF3F845D8BFAFB AA0F2C2FD0E14154 A6B42390FAF76401 EF1DD8787F8D7943 DFAA37F8BEE3D011 6EF5A78D70887993 056DFF85AAF1E439 D8CF095F1A26B7AF 31E972FC40D38F3A 9A0D9EF6DE796CAC B6D280B73B575459 7A228A74A21B557F 251D8F312F0D78D5 C0DE7E913580951A FADE68523B8F5313 D087185AD36552FF 299E712FE4CE8FCB 1FF4B2B2CE1E417E 4646CB574BE72282 37CB6DF75562ACB7 82825B5610C72345 5C85BD1CAAC762A7 1277FED4BA23D83E 9F44505A73AA12B6 CFCFF4E19A62F52B

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201306052059 (name+title). Key = MD5(password) = 97b3d39822a66b37350459a8a7a14985, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5f67719d-6066-7a6d-947a-7a97084a5661
  2 667fbc65-6866-2b49-8ee3-dbeea8f01b13
  3 e5af6f76-48b8-85ba-90da-9e7d98effaf1
  4 2c4a7437-d131-8226-9aef-fc59b8b0c2d2
  5 f9e97de1-9174-8455-b10a-453561b6c8a4
  6 df5f93e4-b4ff-3837-80d0-6e4292ce10a9
  7 ad3b9e30-9b82-663a-8d0a-2f7a944e53f1
  8 795aebd9-5bbb-7081-b8f6-513f79cefbb5
  9 a5bce1ef-f63d-14db-89c0-a031b85f5984
 10 f0bcc05b-f266-6c6a-b738-6d945a46d4a6
 11 8b1cafb2-34b0-48d9-a543-d1632c16da4a
 12 3757e475-6eef-01be-949b-c0071ea7809b
 13 17b27745-f64f-8d78-82b2-bd0dbe1aec5a
 14 f78d8332-73aa-6f66-a083-58882d1e6612
 15 73da2db1-f010-889c-aaa9-168cd8855564
 16 5b9b36e3-3327-7b69-8baf-514c0b9c7ac1
 17 69d462c9-6107-195c-bd59-4c24472ea217
 18 f88f6a93-eefb-8f9f-93ed-08d57516413c
 19 8d32ee8d-aab8-65e6-a4dd-1ff983ce5a06
 20 e4d38808-4573-3c3e-9d76-82ff691b492a
 21 5c2c6d34-74fb-6894-b2bf-2cb25e874983
 22 b0d289f5-d032-3b67-9cc2-78d41bb3ef74
 23 abc13a72-fa50-575f-ab94-d3ede1ac652e
 24 78c6b6c5-b5c7-8c55-9308-8e0d5abff9a8
 25 9cda1393-8f22-0979-8939-92da4ec4d5f5
 26 1a048301-b28c-26ab-b661-a72821f7aa8f
 27 63d9f153-ef3d-6518-b637-3aeae7496207
 28 58e976e0-2160-3a9f-b80f-9d0d97874721
 29 f695cebd-808c-2db3-a70f-c6b09172a8df
 30 e317e699-bae0-519a-a595-b03cc276cf1d
 31 7b13119d-9cc1-8633-ba72-64544492623a
 32 f1249f41-1362-3350-a348-226d44f8a494
 33 d23240ad-0af1-016b-a3f6-f6342de85b97
 34 09d87010-a961-2c6c-a153-cfc7adc0c849
 35 1a0decf6-efc8-40ca-bf76-086e62216574
 36 b618afac-950c-5948-a5ac-946927ec3d3e
 37 75627f7c-dedc-1cc3-9f74-d2a65b08c7bc
 38 187e3537-b7af-56e1-8fdc-700186236e84
 39 42eb00b3-9eef-8509-9899-690b7afa9cb7
 40 b344258b-afa1-55f0-8cfa-da0b0b176edf
 41 c334ef17-e65e-0f4a-a68e-f4fd4e74a482
 42 9a537f41-c187-7164-aa4f-413b31c1b14f
 43 3b561db2-5e90-3efb-bf03-c62d96e393db
 44 542f00d6-5de3-43f3-9da6-03e8d688d685
 45 d75d0a15-2b58-0f36-949b-1c07f0df5d8b
 46 fb17ce92-1f03-339b-a1ac-3d2547700ce9
 47 d02daef8-4435-43dd-97ba-aa36dc6da59e
 48 1ff0769b-c223-64d1-bf9b-aa6c3c40a2ee
 49 b682a634-3bd3-1e60-af56-2b3716061481
 50 928ecb78-f044-579d-9661-919e428547c0
 51 899e86be-3cd1-165f-9a3d-e20455030905
 52 058c7783-851e-797b-a017-54fb88954561
 53 986bc5b9-8ef4-3bd0-89b1-821c5f0f3bcb
 54 d6e51bea-109d-5235-af3b-b0bb5d4808a0
 55 4624154c-ddb3-3402-8786-c2ab135f6b3f
 56 cf5281dd-4685-372d-a7db-3fcd7cac2a23

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 72888367164086871863635802632583024515850734034615173533. Exactly this sequence comes out of new Random(850).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 3 of Run 47 (seed 1,776,839,421): new Random(1776839421), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-14 23:26–11:26).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related