201307051759 1hprdw

explained decrypted filler

seed 926

Metadata

Post ID: 1hprdw
Title: 201307051759 → 2013-07-05 17:59 on A858's clock
Posted (UTC): 2013-07-05 21:59:40
Timezone: UTC−4 · title 17:59 against posted 21:59 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201307051759) = 663d4cc849be297a36a147ea75ebb615 (name+title)
GUIDs: 44
Filler GUID seed: new Random(926).Next(9) ✓ verified
Run: Run 48 (seed 387,048,281) (seed)
Draw: 19 · predicted N = 44 ✓
Machine boot: 2013-06-12 10:29–10:29 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 6 · 5
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

D6F494FABC1A9EBF 08FEE53C247139CA AE0BA64D95492097 0986BF490290DFF1 F4B96C9848CAC84C A78CB5BE3F980B52 3584E733C89FE14A BEAB9D8CE7B17C75 E48379A4A185ABB5 C59A3BD6C1A11BDC 7167EA6D4176CD10 9CBF03C4E081CA02 381E696ECB76E1FF 6F3D49316B8B8803 AE410005836483EF CD977E467AE30B45 BAB1D067DBD5FD8F F0391C0704E8EA4C 8E4A2B9D57D68A9B 7C305CE7FB3ABB4D 1EA68325AF3260D5 2E4CCA9A25A3D4E8 826A3D993C20E8AB 78D1409FC6A4157E 832B5323C3E5C110 0DA0ECD030846033 FF33795EC6E6C59F F4B08DA062423E0F 73AF79C331FDAA50 1D34BFC2971AA849 00FF9DDD3BFACF08 D35362C44F9B3331 18EDCABB2CD02F13 5CA213CFC95EA6B3 7572E21E1395A30A F7AD9D59BABBAD0C 9A954FEEE9DE9A22 BA51AE9B5A299FE8 6D7D4215CB7E4155 2ED1A9C9A49C7D84 EFDC75CF6A17162F 4EAD0F3ACCD5F189 1DF63B69D84C3798 11571C83818535E6 82B2F2D091A87EDB A0E9D7A54D4BE3D4 EA5A3AA55FCA6671 EB92AC2546C65DD6 509E13CF538C6049 E75C17535B2B40B4 95297A1E60A24145 06D969972986E2E2 F1A635C8872B8001 806F76C2E54C168E 3A305D167FA527B6 A3EDBC81947415C9 9EA9D3BFD447D357 4D7B528F6BB5DD16 2EDCE8B5EB05A6BD D6AD738940BC9080 DBA8901FB032D0B7 BA4A68B85963C985 B3B3EA5405A9AFB0 990827FBA7F8DD02 52A48C4FE17029F5 5C73FD192C0D255A AD6EAC6189914051 49E8C3A384C28CDD 40B1AFFD6715FD3C B19D6AEACBFC9DD4 6A717818887FDD83 CC74AF380AD6A949 020C57F060B8BE25 9EC80B263BC5D40C 694BC2C18F903227 99E20B338FE1A75D C9F76BA6300DD412 7B342ED1F5898040 7909E2C6CE4DF651 1D5B777FAB04C8C4 124806BD666BB49F 75ACFD08B8587664 AF3C20BD4A67552E 39919AD7DF124589 3709582E9E291B32 7DEE8F666F5AA0CC 402F4AEE7ACAB64A 5587043EDBF95DB2 63010FBB863B0800 243488E84E5C46F7 5EE0314D1939F6A6 62BE7BF2F90DCC48 B18B2BA3061770EC 9DF2F3AF9FDF3B8A 20E442C08CD33088 AE7AE8701FF50C38 9C6A5FD53CC9D4A4 A3854B774CA7C991 D73A792015B11199 0CAB0E776A8087C8 327D51EAB9BA6060 7C6FB34321DF9034 D7272135D68C7733 F646A89206F74190 21612E7989E5AEA9 73EEE6179EBDF768 04860C084BFB9F8C 44B9A95E9BBC18D1 AB770E967717B381 67D1ADA672788768 31E4D5176CAE7DAF B945D0A46A104429 C1803AF8B9A9607B F9D0A458ADCF7D99 257C65C673D9028D 26D7F5333D75905F 3B77B9684D36198A 9C9C50E0AE8BF4CC 179062B5C0792F0D 576B6408B75C64DB 623EC64E37D48C1F E92F165C87353285 24105198CDA0382A 9DD93D4400344A36 FC08D7B26BEFE3C7 416F2E425FB2B860 394089D08BA84250 829F9C5ED11395DE 46C2CBE34D6A6A6F 9D7B9B668307F4C7 B83174E26D2A9653 6E19B42FB27A269C 7F3D794FD307D54A 70465643C12FE40F D216ADA3C9180DCF 78B079AD8E9DD4E9 0ACAA71AEC462FDA 648C8A8FF721337C 787F0B34FC9D67C6 85E8AD62C4E5E89C 3AC1E8EBC0701492 3CE08327B1C29207 90DB95676B9BFED1 FE3C45854F4F7505 E59F207F04674A1F 7D54967C8B05B9B7 B51767BB2D5F9C9B 5147D0351DFCB973 AEB775AA9EA663CC 909B1946178DCE34 74FD9968E58E983B D767B01869AE2CE7 1AE1E65F79C9A374 E7287CF36D8DE0A4 0D4F6C83D9826FBD 251F7931A844A3A2 66276613792AD2C2 E3E13A067AE1EE43 4EF73D162065EEE7 86A27639337930C3 53D3667C017DF79F 2F4E330ED14D2877 789D5F097D487FA9 D925B6CB62E4AC58 2BD5352C07715819 4ADEF6A7CC918150 5DAA800F59FCA514 A8DB153CC44D3E46 AF93826A3EE4A54F 38B9D8BEA80C73AC 1FE512893DF8EB5A 6939CC49957BBE8D 475EBF9265663FE0 F8BA2190D7C3FAB7 AF519115BEB4D1D6 763371DBF7D969C1 E26D91AC75BE2D76

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201307051759 (name+title). Key = MD5(password) = 663d4cc849be297a36a147ea75ebb615, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 05c53005-2015-4ba9-ba02-d83b42052a06
  2 3aad01de-6f33-4361-837a-49ed0d6fa0d4
  3 407d86ca-df7a-0470-8b08-4ab0fca6965a
  4 ddb09c9b-3d90-16ca-9b93-497f7140f740
  5 58b756e4-5bc4-2fda-bb3f-82810127cedc
  6 3747c063-1726-708b-acbe-d7e4f9da13b8
  7 a87e3d47-cdd9-7e0b-bd0f-13fd0d4efd1a
  8 bb775d41-5140-0f9d-92f9-3dda42899bfc
  9 f02e6aa8-8c5f-406d-bc0a-532060009562
 10 c1b07f2b-10c9-6583-85ae-6dd5c0988e50
 11 094cbfe3-53e1-4060-bf72-d39f298451af
 12 5b21c855-7a4a-3103-9ebe-842a0101059c
 13 df265f61-f2f5-1ae6-9274-4fa5a7a8d973
 14 b37cb460-ea92-2d91-9235-59571f38b663
 15 86729fbb-867b-1c21-8af1-527a276dcc8e
 16 304abcb4-dc7b-39b5-9446-a6d736338041
 17 8053d789-3c8c-1966-8785-c83151f5e17a
 18 8d47e50b-13f7-12d9-9fe0-fbf9d8fcc3f0
 19 bd4567d0-db5b-6ff3-9147-10d4666a2cea
 20 addf5da7-2201-7516-abed-9253db1a3739
 21 c9fa7c8f-8cb5-7ec4-b731-6a0b149b2028
 22 4cd94615-6741-0c6d-8c4a-7d84c80374a9
 23 b9a38a5c-098c-4b71-a54d-5d7485f78d31
 24 96cdb3a4-1ee7-4b04-b832-38d4b4171ffa
 25 5a07ce58-9049-4451-b802-7434a675e2cc
 26 152c4065-4d2b-143d-ae16-dae3b7b1fb60
 27 b6d4fa02-fed3-0f81-82cf-5f2dbbea6201
 28 9e50680f-16d1-42d9-8861-3c63ad01dee7
 29 0d7f4565-989f-2285-9717-ac8d87df0c79
 30 85923042-f032-7fc6-ae66-6a17fbd81068
 31 f0901d03-c88c-05db-aab1-26c7dbb68fab
 32 30dce354-4173-3342-88fb-124f28e15429
 33 938fc87e-d38e-522f-ac93-980514232402
 34 af80a4a8-67c1-1df7-b5ca-8f9cabff4cab
 35 dd4d7780-64c8-809f-9ec7-e4a1f2e2f16a
 36 b442f9e2-32b8-8ae4-9f2f-42ff7dfd57c3
 37 426a8152-f874-0f5a-8d80-bcaa0cde9014
 38 e00d2ee5-a7b2-4495-a6c5-fe487d5a6f54
 39 6b886327-3ef4-8697-895e-3893a9386475
 40 dc81fe0d-e784-61f0-94e5-192fe5edd146
 41 ea35d6be-bafb-3ebc-80b8-d06379995aca
 42 3ca546c3-a53d-8793-a088-3f62326f9ca3
 43 e101fd70-a414-899a-babd-152c18186d6a
 44 11b4028b-8c8f-0b39-bb69-59e01761228d

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 44012770464312131167704441042703518804863880. Exactly this sequence comes out of new Random(926).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 19 of Run 48 (seed 387,048,281): new Random(387048281), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-06-12 10:29–10:29).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related