201307200901 1io03g

explained decrypted filler

seed 852

Metadata

Post ID: 1io03g
Title: 201307200901 → 2013-07-20 09:01 on A858's clock
Posted (UTC): 2013-07-20 00:02:00
Timezone: UTC+9 · title 09:01 against posted 00:02 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201307200901) = 1b6b934bfec063ce75b9cf49edc22be0 (name+title)
GUIDs: 56
Filler GUID seed: new Random(852).Next(9) ✓ verified
Run: Run 49 (seed 822,652,546) (seed)
Draw: 2 · predicted N = 56 ✓
Machine boot: 2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 16 · 3
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

813A340F217D0D30 D69FACECB008EA09 D26FABD5412E3FDC 5D632C8BB8C6C59D 55D36C75CDFB29B8 C704BD46B6CD652C DAA5E7F0E9569E45 C16807DEF35FE9A6 4B5698B62445A8BF EFC09BB4BB041835 A533666C912FC4EE 997DE867F10D05CA 39B0E6C07A282657 FD36AA0CBBB45B34 4283F46DF95DC4AA BE6A0BD8AF89EB56 11C95F6528C7B4F6 AEC00D38574D62A5 93402DF34488DD06 1D2FC4D2A9600343 46C2F4EE99DD22E6 148AE06282B1E542 0D339E0DA9829422 694D1558F85F97DF 47EED629E30B4CB4 B02DD24E8D3A379F 194558D506AC5009 E79BAB27A6B8FE9D 3026B4A4FA498345 119E9A10B74C033D 0042C6F6AE0D00ED 66E9DA6F5CA1D3C3 A48EA18D05B54154 788E45719BCE589D 840A9D065683D54A FF4E218FE5BB69FE 2825A8A361BD14E2 129C3854BE2F87A6 98414BF01DCA2458 80853A3406E0927F 1DEC31581D4F58B9 E69A91EA4D14052E 94A22657673B5B3F E568881361EF1F9D 3B22DEA7CD8B8EFE 15EF5285C2AD3A5E 8D8423194AF0BADE E3DCBEA8C5114EAB 587675E2F1650C8A 9E09E38C38C13E91 368676D3AFC02732 C5CFEC394E59C90B F0CA9A3A962B2646 4970CFEE5370C383 86A0D62E7C4F7D03 645C3E3AFB99C92D D154582891612E2C 410000445B1E23BA 7A57F42D10E61D2B 003961E3D612C183 B7E357F9524CEEC1 E4CC0FE65894C4E5 90CA83D7B133CD15 C206006B84AD016A DA7D18BE17A99002 F86F4154E48AE312 28B862CF1468D634 F6CFB4AB858AF3FC 95493365313110F6 73D0E1AED4635BBA 7A7BA83F2159C11F 59987B32D3434804 06416EB1AB1EB3CD D31A09E625F5073A C35213138B3C21AE B6A5EDBB71DC381B 0D6F2F95A8B18617 FC3E87D891E9AF32 A227F0F4F9F658CB 36DB10103E243AB5 8EBD74C166ED1DDC FF41CBEC523A704E AF8CB115AE5142B3 FE85C95E63F8F85C 49CFBEBE69EF5677 442CDD6FA4CFB20C 359C81400E40F764 31C7540F0D71C316 66A5D6209D8E747D C490969824932D3B A8F5F798F5D969F1 919FABB65DC880F8 D3DAB051137188CB A016262C3C362584 33B52D1DA07C989F EA985F41CAD77C43 6E7D73667BC38FE6 EA77A5DD9539B130 6514D69AD0ECF11B 8CA61FEFE9F2AC9F 237778D054067E75 09C68389497C1D8E 0034052A5EC7134D 69B1080800A98A9D 01BBB652D62457DB 9C21916BA4C8251D 3ADB7F7421B14BD2 97F3C7BBBD035F0B 1C01F1670AB1B66E BA97ACCFF005726D 2C47EFC51CBA3ACA D7EC7D8CF4630C88 F6454DE03EEC177E 3D7796B8049AE79C 0B62C4064F653EB2 D8C62F9410A75447 A937681932F6335A 4E7EAFDA5682B18D 03F151E083232F45 60D85EC4EBFD72F8 3C48523667AE20D7 51D900F3830649CE 415A7776D35C2175 6FCDC1E5D97C3559 0EA9DA19D490DA07 9003D39EECD7B406 816E4E88D120886E 910D653E0FD8FD9E 01BE33615D193894 9AE526B9C339805D 71D30FA7F859AD05 185ED147760B57FD 1ADBA8367690CF77 8E24764CA44238FA 794AC91CCBD3DE98 C90D8A943345AE82 429F8F38A8CCE894 03CB39DC7C1F486D 65FFBE298136C863 BDD85567A02AD1BD FCB221D2B5187852 7FF20E794270C773 7235229B379A0F88 23FE3EC23B8A4F87 B924A68CA934C6FC 6B0A9F6A37CF542D 4DA0F92A753EA46A 9B0C2577F34FC811 F8AF4249CBDDE5AD 675AF89EEBA1DB2F 897E0EB6FE2D487A 8B23B3D69652842D A9C49418CFEE26EA 958D4AB1BBBE87B6 8C89A96CFD880938 57456EB468445933 AA5D3658CE5B5F06 7735E534600344B2 3780AEE21B22854E 1A409695CD5C51FB 15CE9C782A020F75 BC83088C1D6712F4 B99C5AE57E34961B 44A0274814CDC1F4 7DA39624D8B718DC 7567D520ACB22F5C 5C5BDC88F3F03014 D13BA626C7B5F4F0 8823B07D01B289A6 83681389DECDD2E9 6D950419E1EC51DB F3DD6F89F45D2D5C 1731B36ECBC39535 7D2D99C175BC2FB7 81825408B7C359BD 235EF05FFFD4080E 1251AC5059B8D538 AFF9533BB90048F0 EE2BCFD7FABEA0EC 14517848E6754FCC 6E5D5C3FDE152727 D3289498E2213F0F A7D49675BFAB149D 94D474275B3B3AD6 916BC6119CFF56BC A0A088C91E0B49BD 63B90FE838E0C687 039D1096CC67EEBA 69485B0AFFBD4F57 3E09D3276116D3D4 350AEAF0DDDBA4C4 16CF665AF9E698D0 CB66B56812751F7F 8F99DEECEC813E9F 1950F3E2E5041A27 5EC25E1B6BDD615E 1AE50AD90EB7EB19 073F4C84546E341B 52C2808073D0EC21 5C5028C69DF519EA A48BF0BAA18582F4 EF1DC4EA87A343F1 5DA35591D4050AF1 CC0FFDD040AFB714 D0133D361BF3940A D7B37373391FC26F 7FE3381D519FD09F 9D9FB682F8BB35F3 0BA9D2D6F983A4AA 49E0DB98D6E5ACE3 243405DF39506693 01857085370334A9 E22B6434936845A6 23639ACAC08692EC 24B3EE364E934C67 DAA412A5654AB6AE C89C258649E99F72 D47E11926AC935A3 AE10BCF2F92EEAD7 A356FDB2AF92C360 414F52C9A9B67107 50F4E13C82241625 564DF6E118FA188A BC85F8C115C826F6 E7135F78DF145C44

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201307200901 (name+title). Key = MD5(password) = 1b6b934bfec063ce75b9cf49edc22be0, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7a6b551a-7f43-777f-9b88-8d9adaccfd92
  2 7a9d66b5-3202-7cf9-8947-e01c32c8363a
  3 d4bc4194-8bec-27bd-86fd-e3ce08c8851b
  4 ff1a9ee6-5da1-37f3-a71f-4efa217faebb
  5 6a86bba4-0bc2-71b4-ac2f-d2703f17c601
  6 e31fbcef-3757-15ef-86d9-c9268e237867
  7 25784622-6bd3-5740-afbb-ab8611020ce9
  8 b8df8f60-890a-7cda-b524-7c650291542b
  9 e4b2af33-6e40-3e73-8a0a-f3a178103e75
 10 411eeed8-860b-4350-bbe7-f32a2e46ada9
 11 c0dd4e18-9ab5-8545-80f0-c027697293b2
 12 ae4bcf5f-3975-5e78-9be7-65c1099bede0
 13 9a67cf53-2a90-3bb7-aff6-c9c3b51f481c
 14 bdc005ee-2c0f-684c-94c2-c464499bf490
 15 799d312a-2fe9-39e0-ab32-91062326dfc7
 16 810bc810-587d-161b-8300-ac3fc7dd5c3e
 17 241f5476-cb25-08e6-a0bd-eaeb2b79bf56
 18 2d1e40d1-4fc2-2d63-be7b-0ee8f32e2f6d
 19 abd427cb-ee8f-6074-844b-5a0912359b3e
 20 76ffeb76-29ed-1d07-96d2-a27d69fa4ab2
 21 2daebf97-d88b-0423-b04e-d34441cc0341
 22 a5b921e4-9376-7e27-87bf-365d35d3f88e
 23 6eb00045-1b13-8b8d-9e84-fc2882d831db
 24 b087b14e-73ad-6f34-a526-9d4d5b94a481
 25 9c9ca99f-e3f1-11a7-85eb-140c9cb9411e
 26 f751b49e-145d-4136-9f90-c7d110299801
 27 3013bbb8-b1cd-469c-9a8d-377a28452dc7
 28 a55bc63d-a08d-5542-971d-565c2c3f1d74
 29 113124be-aa9b-7280-9b5f-48deb330c6c2
 30 3c11df59-24c6-23d2-a740-3fd793932a5f
 31 9a810197-1ef4-68d2-97bc-a9af756702ec
 32 85f5d1fc-168f-7dee-8cb1-7a1a43625299
 33 11f0aba6-deac-8d6b-bab8-5728c75bb99f
 34 e911a1a0-a142-30b4-8d40-300220ff486b
 35 b84a0bb1-3d12-1362-a64a-98386db9d75d
 36 0117c005-17c0-6fa9-96e1-e1fecc9d8f54
 37 0e99d7fc-3711-7274-8620-bd99226a992b
 38 7cddb20c-fa9e-06ad-a5e4-98e53216404c
 39 bd26f9c1-af45-2c06-a292-e8842a84f745
 40 6da29061-29af-6df5-af7d-e130aa4966d6
 41 b34e9eb1-6c4a-5d21-9d1c-d59773e88587
 42 b19e4880-6af2-3a35-8980-3eaf56926bf3
 43 2770b0bd-3491-5942-8918-da0841a0864e
 44 7997f589-ed82-6d0d-915c-69ff3db2de65
 45 ad5e4494-90a5-19ff-beab-e1c76917d0f5
 46 e6aec8a8-8d82-0079-ac23-d3b1dc3f7de1
 47 194ffe71-e7ad-12ea-9603-532a45cfa0a0
 48 987ae10d-bdc6-7945-856a-4ce7dae5adb6
 49 ef3c9b92-e60c-3498-964c-48805ff4847f
 50 32159a7e-f974-7621-9839-3aeddbab1c52
 51 88ec6a40-ef23-32b5-b0c6-4904ffcd929f
 52 f496bef6-ec37-60f1-b2ba-473bb4b7b278
 53 ca40e43c-b666-7443-8655-87c6257748f6
 54 07ae7b0e-d3a5-06c0-937a-8dca16ffab5e
 55 2e27b323-2cf7-7cd6-90e7-5aec3eb564a4
 56 090d8ae9-555e-8743-9992-8fddb093c493

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 77237157348536310261078614457267831670265356101737367078. Exactly this sequence comes out of new Random(852).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 2 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related