201307200917 1io13j

explained decrypted filler

seed 911

Metadata

Post ID: 1io13j
Title: 201307200917 → 2013-07-20 09:17 on A858's clock
Posted (UTC): 2013-07-20 00:18:03
Timezone: UTC+9 · title 09:17 against posted 00:18 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201307200917) = a0d28200e5b1925871b3229c66161bc9 (name+title)
GUIDs: 56
Filler GUID seed: new Random(911).Next(9) ✓ verified
Run: Run 49 (seed 822,652,546) (seed)
Draw: 10 · predicted N = 56 ✓
Machine boot: 2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 9 · 1
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

4EE79763FCE199F3 2C019A560D36D757 C2ED75A212853FFD 1C039A0E6FC03741 2A7331F7EE7CDAF5 78E57AB5FC8867D5 36364CE77BC325B7 A3B88FD14E206AB3 4D7807E67118DF9C 76227640F6C19C4F 226BF4F395F4510D 81046A8C389F6DF3 6D5847FE82688420 59C126E4B9F361F8 3807FD07D455DD84 64430A3809EBF978 BCECC869B9AFA56B DE895E346FBF88C3 5C909417D35B25BD B47E53B9725231E3 5D886C835C29B071 6BFA2F16F1EE8446 56B23EF11278D06E BF8D6F6BAA50FF09 A3CC697BAC41E440 36E07FE46C3BDAA8 2750F76D7C494FB0 F971ABDC7B22CEDF 75B5602A1ADBAF98 F445578DAF73EA35 DEA53DF27A786B1E 8D829743870C0BCF 7911602E9CF0E603 6A2E7FB38C017612 3C2D317B5575817F 7731919A06D7B335 6B6D7143EEDCEAB0 4F3575E2CBF5F628 794A3AFF62E741C2 52525BEBDE398DA7 F7B55EAFCFC3DDAB 802876A881E6E907 13DDCCC04C642A2C 47E86222A634C31B 6B594E9C161B0C0C B7042E93E94963BB 2BA6B38DE015E4B2 738F2C666BBBC020 2D7996E75492189C 6D077AD2BE4387D1 5521B071725D2DE0 F79C93C3B67E2C0D C34FEEAAB931AC85 42D584DDD476CE15 6D9F18C40712A624 19801642A72E2347 8F5A2D9AE1ACC28E 6A879DAAF7679B19 6E56763A9BE8A05E 25251A8ABBE55638 D940C6F90DB65F83 77AB3522CF8FD2AC B7A7193852DDCDFC 810AD1EE03CD9AD2 C0D8F338D9F9AE60 0C901022A251C5F0 F24F77C1A1C4E37B D593AF46322E85BD F3B7D11A70358F3E 6EA68C22F44D4916 335A50B46EC77563 B0C59EDF362FF801 ABA4A9C3A0394AFB 06DACBF4BC810ED3 11E6F437C1802DEC 2583822FDA2AF4AC 2067DF1759D3021F 4463D8C9AAC23EAF 9DFF5640C97DD681 41C0493A4BA292B3 7DE84279A3FC9AA8 7731170CBBFF3AC2 C201688209FE9E6A DDD546BDF38BA962 2D97005CFF14431B 92308816C27E620F 579902748BFB09B3 392AFE4CFBB1E36D 25A144A7B9189ED8 9AB4FE25C1D57B97 3B17EFD1C99D8DBD 13D323DA63BC574E 95204FA14FD5A55B DBEF4D8E0FEC5277 6009BF00F58EDF1B 5F9A04F55F44BE7D 15E581B11F51CD0E 9411E48B20932253 3D4C80D6B4DB6FC7 8C05FCE0D72CD637 4CBB1D445EC2DFF6 4A9F49D710180ADB 05FE0AB5EB90068A 6D09183AA9D2CAEB 9F4498B81AA76983 36964BD4F880187C 71D98119D0A0C17F C3B538AA8B8E7AD2 7DDD17980ED76F75 41C21930DF2BD004 D4702F1157F3125F 7B4E9241EF405294 DF6DE36D4D6DFD66 5DAFAEFF0CAD548E BEDE3D32BFA6DFE8 300F649C2B82FD3C 7FEBD2961753562C 21AEF331C4B302AA CEC76CFD2A5E9921 485797412304AEE4 43B84E657605D50A 97C79934203D391C 99F14E82F76A0FDA E87380ABE867331E FEEBFB2FDA5D91BF B16BA74691C13B7F 32416F9F1F31E6F5 65BC3505F75602A1 F86780A0D554D822 3DA5C7F493810B22 84A48A51EBC82D63 0CCA2A4055B30D37 10B6CCC7AACA3E45 512E823C9DF834A9 15DBE67CC6AB6C15 2090530824BBD621 0E212EB632443544 66B595AFE3648DE7 6D9E57546E2664CC 976DC476F05FEA49 D2D141BC1041DD6D 2DB678274C16EB5A 433A8B55D15F552A 8D1C18D69D6554CA BC27D45E90F5DB27 DB91B3648D54F74E 53DD01CE155D2C30 95E8CEE04B01B9F1 75CC00776B766145 664F2A5E948976BC 2F41C80A176AAFED 7863558178FCB579 D38F9B6932530361 8F9FF6576FA41A03 296236EB619F8607 3935CAB2A1857ED8 F5B27A842E591887 0FB25EAF3DB4393D 3A48A6AA024EAFF0 0A04075EA335B957 25B8C1E3DC293B09 09B82428AF3D6497 03A51F05C531DCB0 9FBF1FEB4A502FD8 0725AD7C3F08ED25 8FFD73A31621DE99 00536A61FB4603BE 610D5B1C6CEB5E85 4C9D756FE951AEC2 3B8E2304BE22F39D D154FBCDFBEF61C3 45225025C7F23411 F538D0DA8B972ACD D110730FC0703651 D613E28D3808F69C 68B109F025EAD5D6 B668D7C310A02415 30140886316BF486 8B0EBC8063C8FA8C 8B44B3BFA8C29DF8 6EBB84670A58B238 CB20062BFA62947B 81C7105C9B90D08A 79EF779DA3B4D738 01C13EBB6AF60018 F38D020B32183F92 DAAE4F656012A5D5 F912C5C662F1CE07 CE300429EF69FDAE EF4E18F4C8D1F990 C070D30AD8944240 C6AB1FBB36F214EF 95D1F2A4BB94D309 06C231BDA03FF9E9 A5FA285FCBB050B3 7FE075D2265DB4BB AA7EABEBEB2AB59A 500B2370C30A7198 080A169942690770 1E181952B9C39BA8 2C36120C8BE38E5C 51347FAE421704A0 61A7A561F9D3D814 16260888E1EB030F AEFCB0F63E7A39E5 0DB37901FDAC37A0 FF0E1B95F07D521C 08DFB95E2F72038B C59E8AC4D86FF1D1 5E655D6D83639FA5 2660034588BF5497 BB34A277373A9F83 F749DAD99F53BB0D CFBACE3F80E5AF42 59241F9239637C28 62926FFEE5208E64 7696943939AA263F 4D54579AF7842254 A3755964A18F0642 6938EFEE3BD085C2 72E2BE0E06A71E1C 64BB0F9B25BBDD4A 8E515703CE985083 5AFAF5A2159A4DFD 107B6C3135764BB3

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201307200917 (name+title). Key = MD5(password) = a0d28200e5b1925871b3229c66161bc9, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4c95deee-f07d-566f-815f-3d77960ad5d1
  2 2656bac0-ef65-13a2-9ac1-760f651c269f
  3 56769f7c-f288-4b69-9689-afd8c30f4783
  4 9c7cb2a2-0064-0e0c-b0f7-2cc1afcf5004
  5 c63eed09-af07-44ad-a3d3-e46fb306f12c
  6 333cb0d0-886a-605f-b896-5354b00eec71
  7 e8c64ad8-1b93-0a5e-8499-603660ecd525
  8 54f68057-3ecd-4fb3-9266-658912a2c581
  9 0636e929-46ce-66ba-9284-724cc842a852
 10 b577476e-b0a2-190d-a9e6-a0b492a2fcb6
 11 d741afce-b39e-48f9-a9e7-da930a63d4d1
 12 13263512-b1ca-6a99-b68b-50901f557aaa
 13 7e4d2e23-4e5e-8952-be2c-1034e5f39752
 14 4ab1349c-d382-3763-bbb5-221acfdefb72
 15 f088d0b6-3681-5c8f-92d8-5fc91fe8338b
 16 6d63997b-309b-89c7-a941-5e74660eae22
 17 92bc2afa-9c92-7076-b609-16152adbd8d4
 18 df1f4a07-bbc8-7161-97c9-e5b5b6f96a28
 19 5dd3b072-e1fd-34d0-84df-f33c96a16356
 20 60e9b8b7-43fd-0721-aae9-7f3d823dced0
 21 6a345a1f-878f-7d96-a59a-23b0fb289564
 22 f9c7f394-5325-3c73-8896-4bba38bf54e3
 23 738a30c5-26ca-8c7e-a062-5177c8a8d85b
 24 b539b8f0-fe53-2de9-98d9-bae8169772d6
 25 7cbd9e20-6d8d-8641-8533-af20d79d86af
 26 e553e160-b03a-49ea-a731-07da0cfdda0e
 27 56d96438-74b1-17b4-8ac8-2baf8883a277
 28 361f8ebd-2254-1486-bb88-c1ccccc455c8
 29 579f2f93-5a91-1a14-9163-9b38c3c569ea
 30 37bd994b-47a4-6698-9e82-59e435330ae6
 31 e032f47d-3224-4198-b841-70c14c80d6cf
 32 254560cb-f72c-304e-b540-9d7e568c9d8b
 33 f3b9e92a-81ce-58c0-baa5-e10fb41ff140
 34 8558c692-fe9c-70c7-88df-aaad877b7816
 35 c92f6409-805b-688e-85fa-7f0f042a5d24
 36 edc1a70b-f554-2d3a-a00c-65ab37b4553b
 37 20e79c1c-1478-579b-ba5d-2c8a49eb4f31
 38 cde5e6b6-acac-2dd9-83bb-a083404c7d1c
 39 c9f47d5f-ec65-36c4-acec-ee6eeeb853e3
 40 4aff38b7-b5a1-292a-a573-ca6e68525627
 41 83fccd3d-7899-7073-8544-78723836ff9c
 42 ae829952-28c9-7d48-ada5-02ef595ca27c
 43 bfcd749b-6993-3567-b201-cfd6fa411b87
 44 c955d2df-5453-3121-b7f8-1653bf788512
 45 38170723-87be-1e98-aeca-1806306ff635
 46 0387b544-07b4-091c-b69a-e14560bab80c
 47 1eaa5f9e-9a3a-2f22-8847-1fc899c5a023
 48 d9660835-4752-65c2-95cb-b42f6a3e5a17
 49 0f1e50f3-226b-1db8-bf81-3addc2e1ae81
 50 3cfb6166-9d87-57a8-bcff-7b59bb760b4e
 51 b88c9cd4-a0b9-23d6-9625-63f192b3a876
 52 7317b675-e3a5-2aa3-98c2-ee448f4f2f6f
 53 61fbb291-18a5-6b1b-a3fd-876399e4cc46
 54 ab57db0a-c2dc-02ca-9c33-b97cfdda914d
 55 5109f44b-c40e-50a6-a81f-88c4e65b7d79
 56 0d1aff8d-a00d-20ef-8b55-14ab3a247646

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 51404604614683587730738284111643576252327733102615226052. Exactly this sequence comes out of new Random(911).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 10 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related