201308061206 1jsv0x

explained decrypted filler

seed 443

Metadata

Post ID: 1jsv0x
Title: 201308061206 → 2013-08-06 12:06 on A858's clock
Posted (UTC): 2013-08-06 09:06:59
Timezone: UTC+3 · title 12:06 against posted 09:06 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201308061206) = 4ea3813b2a32d8672426e9a4442fb9bd (name+title)
GUIDs: 48
Filler GUID seed: new Random(443).Next(9) ✓ verified
Run: Run 50 (seed 2,278,890) (seed)
Draw: 4 · predicted N = 48 ✓
Machine boot: 2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

1201DCD75E8AFD76 518136ACC5D2B527 D823DE9C9A3A752B 9662EC899425832F 25B40C6EDDAEA630 C3EF87EF97A40579 93573C0137759556 F0B3B39C5CE947FA EC52E19579FC1676 127E55A3BD050547 6B7EFD0AB2016EF7 AF8FA7A908AFF319 61370265B071B92F 2AA5BD560678A6BC B9CF0FD1F7D7B59E 84B24EE3F729B158 CF20DCBD0C97F38A 2B09951EEAA1042B 7A69FFE024AA2A04 BF24BCBC40B41700 A74865B54FC908E4 E900D16B7C1F804E 20E0D859B4A65E67 0927FE8D329B0B90 37AD00B8927597BC 3112ABBC94828389 987E063BEFA359D8 00D850C3DF39BD41 724E6D614D0DDFBE F6B1B437F09A72C5 40551857DB88BDB8 C0EA56C13ACBBFA9 DF83AD234965E607 3AD695247019F3A7 71702894D0627940 E55DBE242A5C899F 6E1074B833F20BC4 22C327F7FD6AD3A3 0069F37ED1173579 4B559F8CA0A84299 49765315CA7B20DC DFCAD3AC823BF925 1F40F1C0C80449EA 51264444B11A810A 3F71AB26E0CCD3AD B6D69BAAEEDF9044 E8C3EF6449FFF8C5 75B480975E673A15 BCAE67E2B592A08C 26B6C46AD9003170 89C2A3530B451D1D 04908FDE559BE637 E1C09DE70B96A362 0D199B92E232D1DB CB885A0D5DE5C74C F76BAA0D7E5882D1 506ACC9A214413A4 3069BF819E6A9140 77CC6368163F121C F2AAC69A49D6ACCB E645D6FB89426FBD BACCD6793675891B 56F4B1654911A393 411F4FB9E08776DF 5CC9712B16DB0CC8 86E2343DEBA37CC5 BCF590079C56C79B 63F4B4C5A17DBB7F 9039EAF2D3269448 63CB0B5483552951 7C14AC8C3805CC38 139B81A83B87B410 6CED8B29692C9281 0356756E3BED63B2 EB8436272E7BF88C BCBE8290B023DB01 98E65EDB5E093F11 8D511B88B1FA0D9A CA98DAC1AF8EBD42 7B59AF7393417B37 E773989C56927964 601327C37EF9EAAA 3FD6CF8B82F1CAAC 3B90B23A42240749 01D1B454F21277A7 A81CA15267025001 46AEC63AC31DD56D C2D29FE360B847BB 74CE1237C6F2E6C4 7BA1F73C4D1CA0AB E301742E57354D03 1952FCB067B4B0DB 80B77D52DC5A7732 19E941098F752172 0607E0698E8A13CB 205C94EBB601DF27 CA1926BAC578EFE6 C03136F3F9D87635 F850C25104064C07 63BC319BEDD7F15F 2953A64006277341 012EFE1EC3D448BA E2007034E2F25C81 DAE148B203DA5129 8718B51FAB2039D4 5816269DDFF4DD3D E601B7FA791DB51B 131E300D3599C89B B0CB53B64DC905EC 186476E076D174FF 43F3E349D9F8FA8E A6FE98E56EE4568D B09431C31FD63A92 0196E46DBA7F2890 BA8AC48F2D8E3441 6A58AB9858941180 66866BB037613805 7C66A54AD04CFFD7 8449B0CA63E7D073 6C3DCCA727334FE5 5B753D1661F50A51 DEE033F214DFA4C6 5AC677A8CF812A39 CDDBD959721A3584 F7E9E11444EF78AD C8B3E2EE7BDA5E78 E408AE6660576E99 10B42DB6B431D543 3BBA0EDB0728721E 14D17052C27406DE 7FEC1C2B9E50B1CE 96018DB80BE2C5CA 6D0A969460B210C3 F59CFF163558C80A 84249CE57065C8EA 30F8664B8BE058C0 088FE12BBF076265 ED5B79B88A9C0228 1825CFC9DBB2174B 519A832BC637AB91 A2F2269EE84C1360 C1AA492B5BBE1074 1C342F32942FA352 CE70FD39FA550435 F28E7E1D878E2AB8 3C8EC0198E6E254E 219B588EC6565DFC 9E5031F6E73A140D 7C75759A786755B6 632650FB0360E2A2 6CD050EAB0829229 EA2A68A98238463D A14CD0968B97129E BE7E37D7A67A7177 B2CEA7262C18D742 82E3C95EC0780EBB 518A52D4496250B5 E11FEB3674ABAAC5 287BAAA17E69B212 CE2AE0B0578198FA 9CF2B4FC6BF53585 383B30C74FAD4D8A F7DFA34D9573165E 92C0EC2BB3D161A0 AEA8675219E09B1C A0E0F51D06FC9FF2 EB2B5B577ACF9656 69973447334CDB46 C7172CB1092C2D26 C1865DDF4BA940D9 EBCBC31476325870 C4413A683B0CF561 1B55B0025EAB384E 52EEC2802EEFEED7 5CDD0FF691CB0979 031E9EF9200E64C1 BFB4D3FD4E43D31E D6903E645BD9DB42 2176BD821E3FAB75 CD4E0C7F05949FA1 443595CE4CC6661A 7CED5822FE81192B D01F30B727D15547 C72A159A586E4AD3 2A6CB00E66E52F45 8BE8A0D2049DE7AF 496085C3C8A8284D DB1F0354D2E006F8 C489BCAAF1F2B95D 46B5482380DE121E 1EBC6F8BE3A2700D C63E117F3627B168 9DCC5BA4E2E1E868

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201308061206 (name+title). Key = MD5(password) = 4ea3813b2a32d8672426e9a4442fb9bd, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9ed45fcd-0a94-1a97-a886-0f2fedee48b3
  2 1d303d3f-4c06-7487-9207-84fe3ecaad47
  3 6cf79f93-a647-322c-86d1-a754db2bbbd2
  4 2ea68f9a-b3a6-1c73-bd6e-a8bdfbfbdaf3
  5 b4079e4f-8189-1dd8-a7d2-42c415ddae75
  6 7dac9413-1986-6ec1-8e24-65cce0939064
  7 d8653f32-81d8-36eb-a03e-fc959eb1ebb8
  8 391bc926-eef4-60e7-b036-df9300a6d7d7
  9 5d4dd76e-290f-769e-88e1-2220fa5c63df
 10 db136446-10d6-56d0-9fff-270ee32e4e77
 11 dcddab84-3b81-596d-807f-1f36db121051
 12 f6e6e712-bcee-26a8-97db-54df6b65351d
 13 96c6d185-3266-1689-b6b9-cea47eb6ee3e
 14 de632d33-7cfc-8403-bd1b-4d3c85b83d2d
 15 c9bc08fe-4238-0601-916e-62b27617e363
 16 ddb820dc-89de-655c-8429-1c9f5b54d4a1
 17 e86be092-c9c1-08f0-9248-d5e768461a80
 18 8c4eb351-0e90-56c7-9bfb-8ed52637e003
 19 00c82911-cd76-6458-a6f6-db60044d5ee6
 20 aafb3582-638e-7972-9cc6-483abf6a171a
 21 dfece161-dea4-6a84-8960-dfbb7d1c5c20
 22 1fea1186-5357-4f4d-9de8-aee559307099
 23 cdfbda22-c097-79da-b359-bd5cfc20997f
 24 efc0f334-caf0-71c8-87d0-72d66ec4bad3
 25 c0e063c5-d01d-143b-ae84-c39efbead41f
 26 1340cc89-f90c-4694-8df0-8050072c0ea5
 27 3d56600e-54d0-7b77-91d2-d2574f440083
 28 919383b7-94d1-1f5f-9ebd-e90f6fc4c581
 29 409b9f8f-0929-8a32-bc9a-16778617e1aa
 30 152a244c-51c6-7155-a62f-f47b756a72ba
 31 d43dee48-59b6-60d8-a369-e4e0be930188
 32 76ee81cb-5adb-151f-b3f1-df0f2a83041f
 33 b799ac92-12a6-3376-acae-25a609377569
 34 4dd2b4b3-c32c-0416-84f3-48b482a4f622
 35 b0c61a45-8861-2aa3-b0d3-4d1690c24d87
 36 27464869-8e7f-82de-9db7-3abe41071982
 37 694c82ed-b4e5-8c0b-956d-7a6dbde0ff78
 38 e2f63b58-bb24-21f3-ab77-012d760dbc84
 39 9551910f-629c-1dec-a269-625e350fdfc7
 40 944957b2-495f-40a5-890f-cd4350915d18
 41 004e6681-f1d6-59d4-a3c5-96b0856e2775
 42 efd686b7-e04f-788a-8a81-1901a30f29ce
 43 7e401cd0-8a67-5261-85e7-bfd9a87e3830
 44 1f5a6bb7-2d04-398f-a807-75f02cb36ec5
 45 747d32bf-b213-4fdd-9ea8-ceb31d33de03
 46 a5cc7be1-e2e9-8b96-af7a-e821578ea47c
 47 3869c639-22c5-094b-9989-5a6cd133b0c6
 48 f896d568-c6ca-3224-8c32-2117cff84fda

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 173116367552180605676477147187613028821457534803. Exactly this sequence comes out of new Random(443).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 4 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related