201308072106 1jwcif

explained decrypted filler

seed 801

Metadata

Post ID: 1jwcif
Title: 201308072106 → 2013-08-07 21:06 on A858's clock
Posted (UTC): 2013-08-07 18:06:58
Timezone: UTC+3 · title 21:06 against posted 18:06 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201308072106) = dcecb92cdf0ba439a90a0a10f27a384b (name+title)
GUIDs: 44
Filler GUID seed: new Random(801).Next(9) ✓ verified
Run: Run 50 (seed 2,278,890) (seed)
Draw: 15 · predicted N = 44 ✓
Machine boot: 2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

6C91633DA7A37567 4BDEFC6D10439FF2 34AAE2FB20A56768 A1966CC13C328822 326F86500D90F189 4E4C8549B928231B 79CD56E532C001E0 F1674D4B2388039D A4AC284BE28ACF0F DF15A76CC80A4B79 589E508CE8495F51 826ECADE6860BBAD 3C70224E90696581 524E7D00CF10B9A9 D06F6DDD98AB53DE 69BE9EF141965898 CD91F351F2BA0474 E792AE333EEC7510 FB9437F229586589 40E686AC3DC5A27F 656654C618A3229A 2D7EC96CB22B5212 B629AEBC84034578 6FF5674A98641E12 02EFD009606B8D36 8438523182D53B2B DB3A9E0E5A804AE9 08AB19DB12506163 28637583E51C46B6 24D508C466D8878F 89B65DCE6F791C8C EA166E4470037438 41965BA050139EBC 8E2522AC7EE2E541 13BF9DC180B26FEF 46A6C4548B6463F8 039DC497D3E8A0F8 A5A9F52351FC80C9 53F26A31EFF8556E 3C3040E4029BD84B 0F6AFD02171ECB4E B4B3690857146604 FD6F4BEDC518E85D 78B8E28AAD8F3790 301242EBB001E137 AABD9DFC397ECA2F 05EBF9B02CDBAC3C 15B1F38B56A6C242 4F8C3F413698456D C23640069681369B 1CB3E053849F9EA2 64C0F2EC0AB740FA 9F21DA65EEA0C327 ED92CD5DFC1A2F29 BF40D5111B4326E7 19C5581E6BE648E5 39E114DEDA210811 7FF866C45EFCFD0A 4D41FD65F757875A 8D84288DA9D41092 AFB02744C2D78D10 D4DA6FA3F22D659E 796DAC1692C89F50 A0F401CE86C1136D A9CE3AD390AD7DA0 EE00ACB1DD77876C D9E69DCBB12C2C83 763326A3E7EE6A9D 4FD984566E37691A E8C4A86BC9D5B428 AE1BD7F90E9E8F97 160DF414B48033C1 3E3D9ACE6E2561CF C67995F013A07B9E DBBE9A6F9F422C6D F7068AE20A68334E EBF8188868858089 A52A0983DD4BA1C1 F57C0D534BE21BD6 724608E0382130BB 5CAF25A4E8FF6F6B BF058D0312F25400 415700AFF94DC9FA 7D4252CA11C578FC 309A92AF7731D7C9 A66D63478F105F46 C1E176C08A61F0C5 BB36776D922EF042 0B68DD0D87E1C5E5 7709B4F3C374E579 1766400F501753D2 13FD3AA8A028E5BE 5DDCD5C9C413F50E 574E17C24270521E 040BA837C70F3304 22F702C3C0DB201E 17198A03D0F0CB46 EB6EF7976CEFC535 277A7CD6A6E891C7 B3C6C5F3E9223478 3EC2A06218C4F745 4B916A7BB827B163 A3CF99CE568532CB E52B9315B335198B AA1B0F348A4284DF 31E3681FFFCE010D 537DD5230BC8A6B0 C493DE27400D5907 ACDA223AB76536D5 E8FB89A75BE3A3AE 9B91905B52EC71AC CEA91971A215FF71 0108999F1DA21A24 E2AEB497E011F518 178E857BFE3ADD53 530834F273AE3A58 B3F668A69812D033 A350E0D274B07456 DD5C58037AFEEB86 532BE5744C660D62 9E3DF09768E161F0 FD01ED0434476559 6CCDA966F45AF479 4DE06BC0A09E5309 4DD88C0E359F663E DC003944D4921767 6240437CB127AE42 6D430357559BF897 028122AE6B0D612A 6C13E392E260D215 0FD87685B74B3709 C97A9AEFDCE60FDA ACF172E218DDE175 F332F5064A624F8D 22F14FE5089E39EE 5636F8A2D2D92009 39369B2B2D03CF23 DB7D7BAFAD8AE588 1DD04FB64563F869 DA50F238B22FB0E1 591263892CC14502 2958BC1BB95ACF8D 39ED9E7A9A7678E3 BFB0D3DCC9587E28 414C5E4CE47E4CC6 4F8D2C228ED7FB16 8EA62F59DDA03528 C2FE40B744B1A80B BC89A9E18D3BD685 9028C79CF6BCD126 8BEA4166ADE67CA7 6200D31D3B891E71 1243916517CCF194 AE4FDC9AD08331C8 2224B822D5BF7550 D60E528BBC6C7096 E168DDED3701C3B4 AF66C68C1DABA693 A3C385F35B3BCF14 5812C04576E6A3AB EA0EF072483139D0 D474BA8E9EC726E1 05B242F9CD919B18 5BE859B2970CB663 CD50B5558AB3A880 4D0C1CA9A94508E3 C5F99708A9291C03 6A2110971939A0F8 FF375497FEE2DB78 6D4E65EDA0064113 C2E13E5F1D6ECF66 9B3F9A3871DB2E3B AB7FFB6DF9693690 15043AAA8C41DDAB 4EE53269921E4F67 627FF90035D2EEC8 B686DB8CC9F67073

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201308072106 (name+title). Key = MD5(password) = dcecb92cdf0ba439a90a0a10f27a384b, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 efbbcc46-ea46-126d-bbf3-328a9a1219d0
  2 b927ac1c-4653-7df9-84c8-4964cdb4c082
  3 b4757c03-11fa-5cf1-9737-af11f08dd170
  4 e01b58ba-ee40-40bc-9966-b84be6d86ec8
  5 90c19497-0db3-7a47-864a-5446dca817e8
  6 e764b7fd-5626-47c6-9d81-6bf6682d374c
  7 63271fce-dc4f-7c80-b0da-ccbcbfa1c2b8
  8 b3b11d7d-a15e-21cd-a16f-2b840211672e
  9 c8f57f48-1937-0ae0-9b55-4be5957f7d05
 10 8b418d5a-f8fc-5af8-8a0e-e28071a77208
 11 92d7aa6b-5e6b-3184-9fa6-11d6e9f32af8
 12 d527570b-22b2-77f3-a7e0-cf3f9c4c967d
 13 72cb5e3c-c895-2748-a493-283457f6f34d
 14 6fa47e53-ea6e-1011-b6f6-90a3179488af
 15 00e8f07e-b443-5a79-b630-f28d4c35fa4a
 16 8288dc01-85e1-2c86-87f0-843347f3a52e
 17 a6711eed-6d8f-53bd-9343-8032ea3e4d5a
 18 4e366b6c-b5c0-5421-9597-df8a83f55fc5
 19 50cec243-182d-319e-b3e0-e86a5e39bdca
 20 99224407-24b2-4aae-91b8-90eec5f26a9f
 21 7545133c-2e01-268e-bc27-598147fe8b9e
 22 1040445a-ff9a-38fc-a558-41476a739c5c
 23 4cd70198-f7dc-3859-ac8a-1c44b3f1ba8f
 24 99d6e6c2-f343-7bf0-a212-d99a221d3f3d
 25 2d0832b2-a1b2-1868-828f-1360af564717
 26 f2a743b0-8420-6099-8d42-20e425af0cc8
 27 5504ee28-6f44-517a-8fa5-7137256ce76a
 28 8bce28d5-2238-8c2b-b9f8-f61f966934c3
 29 fd62dd52-5a35-7654-a888-55f0e3478b8f
 30 99eaf466-5d9e-1cce-afa4-ee933141305d
 31 65c6663a-eafd-83d9-bd91-fe4630237a44
 32 932653ee-067b-3cb3-a905-ff443560d43d
 33 e5c4b145-9897-30d8-b82b-745490d3f2ce
 34 cdcd0fa7-25d8-0f15-8fd9-1d5688b50d48
 35 f7afc75a-27e5-378b-a053-b717dd257927
 36 5e67fdc7-b5db-4723-9989-8c7e67ebc5d7
 37 ca6fa035-fde3-40e3-94c0-c58200df98a6
 38 4e2ef22c-a96d-2f56-9e18-0e477e26c0e5
 39 a3c7a82c-0b4c-469a-b67c-022fd6e75e28
 40 04f687e3-63e8-6140-96e2-305fd5f61b51
 41 5fd4e5ee-8284-3d42-90ec-5a4aa24b0e49
 42 c249ffca-abc3-2d9d-ac29-fe8e55b204ca
 43 9a39df40-a04d-3541-8e2e-b62704672520
 44 f85c071f-e1e3-8b69-8e23-2941da120679

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 17547472053721525534233716587183303442463238. Exactly this sequence comes out of new Random(801).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 15 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related