201308101806 1k3aha

explained decrypted filler

seed 484

Metadata

Post ID: 1k3aha
Title: 201308101806 → 2013-08-10 18:06 on A858's clock
Posted (UTC): 2013-08-10 15:06:54
Timezone: UTC+3 · title 18:06 against posted 15:06 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201308101806) = 3bda55600b7db80fb242ebd586a1570d (name+title)
GUIDs: 48
Filler GUID seed: new Random(484).Next(9) ✓ verified
Run: Run 50 (seed 2,278,890) (seed)
Draw: 38 · predicted N = 48 ✓
Machine boot: 2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201308101806 (name+title). Key = MD5(password) = 3bda55600b7db80fb242ebd586a1570d, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 127536ae-4f20-5dac-b845-da2d33d69700
  2 10c5a3a7-e96e-733f-a924-3407ae18b33d
  3 bf550364-0df3-0a07-a3dc-ff947c6681df
  4 27c4ef03-afd6-7a7a-93ff-d412f35c0a22
  5 5fd4b972-b2eb-6792-b0ce-bbfd5f7c7ccd
  6 0f1e5f0e-ab91-47c8-9fdd-8e3f55b7ba97
  7 f7458545-924f-6d6c-8863-7377ecbb19ff
  8 4531f921-0df8-2d46-ae49-0fb2636db3f4
  9 67e9ac81-7369-7864-9d9c-0b82dc321697
 10 cf608910-6412-6174-8082-b28f26c37f62
 11 a7f249ca-d8b8-75b6-aa67-f4a94db8bd55
 12 52709fc0-e5f2-2cbd-8ae5-7447037ad1be
 13 630c00b4-4c73-3d5d-b178-69597fc08572
 14 f628c743-3a9d-2e30-88b3-95e0165ed221
 15 d39c0cba-2e1e-62e0-8dc2-fbe028162a25
 16 c42b606c-5aee-2467-ab7c-0f1a62c0a28f
 17 1ec60d56-7371-2915-9cb1-be6bc1d164ae
 18 2c4b4421-11c5-0cb6-927e-4a54ef35f027
 19 ff47271b-8ae5-7f6b-b89f-33ea3ae8a10d
 20 cc76bb4f-34a9-6f3e-9349-1c6774b335aa
 21 929bfa1c-a1db-1d7a-a6a9-3c8629e9c8b9
 22 c9dab1a1-c97c-55f7-8a94-45d60f265405
 23 432f36fc-da7b-7310-9244-e9d43176d0d7
 24 01cb60c9-094e-19a8-af98-6e944e993bff
 25 a98a85bb-fc1a-1cae-b4d7-f82a9556a335
 26 3ca377c8-9416-7245-872c-a53195e6d35c
 27 8da5585e-1190-0b5d-8f90-c18f10a91d88
 28 86787b2a-132d-5878-ab04-e645555f4ba9
 29 6ab5bb64-f6dc-2056-81fa-6c9823f14b77
 30 1006ae30-d49b-7dcd-aafe-4603d09b73e7
 31 e29f7826-81d7-71e7-9c8e-97e85ac5b2cb
 32 a30f7cce-7c35-80c5-bfd6-56d231ee50b3
 33 0e467573-e66a-8520-b329-7b0ead2a619b
 34 743e75ee-fdb8-1fa0-82bc-47341eb9972c
 35 a1973923-9d04-57eb-8155-e7b0a74a6a53
 36 493de786-d1ed-6a85-8292-33dd230441da
 37 a45d73af-8333-8308-bd4c-75862ef39c15
 38 b9f84344-217c-2b29-a40f-f15b65d5560f
 39 c031ce0c-cae6-28ae-b046-cd6b6a573383
 40 170f99a1-de3b-605b-bf51-ddc635638b19
 41 b794c245-33dc-0881-8429-6121bc14b7d8
 42 ad47ee41-bd08-1d20-9bc3-da5870bf859c
 43 b1e65636-1f5d-0813-91b6-a781dee19744
 44 9d5d2055-4b8d-0465-af37-6ab643214425
 45 40735bfc-8aaf-04bb-8861-842fbf1049e4
 46 9d5c02f0-6241-0b92-82ea-cb176401a0aa
 47 3c4a2896-1586-06b6-a554-6fda71d15d76
 48 f21e2856-e9d2-0d0a-8600-e398898c44a1

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 570764627672326220761571170527788156822601000000. Exactly this sequence comes out of new Random(484).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 38 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related