201308130006 1k8dhy

explained decrypted filler

seed 32

Metadata

Post ID: 1k8dhy
Title: 201308130006 → 2013-08-13 00:06 on A858's clock
Posted (UTC): 2013-08-12 21:06:52
Timezone: UTC+3 · title 00:06 against posted 21:06 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201308130006) = 0baf4c31fc667b60cc779eb69be4e027 (name+title)
GUIDs: 56
Filler GUID seed: new Random(32).Next(9) ✓ verified
Run: Run 50 (seed 2,278,890) (seed)
Draw: 56 · predicted N = 56 ✓
Machine boot: 2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 5 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

D56A007818BA4632 991AF2F61697B4C5 36AC87EB912704CF 9C7BFE5F138AD4DC 73DAF6A1B7C7C7BB B71E59DEB83F1523 4339D537DD2AD9C9 FF1B47A7E96EFAEA 0567C535D5DB02C3 296A4FB6CBC6F155 029A211665C51C99 BD1EA56B83A02E2D 87FCEE66995BF3D3 BA602CA27F0698B4 21FC0F2BFE458CAD DC20324EA92BC4D3 69EFB4C1E381498E 2FACB6A1537E4BD7 D4D80178F3F0266D E436C073475C6EB6 3743BA99F933308D C3C83745EF1DE870 C02DF8AADF6C8B72 C87CA0AB5DE52F91 864490030BFD3177 CA12A73D4F391A8F C6F2EC849297ABB7 C5B9557F24C5D6C1 7470C3217A1CEF1D 3C6A6B26560CA070 E96938CBAE3F5697 C0A2EEB71D1BB1D1 37D2C3694BB319A3 4544AFA100DE1655 62F8303186968786 FE40B4F3490967AD BBEAC0844A3FAF57 448A608A90F8572B C89B35072AB3B6BF 7475C28BC0F6D994 3A8D9EED01FAE633 8ED2717437D56100 C11E369DD60ECC1E A8687E89984D12B5 F61B2E487A6E0730 CCD689136E6D4BB0 CD76BAE40F1C9136 E04B9BD8B852DAB1 48D6AE8E66183128 60941C036423471E C8BD9F8D5BDDBF28 CB337E7AF2A66B05 25120D28F803FEA5 ED14E398BFA129C5 A536EAFEFA999573 415A81DF1F3C3FCA E78E4C3B165481A3 2E3C03B4CF945A23 82D705CCB79C7799 B222EFABD0975BBB F8FE7B95500B6C37 C1718219222278DE 2DE2C85A071FA418 8CDD2E9DEA04EC6C 76A12DED560190E1 3E89ABA3C8684D54 1E49C4F96CEF3F3F 98B146F796E3516E 1DD1A8ADA7DAC73B 08D722E3FB07DA4F B3D9A3D17AAE80EE 353FA33BD3A3842D 2837411848AA9663 ACAD2E8917A98097 72EE050086B49D99 A41C3CA6B5989B08 CE3B5FD5F73E86F9 9E8640416084F7CD 55780FAC3E4DB476 7A808F7B00D12DD1 F66F0BEAA74DED90 E0EA7922F937D51A D5B8E388A76251D0 1ACD71DAEEF84A9D BE130F17A8FE037D DD0FD7A700EEABEB 0A0CCD38567FD3DE 1158C2BC723BCF05 DA9B28FC857001E6 C58C4E8F2FFB5410 0D8DB43CB7AB7ECF A9021D8F0296AA62 E437F061EFAFC897 91CDA9DCEB4CD0CB 588424D1CC225734 8EF2E4CC13EF5D0D 32B713F9F8E8C604 9FAB4163AB3A555B 4FF51B0557E0C637 243BBF0CC794A457 7F729926752FF96A D299CB75156592A7 4D2F99040CE9C076 E1989580D11739D0 5A7DED81EEDF7EC8 ABF05202A990C92A B1C82E5E82EE9BA1 41ACA435C29219F7 97E45ED75AE3ACCB 490B6F91D558D63B 2CF3DB3C8DB8085D 0DFD1A89A55E34B9 1998D26626A1EF21 161D9D04596A3090 3BDE40DE0293FD94 3D24762551A10B09 BB912F083CB7E670 798BF47765010B9B 8866C61ECB33DA0B 1373161B2EC2942B 692345B731DF959D 2497BA780D6EBD5D B0E495E65D098FF1 309EA5A12B30DC71 40007D0E3B83A9DD 5CD97A9E20044D26 C56D6BA67C75CAF4 52B604C1F052B691 918A93980A5F6737 FCF611EECBA2D03C E8179980858C01B7 8AEEBABE0A681353 092CCDC2FC56CD8C F4A19E9591DED4E0 34D2F0D119ABE6A8 43DE8E41449F3745 65B21BEE82AE7335 5D941B9650701BE4 7E57EEEAC2B0F711 EE55287D8D1A7300 6738F6C5097736F7 230BEF1C818213F9 3AED7AE26DF7699A 37A315DC4CEAF60A E3B060354ED869D6 F6665AB03BCEDD84 9632763982AAA100 039FCF1EAA66D56E 89B7541425D0072E E1A53A4B8655D7E8 6BA1294A24DACCCB 3A1F57D62F3446CB A62981A47ED8F37B 399465FF43431396 023069260E4712B0 AAFFC23AB01D6E7E A73C47572AAF53A4 D49E71516B32BB64 F4C3D7E76C9896A4 1C4B811985B1C8B7 788EBA8896FE2B95 8B9F0A7B535C44C5 E5E5EFA634675968 6E79C19A905D6212 16EAD36550058112 659EC42AA0EC51A7 35BDD5DBFE999F68 C561677E70011F7E 970E36EA6A29771A 6BF89E854F4180C6 3D3C6794751CC4B9 E3C946F1643065A0 1397E86E8EBABFC5 C58EAC91C75027AB 743BB4E4021F2996 0487DAA0BDF5DABC EB7064058E10A912 81BA119741003AD7 B89ECEF14989F461 957A785721D6B32D 4F1B675BE3BB0A1A AD7B48826714C116 A992A27F14D51F58 A3CAEDD6717845CF FF2EA326FF4CB95B 4D49DCC8710E2A96 C7E6C475272ADD30 E5BDB835064DB2D8 2C41BB1B5DD6BC28 0F7E5767A3F1F9B7 5E935C3900ED2D4A A98E5F51BB61A4C8 F4FE8DCB066E525E 004F3B124A0BB2B8 137AE74C26CCC3DF 82366076686039DB 1494C3D8E22E67A8 2E44B40196F6E5C8 86E52D5826DDAFBA 57741107F791F833 C64AE77516BCA409 7F0D8CF4F5776724 E905298389CC633E 6011020B4D002406 BAD899259655A858 49CF62770768FFFD 33C8D05B75EB96B8 B589079CE8624DE2 38034E7C99B994D0 1E525298E322448E 7C1E916645105EF7 68119FA3418593CD BE78A993AB4926A9 D134C7491AD0F7F6 39496252FEF5110D 7C500CD5F712C557 4AD1F7932056E0BC 50AB7027F3E9A490 8BEE0A1402472932 398F727ABF48C07A 71D638219712CE40 D8433F9500691035 BEC0D9C5E953B6E0 D4D39A0997EAA11C DF038B4648AD72EF

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201308130006 (name+title). Key = MD5(password) = 0baf4c31fc667b60cc779eb69be4e027, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 aa4c4ebe-2261-387d-945e-3c43360c866f
  2 c09061e5-e45c-133f-8e02-ce8465696d78
  3 ac5c7733-ac93-15c8-80a1-1c1de72b6a55
  4 4811159e-9b29-32a0-b5f0-cfd8bbb01d3a
  5 6cc56e96-b614-5367-acc4-f8426e8287ee
  6 d937ebeb-377f-4c3e-a68f-ff2272276690
  7 2b770935-3fa6-2787-87d0-c565cb13ccb5
  8 7d6838c1-1318-4d59-a7d1-72fb41d009f8
  9 6c701b8f-c112-85e2-8aeb-0dedc32335d4
 10 7b6704b5-5b10-0ec9-b6b5-293a646dc45c
 11 39a14c20-19d4-74d4-a619-4af03c7627c1
 12 8da69792-e8ea-404e-913b-d4635a684eba
 13 e34ec04f-8c9a-5248-afd5-4ae342849a8f
 14 224c813c-a6f7-17d5-8546-15a7f3f718e6
 15 b2a2157b-ecab-3a7a-bf68-74427dcad4b7
 16 260e7c72-4117-0e35-8b1a-de82f31ebb48
 17 7a497978-2210-22db-8fb2-539b845226d9
 18 bd03d536-eeb4-7885-9187-8b09d6dbe3b5
 19 dca85759-5492-4d8a-b01c-3d2b442a9040
 20 b85d4fac-a889-6002-8e8f-84cc38e80576
 21 9d60bdea-8a84-0ff7-b891-8c616785cdb6
 22 048f0443-a040-64fc-8777-bb5abd5b07c7
 23 1cfc8152-a1d0-3ed1-b955-2d7aaa4ff38f
 24 fddebefd-a3fd-1dc2-91e4-eba7cfdc8b02
 25 485eed59-420b-7ba0-884f-43e633b433df
 26 2c82bc78-57f7-0f35-8bc9-5366235d3912
 27 c337c97d-724b-4368-8d9d-a703ee4151dd
 28 4470e4a3-7df7-4239-b043-ae518e1701a0
 29 1241a421-4c7f-3110-adc6-8ac2a3318335
 30 59e4916b-a3ad-7a0c-82b3-5693be185ecc
 31 b10492e3-21de-091f-9a12-1c0214d26437
 32 234c9617-bc1c-7e63-bf68-c1698619806a
 33 375477cd-5d13-19eb-b8f3-fa04f980c487
 34 6e777827-2946-7018-81df-e3961fd592fd
 35 adac3bb6-cf0d-7462-babd-5c106fbb435e
 36 5b97896b-baa5-12a8-8f73-ceb22379f1ef
 37 0a207a41-5115-46c0-b0e4-65572558716d
 38 329411f9-c60d-1841-b239-4622b4bfa1bb
 39 fa025598-d72b-7fae-a157-e0214e04ef43
 40 116b8b67-ed62-1ee9-af07-36a69aa14cd7
 41 6f9955d6-5c30-0c84-836a-d648230a1f92
 42 312b6644-b9bc-5d5c-9fef-357bc0c6b709
 43 f082858a-aec2-3524-8731-bfd98178f531
 44 0d034948-8dff-8aa0-aff8-f911bd9b871f
 45 43218f29-7b36-779c-9ff8-e4e54a53d35d
 46 94f7ea83-2afd-855c-a941-79f30fd322a8
 47 046e0844-c183-27d1-8a4d-83faf0e90be2
 48 56f4a3af-125c-8aca-be35-1374ea3ba9e9
 49 a014d106-7acd-25b5-a2b0-adba6af719da
 50 3ae39d71-afbd-48eb-afad-cef56dfc382c
 51 f95c369a-0ba6-1ad2-b825-297575076884
 52 9f5d8da8-49c6-18de-b05b-a6b3aef3faf5
 53 d5c80baf-b838-7313-aa72-d5d64240ff0c
 54 796534d1-b809-051c-a8bf-43c050083e67
 55 7e56e522-146f-5fb6-81dd-580d8085c54d
 56 b02f4389-9000-62d0-99a6-48c5b90abe02

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 31135424807451302746063170443707177141710538782824117056. Exactly this sequence comes out of new Random(32).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 56 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related