201308131806 1ka4sh

explained decrypted filler

seed 161

Metadata

Post ID: 1ka4sh
Title: 201308131806 → 2013-08-13 18:06 on A858's clock
Posted (UTC): 2013-08-13 15:06:51
Timezone: UTC+3 · title 18:06 against posted 15:06 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201308131806) = eb4a2e2abba9f834936857eea5fe8a04 (name+title)
GUIDs: 44
Filler GUID seed: new Random(161).Next(9) ✓ verified
Run: Run 50 (seed 2,278,890) (seed)
Draw: 62 · predicted N = 44 ✓
Machine boot: 2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201308131806 (name+title). Key = MD5(password) = eb4a2e2abba9f834936857eea5fe8a04, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 015e5eae-d17b-7498-bec4-35e88490b205
  2 d27e9ecf-5f66-0ba3-aa6d-820766355539
  3 2ad65903-650a-2ca4-8327-ce2024a1db66
  4 befbd68a-c81d-8acd-9bb6-8f78e76008b7
  5 b6d055e6-e253-82d3-afe1-09778da9633e
  6 c4f68aaf-6941-2494-925c-4b2e1577a7e7
  7 8580a83a-6e6c-03d4-80cd-05d5e63ef9d1
  8 9486ce7a-323a-1ae0-b4f2-3a5cfc6ce9cf
  9 69403eb8-bbad-873a-91a5-0d3050e690a4
 10 dead758e-67e3-5962-b326-3bab7f7d2b18
 11 ce2c0728-dc17-89f2-8cd9-ec03b77f5069
 12 ae54d0ce-64c7-1a81-b6dc-bed6930e694a
 13 9f50d696-5890-22f5-ab44-1e5ed63b34a8
 14 9e52a5f9-f065-2bf5-912e-be71b46c0a26
 15 d7d671a1-2185-6ffd-9736-ae0a0732b612
 16 06e2951a-abfe-5ab7-9df4-76f6c33e2286
 17 153a4cf2-2748-469f-ad2e-84b4f9242c7f
 18 670130a9-e972-7f87-ac0d-82de30ebe3a8
 19 267cdead-adf1-09b3-b39b-6bdf29b183ed
 20 73ec7ef2-c65d-50e2-b198-e4e8c4f3dda4
 21 de81d479-0793-1ef6-a780-e66e7fac6e61
 22 96581ff2-9c41-372c-b4d3-06e124e10058
 23 ee66be15-aee3-1ef9-9fcc-2d4ef3d3bf80
 24 46067153-cc49-2a2f-af8d-c0f3aba896ca
 25 1775a868-cf9b-4bec-b70f-011a864c5fdc
 26 d225f68f-082e-0a32-b9d5-f9163ed27f9e
 27 5d9fe6fe-5462-32bc-8fae-bd50ad1d06d9
 28 175d94e1-7fc6-4ec4-a50a-0e6cc0ef6792
 29 bd6791df-b93f-08cd-9a66-7e1ae4df530f
 30 27d8ef50-81d8-60b2-9fab-7ddf1d321295
 31 3e1548d1-7187-5c14-88a4-9d42ec5dd7c5
 32 e9ab4e83-eede-754f-b7f6-ce45de20762b
 33 3567143f-fcda-059f-9846-2d8b519b39a2
 34 4560fda2-5c67-0cde-9347-1e6f97a698c5
 35 211b44ee-6475-7800-b329-1d944d22c619
 36 6a5fa7a7-047b-6302-9c61-f9a2c933ab1b
 37 e030ccfd-4267-3a74-a284-9313e37a0847
 38 f38df9bd-686c-0985-adea-e436dd52c8bc
 39 289c32c0-3aad-8448-86be-64dd4e38a90b
 40 596e10f0-ce0e-30ea-82b6-941f3d8b2d86
 41 95b38c3c-a70b-05be-a771-92f14a835143
 42 c0c06466-2bcb-41d9-b915-63e79af11845
 43 460f70ae-7279-2c4a-a3e3-ae6906899ebb
 44 8a636af8-2d65-44b0-8835-84347da60a0a

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 70288201858122654705131240340657007630830424. Exactly this sequence comes out of new Random(161).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 62 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related