201309030959 1lmmje

explained decrypted filler

seed 165

Metadata

Post ID: 1lmmje
Title: 201309030959 → 2013-09-03 09:59 on A858's clock
Posted (UTC): 2013-09-03 05:59:56
Timezone: UTC+4 · title 09:59 against posted 05:59 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201309030959) = ea0c5e65ba56631e7e7ba695f193f08a (name+title)
GUIDs: 44
Filler GUID seed: new Random(165).Next(9) ✓ verified
Run: Run 52 (seed 1,430,705,843) (seed)
Draw: 27 · predicted N = 44 ✓
Machine boot: 2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 5 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

4CD528EDA45974B4 E8E0AECB6026D417 B1AC30DDA1CAA704 DD8418DE175E6A73 2E08C30A3626D40D 95C9D11ECB7D4C11 300A783B5F2516B8 EA46C3C061EE5C87 B21F5C59DB4EA7D3 2E457266E9BA8F64 A42518548C8E809B B556ED7A9A30F760 EE1E0888A9A2A8C5 7A73E11BB28577A4 348CF7D1648DC20B E60FED3E1215CA49 3BE9F2D0D14B856C 0B1F483C6D672543 2D2CC4369E82C574 ACB346032A0BFD03 6460CD28BA18F55B C7171260B6198A0D 270550B7E1FEE567 7C02FAB8C0D04E50 EBD08E6C0A1F330A 975AD1E244526DBC 6070CC9473F5491B 95CD72F053246451 B2016F31F548A5AF 828A23FEBFE7948E D144411E4DC3CDC8 646162DA92028C05 A9BE99CF0BE68560 891F27A6AAC7C0F0 01920530FEEC5507 9A70D836C45D5F57 E6075A0BBAA03B89 4DD208BD775351D0 00BA8D016108454F C3C7601C299B706D 11A5E9DC40B9EC39 025EC554D40E409F 70C3C8E2B9606B19 75CB14208A402C16 82CFA640B0235907 2879BCA2185885E9 41386E4D2ABBC66B 4317C51E9B242DE2 1A971EA977FDC174 92A589006C51CEE4 9C04902D95EEEC39 B126E8484AA2A4DD FEF5FEC16E198D49 634F67E1326998D8 E2B523B1DCD043CA 923B55B709FDC66C F2AB67B1A56CBBBC 5CBFD7209F14AAEB 38BE43525336B651 90A5F81492656E1B 19EA878848B79E7A 2B5C9E1EB7FDF1BD 497866CBE8C01830 D33ECF8F2680E28B 8E6A2CE8007CEDC0 51143328636648C9 0C4671239E875592 3C8C89F293534EC8 1F45FF54EACDD3B3 B8CFFF6FBE685A1C BA47A638324A56F9 B57F08CDF425E5CC E1204BC7F3FA6FF8 1487CD7364C51F3D E20D243A566CBDEB D44956681D0080BE A7F3EB5A1B47DF16 42EB0EEB7CB68A44 C81507E8F4555AF5 35E66A5823A475AA 917852D7170BF2CB DC1BD822C00F9652 C2E96725B0559F5B F73A240EE5AF2DB8 0A2B5C85E0846AB6 CE6CCD0053BEF39E 631040D1EDBE555C A13FF85EAEA41946 9AA45CAC7B664318 32F8812F7AED2D00 3AEEAB897635085A 19908700E1CAEC24 E26075192C0F5857 5A33242C4478B775 73CABC3CE9EC127A 01C758837F354378 60FC9667E6E364BF D7BB1FD2FBA9148D 518875D590B6E2BE 0B5195A8AD2DA273 32C7E3642C1F255D 222191C8E2D9E6AB 949D397099784F6F 67F76EE12788A49D 96E5A69723BACD14 F92B71F3FDE2A2D4 64BBDF55A7C957E2 82ED5D5308CA3CE9 7B6EE6C43BF57ACA A25B7EE595906F05 62FF5B48D879BCE1 359D7C4B3A8B5BCD 4F660AC46960B10A 2038EA2887AAAA8A ECA0EC9CA06FEFD4 27FDF19447042A2A DAF3D439B5A47009 491E174245963B37 C3038B025A05EC3D B40AEBFE15AE76BA B03F001259FD8F4A 06A3C0DF73D74000 4B117E3DECBF0A30 D43AED095D2EE977 A743DF529777D53C 94316786EFAB3F2C 830D92BBA16D097F CCE33820FE0D29BB 452041EE8E0DC3B4 326A4EB87090224A 0444531A100DC861 0F8931F6C1B5B74F F89162E1CE713E7E 7D4371DCC89B9508 49871F79DA1185AD 2CFC44EA0C3D25C1 DD5544F6C596E972 56606D18383E48CF A5EE1798E01607ED 2125D8AE7D19B501 A5E68AB5FFF9523C D3E2A0DAB419AA3E E49521C8180319A2 75F74C6839527394 CD37238AA5CD027A C2B6ECF22B46C57D 9D58E49D3F976460 D10B75000B06FAA4 8F105C577D063EB1 1208E36DE89198BD 3740E1E9D334364F F6C07D006B22B469 0E60D9A2BA785EED 40F85D5EB8B59EEF 43F36E27F34B582F DA050D357AFCD2D6 7CB7145334C83CF1 394B8B00B5B96712 C9B52C6F7C5C71E4 150C5AB36C9C6E4B 790D7E3566CE7C9A 50FF7A25F4995690 18289C86813F60C8 2D458D6B75D828DD 4D3247056D0C8290 88E0BC1B8CF1CC93 18A610597EB4B772 ED01C805494D7F05 B0FABDFD921D93F2 F08B18BF78983530 BA300EBB96EB8371 6CF3B0E165A91C1C AA11CBBB9778DB8F 927CA90948F15BDD FCE8F87EA1FD7EC2 F1AEDD584EB16AB9 8B7EC8BF4C50CED6

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201309030959 (name+title). Key = MD5(password) = ea0c5e65ba56631e7e7ba695f193f08a, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 92c3c5f8-4cfc-8331-b140-d409fab1e5cb
  2 a9a46b65-56ad-2166-9fd8-7c631f041f96
  3 b8fdf169-848f-00b5-ba33-dea4fd75b24e
  4 baab655f-3879-6ab4-a0fc-abbfcb7480da
  5 b147f02f-52a9-697f-91dc-7ffeafe28891
  6 43e6d81a-0185-6a9b-80c9-10b863236ed2
  7 aabea070-25b4-72cd-aa09-d10230fa7bff
  8 2f4e88d3-4cc5-1d70-a856-59b34652c09e
  9 e05b45d3-7a0e-3eaf-b1c4-4ba856d23ddb
 10 ef1ae056-e934-1e92-bfb7-23216c4fc8e5
 11 2d524107-7732-7c65-a899-ff722dd7972a
 12 ab79614c-9154-20e7-8f4e-70c48145e32f
 13 e63cdf6d-1cc5-0917-b0c6-f6506aac8491
 14 4427b8d8-c987-2a9e-9914-6c8c92d19bdc
 15 2c62c9bd-13c9-4683-9128-d8c89cdde41a
 16 8329a4e7-fadb-0227-beaa-695070a984a8
 17 a9eaff3d-d45f-1a08-a759-0d1c3e358495
 18 04d91180-bc3f-2881-a255-08ee29f1c571
 19 b5905d7e-15ee-1373-ba2e-d0e1fc11ea66
 20 cd6295f1-8c34-1f19-ad5e-2816b6c0a9f1
 21 4946cb17-3150-67f7-a785-1a96ba5cb4fa
 22 11b9db19-d025-2ab3-975d-a7ed25d9a513
 23 c1ba245f-84ba-7580-9cce-2b408df8f9ab
 24 e420dc32-76e7-6c5b-a005-4392c4731161
 25 1657161e-ecfa-701f-87f7-abde27f4e0f3
 26 943463b9-7d69-58b8-bf58-2ecafb3f1b60
 27 e968f90b-824d-768c-bb76-d6ac041346bd
 28 ae2dfbaa-c05b-896d-943e-f313f53155f1
 29 1d87de90-5d28-159c-8a44-8a24a0a358a4
 30 1d0c4659-fd35-8356-8ca3-39a1f89040ba
 31 afeb047d-2266-008e-9fc9-98cb18d5c609
 32 1e44034e-9ef1-8576-ac19-3deda78f432d
 33 6da26351-ab8c-5d8d-a67a-26d03d7dc710
 34 432fcde0-74b0-100a-a483-183f747bb7e2
 35 e711d460-a28e-2044-adff-2fd397e592ac
 36 d49f92e0-51b1-8578-8334-5cca99d5c8b7
 37 605e98e5-a410-6bc0-8841-aa3bfd130209
 38 aa7c9eff-4553-7e57-8a44-8f1f75b6a5ae
 39 4cfea982-b103-5f90-a311-807b814c2d73
 40 022ecd6b-eabc-5a01-93f9-d31a7b7fd0cf
 41 4c356176-9f4d-10cf-9802-5df997b8b3b2
 42 772aa796-1d21-5567-b05f-3ac2fd16d037
 43 f60024ec-a986-4d22-afad-5fc21b3f4c7c
 44 c77416c8-5acf-8861-a609-c5374ca5cc8c

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 82066671317202401211627675781808512867551548. Exactly this sequence comes out of new Random(165).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 27 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related