201309070959 1lwh9i

explained decrypted filler

seed 352

Metadata

Post ID: 1lwh9i
Title: 201309070959 → 2013-09-07 09:59 on A858's clock
Posted (UTC): 2013-09-07 05:59:51
Timezone: UTC+4 · title 09:59 against posted 05:59 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,296 hex characters · 648 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201309070959) = 82556e08233a2f444a72d271d322bc73 (name+title)
GUIDs: 20
Filler GUID seed: new Random(352).Next(9) ✓ verified
Run: Run 52 (seed 1,430,705,843) (seed)
Draw: 59 · predicted N = 20 ✓
Machine boot: 2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

0501146101F15706 9ED55EE5CD8F9738 B6ED3CD9B6486C61 CDDD4E5C26F3E4AC F979EF09532CF59D 1B058C9B787704F2 5C8B05835C228450 C4FB1E35CABA3D84 F6B45B8C069925A6 AC6711EA1963E77B 12A7E38284A97441 EE8B70496CB42144 9188E948FAB0BE83 EB2F9D0F51DB7A37 E623E1654392BCBE F6EC64C6AD17CC6D DE71D1CF330BCAE1 2B47548342B1EDB6 F4ED00D552E78187 E2B1D9AB958A9760 A1B7B1A06FAA65B2 EB7B9E1CC367F33D FD1FB0EC5E96A2B1 F5E2AF52E7447418 1800C1E96181C2E0 7DB068DF4387D7AB 706D24ABD1963CCE 8B8F3E13CD2BAB8D 635A29E8C8F0B4CE BDC22A8BD8DC1B5B 4EB0B9CAB3087F53 B0B8D65C5DFF87F4 047D6F50A3E5DED5 E90ED09D5AF171E8 D8A211D2E02ACCBF 1C97512B424CF2A0 7E4AE0319A3690CF 541837512BC72C12 E58B25083E10A720 CD5BC778AEA4A4A3 FF5D23CBA9D2FAC0 FE41A0941F4D7D40 B95825001C33060D B57FB78F18AE2DC0 53324A5AC7411E81 77D2F31C5BB63055 AC030DBA6AE87AEB AE6108091DE9DD33 FDAE39F18271E84A 172D63C6E5B8F2E3 0DE2BAE49793B673 0A7CB56C23433A2B 8D1ABF3BAB6072C2 038949BA345DC96E 31CB6CF1437EC292 DFC34AF5E42AC816 D6AC2FD246403186 1126E6EF9ACB3D27 071338C4829CE4DD 2FABFFBD9F8BE53E 25CD952932CFD64D 81E97475428AC198 0E397D5FFD885864 893FA46B31083D4B 42FE2722C5520586 2005667E2D89D58F 0485B46DD8BC37AE DAC42E618DA35453 8192B9D9968D0DE5 F7A5EAC2E260D6D4 4D4BAF1F7B0DF758 DC6D2DC9750A93A6 B15B536D7908FDAA E4CD77D8FAEABBE3 6640BEC856E194F5 B6E250B403B0C355 CD2FF0485F6A2A7C 3F6009E6446DD129 4EE6671B1054A3CA 3B0FEE390CB022D9 BF92CAC91D7556B5

Read the ciphertext. Strip whitespace: 1,296 hex characters = 648 bytes = 81 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201309070959 (name+title). Key = MD5(password) = 82556e08233a2f444a72d271d322bc73, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 20 GUIDs as hex (shown below).

Decrypted: GUID list

  1 82a3ac27-3dd2-5997-9e3d-6c6863b01870
  2 8efc4e3c-5c6d-0120-b1e9-41e16b9208f8
  3 b29700de-c0af-7feb-9b0e-0ee1faae3839
  4 13291583-262c-6bfc-9848-1026a755c4ac
  5 274578cd-fb6a-18eb-9073-a793bbc2fa16
  6 785c622d-5187-1afb-bba2-b2144d033cb8
  7 125f41c0-393a-55ca-87bd-dc1e3594cddb
  8 a6b71df3-3302-06b2-9f0b-c6d3e551506c
  9 5e5be57e-b155-41e3-8ba0-22bb9f36da20
 10 7bd14c9b-3ad6-0551-ab29-9be903bc5583
 11 aa042b7b-a1f6-5112-b563-75b91dcaa8c9
 12 aa5c30d4-97c7-2ec6-aa41-0574bd8a846d
 13 5809fd61-abfd-5376-94f5-444a156fe693
 14 53688d9c-36ee-5696-8980-ca8ac8e252fb
 15 aec2612b-8390-3c33-89e7-af6d6f0bab65
 16 2a6109ad-782f-7dbd-9f25-f4ff6f32a9fe
 17 48b6ec96-f12c-780c-beab-64483de8b0a0
 18 d86756eb-e358-2fd9-8835-e876a8126c75
 19 c96a6660-19a9-1424-9247-076887073f88
 20 f71d5320-3ad5-5e20-88f1-0b6b68be9f69

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 50761150405255377215. Exactly this sequence comes out of new Random(352).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 59 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 20; the post has N = 20 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related