201309072159 1lxaw2

explained decrypted filler

seed 804

Metadata

Post ID: 1lxaw2
Title: 201309072159 → 2013-09-07 21:59 on A858's clock
Posted (UTC): 2013-09-07 17:59:51
Timezone: UTC+4 · title 21:59 against posted 17:59 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201309072159) = f9371043d46f92e5c6416cc76cd4194a (name+title)
GUIDs: 44
Filler GUID seed: new Random(804).Next(9) ✓ verified
Run: Run 52 (seed 1,430,705,843) (seed)
Draw: 63 · predicted N = 44 ✓
Machine boot: 2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

0FCDD2749D35DF50 2296E51863E0D24E 877AFA21C594F860 F460CF4265E13E16 6D3112A283089118 4204FA6859C2025E E93846140CDBB1CA 73F4B423D1315556 8F27EF9D077F03CA A70ABF65D3E7742E 22A4941CAB383380 AEFB81358A51F66C 55A0ABBEB3D5186A 4146B062B0D0DEC7 3F028056CD46F25C 059017E761E3BFC1 56F861431E831DE1 12ED74AF1297AD3D ED030FB7981157D1 A325AE2CB57EC785 EBE530F3F5EB5D54 50E395893D8E0B2E 854F4F50276E4ECC 858907769EBD65AD 1B1E49BF7A17C61C C31E18A38105C91D 939DFB440DB6A989 332E392DA731A46A 7DFF9FE4FBDE2990 2D00519B66080FB5 5223CD65BC6C6C27 20CFBC029F6A8F3C FF3D6AFE08542E59 397806FE5DC4F03E 869A30374F0472EC 54FA7D98B933637D 773CB7506EDAD424 48890317F2A05C90 731FF7D891ED68EF DAC50949B69FB046 2736A274147FD340 E57617D76E91A88D CF1487F3F8B77883 02D7866CB72E753D 5C66D52120617568 CFC099113CB8A744 821852901E4C676C 23C05DC6F268D0B4 F2DE47124250865D BE61E3086432FD5B 3850C8AFD39A6017 D7D06D707912BFEA BF2584C10D48F34B 787D3176420007D7 E8ABE9CC7B74D930 22F5F8D50CEEF540 5D6D1C663D95B0E4 F6030E2E548A020D 0B732396AC82FC9F 7220D426268DADEF 0F036772C7D356FF 1B5065F2EA603320 A5EC6DE13099138F FBCDDB1D966D7F1B 42C2A968EA464DA1 702C7C3A081C0E1D 99F9F1FC8A4A1C06 3732880BEA5C4E32 1F8C6311BD7B96FD 6CB905EAC4AFCC02 037F863A9EB7D8D1 6C2549F3AA335231 6A922B3AF610BEA7 3B82AD9E23F69598 C7E1C503B1BBA35B 6B7A2AF576DF82B4 15BB182C5B51CBF1 D76A4AB1D8E2917C F6ABCA9B50D0FAA1 5EBF0ABE7A9D1B0A 7C6E73405E6B42AE E7531D5CAA095A36 5C94987D915E20FC 599C5DAEA00F45B5 53C8D3EA55487994 731CADC8B5FAF842 29799F86779FCEBC B9A3A8B79C77B864 C2697B9F9F423360 6687C756DEDBAC91 21DC0F6B694E5565 E5DA1EE460F99B76 9536BBA66ED06DF6 01701A7E3A54BF34 D55AABF3C841FD85 37A94867B15C8989 DF879D635B569B2C A7CA66BFC08139BA D9204FFA6C5E9CD1 3D798FA6ACD976F6 A3B358BC25E6BC9D 2E26454E5E8E065C 841952E73F8DAB5A 29DE5423965A1369 9C77CDE6EAC66A0E 8B760C3076595FD1 EC7719E274016AF7 29903893D5B2C240 8430C0C154B8D942 964BEE798B7E73EB FF5D3504B8C1F277 9B7F90152518FE35 C7D3B1D8E1A51282 CAA36B87B08C2A72 6633A233991B6719 4EDDBDF898431C3F DC38831AE36E5617 5C49FAD8EB886B1E 6BA35D09CA080155 04D0F7256F3A3B78 C300B8138911DCD0 D8287C64AE5F11C4 57ECFD221F823038 C904CBBDB1388A03 CE4DC1CB87ACAA48 4FCB10DC86145516 6FF393B7053B2DD7 128DA05F512ADAFF 6234BA1806C56EB4 A7EDEEF651713AEB 5BA9F373113C9102 49F32FF2EF6D5822 A39F71EC0AC7687D A497BD81B258D52B 10D8704D98EFE914 4B4C87637A936FF9 A490AAE3FF483DF0 7083760190F2E0BC CAB361753D3C1A64 57FC7598B44B0896 1DD7C852918195AA A63695AC914D2A5E FEB9748C438B5E96 C28CD5E7E0C2DD10 91B1EF48E39A3966 46B696E7001C4477 376C65386F7F24AC 72B55313E8CAD650 62C28B7328F23A85 2FF697A4CA07ADFD DA4C76A4DF033BAE 582715B293B6541D 5CDC3F157B5F0234 628C59469D5BEC93 97BDB102DA65211F 09EE4DC53D04E630 B8464A0CAA19AB96 A2371DE97DAC2868 0E4B60CFB49A66B9 99372EB2CAFFB1C6 C6157EC9277C2366 38BC1AE8DB5A33A1 DCC787231C3C019E 599E33C7D9EAE575 CB47E4400EFD5097 1531DDABEA82B771 188A331F6D834E17 836A0E5FC9243175 B33CF4F565F1DF09 1B6354DCA2CD93FA 36E69BD666E9198B 9110E09A453B5E16 5A7DFB7A4E700199 4DEED835C0D8CA87 19783B68FF5DEC59 93F32CBB8C0E1329 F70A9D3E005017F1

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201309072159 (name+title). Key = MD5(password) = f9371043d46f92e5c6416cc76cd4194a, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 187b6e83-4152-6e5e-b1d3-f8233c450362
  2 e677b8d1-b94a-69a6-9660-9d3a2f9f38f9
  3 01e1b9a6-648d-6a10-a428-c99071544799
  4 9ccc297d-bf0f-1bcb-8382-f4c0447acd50
  5 fc500bb3-ead1-15fe-8b6c-07d436770323
  6 18340370-fba0-1baf-906b-9a54c4e9ddd9
  7 5e0a837f-7be3-1fcd-a788-5fa5e8d911de
  8 79394b5f-45bb-7664-9359-ca96513ed41f
  9 e66073e5-1285-4e0d-a436-ab55d0336843
 10 93f460b8-36b2-6e43-a192-08a58c34d942
 11 68d5fff6-e546-5912-8f7d-eab61953af91
 12 53e2ab56-e395-19b0-bf89-a86bf5d1eb3f
 13 c5cc6cd3-3822-36f1-80c8-7fd8cb4de319
 14 b1d9fb2b-5b71-6153-baae-8c25e64c48cb
 15 03a37b28-b434-6ddb-a0a6-58bdb6313ef4
 16 bac9943b-6518-1f3a-80a8-c90cf5026fb2
 17 f50712fe-27cf-720d-9fe2-f90ade2f7933
 18 ee8ca48f-a34b-4f8e-aeb6-d9ded5a2b5e8
 19 59069ceb-1821-3d3d-9cbc-7f58ac11ebda
 20 733d9acf-251e-5f5d-a4a3-77422d324e38
 21 dab5d684-ffba-5ec0-89ae-ecdff182f8b1
 22 ff7de168-5145-041c-b2c6-e6df9a3b6dad
 23 b9a11858-9d84-7f42-b115-54f7a578b377
 24 45a1de44-bd32-85fa-8f30-55856fe336b7
 25 095fd970-1395-4492-861a-7a67ffc17332
 26 a3feb152-2054-573b-bfcf-0c68bfb42c84
 27 b2400e07-362b-1448-b003-00f43ff3d0c7
 28 e0df4f14-e094-7159-8374-96388c6dae09
 29 18d4852e-d7d8-546c-b5d5-3970bbe8cd3f
 30 c775f6a3-2b37-542b-9735-982141a4bae1
 31 d9d179e2-876c-07fa-9b53-abe87589b838
 32 8589140e-8c82-2c50-a70a-f78ade72916e
 33 dbb7a63f-2c47-5f17-bbd2-733687bd10fc
 34 603df8dd-ec75-1ce5-bd5f-f4920ec13aef
 35 f8fbee4d-5ce3-302c-a4a5-c8d9e24fe395
 36 73691af8-f730-5aca-80e2-c71dff08df7d
 37 ba5dbc91-eb9e-00f8-b92e-124eb19ace7a
 38 2094b36a-7cea-2371-b2eb-b0ccab29382a
 39 efa8f081-1afb-03a5-beab-9ac6626d60d2
 40 42118eb9-af97-4502-8534-e7e800da4533
 41 b371f013-1fb6-6267-abf5-42452deda1c5
 42 3bb36b83-318c-0306-976e-66a4d7781819
 43 4b3ef46f-e36a-1610-9cf4-06107b742632
 44 0012adf3-a37e-2ffa-9b31-14429c6292cd

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 66611117465136617435507845175502513502046012. Exactly this sequence comes out of new Random(804).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 63 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related