201309090359 1m01nw

explained decrypted filler

seed 427

Metadata

Post ID: 1m01nw
Title: 201309090359 → 2013-09-09 03:59 on A858's clock
Posted (UTC): 2013-09-08 23:59:49
Timezone: UTC+4 · title 03:59 against posted 23:59 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,296 hex characters · 648 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201309090359) = 55b8ad66086fc892e5e9bada91b7c55f (name+title)
GUIDs: 20
Filler GUID seed: new Random(427).Next(9) ✓ verified
Run: Run 52 (seed 1,430,705,843) (seed)
Draw: 73 · predicted N = 20 ✓
Machine boot: 2013-08-14 07:34–10:34 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,296 hex characters = 648 bytes = 81 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201309090359 (name+title). Key = MD5(password) = 55b8ad66086fc892e5e9bada91b7c55f, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 20 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0d414877-5e1f-7793-87cb-cde1072a6966
  2 86f1a30c-5642-0338-95a5-cd8398b39132
  3 1c603d57-0190-2a69-950f-ee230017778d
  4 32548e4f-b42a-6b3f-a38d-77b0c6d31f3e
  5 bb0a4d93-5558-82be-99c1-3c213989f069
  6 33656751-1080-6b26-8107-d8fc23aa6ece
  7 a36905af-db78-22bb-b87e-71e2f6de5b30
  8 7c352d25-55c2-5f84-9e38-3c0fde2253ab
  9 9aabc2a2-fd3d-7a38-ae91-ab3a73ec0eff
 10 87a9b914-721e-6475-9602-89f8feec7abf
 11 bc5768d4-a1ed-7da0-b3c0-cfda56228356
 12 7e32113d-c7e2-7e82-a27d-50b8f8004534
 13 f2bdedf9-df92-1cca-a1a8-6e53da7567a1
 14 397c9487-f2a2-5767-85c6-96d4c4ee2324
 15 bc47921a-2de7-7e93-93ba-ad264956ddb7
 16 d66f82ff-b6ac-6e2b-80a3-1d3d97afe724
 17 5c93cf95-330b-33a8-89e2-57229e108140
 18 9b5a82f6-7adb-68bf-a725-d10e41d7adce
 19 2dae6e74-47f3-21f3-a55a-72fb2d269a46
 20 f4d412be-a296-584b-9728-8b6d91bae6f2

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 70268625767715763625. Exactly this sequence comes out of new Random(427).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 73 of Run 52 (seed 1,430,705,843): new Random(1430705843), 4·Next(1,12) per post. The RNG predicts N = 20; the post has N = 20 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-14 07:34–10:34).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related