201309141659 1me9xx

explained decrypted filler

seed 322

Metadata

Post ID: 1me9xx
Title: 201309141659 → 2013-09-14 16:59 on A858's clock
Posted (UTC): 2013-09-14 20:59:57
Timezone: UTC−4 · title 16:59 against posted 20:59 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 1,296 hex characters · 648 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201309141659) = db53bd0e28e8a9cb0c95a71b8f1885fe (name+title)
GUIDs: 20
Filler GUID seed: new Random(322).Next(9) ✓ verified
Run: Run 53 (seed 26,950,390) (seed)
Draw: 52 · predicted N = 20 ✓
Machine boot: 2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 5 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 1,296 hex characters = 648 bytes = 81 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201309141659 (name+title). Key = MD5(password) = db53bd0e28e8a9cb0c95a71b8f1885fe, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 20 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f7c81d7c-037d-8336-8251-230ef88d3a91
  2 7f58aaf0-1878-2442-bec8-c2432bf3d275
  3 38bd1a5f-d356-7e07-9d95-3cb7fbec1f12
  4 4a47e341-bd70-2c3d-8832-64a0543626f8
  5 cbf47633-2a66-55c3-822d-2918a898cdd1
  6 9eb36d36-6395-8b85-9e23-beb11cdd6600
  7 ee39da9d-9659-16f4-bd8b-6f580ec69e7c
  8 a923b5d4-c720-8064-8665-99609e400a18
  9 78a94d6d-1cd6-7b95-8eb8-d71d0df515bf
 10 afcc2ca6-81b1-097a-bfad-aadea3d029d6
 11 141b1ff8-8cb7-4f07-8fd5-34676797dab9
 12 0ddff444-ba05-7605-bede-7655ba10b0b1
 13 db294c41-2cd1-8789-8126-f9c72e90776a
 14 84586c9d-fde7-87e8-9417-fb62aafd516e
 15 bc0015b2-8405-3647-b377-3dbfb46fb2d2
 16 cfff7d5b-fabd-181b-8617-269a15d763a6
 17 ab8608e3-fa34-1f10-8fc3-3f68bcc91acc
 18 17269333-e128-53a6-ac8e-1ff024b52456
 19 53cf5509-4286-3572-884e-02b42ed4ce53
 20 fda5fd90-3f83-8513-a736-ae85055b338e

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 82725818704788311538. Exactly this sequence comes out of new Random(322).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 52 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 20; the post has N = 20 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related