201302082159 1868bg

explained decrypted filler

seed 533

Metadata

Post ID: 1868bg
Title: 201302082159 → 2013-02-08 21:59 on A858's clock
Posted (UTC): 2013-02-09 02:59:59
Timezone: UTC−5 · title 21:59 against posted 02:59 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201302082159) = a6a7ea34c5b9d4f9a48221b6b2f3cec3 (name+title)
GUIDs: 48
Filler GUID seed: new Random(533).Next(9) ✓ verified
Run: Run 41 (seed 1,681,282,046) (seed)
Draw: 2 · predicted N = 48 ✓
Machine boot: 2013-01-19 21:58–06:58 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

4F5ACEB4C4EEC3A3 DFE1E7C61EAD163B FB9B037C30E258F3 F47B90EF11AC31DB 4499D8D4888E2D88 8C5230F65470D985 7116278FF2E74EB3 03D1BB3910691A32 54B6116AF4E11A22 1AB7B14E6A55381C BAB78740B8F37307 B2FEE2A419E90D52 E44E0103E52F28E9 1A41B58EFC5198FE AD9608218BAF8A6D DE788BBE12ECF569 75B4A2A175D9C3DB C090E27B80DE5996 429226575EDA3243 92F914195EDBA6E7 B177D3C829C16799 D1B95C1E7B95E33A 11ECAB9D7C4BC58A 605A8846331FC591 184443E5C97A68E8 184DB50B0EB03EA1 49623558E775D686 A618DEE234C2F1BE 438DAB3BCE86BCE8 62CCA18C42202AA9 06AA988573627AEB 01784FB2C4DFE028 552C1FF6033CA581 36EE26D70BB21EEC A011DEB7B01CC8AA F92B51FF92CA3B46 3E3C1677D4D00671 0A1B1B6707911E21 6F2F8088FAE00822 D344A1B028AF7ADE 18B5BD521F62B28C 0FD050CDF047A2CB 87279359003C088B 67F6CC50EC3175FF 9469AD1A3E3BC450 DD30DC6CC13FF52E 0F2DDB9688FB4F4E FE7C6B5B28DCAFF4 EC035B0DBF26B9CE 804879F01ED8FD46 E14781A9174CD915 79B20659ED929340 436DCF8804E8D436 5A93E07343E8FF7E 32BAE67CC553A972 CEF73BBCCD0F4335 7C674F9DFC70A5F9 659DF74DF637FB38 EA420B8C5DFBC1D1 FA4AEB1154A3F1A1 1C7E4470638148D9 B2CDB65CB774B33E 28F54D8885B75CF5 472C0242339EAD99 706228CD4E8F2889 326B5AC8BCFA1329 186C1A88ED70D452 DF2F7448700E81F6 84372E958F12E8C5 580F1753E2FBA7A4 8C6B6D890C2934E2 74AA272138BBE9F0 801B1BE4C6CB44FD 7552F601E32725DF 31F6D549A32D0C2B B057C438C63264C1 976190A071A2C5C9 3F9E523F65CAC5D3 DD4DE7D0CBAE14B2 0F14865EDC5BF2E7 9C12B0AEECDBB0C7 4634F440127CB9E1 D6F85195A43AB42A 50D0B83F03C4F177 795CB54D674E52FC 7B1B7721842B3ACF 7633E35F42F2A67F FBDB6346B934E7D6 647273A79C898326 AB3AA048A351FBD6 7D0D7916789885B1 0D6B39752583E4F1 2D4B43860662FE52 59BD8878D307ED91 0A4BA4ABAB4C17DA 7C4CD64D2D945364 9F9FB864A92CC867 C1B3BD89B6BC0491 D8E9D74A0FA9EEA6 64722C07412DC43B E309D537677EC350 9A4A9DC5E170BB3E 538844EF741336EF 09A462A73D1C7E4D 9709365CB711922F 554F39654E8A9342 BAC20B98C45C5D02 E0155B15CDE763EE D4FAE4A88FECD517 0EFB8DC845054EA0 076276D4F5E59EBF 01D7049501D66105 FAB4CE7128EEB7B4 E0CC5A7D5705693F 4ECAB14BD5031714 53908671AD7202CC 64BE9609A52D9FFA 6BFE32A752F7B8F4 5DAAAB5ED143566B 7BB3A59E0B892546 CA4C14E930158CD7 0F78A285F62CDD0D 405829AB0408658C AD649457FF9FA09F 7E4DF9F079E861CC DEA46DF10015261D A19029F4779AB15F 6D79C20AB1CA0B75 DCBC6128B48CADC6 7988DE4C3FB7770F D474806FB5D691F8 8879450B5D1FAA9A 569613F4D981F115 4C42FC55B46B60AA 8A0D2584295A6853 E3119ED286E549AD 53240F14BB80362B 6792928B76D6B6CF 83C79D5522B68D47 0551B919FD8A16EA CEE030DB1AE7A028 6EE4660E3366C428 7360EF68071DAC86 FEFFEC21F7C67D72 D98A0B8FD598ABFF 9B693DBE82C56296 33B9C33F35D8E498 756CC8A46E2BC272 220FC8A4297F9C76 F407B930A65637E7 3D14DA5C95CB8C21 AF7C4A3D40BD8F36 2FEF8956BE42C667 3919EAA5B69D7A1F FA7B57AF7ED849A7 ACA79556308F5C99 FE4D10C2607F5FE9 3DC23607E22EACC6 74BCA8A74A9AD960 75F79EB214E29381 19F21B671B9B94EC 2E5BFF0505DF3168 0AFDBFEB7A61306B F9811D8661DFFC39 C1B5B97B58729D50 81F3AF4DB51B543A 24A2E08C20E6AAED 0C2375CA71DED476 2E6A7CEE252A358D A4425E9EA9C45646 3EC3F6B4047BEF01 12FF0F95CBB9E7A1 55776A4FA1860EF2 2EF9CD7CD4A8C168 F714C897AC73EE85 40388C9774AE99CF AA9FD1CF5286DC6E 0FFBB3824C986997 8A5D8E5AFB1295AE F42E0D42EFF50F22 75C7DE345C65AD12 2FB4B3BA08BB8778 F206D69D678891DA 39A97C4C1E5C6F1A B491F4F68CA9FE2D 2821FC31596B7DDD 7FE64F9AA97D62B4 1A0EEE5D2A818185 A637EB6C30D65C82 D3CE3FE03449F5E9 779F46F3131F0CEB E8A6ABC17BEDA80C BC2D220B15E4B15F

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201302082159 (name+title). Key = MD5(password) = a6a7ea34c5b9d4f9a48221b6b2f3cec3, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 87be7be7-0549-1497-baef-74db60b0eba3
  2 9933202b-2882-1156-b21c-91d6a23aa070
  3 7557426d-157a-2e61-ba2d-7933c49d1ab0
  4 bc98db5d-c944-2c0f-ae56-a516ddcdc7ff
  5 7ffd63fa-fc64-7d6f-9516-1a5abdb2c56c
  6 e5e6cf8a-4b85-31d3-8a91-732cd7bfe330
  7 277eeaa4-f792-6a0b-b4a0-916e29d26af6
  8 c8dc26f6-7cd0-71a5-91d8-9c084c50d887
  9 ac534db8-b98d-8c48-95d1-706d7a126ff0
 10 fc0bbc93-f469-7f50-b8a1-3165428138ed
 11 d9164337-5d47-8aa8-aaef-3a8deabdf452
 12 b2df4cdd-ea2f-596a-baa0-ce8c92dc2f3f
 13 51ccd007-29b3-0246-88de-8e1a039d099a
 14 734dc5d2-84f0-6054-8a5e-fc2a6953912b
 15 53af8cd4-abe4-005a-b25c-d3952e9d9fb4
 16 ef4b59ad-a675-86c6-bfc6-54d3e0cf4eef
 17 8e94b41b-7d9c-8c84-b2fd-6e7d411531c3
 18 989488a9-8bbe-4f87-8930-0f34573718f1
 19 f0fb4a22-ad81-085f-8b2e-b6440fa862b9
 20 e9b16bc1-09a8-616a-9694-e7e1a3cd3cb7
 21 114136fd-ff31-5b74-bcc8-b156f1d77ea9
 22 3f9cc3fb-dd0e-52ae-84c5-84e038ffb840
 23 383aeba7-95aa-07d6-a8c0-1044c6cdb5da
 24 610ec302-187e-261b-8cb9-010d9f038853
 25 4868c376-425f-842d-a4c4-570abd78a759
 26 743632fa-4405-3e50-98e1-3c754c06b45e
 27 76caa46b-d46e-1880-8217-a35b3d805496
 28 440e95e9-80c1-8b26-89f9-34277b0678bd
 29 01ebf90b-ee2f-69f8-9798-c7aaac5fc2a1
 30 e51c3317-2fd0-32a9-b3b5-963a699a8ae7
 31 cf0f8ff5-e775-840a-b9ee-f32b0ff54c62
 32 1de8065f-5708-73f6-abe5-7a2314a8d978
 33 bfaf9646-2d69-52b5-acd5-388810c9cfc1
 34 01c12a3f-2557-30da-954a-10fd66b4cc82
 35 e94f4bc2-3f6f-6786-a446-a549755446e0
 36 68115161-e161-7072-bb03-0346e835fe0c
 37 254784df-599b-4936-8527-929defd00719
 38 fc6c6e6c-67ec-5408-a541-b72c58a14b2b
 39 7b093248-6321-5895-847b-dfed99eba867
 40 9fff136e-1e8f-5b81-8a73-1ab9291b4bcd
 41 6f8a1d41-c2d6-69df-b014-cb9da2a00800
 42 92eb0076-41f8-7d0a-aa51-bb9f684a3f9c
 43 6d3c4044-4782-007b-afa7-ce28af1a18ec
 44 e6d4f24e-6f8b-5357-9a82-f2d753e5d82d
 45 f3f131d4-2f51-80fa-8760-e3e67892d098
 46 122eb5b5-1a5c-1a10-ba52-17c7495e4a54
 47 be26ab4c-1965-6590-8bcf-50cbc97a412a
 48 86899e5b-6bd7-7a41-bf84-f868678e1894

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 112273678785060884065502831863875367455567058167. Exactly this sequence comes out of new Random(533).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 2 of Run 41 (seed 1,681,282,046): new Random(1681282046), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-01-19 21:58–06:58).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related