201302260408 1991tg

explained decrypted filler

seed 360

Metadata

Post ID: 1991tg
Title: 201302260408 → 2013-02-26 04:08 on A858's clock
Posted (UTC): 2013-02-26 09:08:58
Timezone: UTC−5 · title 04:08 against posted 09:08 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201302260408) = 3617ffb2eb883319857a6fa5fe945413 (name+title)
GUIDs: 44
Filler GUID seed: new Random(360).Next(9) ✓ verified
Run: Run 42 (seed 983,934,859) (seed)
Draw: 34 · predicted N = 44 ✓
Machine boot: 2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

C62AAE18DCB6CFC6 7FEFF76F78AE47CA 326F79FE21724BA1 D0C9051D2992F333 39710BEB3786E037 E90E5D80E291D28B 2F121802258D124C 4183419E4CA7498C 08DBF198FE80C7DC F65E9E81E3AE008F 2617028894E3B34E D020D4D74204EC34 3436B189277BA5E5 6F7268458DF395F2 54975CEDCA531351 726AD6094A2B2DF3 AED77F9150B6A3E7 017992DF60F91EC1 D96B5766BAE81F95 E0CB3B07E8485908 D37200E92B4CC7A7 25F1735D0F4950C1 E30E6594FFCA15AD D3103FB174DF4A74 90E78E8390F7C6A0 C6DBD9A8227ED092 3337E0228C2307F3 4B46AE87982AF416 4EF8CB0DB6F0899E 90B113013601FAF3 BC89739DAEA96B5E 1B40889395E4840A 88A8D4EA4DB97B51 0CE128ED9B28AC0E 9936EFA215F1E373 A75AFA70C3946909 97921F0B08EA20C8 50F8244BF9621FFE 79E5AC19F35CB626 7212DDC64EDB8627 5474D7C0C2EC544F DE6934CE9E2CA3F8 7D438D8D0DC011CB FCFAB5952951A3B0 430861EC5EA04B66 F0B332E25663C7DE D8185BDEF9BE69D8 AED69457E1FE2858 F6723B935F3CA4CB 9C493834729F5B31 CD65CDF76C5B4205 529F9A81501F6AD8 D1A8BD2D80A4BF24 343BAB56368CBD0D EFB79890EC8C7E50 57AD22FA62FF417F F56740458035E274 E626B597E8C25710 32E13A5046A7810C F184AF30A6936430 11524E49000C0FF7 7A8B34A2D1516FEB FA51800E9B226469 7B568480CC9DB8FE 8CC0D8407BAFF989 B72300DF64E82301 8D1FB527619CDB9F 3DED0F1B3925C883 DACC4A7F1D610E31 172F8A9519F41DA8 D0EE9E43F602B46B FDEDF8241B26B490 27D970E3C2C97F6D 5179DC3014E0841A 182B544247276BF8 B6ED94ECCB052D9F 4023BC4E9ADEEE20 23BBC71DD0A38CAC 9C3A8A0EF8998DFB 918F6CFD33E683E9 836ECB46583BF3EE 47296543E657F573 AF01AF54F47DE5F9 B764ACE6FB4B94BE 5A4E0B69ABA2C8E3 1AC883F92C2B8473 BE6D8D5CD780DAE6 EDC06F05111A68AA B3C04D671269B49C B8087546A27BB38E 58BF6AEB7316CFDC 961DCA7CE97A9C63 6A021B5AFBADC3F8 764CC763100E6645 1D0097B865B39D84 2831468A7268D67B BF838AA4794F9612 40C60AA8DF970171 2069DA29EA5A662F 73AB697D0090C692 44CBEB27217DD887 318974400B6711AB 5AF80D61C0160FC9 F740B8488EB40EBE 1540A6C977062DFF E8CD59B385BFA914 E1FD31F6E3A8CC2A BF4A6643ACBF1AE5 7A00A07F5C583463 80126C0D66EE9F3F 634A6DD984AC4DD8 D68073D5A59831D0 806890AF2E149DAE 21C95D8EB550809D 8A2890F2B52015AE 9FADC64C56EFDF68 6B0B1F4F08BE7F7F FDE24F33E4005D34 3DF61F74A59551E9 E179B6EC52EEABB0 681933AC91FDBC2B 4CA64AA3B8C1B0C5 FFCFCFA14BBDE89C 8566C9AC87F6E14A 425F8DEF82A529E3 1671D2729F9E1BD8 31AD3E57E159A3A2 B951861BB2C192C3 EEF1ECDB2D05643E DB61135D0B7169D6 97B06D4AB6FA6785 E22D947A044B0575 B0FB3892C4945543 0EF061915ECD7C16 6C441D729F39AB49 88F236AAAD81D0E3 A92F54BD7619D8E0 3A3986AE454488F4 B2D0D19C423DAC97 CF65C4C1D74EE615 EE9117441F8A70A8 6825625DA13CF802 170BDF08E0E808B5 8DABD6E84A04185A D97F41950D743462 AB715A85CFF96BD3 85B31DC017833394 E47C50C2E1D581D5 49A743B083CF4AF4 E4C112E7A371BAF8 6EF304AA255D60E5 3963FB3B3BB8AF01 47997D7346CC85F9 F4B3E1BE2943738E 03EF5047231CDB5B C8BE2557D536638F FB941050041981C9 7E2FEDD24D70137C 80E091FD8FB5153A 3C379523DA8BEA35 E816EE10205CD2CC D8708958164F9D20 470D49BEAE9FD74D B8E94407B7FE1C08 1F9FCF763F8D2379 17DD79B76EF306F9 13E5CEFDBDAB03DA CEF9804637C01900 DE7DBB67CDEE6B30 A22433FAC2402F5E 22EE3D73BB5F2FD6 A96939D6398D7543 9663B2E1A402A715 FD406F5AE6D09AF6 0C8818E41F229090 08F010E030766DD9 81B854C1396270EE

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201302260408 (name+title). Key = MD5(password) = 3617ffb2eb883319857a6fa5fe945413, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 dbbf8d16-13c5-7b5f-868b-bde2e453433e
  2 fc34890d-b4f5-40b3-8d66-71dbc79e5226
  3 4ea602b0-67bc-3c35-98aa-de0fcaa2be01
  4 1bd120b0-0a94-34a2-b375-4e8057ae49d8
  5 7d03f7ae-5499-6fef-880a-7f51c071ae7f
  6 d05247b2-7fdb-1016-84b8-b8291ca2aa79
  7 59c1b317-8142-1720-be80-eeaff78efe16
  8 b302ba3e-806a-0d01-9d96-3c0c6d2b4011
  9 5413ba25-55ea-4898-9b6a-c2421731cfe8
 10 a55a8fca-8dd4-0638-b083-5c62a3f23178
 11 cdd1f836-8315-4a0c-a009-6542544e7c58
 12 ad9f9979-854d-4158-8e2a-f4b93ffae6c7
 13 11bf9018-9da8-13a8-8610-d3e7e6390334
 14 ebd43494-82c9-6c15-94b0-e808071e50f3
 15 41cffa9f-d43f-83d3-a426-ba12ac006822
 16 1c93feac-dca6-7454-9900-6c1f0d1b4c18
 17 0bcf91e3-dca7-1dc3-9045-00820aefcb9f
 18 c8aed872-4cda-1fb9-9ec0-1d4ca883e50e
 19 24bfcae2-7313-3194-8312-2324302c0b51
 20 5e5208d4-19b4-65c2-88a4-a5e3927593ef
 21 b246dca5-4a3e-5b8f-9cdf-e2486062aa26
 22 2288b5d1-5219-1f05-a365-683aec079399
 23 e3d0ccf3-bd78-7b29-baa1-add8561b0637
 24 d6ef2401-71c3-744c-bd83-48a8c9a2f8bb
 25 23133f0b-1da9-89de-b836-1c0fdb70cb52
 26 66c63cb3-f2d8-08e7-99b6-0526a9dab571
 27 39f15ee3-c875-462a-9d29-c58815913338
 28 13ffb64e-f096-656a-ba33-b80eca790dc0
 29 af970cd3-c1f0-84c4-a60f-3dda11478008
 30 45b47aea-8c38-032f-8850-3112d4f8fb1b
 31 186d9ead-9288-0918-ab24-7c16836e2aab
 32 27730548-9f5d-2342-9a17-ae40e5287f42
 33 7b66cfba-2b0c-031c-b365-e27b6c4fcf73
 34 93fa32fd-8de9-0852-a279-5d9670cab29c
 35 3117ef84-b621-30f1-a6f9-7ff467a4a874
 36 ac1012f6-dfec-3bce-8195-06ed6aed81d7
 37 9657dc0b-8f64-2e07-9a55-c59b50494976
 38 54e7d304-2cb7-6a5d-b68d-5dc5db52e735
 39 ffcbba28-df79-8b36-a575-d0a02f6fe0b2
 40 6214800f-3100-3fef-b741-5e252037a93c
 41 e8e862ad-f51b-7e6e-baf6-bdc796f78291
 42 802b9e81-33d3-613b-bf87-917e43e8e0a2
 43 25975952-2a16-0d6f-904f-8d248f369eca
 44 29f006e8-f849-0bec-9f96-b6591f57a5cd

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 74336110404416871136517780468002003326837600. Exactly this sequence comes out of new Random(360).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 34 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related