201303271959 1b3pbb

explained decrypted filler

seed 847

Metadata

Post ID: 1b3pbb
Title: 201303271959 → 2013-03-27 19:59 on A858's clock
Posted (UTC): 2013-03-27 09:59:55
Timezone: UTC+10 · title 19:59 against posted 09:59 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201303271959) = 4eb1ccb3f8bf98f0b2ab26a5a0989b4b (name+title)
GUIDs: 44
Filler GUID seed: new Random(847).Next(9) ✓ verified
Run: Run 43 (seed 120,022,078) (seed)
Draw: 23 · predicted N = 44 ✓
Machine boot: 2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

197EAB917E1719CD C1341586D9E07972 6B4627E441EE08BE E3057EB3B4C28CF2 1DBBCCF80109F814 BB57D4D940002D72 4785A557762E5CDE 629CE4D5DC651099 03092D3EC38B26A0 6311EB1FF82721FB 463EBD0A9787568E DE62636D6F1B7ECA 6338BDE67C01D840 06B9717AE265933C E366D7B7DC326D5E A1BDAB15E68AD969 9079801249D1D10B A244077787D5E62A BE7E6C2F7A4EB336 1E950E42A79916E8 4FC8D92C245E1A59 73C1CE382DE232AB 6F7D81458CDF5E2B 917C8C750213B568 BAF6292A827E71A8 7B4AA0054AE9FC3E 9B8A38B382AEC019 4176CEBD25CCE3E3 532023B19BC59A4F C0E935569888AFFD D2DCF808284E2176 1F2DCFABED23F112 F01A0FE2AF24165E 73A14CF23ED76756 57E5557F764735F1 CF8111DE5721628F A598060777B71BEF F2FEF7FDE9944233 DCA724019738DEDC 49D89621415F49D7 6F7F294059342BFD 63336A1E74B8A076 5FEE5A1D6E69248B C7EDF69E68B9FFFC F6D23E2489C0C27B E9484CB27C29E84F C93211B359D8EAAB A178350386437EA5 9CD9D4ED24496026 C545F62F1E96417C 4BDCCD18BDAB7A9C 4164B062710A3CEE A36075A35D929F36 D32181BC5F7ED79A 2CABF9B60C62CE9A FC6728DA8D3CCDEE C0D53630FDD7A75A E20063B9B67E6D8A FA69605D728E2069 BCF5DD58EDC633F9 ABAE70A7A5E6959A D8A6830788637D39 6A05AADDDA039F42 C015AFDBBEF11770 E198E15D906140F4 6DF1949C5FC32775 C3CD96ECD69DEC62 B3CBB4185997035C AE4EE73582013256 1FF813ACE735620E 028727E4E082D6D5 130CB655B54E975D 9F0F8633F6E10ABE 34322E93ADCF21A1 CF0C691C9643308C 84FBF5E425E01E8C D240F93A67EC0E39 118385429ECB68EC 2B79D5BC9DA85A43 35F49FC7EAFC25CB 7DB0E8FB90882ED9 4052557C6C5C43A8 3A810E9DD9B6FCE8 FF89AFAE99D4E763 2E69BC78007A8433 2CB1DF770129278E 756B27BEA1A3243C 48A4BCF8EEAE4ACE D514914373A19006 90DD7D9841B1CA41 AD0C86307B3D721F F5742298C52FF249 CF4A978BD42ABC11 D872B1F5FAB9C162 8C7096A1B9BA6B10 60C6B7CD2139E260 5F2CD2B127946B54 FCC679C1E06A5C16 585B6498FA125C91 CE504E5A62DF2767 E9127F63572D553C 5F13230BE8AACEFD 7E7AD01C057EBD22 D78895CA749F86ED F91B6D69F32138D4 18FA03F7A3AF5134 74B95764F66A9E9C EA035516A96B57AA 62253089AD3DFDCB 8F5B18F6CD14C782 A80E8ECE2B8CB89B AE88190A0AA78957 AF0A52D2CDBE2C3A 363D70A44B175560 485C2141D2784C00 7BBE7DFD3DE775FF 25444F81086B333D 031962B1408D5CBF 56AC894E44DC9923 4B3C90238408D348 C5FF06CC794A14CF 93DED869D49D4741 4B821A78ACE65D2F 6676808B260B39E2 80055C1EE4AF1C92 4FAF3720D3A9B210 69390026F33D4AC8 26C5938533A6F94D ADD655456E0F7B56 CDB07AA76231A262 D8A8EC643B89D64D 8DF01A1E1D8266AE CEB621819B3E7EBC A52F1778CF167F97 D921BCF6BF852101 F1EED46A60A75A8D C5986914A8F04069 BB6DD17A48DECCBF 0663776479E2CDAD 2B5BC0CDBFBE9DE6 25A811087F612EA6 0BE32D3E8E915A56 4B84106068E1710C 01494E579A8B838B E8BA718808FD9007 DBD2B6EA1A22E70F 532F43BAA434982D 5481DE42A6876C06 49F82B6101DE1FB6 C31B1827F85A78E5 1827FF591DA15AF3 16B8DBD940DC0ECF 0BB5F31AD2BC81A1 82F60A8CD0D6330B 67966D740388ADAE 35BC5B30595B9FD6 53F7254E8B557C59 0890C2E350EEBFDD B279D1BD17819848 11228A197CB397CF 7AE909D4E592DF91 148C405C062B58BB 2FC870CFEA3D9CD6 10BDC4417DF181D2 616A5C31132B8E88 8DB9993DFB51C420 9A8ABFB00F8D0546 245946735CD69954 937FC70ADA7B90F3 4990204C5EB4C512 61C9565587F37C09 CD2C754B4D62FEF5 4B68F43F26CE67E7 AC30EFC858508A54 200128093D39FA7E 89F5206387D0FF06 65B0CFE0BBB3870A

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201303271959 (name+title). Key = MD5(password) = 4eb1ccb3f8bf98f0b2ab26a5a0989b4b, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d79d0c73-e877-1eaf-a51f-d9580970527b
  2 5c1853e8-b7c2-35b5-8079-7c4c98e46985
  3 3d14933b-9242-764c-acfd-5a9b735c4d57
  4 a1143e7f-b038-3521-b73e-5e21795b2597
  5 d811c875-ea22-5ffd-9292-e7f4056cce90
  6 3be322df-d4d6-6c40-86fd-bf3844a277c0
  7 34668f08-3fb2-3c84-8420-7bd710d3283d
  8 f022f2b0-e7c1-3c1e-8e51-6fdbb401b229
  9 64a55404-304a-67b9-bf5c-8ece92daaed1
 10 4923e724-dab2-575f-8e2f-bbc8a709bff1
 11 4dba4c2d-8b2c-2355-b047-380f15ac503f
 12 c482c095-c4fb-6af3-aa53-3e4bc44a3aa7
 13 90d31810-2bc2-8ead-970a-98d4a5d6616a
 14 21a890fa-8fe5-16af-a489-79d0bd9e0c4a
 15 d26cc276-1327-78e1-b0fb-a1efff8f816e
 16 f926fd5a-d7b8-8a28-9f5c-7a4fb33191df
 17 0dc68633-8dbc-88fd-aec5-44e78cee305c
 18 0c6b1fa6-efcd-1b04-860c-f8e318aa66f3
 19 661ee901-dc50-5a58-a221-691c31e13580
 20 c4d418f4-cc47-2e93-a0c8-16573e0d9a64
 21 4b844fdb-ef43-3b61-8b96-f7ea2c8b65dd
 22 37c005a2-6ab0-515c-9791-59e3a596dc45
 23 98c5e14b-4262-1f37-a14e-1047f3b20fd6
 24 b7e2e5e2-ed62-8591-bd0a-1e0366d4331c
 25 4d3891c6-7b51-61e0-a075-256f9d3c991c
 26 3800b083-1b44-2306-96e1-8ac21ac1b81d
 27 a22f3e6d-2a39-165d-b54c-be2e006d2e67
 28 775fe8f6-ea67-462d-910d-b947c8a72576
 29 dbc8f1cc-6eb0-4541-9ba2-3dd43520f48d
 30 aa128526-b78a-16b4-a52f-e3bb3d588dce
 31 2b3b23d7-41df-7d82-a4d7-6450dfcd8586
 32 673e525d-100b-5da9-9c7e-1c54faea69fb
 33 6ed0427f-a147-8bf5-9005-d304ebd579f6
 34 5d8b4c7a-48fc-24a4-b928-90ab5af9538d
 35 11d1e7f5-fff3-302c-bc23-2dd55ee6b978
 36 2587c31e-ab5a-4298-bad6-70caaf96f3f6
 37 d0571ba1-cf71-54af-a66f-9ad93307b9a1
 38 ae71ea62-d8e3-5453-afe1-b89502c24cd9
 39 cf59dca8-f74c-3996-8cdd-592dcbd8232c
 40 03ad8074-96d7-7132-b3e4-7debce5c803a
 41 9fa64187-86de-6734-88d8-8bda3d6e98a5
 42 5cac7aa9-4814-0d01-abe0-28a20e47e209
 43 288633dd-ac91-6109-bcf3-5040a6acc398
 44 2f4947c6-7893-129e-8725-af22d250d66c

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 13735633652681788152351862144175823455376061. Exactly this sequence comes out of new Random(847).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 23 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related