201303282014 1b64io

explained decrypted filler

seed 639

Metadata

Post ID: 1b64io
Title: 201303282014 → 2013-03-28 20:14 on A858's clock
Posted (UTC): 2013-03-28 10:14:59
Timezone: UTC+10 · title 20:14 against posted 10:14 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,344 hex characters · 1,672 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201303282014) = 1322e7d6f951f5737a81105ba54d67da (name+title)
GUIDs: 52
Filler GUID seed: new Random(639).Next(9) ✓ verified
Run: Run 43 (seed 120,022,078) (seed)
Draw: 37 · predicted N = 52 ✓
Machine boot: 2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

1026A25C0BC573D1 934D1A93394B81E9 8F4BC648AD3BE684 ED45F63103E615B0 A279AB49525C689B 35686FD8B976933B 88BAC3339FF44DDB FC28665718CCB0EC 6058818B3C675F85 1CCE54ECA58CA26A 0058273AC38DD7A9 A025218010FF1B0E CBC4B4B26147353A 9DD032BC4DC4819A 733506557002AE3F B8BD58E7EBB7034C 2AF7435B1211C3DF 8E9A4B3539219163 26CC2571B9A056E6 B162C1F0316B0758 5A5DE27EE97DF7B7 2A83926E0022C43E A9C8F9121D38A59E F5B3D9BA89970D7B 244830F7BA5011D7 476F02E9DAC728DF A314975FC4EC6B9D 070520D15BB97DBE B0E491118B92A4D7 08BF048D1F0DE0D2 32D4475068894E33 4B08F5CE174D304D 51B11EE02D1C62F3 FDB41B539157398F C774F217B4414A9E 66D9AE142F949C7D 076D38C42C923DE2 562531DDFADFDA6D DACAD220CC17F82E 6202E7090CF465EB F6862CFF8E7F2528 4F5CFB7655B3B5D9 6D53C501539129C3 EC5AA861FA52EFBA 8088E93ADD657AB6 FF4C3C87651219EB 1C1682EAA16CBAEC CA876C2B6D895272 58A02E318A843112 48AC09657EB74847 5E77157881A0BAA6 9D142A112BA114F5 538ED5738212E784 A503FBB80EA48056 CC6243C4334DA181 C7F6421A7C2529FD 6A2EA69E39AF9759 796D8CEDEF628578 8B95415A1C268903 5CBF9DF92065E26B 93084D44BF3C3587 4F743FB419413AFE 2C1717C079B4E424 F002D8A3E18EC856 4A8260F494B4E554 5C1023EAF47B081C 91962488C79F9A53 3F1BEC5E91474081 324501DA6FBDD14E 74BBC8F4DBD70DD2 B64CAB26C9B8161D AD58378169B385CA 73407CF8FD48BB9B 8B27F1D010FCE741 C62CDAD5F33134DF A36AA855B02EAB68 3630ED97BD3861A6 B86D333C3AA3772F 5BD3B47786A9C01E 311D7E59D2B26DB8 6B80EF9544E31457 2DBB4407A2CB2012 4752DEA1AD454FAE 1F674381C80A7CD7 D5C638ED3B1AA644 EC4D3948A2F16CE7 84AA05049B1054F0 C6A1CCE8175322F2 BBEB3A9C66C72CD8 115E9615911C5C03 1005E240CDF7F7E7 E1F5ADAE1F478F2E 3D763B0D3CF1DA43 E40E83C4F3A9BF68 350854186198C1EF D0B55DBDABFA6C6A B2E67AE342EB68CC FB19DFF886A99932 581705F345AF96E3 7F31561D2091A881 70B334E0D3115FA7 2018FE48E14F6324 D0218922FDFE1ED5 C5CB2F4ADB97C275 1C1C2DF399AEEC0B 0A517AFBA26DC385 58AD9A9497B29383 24E3CB1CB2035FED 6B25820E8866B3E0 11D956547443BC2E 67708ACE099C1BE6 14CDC16EAE6A3A9C BD585CE93E8FD3F6 08B37BF52E9F472F F95626286408A83B 77521DD1A8854304 8A286CB97AF2DA93 C8B2EDFF711420BF 34F8943BC4E34201 810BD4F723FA2700 5F7BCB729874929C 063B4BCAE239A9CA 90690757BB5AA99E 8794690DF85618AC 43620D5BE24D4FFD 9A747727DC9A9148 14802A47D88E8D75 180CC11D69F32D9B F89F2B77116F9C7E B101038C904F9D06 EE973DF503A44792 8AA3E9B47612C627 857A3B70FE2A059C E2321B464F3E00EA 423F1687151EC905 05167EFFDA7DF6A8 98532DBE21A559FF 4274DD4B837DAC29 77C327E4478A48D7 7A0E844D968F7087 2641F7D6A2A16D6F 71AE5871F037C647 BB9B25EFBD4FE08D 63F9C3C2E622AE4C C8E38A4A148C7CA7 5EA843AB81D02A3A 2E9256ADE17EA27A C2EA1E3D6DB860EC 1136CFD35677E6C7 77B15436FDCA8DBD 3513A99296517EF6 631A4A4247D62544 7F8DBAB25ABC0511 CCEB9C18109FF801 10D804F1A968A409 3DA226D82334F994 8326CEADE193E14D D22A86FF756454E1 8D983F005D3E51BC EF7E7736788977A2 6B778144B4F78EF8 B53CB8E8B1F44FA6 3D2B02ACE5FD2820 F0386EE1802C2040 AB0217BB6286BD68 BF486606A87D9E35 83A9A67013EEF2C5 0676011D772B458A DD281ADF55B21F9A 45F5BB9439D9DB53 41C3B6C590327084 132FAF382EE65DC0 7D987AD883D496C5 C700629D8233EF79 37F8385EFEE3EBAA 07B3958834A83C81 E4DEEC68943050D1 4480632C44B6AA20 1868EBFD0D557673 8D06C4E83ACD08A8 B22BE28C1B505AF3 35826D4978322070 AB211C701C807CDF 03A6C33BEA9024E6 26B8836E8FE4E18D 5E325AEA07EA940C 0D40B069AC407F77 B515D185F5D734E4 40D4A3D5CE5E1654 5C95ADB66F0EA7DF 95FAAE0E40271062 48DF34E2A7CCEB94 DA912ED07A2F0A89 55324AFDCD97911A C12321997B8ACA4B 6F6A0E460AD5F4E2 3705F9E6C544CCE5 A9E1B2CA4F084B9E 5B5CDAC70FAF7675 38317503D1A02FF5 E75EE4AE63FAD69C 367EF3E70A6BE3BE AB083E73AB43C340 3D5BE7DCE6AD3E3C 4E49550FE2886837 B9CFEBD85FF695A6 A01996808F13A293 D41E347044D129FE 5061E9607B88877B

Read the ciphertext. Strip whitespace: 3,344 hex characters = 1,672 bytes = 209 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201303282014 (name+title). Key = MD5(password) = 1322e7d6f951f5737a81105ba54d67da, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 52 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2315e445-16ca-5f40-8bbd-8b047683a6fc
  2 ce415c48-8a32-2063-bfce-8837378284c6
  3 3edc7409-02dc-306c-85e1-4564e1fe64f7
  4 bd451aca-2cac-8663-89f2-690793cd2966
  5 9bc2c491-d541-6ad2-9d66-6f978319b9aa
  6 10680e49-de63-8fdb-9a2e-bb7c8a671dc1
  7 9c74365e-f991-1619-8e40-8624bcbd46b9
  8 54b281ef-f78c-0560-b44a-f3a88f989c32
  9 256b9fc0-bdb4-0b47-b556-ae027081115a
 10 91827560-dc59-8f13-a8ac-a4cd0560326e
 11 2d9decea-1717-0120-bcc0-f2492fadd8fa
 12 aa57e8eb-9deb-32c4-bc3f-4c171964e7fe
 13 dca57b5a-4ab6-89b4-83fd-5e7b6e83d389
 14 fae6539e-ac42-82d8-9c82-f55f4545d4f2
 15 291c000b-fe3f-27ed-afe1-99d2cf3b09d1
 16 e8cb5bee-885b-0433-a30e-f7b57e3ab964
 17 8faef9e9-517a-4ec8-a8fa-2291eb2c0624
 18 b767e887-4106-135a-8784-7b2bdeaf6279
 19 fa209c32-de04-8faf-85fb-81bff81b23d2
 20 1541a7ac-e0ef-6312-8e8d-d37a333ca3ae
 21 569beef5-3bcf-6c50-ba2e-c59487a4e4a0
 22 bd9a462c-b6df-5829-bed4-c4a0df796f83
 23 8ebb4206-823c-8c30-b237-4c009ede72ca
 24 68b7b122-dac4-2737-9186-1bbe266930b6
 25 60397a54-8e22-26d8-8942-6138031de4c0
 26 db992589-0270-432e-a28d-1e52f3a12720
 27 9964ccd5-3763-2995-abad-00bddec0b76f
 28 06b12c9c-6738-5558-bd0c-1658db7c2861
 29 844169d4-7930-0c83-b369-441a86dd2d8e
 30 d67f7739-454a-64cc-a1b4-8bb038bd174d
 31 366c8378-90d2-0625-a88a-46dd6acf6682
 32 056aeeba-898a-6492-86a8-6a473fcec609
 33 89617d11-e7f2-268b-aafa-fa6a5f53522f
 34 48ecd12d-8eaf-0392-8e1d-48fcac8e6700
 35 fde4e200-5eaf-64ce-8f46-1e0a27138e93
 36 5486af94-cef7-46e4-a5cd-4e3db84135ad
 37 f06a5278-3634-31ec-a856-1d4272cd5e73
 38 a81e9153-dd4e-7bdf-b7cb-bec703f59fc7
 39 2c2c2d4d-4976-6534-968b-8defa85a279c
 40 5288afe4-8e93-728e-9f5c-85bfa32541bb
 41 ebd19f48-9dc8-0b33-8345-19b44ea64ce3
 42 e7234aab-4efb-2474-849f-aaa441d06572
 43 fbedde42-ae83-6031-a432-4ea70ffec74d
 44 dc246705-9ac8-5988-92aa-94383a56fe8e
 45 bf424914-054d-7c94-8372-ac7d4ed49e5a
 46 ce3c083c-2f6f-48d8-82d0-ca2c83247655
 47 a75edcdf-fa72-6392-9e8e-1611f24663d9
 48 28a7d352-574e-4c6c-929d-a563f614bf9b
 49 b21adf6f-d7c8-5bb5-9578-fdcee37a1e90
 50 df515308-fe79-69d0-a241-4e2940250763
 51 7891fddb-c6a2-5df0-8ac3-a43a65cc8947
 52 bfc8256a-d17b-623d-84cd-3246e67e0b01

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5238681008038820418665822425060620643767026574645656. Exactly this sequence comes out of new Random(639).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 37 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 52; the post has N = 52 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related