201303290714 1b791j

explained decrypted filler

seed 164

Metadata

Post ID: 1b791j
Title: 201303290714 → 2013-03-29 07:14 on A858's clock
Posted (UTC): 2013-03-28 21:15:00
Timezone: UTC+10 · title 07:14 against posted 21:15 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201303290714) = ca877412db213de8f603793bd0ccbc4c (name+title)
GUIDs: 56
Filler GUID seed: new Random(164).Next(9) ✓ verified
Run: Run 43 (seed 120,022,078) (seed)
Draw: 49 · predicted N = 56 ✓
Machine boot: 2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

0A30F14C7B7614F3 6738BCA117668963 44CA602E4ACCFF59 A68AC97356873B57 90320C2C623C5027 A60A54E47B255ABF F1DDEBB29DB7106F BB81A3F6FF764701 4161D2DBD967CED6 12D3FF530B4CE095 A38FBB48AFDEAAC4 FAC03C7A2CF9B5CC A28FB88A7F13BB02 7A211F172158749C 3DB24769B93F6239 F9EEDDC57DD1BD62 FC26B1344D4B83F6 0D75AB1FC386C821 6EC349AFA43084FB 0C7B54F2DFA4EBDF 5DDE52BA07A82018 94D6795BEBDD8CC8 A554C3680A750C6D 1AE7C45A19B354B4 3BF7AA7251178678 985EB18E75BF55E3 FA02012155F15585 3D01BC3A5D7E5B97 DBDF8AA6C12C4C24 7696B9F4757B3F81 40F03F5E0B3F0A82 D20ED4B568A264C2 5DF813E271BB9683 EF52BC6396EFDA4D FE83F615EA3016FE FB42477DCEE1B9C7 BC1E7E47F574E69E 5540AB985CB88C4F ADD8B85EF508F465 CCBC72815C4CC445 E7D1070617AA9482 AF5D3041C884344A 4A4BB7ACD15FE5C5 C6481173AEE0803A 7283BC22BC16CC59 7E03A0F8A8ECD233 D1580AA3057C675D 182E26371A9AC0C7 B7714C8289EF0274 C6ED68FB9F62C9BF 7F50B27100D036CB 4E902FE29C4E0060 8B7996A5CE37EE4D BEBA121A59F19EEB 16E055553AF65992 F56576ADF4C47604 39AB8290F43363C3 904A4130A515C340 E0BFAB37101DD72D D97024B25AEEDE1F DC19254E94DC4C68 4E01C67AF0EC855D 651D5998B94E37AF 7B57609FF0AAEF7C C6EC69ECEB427760 315B4633F4B0EB5C B3AF1B16B9DDAAEF E99B05357A161BB0 9D5423D7D9746983 1DFEE7F16C8FCF72 D75CFF79BE41FCD3 3640853A5E8B6003 0354B0223FDE54F3 46FA549B4590F635 9334FFE305160975 72519B962B426F15 96BFC2E6596C4B75 C3A82EBAB14F887B 5807938DCB0AFFC5 19AA3ADC7ACCE68A FB8ED78E50343D89 646E0E284AD79CFA C04C91BCC179D420 265655544B19E63B E913E9798BCE28C1 2DD1539A04D083DC F3593999DEE79DD3 C9EF596FC578CA29 0BFB27705F859BBB 50D69A0D308B74E5 EDF8EEA095039B1F C8594FDCE41B279A F7140DD071C7E168 E11B8C0E90CCCA85 2F249F154D2C345B C953E857AA6C29B5 69D6788BD6AD65D5 5F542C992DF0B838 172AFFA12DFD833C FD976F21FE6C8BBA 6389047C77CFBD28 F6A1F6835E5BD1C3 0EE77F111B9EE0E7 284BF45F36698312 CBC5BA50FE4353DC 9FA62B76B32FD847 BC4093B0D4BB7257 077E25885C32863B 0766637DDE93F308 5692486DD11A7B8A 483BEE5FAC64B148 57AB2864BC509EE9 920206B741595920 AE7EF071E87E84BC 46A20736125C1689 9BD23564CFBB8B50 604A3EA7EFFB2FA8 CF53BA34DFD03A47 DB25DD982C92520D 557750465A95C7ED 82163723B13995F2 B5F20B6547D4A7A4 88B3B9C8BA835D74 9548C2FA28056A26 25C606769EB4384F DBB27C6275DE8154 3F098C207391ED3E C8B3B07925EFBDED 695008E98C10126C 7AE5DDB5F7190132 EECDEA1E9B9F4028 FFBE8FBEF2D863C9 A5D671DA7C4DB5F9 B7D2CA9EABAFC292 529C1614D5C03993 30D8C83DB93B4A25 F517983B84A8D1D2 6522C2657CD1E8E2 95534F7241EC5080 8C6596351A5BB1E4 C28C30D5DB1D324D BAC018A9ABEDC176 D88117A3621E5AFE ACCA4CA679875D58 356E1AAC6F97C8CA 772E6BD9F55C2750 7A4EE2F4EE92E00B C084DA5124D94A50 324D61F2CCAEBCBE 2CA26494B107EBEF C841E1D1C1254E45 09A2BD9B912F23A8 9B77A5FEDA2D9AB4 0F48878FA27A7EB9 D4C76CF220E7D269 B7ECE2E31E8D9AAC 25D296D9D18B1DCF D9362112FD2DB3F4 36B3F3C2497254C3 99CA53690C981C2A 4A7F1DC938F9EC1F D9A597550B470063 381BB889686D0B83 E959EE530FE4854F C154F3A8B0A77A27 519786E0D3D9554F 70C1C524E9BFCA6E F91C95794B690DD9 B9F1E9BE97C798FA AC8D3B6E8A6A54F3 F7D94E3AA5E70164 6FCC49298478BC17 DE8DFC0ED39D559C 717AE6DFDA45923B 1626133C6CFFA29B C5C890FB6B3B49C3 1C3E7FE6E63E1576 84F61EFA53BB1CF9 DC356D6A7B233B29 F942F39A7CF48FF5 8D5A4405F84253FF 90F1DE16D1DA748D 8535D4A95CD41091 A33B2392BF178183 ED66BF8262E16067 BCB957111483CF9F E652A9447C8AAE83 04117628EB76BCC2 08493EF326B0D5A8 E375EFF658DA812D AFE677A67CC707D7 F324DB2CA028F54C 9417AFB87E83B0FC D54154FF7206F6FE 6AA362D334A9BB7F 65A01D5B309264FE D211F8C6EA7B2D86 4D129CA2F0313873 5AA296687D37340E 77CDBEFBEE9647D1 7A2EE6B15F74D7A8 2E9CF44341C84C63 C84943301BA3BAC4 F54FF6BB1D827A84 ACCD87CA8D5EF233 36454CAD12D38FF1 9F3C3403E4072F7B 9E2FBB6D8C706AD3 8D5C968043EFAC08 F48783F35271A882 36FAE98444AA34F7 4833518CDC555DE4 AAE3C43AD058B8D5 4A204933EA3D2B82 EAAC9A6ABBE7055D A2D7166BF979EDFB D09C8BE7AB428E2C DEEE96D023227948 5F731EE79E358051 78A6A28666F7916A 7B18BB692DA52C6C 604380DAD442B68E 7ABD71A629EA6A93 A5833DF118AB707B 2CCAF7C759F70B72

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201303290714 (name+title). Key = MD5(password) = ca877412db213de8f603793bd0ccbc4c, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7b9bb8db-ab2b-3ad0-b393-e679786b7bff
  2 23aeee3a-39a0-873d-b173-98f106a16881
  3 75db2f94-3ad6-387f-9a97-408fa4894d37
  4 4e958002-0171-5fef-9cc1-77c591c9b8b2
  5 0723d571-f0b4-2340-b7db-32a6aeec02cb
  6 75cf3fd8-4d98-7370-86a2-e1d768e85a61
  7 a47f20cd-dce0-38e2-aa25-bfec2cd5f99f
  8 01746546-7b35-6e6d-bc5a-f0d3b05ea67d
  9 6a3670a6-1e0f-2855-b45d-86147316c8b2
 10 7d04aa03-e0d2-6b67-af6c-01dfce1f8ea8
 11 0019b60f-ba65-11f8-b689-60792c8bab10
 12 fdd0c9f3-c8c2-439a-b2f7-db9113433910
 13 7fa26348-92f5-3b69-8235-8282d1653511
 14 5ec9a0e6-868f-7211-8025-d31309cddd2a
 15 dfb93dda-b6c1-6a1f-96d2-8ed9b0627d60
 16 9ab38379-7f8b-4044-8660-d096096bc26c
 17 6c63be28-be3e-731c-b818-6e7afa6b9682
 18 eaa3e7c8-be8d-6a9f-92a6-6e02bd5e2d37
 19 4f34ac4d-3db6-18c8-9f89-7b6c4c458e75
 20 4a16cba4-4ef6-7eba-8ef4-508ff486c997
 21 9ae75441-99a7-5a3f-ae51-9b0fbaf040fc
 22 947fb7db-7847-0537-8034-aa20fb7add18
 23 71b868a4-65bb-6ac4-90f9-757e556012ed
 24 10024279-4249-2bf9-a74a-85087374acf7
 25 3bfc2cbd-2c60-6f2c-bc7c-a918d96d39ad
 26 e60eb858-c5c6-0626-b5a4-8e9d2da042f9
 27 c0de0e90-80dc-884a-8943-c4bc5a61e9a3
 28 59798669-8b7f-2168-9c58-2e4fde11afce
 29 7caec864-5bc7-78f3-ab1e-8e2e77585a89
 30 68f2704e-e7fa-1563-9aa6-a828c826df50
 31 5c5f6339-f2f0-68ab-88c3-410cdef6bd6d
 32 b673e1e3-41bc-5571-a0eb-be5b75338e72
 33 4b60660b-fe2e-26af-9310-244272173f40
 34 4ddf9eff-7110-096c-8a14-d0e10163ff4d
 35 80f93b47-3227-82ef-bf21-c29a2ceadf64
 36 63d37a99-2b17-7ae7-91fc-5e54f131f8a7
 37 6af4145a-f9b2-733e-ba78-df88f039f356
 38 26ab67ad-ba2f-18bb-8faf-36b5e652cd30
 39 a8020c88-122f-39f4-abb9-49768aa77c75
 40 3bd00ef8-9eb9-0f7b-8db4-344368869f54
 41 1477a837-807e-39fc-b637-89f12bd7b429
 42 2bff7575-e75f-2019-82e8-794db6a3e89c
 43 829440a0-ac7a-8c70-8cec-5b5c0b88b62c
 44 40ac00dd-fcc4-7155-babb-f56581aa02b0
 45 2dfe659e-1b84-384c-97e2-ad904f70be2b
 46 b07b1269-9e7d-16a6-ae0a-feb604a304dc
 47 ef0546fa-3dd2-1a57-8a12-b25d1e77a861
 48 45b9077f-8534-0f3a-8409-9faba0e3c7b2
 49 186ee5b4-dbc7-1162-8425-5fa0af2ad6db
 50 f5194923-9429-89a4-93c8-dac857c94025
 51 a3d98aa9-eaec-4ce4-9155-4191dfe043bd
 52 8d7be9ad-44a9-5b48-933b-18e62a5d686d
 53 9d0de8ac-f29b-7cd3-b109-6a2f3c56288e
 54 f4671d10-1261-8abe-a253-042bbcdb82ad
 55 fa4b0edc-43ca-0edd-9467-7c4ee5bea2cc
 56 87a24787-4bc5-27a7-841b-6c25fe42115b

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 38352736261437647617506260827165208771303287311018457802. Exactly this sequence comes out of new Random(164).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 49 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related