201303290904 1b7hah

explained decrypted filler

seed 85

Metadata

Post ID: 1b7hah
Title: 201303290904 → 2013-03-29 09:04 on A858's clock
Posted (UTC): 2013-03-28 23:05:00
Timezone: UTC+10 · title 09:04 against posted 23:05 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201303290904) = 04d7f18563fd99cbf0db446173a7a0a1 (name+title)
GUIDs: 56
Filler GUID seed: new Random(85).Next(9) ✓ verified
Run: Run 43 (seed 120,022,078) (seed)
Draw: 51 · predicted N = 56 ✓
Machine boot: 2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

B2AD111B5023D5E4 D793F198CB6DE62F 76CAE9FA90BBB88A 49B92A294391C7CF C6DFC2B5F2BF9CC6 A3CBB4E7878D7579 4289697BD4D85497 EF4A1B86DC166F00 3C5A21E37F9E1132 5A67B4E495893CFF 279682509659F4F6 CE235E0A0C906437 E4C720538C49D879 E08BDC3E5AE9B032 12E421892F09A709 20DFF41AF3CA8DE1 BAFFC57B76611BCB CB879A5594C7DCEE B17688A7C83D0C89 E43876D7FC625C09 5396A1B6E809DA4B 4B5F313327E7AA3D 1263C0BBC55ACE9F 040D5EF5A3692345 CA0ACA8C67EC9822 780BED87A8A62A5F 11EBA1726E8F0166 A98CC45EE21FE5C9 44F857272CCB74E3 1C1B9EB218FD188E 5AB8BFBB52B5CAA2 A771E42A5966BFBD 91F2BE4135A034AC AE0644E292BDF711 C2A1892C954902DE D78E0AA0E8055B3F 198A7C85D76B600C C379B9D28B338398 D2A3F769DECE22B8 B3B9238F3D88327E FEE2042CCD47F2FB F8227D7233975213 779F44E4FF174B58 71CF3670581CDE78 06F40E290B48E7D6 B8B4106C08638FEA D2D4F6A9C65AE3BF 18C40DFD88864FE3 B79475971BF248E9 B6405E8D4D9ED600 2269EC6F9DE789C2 D6FD57C23A7D1B2B 73404B45FDB95D4D 471971976FCC2A11 DAD02E623DC0FA68 3BF0A61996F147F6 343C5354548260A1 5A9422ECE6293798 1DD11DDE09BC4D22 FA83BE50167542C1 8DDFA13139A510AC 7A50CAD11A7441AB 2A337E1BEAE396E3 DDD218074F36D759 DAD2F27D17F3165E 250C01BC63589502 DDB1912D6324DD1A D3A1F0C2E54CCF24 9B524D0A2B9B47ED 5205F839AFD2F214 E7D867C78149719A 1166CFF1FB78F43A CF12B97061950F5D B8D9FF3632A1D243 5BE8DA6B475BCA62 856D11FA37B0FB36 BAAD6F1F448DA487 04A924AFAA5450B3 EBDC5DA5B1DCFB33 129E4904918F5BF5 782EE28F2FF97A7D AC3607179D847D60 B0251D4FA1ED7489 6CC6534BEB3CE03F 2712AA5FA76F9A5F E8AA0CFBB66022CA B12214EF8117DE2C 701D1A451C16BF2E 4B1168B78D6D577C 6D0924A83281FCA4 F4ECA8281238A22C C1DFE600367AC4BD 45C5D3481F5B92ED 9D204BE1F6152D43 283685DCB4B7EE94 9B21BF934BA7AB8B 6D8819EE7434DF30 A2549BD5A835E562 BD7C81E445D5A96B C4BA9C0F612133B8 709E5F61F9099DAF D0C0E12E7068EFFD B5F037D2A23C087C EF00B5D96355626F A5DCA3ADB50B260A 736397C36DDC861D B54618ABF0F07CAA 6BB66C75704EDC69 9111BFACE71D0C0F BECC7800E83FE7DD 44398D4DC7A2C877 914CAF42EF4B98CF AA14C2E4F3C19A8B 29039357FB83CC2C 0FF9C736F7DB5B39 894904E80EBA8C05 357851C03769803A 11911D13F3B8ED90 D6D436164030F71A A6F424F583EEA497 8562E9BCE3C3F8D4 B990C9F994BB3415 C97FF2D9047D361C C3608ABCBE7E22B4 70B23FBA7652B2CD B6ECE18A6FB58E56 DE18FCA50583BAED EE3A8B94915723CC 1058AF9D603DB8D5 E2FCA33BD2349599 5E354284155E924A 386A06675B315DA9 B0399067D8396255 0BAE3C3E4585C74E B31646DDC6FEC09A 4D0015EBD1C80B3C 58FA4C6754A5F042 C6551DC0FF878B10 24F9D8AF7161CAD0 DF8972677399EB90 EDDAEAD667D80D37 222F9661861C4561 8C38BA3D2EBE2414 76600F2A72A88141 5FCF80C7231BB3E1 4D7E1AF226F3D279 0C77237B0EA20F48 C69FC0918DAC9915 049B8DBEC9B2C692 A99DAF2B03B546B2 0B435C6546325705 6D5B62C0219F153C 01A57F895B95A6B3 46CCD0AE0AC515A5 98CD5FF6641AEB95 D88C94FDADBFE433 25F0739BD7FC7EEC 3066B2CD6EABC106 AB8DEC7D16E68DDD 868EED31B426E423 8D71BCECF6DA6A0B F9FA1E06B0A68EC8 AF9A1D9BBEC211CA A350724AFBBBF0D2 2B9F4C340CFB6979 1BCE87F346E163AB C49232293E1E8C2A C98BDD66762DEB2D CCE92D88E1806B89 57BC3BF20408951C 1E13ED245FCE177A 92728CFE5E5AAFB9 67E7A0B6910DC148 60838A257AAA7EF5 4636935DFF48FD77 EFE5261939E79CF7 4175EB0BB90785E2 600BDC0164864903 700437D4609030B9 A8F57344058ACCA0 750E72A1469EEB5B A6DFEA3CF6BF9E0B CA0A3A36D6FD40ED 834D5DD7DABDBE72 2B6CC99DFA959996 0837757665F20145 7B6649766CA54B4D 569917ACE73F3B47 4D251DFF8FE87921 531F23EDFC02C97F FE0D7C5CF509F515 F355D8B0AAF3EBD9 F15B59FF89A5C5B7 5E60B4ECD57E2391 A193BDD4BFAFC0B8 14BA4DF23004451A D2AD2146CAE35B5C E184CBB01E68E312 E6EB7A90B7D54AF8 9BA7E832C2EB96F8 85EB9E8B910CE45D ED64EBC93D5D71EA 8131CD0120FE1807 111B6A1E888CCA9B 5FC701D4039DC3A9 4A6B17BF712C6378 F919CFE3226CA0F2 32FE6F6701254E06 7126CB87700B9054 D4ECA519C7D85AA9 C5F6701AEAEBA74C 462CB1F5A2CE0A5F 30080C88B5AC073F C305969187237559 62FC1F1D104D7767 5B9E29EBD9634C00 F3C648749A0273EF 3DD035A0CB53DCB0 7493A950BA1C1626 B2AE848C5835B3D0 99F6D17E7B1BE543 39A2B45A37DFDC0D 9F1EBBB422AD4CFD 054A4EE37F355420 F0CCD6DE5FDCFD92

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201303290904 (name+title). Key = MD5(password) = 04d7f18563fd99cbf0db446173a7a0a1, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 069b3064-cda6-10c3-856e-4b9b1a6e1214
  2 1e703646-7cd0-6e01-80c8-073d836cc6cc
  3 6512dbbb-0b1c-102e-9f79-19e294b47ae4
  4 f420968a-470a-693a-af9e-122e81b84324
  5 ac87c232-8b08-5813-8252-880a3d1aa793
  6 ba3c2b7d-c1d0-7e3b-932a-9d106636abf9
  7 fc0e773b-0ddf-8b2b-877a-e2c51a5f41c5
  8 b2ba3be3-43bc-0cfa-b88e-5f21b42ca53d
  9 2c3273b3-44e6-4eb3-8533-3d36a2042602
 10 f99c68db-7808-5c1a-a3f1-d00974e63fb5
 11 c8a7eac5-5266-8f55-9b39-26acdb128a32
 12 6166f254-cf5a-703d-92e7-39616f0cce47
 13 fd3857eb-6cc7-01ff-989d-88b36fe33aa5
 14 099c13d6-853c-6422-af45-ea97a2d3e67b
 15 65f980df-b494-44f3-9fbc-5632794934fb
 16 0e98c9d1-fb49-14e1-a65c-062c507ebc85
 17 c6ed90bb-742b-5516-a738-7a43951ecad5
 18 8970d351-1621-6e1d-adab-c34c75204d00
 19 300775f0-28de-892b-b55c-1a6c70c27047
 20 15a35683-e21a-21c8-b50b-814ea6bd6856
 21 fd828643-f96e-0bc4-ad77-bd19ccf17131
 22 beefd4f0-a64c-6288-9aaf-354ba2e7e3e5
 23 99598b1c-80ce-36e3-ae37-04a33e5445ff
 24 0299600d-27a5-646c-acf2-56f18cc00375
 25 5f7bb2d3-b975-049e-81f0-992e4a24f49f
 26 320edb50-0073-12c5-9c06-05fa3b3f264c
 27 6a5fe982-8b39-08f0-bf2d-06ffbd16e8ca
 28 46dcfd5b-19b9-3150-affe-3aa338baf192
 29 421169fc-2262-0d34-baa5-db527932376c
 30 d888c1fd-85d9-4f7c-be78-26a13f319b3c
 31 57e5e438-3bfc-552a-a61e-0a43eadc5d9c
 32 e179d767-8623-78c7-8c12-798eb2728754
 33 6a646cca-1741-457e-a941-e40fd4fc71f4
 34 31d0415b-4bc0-14f5-838f-0fd39a874fe1
 35 dc661439-aa1a-2cd7-9b05-5f2deaea1be2
 36 4607278c-ea06-4be2-9a87-f079b682af74
 37 fa8489d5-4056-3e33-b8bb-9104a56d1fc1
 38 b52ed5ad-b4ec-2c97-a6f3-1bb2ea171a0f
 39 5033b079-cd9f-8e25-83f4-0365933e7a75
 40 cca80480-51c6-17a4-a639-de983fafda6f
 41 acaa5f6a-40eb-63d2-b6af-0f98e92b0726
 42 5500398a-9b73-27cd-bb4b-4e078070a72a
 43 b2a62c3b-5b6f-60e6-8cef-feab396b7c37
 44 52a33cd3-9852-85af-ab82-bbfc2e2ec43c
 45 badb13d6-13c7-6139-bd68-48183806016d
 46 3b5598a2-085a-55a1-bb5c-72b55869b2ce
 47 657af89a-651a-29a5-a23b-f0ab2e384f0b
 48 bf07102f-4f8e-7d6f-8749-9869ec4c49a7
 49 17aa167f-6d0c-4102-ac75-ff9c1ef51cd2
 50 35f5cbfb-233e-4af8-a727-f6fff56fa8d2
 51 5a8209c8-8d3d-224f-b8e5-33b45929389c
 52 696acb26-c77c-0ce4-8e57-351bb38baf6e
 53 1140f3c0-fb4b-32dc-8846-779d69be21a3
 54 f1964d15-a140-7e3d-b6bc-ddd5797c02b2
 55 a8829782-ec73-111a-b929-f6b23e5a78d3
 56 5c0e2b8c-2524-330c-ba59-16956819324d

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 16165780458706415682063601030457412432816268652744203713. Exactly this sequence comes out of new Random(85).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 51 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related