201303290959 1b7l85

explained decrypted filler

seed 82

Metadata

Post ID: 1b7l85
Title: 201303290959 → 2013-03-29 09:59 on A858's clock
Posted (UTC): 2013-03-28 23:59:59
Timezone: UTC+10 · title 09:59 against posted 23:59 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201303290959) = 31530b833e6833b8706b227a8d521b8b (name+title)
GUIDs: 44
Filler GUID seed: new Random(82).Next(9) ✓ verified
Run: Run 43 (seed 120,022,078) (seed)
Draw: 52 · predicted N = 44 ✓
Machine boot: 2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

1274FE8DCEECC1EE A4C0B30A26766746 A062EFA565279CF2 5CADDB639FB4A49F FC155D3E3F183494 53708BF550AD7E1E 32977C736C3520D7 F9AEEDE419BDB4D6 E0805724CA1A5C01 4E34BA0380D7589C 950C79D64310DF50 66FDE39BD1214B79 9A21CCDDCFAC8D4D 0A719E939982C33B 2C067F09758F1E23 115D00137CFCED21 EBCEB40A77CD5754 BE1F5D0334EFF757 28CD97E745E8103F E352E66139EADB91 324F0E5AD106085D 6353ACF1354BDAB5 F57E37831EC9CBD4 6684FD69A1C6E6C7 8C48B250FC566824 8AF4924320BB7311 B97147FB67A97A1E 2EF1F514213502BD BFE50F1B7CD5B5DF 20ACC7EBAD037CCC 7E04C117612E5DBB F25802B1BABB7EFE 40FDE6F3EC00B083 DCC499800306E3A7 F859BC7CE243FFB5 AFA81FF078F178DF 71354EB623D5A3D2 33348FF007EB6835 4684DE18EB0162AA F4653D644296FDF6 CFE2D7350DFD5A3C B9F25B12FFCF1876 B5D0C05CEBCFB493 1CBBD24684A79271 9AE96AF6EC89672D 8936769D84C7EAF4 DE38079B744FF9D6 DEAC597833D92F7C EB6E067C392DC4C3 AB32D27DCCB4FDBE 765A1D909B309AF8 723C5B1DF4EB96D7 62324D5CC6F7E61F 49492938AD5E9543 873B4156F1AF9D7D EB40A05F8CD7D6D5 3D8861D843C5FB3A 14D98CD7AB2003F3 EB06EC980B4AF8C0 B6A384CAFB343093 11CC9A87FF7E5574 1ECCAB701F6A0C8A 51FDF8F2A7DF04E8 81FF52C67DD83609 5C79145C57918501 85B000CDEAF9433E 3C7A468451BD2CEA 9AE217880CC14CA2 0602F807471CBD96 C29E047214B2EB3D 7D422A1584A9C4D0 3183E93BA88F35C4 73143EAFE2A251E8 0AEA5C502F553221 4145294A649620FF F8D2C5B38EFE25EE E4EEC95820DF0517 33429F744D82E04F 535038EE86CBF677 BD835F1CEEC34339 AC8085B03DD2BDF9 FB7FA246D9C915C0 B34D062212FD0F62 29594FD4B03119AB 653139AB40706840 B29338BAF7FBD702 8D1F335C70110403 6682E72D134FD927 6D9D575CF4EF4AD0 CA4CF196585F3F13 B2017CF7DA03D21C 9AD695A2EC52227F E090C2C41DAD66C3 0A6013BD63F9F2CC 739EB574B3617AC7 80774E403BD6362B D8E8240CBF728EC4 BD5BB89CAAF67BD9 2C290C5863B63A9C 36B03AD8D0240A97 CCD9755C4CB1D640 A52DDD2608847E3C DE07D572E68626BA FB2B9926B2833C98 11100412ECAE62EA 0E2E55419FFA95AD F06A4711B935A411 C7C31F6524F9CF13 5A40D6532C56A61C 5DEFC99B6B1B4091 5782FDB2A787959D 19F704031D6D434A C710BEA422CCA404 A56371A2AABFE702 1CAE394EB3EC02E8 8B953E982EB0A242 232A59D63C256A87 8D401E7897E35ABF AC90C3E85FEF642C D783E94F421CC1F0 C543C3D7EEA1E364 6267DE88B11CB3F7 D53607FA8607352F D26D2242D9CA9C9D F95A537D32FC2011 6EC112DE9FAD9900 D01D78AF3069AF1D C9C5E81D7F260368 BBB112FE18A89BAF 477D637FBA4A715D 1E21530050C2539E 78A99AE0EF44FE02 24C807035D73DCCD A25B518F0BFAD154 3611D62BED51735F 4CB906DFC9EF2901 C4EFE39598A29FA2 5B9B1FC0C0203EAB 2DA1044472DCFB9B 193B4193F38AEA11 583F6210B07216BB FA3765FA04C5603B EE36B3A37EE873AB 215288F49A12882E 17E16F657B65C5FF 7E0346AA611BE861 02E5F5FF626534BB 5BC009838DCBCC5B F4B43C2E2BC797F8 709CF9E8BB4A46B7 B58CBAE5748E8C02 A18883C42AF0C20F B28A16BF43CE5F0C DF0D4DB8ADF21073 6FEA543D465CF3CA 9A1091EB425C0213 C627E56B2F7946CD E8BDFE365BF5A221 356378A722E3BDAF 51AB4AD008AF04E7 51F3FCD488A2B686 68ABE33AE59DD6B1 D78F548531EA4588 2AAA8B627D4D1028 7BECE6CE36139587 9FBF91FCB05E2E6B 9C1BA2878749D7A0 42AAA79F26BC2262 438387C61ABFE595 41B49E6C1B66C2DB EA94FEB6ED2347B1 50BA270EB4192D25 7BEB8AE7B84E2BF4 EEA89A0D3014727B 1376273E498D0906 F19AFAD86F4F5597 99EE6E6F6FD94905

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201303290959 (name+title). Key = MD5(password) = 31530b833e6833b8706b227a8d521b8b, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9918ac30-2ea8-509a-9edd-0f2cec68f4e2
  2 23547e73-ffcf-71c1-bdca-73aa84cd7805
  3 b4ba5b8e-f092-05ef-b0da-eebb2b25d389
  4 f07ea32f-d6e9-0418-a087-aa6a94ac44e0
  5 e882d77f-b168-2310-86d8-a36df086cbcf
  6 af180dad-086a-15ff-b436-5d6d125d41d5
  7 d4223d65-da6a-5bd7-ac3a-eb544196c55c
  8 6e64878a-8ea7-5ff5-90ac-3871cd60f22c
  9 0b298823-02b1-19b2-8de6-19d99fd1e3e1
 10 faf90bb5-6bf8-450f-849e-c1d3df5df7c6
 11 1fdb62aa-331a-6c2d-b14c-6265fc7dec0f
 12 76fa5c6c-fbdf-40ba-9b1a-09312dffdd97
 13 f078bde5-2eda-0f29-a781-8f360b24fe12
 14 33826748-5d29-15c8-898b-102d1e1964fc
 15 b568c462-120b-32a9-8350-599c2bed5bce
 16 f866a2c7-baa9-2dc5-99ad-ba51ce1fca55
 17 aaabc807-6be6-2c22-9489-73bbe5da3837
 18 0612c593-2fe8-730b-a37f-5c3dfe6210a2
 19 12c95956-bd4b-8b51-8b50-5cb1c97f9618
 20 197673fc-11f3-0f05-be1d-7beaa6c1b576
 21 996f29f4-69a6-62bb-b71a-7615df14b881
 22 61e66148-7aec-8564-a3af-2425eafd20c4
 23 317ff754-bf0a-73f7-9ca3-3ab1d4792da9
 24 2f64e0b1-411e-6b88-8f03-5d446c7d9215
 25 72013250-e171-66ff-9d5e-8be503cf733d
 26 6a35b638-4300-2818-8f7f-4936c55bcd8d
 27 8e07cd19-6c30-3302-9b10-f7500441de06
 28 f1b8b08a-dd9b-406f-9a2c-867c5d1d405e
 29 b0109e4e-7ed4-1412-90c3-b87af24b787b
 30 caca2c38-89cf-15e6-8556-f9867f9aa7ef
 31 c77126b0-7da2-4b84-be16-b2bab291ef19
 32 eb0595d4-e5e3-04e9-af9a-e35d332a348c
 33 28d648b4-bbec-2dd1-93e0-a1926ec02164
 34 eebca800-1ee3-058d-bb91-3d40efce7c6b
 35 217765bb-fd19-2f29-a243-68425f116afc
 36 72a02be0-5e62-20be-82cf-46559a87567a
 37 ef69976a-b610-8967-a69b-29e23406ce67
 38 12f4c752-0779-2dd6-8df8-29667a647765
 39 096754a4-0451-34d2-8557-2fa4f8ecec60
 40 bf8ee2c2-6031-4540-a2ea-ae7149171195
 41 e8b287b5-c6d6-49a8-abdb-eb22842e3183
 42 54c0d0d8-2efd-4cbf-bd96-deaf7131ca12
 43 b586b3bd-55a3-0f30-9058-6c833268f186
 44 05ebd0a0-1329-44af-94b8-621f89732e4a

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 57002155146401322780687662341140202282344404. Exactly this sequence comes out of new Random(82).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 52 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related