201303292154 1b8jup

explained decrypted filler

seed 593

Metadata

Post ID: 1b8jup
Title: 201303292154 → 2013-03-29 21:54 on A858's clock
Posted (UTC): 2013-03-29 11:54:59
Timezone: UTC+10 · title 21:54 against posted 11:54 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201303292154) = e649bec8192cee774f24fa6837a3418c (name+title)
GUIDs: 48
Filler GUID seed: new Random(593).Next(9) ✓ verified
Run: Run 43 (seed 120,022,078) (seed)
Draw: 65 · predicted N = 48 ✓
Machine boot: 2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 4 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

9FAC4A498134A976 9074D433C66C52EC 0C5B8330F6D8DB6E 7DFA03C0B03DE9E1 84DDE69DBFF279F3 82FA7BA55CEBC62F D4D51EABF15E25B9 56F432A6C7F77A3F 93970F32A6C2E309 DE3D5BECBE3B71BB 56B308FF2A338880 2BE7A8FBD2C0E224 86E03DBD14C6D5A4 671AE07156165FE8 B8202069319D363C 5020E3F7C58D4983 3E70FB0C9D6656C4 0475F616C536824E F765AD6B81418CFD EBA1D13405D271A6 F7DBA187E7E74CE0 30EC212F9BA99DBF 70EEAC271A5143A5 EE24876131C3EEE3 D32B32C1AA352E27 1BDBB48E164EDA28 2BFF2FD335C833C2 FF4E650BCC131351 0B515C375C3D0308 145CDE6691AFE1A0 FA363DAC5193011F 99DC61F45228255D 6D174DCA08814186 6BC85BA803C321B0 B7AF85AFB5D5A815 6129C2E309E8BA17 8DEF22DADD861A93 326DB7D5651954F6 A08976F557A7774D 0187239667CFD1B9 0A792D7A2F692EC8 EDEC34F3054FF882 B5ECA90EEF59A803 E7D99DA780FB4F2E 2783BC89ADB887D3 BCF2426342EAB4A9 6F4590289BB9E985 C1718AB118EB608C FF74F0138E5EF040 ECA910486CBF0136 6B9C6FC47A624C8C 2C30C400222105F9 61C492B437A52448 4001BCB591F1E6A7 C35225DBBC8BFA19 FE3BEA0A35C58E31 464093A206A241CC 676BCC27C7455D4D 46B57BE0CE9CB333 1ACD8EEB1D239F38 F25A1476BE42AF07 664526710822BB89 702C0DC9C28F92BA 05EF3C7EA1A34563 49FC178E8F4AA0AB 6E985B8A281E3F4E AF39043B1979D377 41DA1516C0E3E145 62920EF64316FC02 0D7BB2C778F870A4 7BD348606C9E9B98 4424A59A41C6EE10 962705A29B48D488 2FD9C3F4CEDD3966 5387AA2FE430F826 4845123D5F77DDA8 C7EC3A22D1D4B5D4 1E06D803CF1FA433 F6BA570BCF891667 0E78131B101C78F1 07F1DA9AE131224E 4E3FAF61D1E201A4 F65E42C73D58DC3D 060FB2E121B42411 74A9F5F12FDC6187 0E87A8A20C8C0CD5 A395BA9945B77DCA 2718569BBCDBE15D 110201890158A539 91FC0B02D88BB70A 91CE2E096CB959BE C4DB3F6A26310347 A2C27FD8F61DDEEC 86435C9F092415E6 CAA47D40435A23FC 51FAED4A06AFCDFA 8AED3D1B8FE5779F 726A0EDD83BD3C80 1B9BFC2AEF9D58E9 EBEDBB60593EF254 49623A92EB639BCE A44FE6F4FED021B9 D3DC8F68864F3B8A 531DCF6811F73BF9 3BFD3BA5EAA026E0 5E1CE3F7CBF14158 D4D833FCF70A3304 65A208355CA0B8B5 B03C03C3B5B9BAEF 0B4308C6A179D315 7D0280386EF48D92 95ED009E05B1C538 BB97C77731487CB4 AE8AEF4EBBBCA103 BD291759AC70800F 65F3C7D57FC8E5CC 95AACE110869535E 3A9725696F44D206 8C1786F4540EBDAD B23BB38355EEABEC 7D63DD318902B0BE AF03A21242274C52 32436ADCAB8C413F 24FB020DD429CFD0 A6B797AAC8C2FB50 F0D27D34F75AE18D 1AC6991149212EBF F0B75DC6C911EBB9 5C476FEDC7950B80 592C8F5C68E7A90A EBFB991286CBF2F7 D8C22E3B490821AC 7B18520C689EB742 7FFED0F3863DB725 54008F7EDCC3D24A B91FAD0A30230BDB 367A9ABB761A493A E8614F58A1C77DC8 EFB396E8607A6F10 5BD4F7A8ADC19238 D65960B4B5990F69 7BB6CDB01D792151 D5ECAD835BAA264A AB728ECFE8D0CEF1 946A4BD7536ECBAD 1389EC8D8299FCB6 7AE39113DBDAFCB9 DF7164D0ED7C19E6 C7ECD7AB66F83C5A 327BA064371634B8 706BD784CDC128C7 CCAD0BFF02AD7E51 942C01CA04766EC2 D5CAB4657B275747 BA8B9C3CA3C93A63 374BC3A1FC9FD6EF 3A14C50089DEF677 419E0EB0488EEA05 124D1A0735AC8E69 BAE375258DBEE5BC A9C8649DC8D56AE0 E690DFDBD9F6D663 2D8F0FD88A9B7F45 C1011BAD28A63EA9 44BA58ED47AD21DE F8797F21ABB1C849 96BD129F6230574B 3FB13BB90345611B B3A31831CD88AFB6 6A39E8B27953B5F1 D393A369AE67FD58 FC8A377DE6676FFE 5AFA4F2D3780E024 0678B25B2C0B5B82 9010E7F8198F4113 11F64DAE9522DC08 6B8E7465C8C80552 4A7568143B2B229C 7C50A1157159A8DE 6DC300D639603DCB D276B5DD487B3621 76DD88B375EDCF57 7905E3EB8A59FAC7 D9B680445018DC8F 9552E125A1810980 BF1699E84D96668C 0B0A6812D556C880 FB41C1A3603B7360 516172180896E0B0 325DA663AC30ADD4 55D697072BF5B7D8 52C8A8B5EB1554E0 E0CF87B6EC56300B

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201303292154 (name+title). Key = MD5(password) = e649bec8192cee774f24fa6837a3418c, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6c88b6eb-cea7-44c7-b999-e6d67669aba5
  2 e4b3d294-cfa9-71dd-a6f6-a0b6a5b44b54
  3 0d5779a7-e424-2f59-9556-0b5e648b1905
  4 5a122d09-b57d-16ef-a232-aff876c43369
  5 b72d3a77-9f58-8460-95db-05536aebe41d
  6 21b4d744-b330-722b-bd63-d43bf5991ac4
  7 de9d46dc-82de-5998-908c-89614b06037d
  8 c2b5f6f8-8cf5-80e2-9e8c-c42f33e8b8cc
  9 3e683f71-1ccd-3490-8205-8d2cae4a0670
 10 f175a7d3-fa23-86e0-8c37-f1c51b35beae
 11 cf6ad577-6dfb-1770-9762-1bd732f0ef5e
 12 4b56110d-739f-366c-9a35-72c442f7dce2
 13 0826a6c4-0380-2ddf-9e51-f03e4817d647
 14 d37cf57f-1687-8fa2-9506-6b596706ae10
 15 7ebab324-c085-0214-8275-ac88dc270e8d
 16 2fe31d26-b430-378d-b786-7efca11bbd11
 17 0cd4b7bf-63a1-1a1c-be9f-ed0722d46105
 18 ceca60c0-dd71-591e-9d99-19fc6aeba768
 19 ef216388-cfb9-6ba7-ba42-c6768a575119
 20 5743324c-69fd-86f4-84a0-6aca620a541d
 21 c426dc00-a5fe-5c4d-bb10-4f04ece75098
 22 5495e22e-2d9c-27d6-96b2-1af498a8aa65
 23 f7a3a62d-8486-165b-bced-fb929bccada3
 24 bf28f533-9e86-14c9-bcc6-ac64c9e4b3ff
 25 a178af7c-bc3c-7b02-9bb9-fad883a48bf1
 26 fe40f1a2-522c-8ef9-b19e-c967a5724e7a
 27 f0a76d62-0e48-6b1c-a8ac-3dabc3c413c5
 28 10f89321-5423-1e03-b7a8-aceeed48ed39
 29 73687dde-e015-3ab2-83aa-4b55261df788
 30 5e833b05-95d6-536a-9ab7-a988db7b32c8
 31 df0e2aef-5501-047c-b73b-0f4e2f128dd9
 32 2330f9fc-135a-51ec-980b-d2a6b5ab3277
 33 8f01fe4a-b451-6d5d-8ca1-6f4da229648c
 34 fbe586fe-d449-728a-bdb1-d9721245727f
 35 f7ac1f90-28e3-6193-b10c-6e5e1e510adb
 36 23c39624-5bd1-47cd-9312-ef46529bd5c5
 37 e62e7847-fe16-25f3-9fd8-c4551e7e2eb8
 38 ecd703ff-a1d6-482a-aa87-1e83202bc612
 39 b81f9795-88e7-80f0-9fde-542a0d6139c0
 40 352069dd-4521-5a6d-8770-c838fb364923
 41 48313377-ce6f-605a-9ec4-857f4908cae9
 42 b8efe6ae-4436-49fb-aa1f-533fad536d3a
 43 541cc709-9d9f-3271-b70e-797e38eadc85
 44 21a25e2a-2b6d-3704-adc1-4370c7f37870
 45 f099c7cb-07ac-5b92-9a93-067fb5b26f6c
 46 e50854b2-23f9-0bc4-82aa-fe24b9f6dcdf
 47 4031b7b5-455e-0bce-9a90-420a5eb3c81a
 48 abf8d981-4e0c-60ad-bd3a-8f72ee4c2522

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 472187583813280315685211786135056764248564335006. Exactly this sequence comes out of new Random(593).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 65 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related