201303301234 1ba5wu

explained decrypted filler

seed 45

Metadata

Post ID: 1ba5wu
Title: 201303301234 → 2013-03-30 12:34 on A858's clock
Posted (UTC): 2013-03-30 02:34:58
Timezone: UTC+10 · title 12:34 against posted 02:34 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201303301234) = 274e696648fe45370118cde21ffaa15a (name+title)
GUIDs: 56
Filler GUID seed: new Random(45).Next(9) ✓ verified
Run: Run 43 (seed 120,022,078) (seed)
Draw: 81 · predicted N = 56 ✓
Machine boot: 2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 5 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

198533901258109A 81D8B25D20B91F0D DF216FBFF71EFE6B C6378F0F8902CEE3 049C462C129CFEB9 B393FC420E48AA22 293F67EF6055A50D 8D0DE7C540A3E5D6 C0FC156D8EA82908 8C1C9C9A712ACFEC 62F96EFE2E7425D1 4F5229E309450945 1E6D68A8B272F862 2C076C5A8532C7F2 8A9A3F73340D5C3E 59A2B3CF537D8C45 84BCAC4E8E571F9F 27081F0AECB876D5 036FEA977C2C3174 D56979883F7A5FAE 0A77273E6991854A 3CF98616417427A9 D3679B3E500D5DA0 7C562FC07EB08904 2ADBB765FC3333C3 7D50ACA9E7285B64 98AE9869B65795C2 491C1406EBEBC697 FB49CD0345358389 519E45A57DBB2C54 B8FF1469226791C8 650DD6DCF779CEA1 95D5902F70076E76 69C887597ABA6F3C 2F2276D5ECDFE573 000EA03A857B1721 0E0EAF09B280A21E 229E44FCB22265F2 403FC28A0329901E 593FBFF8B9A64138 40D157047BE1FCE1 887589EE30D42E1B 490C978B5ED6A62D 28E4F0C08F2F250A 3E4AD93D7B857E4F 4CE45EBD11B95482 3E8152BE88DD753D 9D75313EBB99605A DE5E9F7F548A2CFC 0E583491581CDC7D B2BF0262F6AAF4AD 0D8A71413ED7C9AE 986012F8030F6F41 1AAA35B0A7A06E50 113B5EAA94ACC64B 70B01817849CCAE8 5B94EBC8EDE344A1 F68CB7B6C783CDE2 76D799E77CAD821A 5133D130B6D2CB68 3E64F7A691BE643F B253492323DC01B5 C73BB04EFDA64FC0 CFAC13DD550F7C0A B99DA7C586F7425B 432CDBFB985A4BDF 1C4B259E801B3637 F20CAB7FE3ACFBE7 19E2B8B22BDC2E22 28E6B07A42878EFD F99D60CDF646F8D2 C325B3C798EDC6F8 71B49E4507D292B8 2CCBE77B4304E7BC B6E537305742CE49 973F58A9BDEC6191 0BD7564E7926B1D7 7D629D0980CCD28E C135D5077C0E606E E36C0AD073D25C02 1730CCAC8B9F33B3 CAF48FB31865444E DD514F03BF2BB3C0 9D0B1799CDC3CF5D 578439EA23E232BF CB97A4AEDCB0ADD9 4B2497AEE8D0508A 112C61A6DB1FCBB7 512A4C003263094D E70B0592024CAFE1 15DBEC2A9891CEDF 6767D72B749FFF08 2F8FA9B75DCA021B 6E6EDB7661DF3851 8EFA55A29055017D 9815FE08067D8272 DB88944DDD29F080 F0380F68758771D8 C79619F374AE1FBD 338F0C069B9E150F 291EFD04F2CF889D 52B7B2A1F944401F 00232263A6DDB59A 61C014208B7B304F 65AAA582C83A8C4F 2BAABD41354C8FC9 0383D0758357B3E4 94E06716C35B1493 E837230081A4DCD7 604010BA26621497 BB0045CCC2AC66D0 55590569FAC91F88 245BE2DD8F358D1C 180430D69E12BC35 93246DD80A0BFA1E 8B0CD6F60A8E8615 054509EEF86AC345 F4A7ABFD556A706B B3423C6407DD38BD 14043C264F0D21A0 CD66E8BC29C6C252 A0BBAB4387151935 87DA11D2A8DBBA3B 49679696AE40B2B7 EF901A9120753A4C 804EAF234B14CBE1 D7A9B675896A4327 3AD14F6B44357332 68C64BDFC03D8967 98E761C157EADCF9 D71D700247DF60C3 AFEE2CC8FF29D3ED CC04CD5BD111D8A7 7C5BE7E49909DA6B E302FBB4507FFBA7 C9640450364F4216 FFEF828358105EFC 1AAFE886B4A5BBDA 97D8CF014D434C71 846F457652AFD14B E74443A87B478F8C E90EA39147E8A6D0 B51466D0D956F37C B9FA15C6241A3E05 DBA367C4516E29B1 EED15983EA61B1C6 19B8C2C22BB24D80 B7D1A4970397A824 163071B994954B82 C9EBBAF29D577DA0 E18740AAB64756FC F8816506AEBC24C4 902EA6CBC64407FE ED7925C4D5F9D0E5 392A831ED5C37D5E 8931B50A98D09358 EC5B399E2A0EF7C9 0BEA099C9A415B3D 6816428888FA7AFE 97DA2EAFE1DB9403 2AD719A4C9374CC5 6E7E979B0C3CA55D 4B2FABE2E320378E F2E95BFFFC921637 4082F0D3E0DB7E74 D4B622EF39F9933D C7AB4651240FF3DF 78F875665E355521 3CB817729955C1FB 04AA1FB16A7907A3 F18BC6D7BB04DE8C 667D52678D4A4AA6 2701FA4BC498DD6B 0CA32A525DDA5237 1FC05DED76195CF2 9B30215093990A6F E6C5FEEEC8C8FD4E 0FE1FDEB9DC635DA E9EF53CBA274AAF8 DA2501B3FA8EB261 97D79408DC2576DD 04D9FA15FCB744DD 74F8F7630961DAB3 9D59247B02711039 49BBBC91AC6F4F0E C02C91C536412D81 6677863740E630CB BA8AA695CCE268B4 CB38B3CC9AF41F79 1252EF6C129561AA A12C01EB1929FF0E 583FEB194B5FDFE4 65D408E824D6E79B 4F587F62F2696D6B FF77487500FEBD7E 9741C950672FDA23 7B6E52D8E6059910 B1F0A81E011E3A4A 2517B48623B0FA68 15080508C3EF00BD 6AB5645BAE7DC6B5 CA5FA530D805B2E6 B893125C5FBC3B2D F70A9A93A24F276F C9C030E280611E27 181FC7C369BF59F7 88F1FE91EFC32715 93171C82A1132E6F 0F09B6664E45D8E4 7A51A13402D6B9B2 2114D2BF2A9F7A72 3A3324D9937C113A D176D78460919D2B D4DF1DC096ADAF4B 6423FC5BC584F019 51E26710F758CD30 A692B63E17CC334F 4740928BBCF266BE F4BC7FA1801659F8 61F6AFDDC5C88889 4A91888617C7409C 156F027547808AA4 832AE4971418E6CE 2DEBB0A685E69BE5 6F4AF10455952562

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201303301234 (name+title). Key = MD5(password) = 274e696648fe45370118cde21ffaa15a, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 434117d7-cdec-208e-85c5-6908e9068a1c
  2 89360a6a-6bd7-0f5a-a090-237580f914a0
  3 d162906b-0d61-23d3-89de-927df3e44b9d
  4 b25dcfe6-dbfb-1177-adfa-50c879733429
  5 2b861581-1f89-486a-a9b5-b99b13568989
  6 d2c01e9f-fdd2-71be-ae46-13d0ef18a05b
  7 b43f05aa-35db-0669-8231-c21b81f7aec3
  8 f2a49f1d-519b-0455-8f2f-1a9bcb334d2d
  9 35b3efb2-0502-4d5e-a36a-1d8c5d6c5185
 10 6f693611-7ee7-70d1-bc37-d6c14d3b915e
 11 2bd7cb8d-e7d3-46a2-99ba-ff7f219db954
 12 b6bd7a95-8e24-511b-807d-57f0136dfc88
 13 c2c946e5-60e8-56a6-8960-80b30aa137bf
 14 a613eafe-7426-72b2-b350-07868561c39b
 15 03adbddd-9e19-4ac4-97df-9292ecee8ae6
 16 e3b2ead4-6c21-10f7-b370-c2f820fce6ba
 17 dc171de3-dd52-795f-ad18-f71cdd19c35d
 18 7ae929ec-e6cd-8050-9909-7e99fba4ba94
 19 0635345e-ca6f-8012-aa08-005485dcbe76
 20 ba98b6ab-7c6a-6dd3-bf7b-96cbcbe8a05e
 21 7c2d2a1f-8ba1-7d5f-b8c5-404d6914d041
 22 780702a7-774f-74ac-95d4-0aefb7a8a18a
 23 7c806be4-c932-59ab-bb95-4d22505bd310
 24 fa9fa73a-f81d-6d6a-9d55-31e2d201a79f
 25 e1f8da58-5ebb-059a-80d8-3b7ae948bd1b
 26 1143043d-48c4-4e0a-af6f-4799b9de1646
 27 6e2a04c5-d88a-52bd-80c2-ce22c524b06c
 28 fd568511-7a80-55b6-9ac4-6638c712e895
 29 7e9df345-06a4-8b19-9a9e-acc8172b5764
 30 5a777093-d7f8-22b0-b64b-9db328d25919
 31 432f7480-4c02-7a15-94c0-d4eef36e6391
 32 585acb5a-983b-2d7a-b4ff-f402b8d791bf
 33 9da44c25-7946-3241-a0ca-e468ffb122e8
 34 0d40a692-01c2-1681-bb5d-1a712c3150dd
 35 e10682fe-59e8-3088-9775-1d5093663a65
 36 6b0ceb0a-a5ac-61e5-a7b2-e4cfbc7cbd69
 37 f61f95bb-771b-2104-b00c-407de922719c
 38 8519064e-a0d1-0a62-8c83-4c189ee2b4ba
 39 0be876f9-066a-0efe-90e4-1c7bf7bb6d19
 40 2577070c-b76b-433a-95da-49950d76e119
 41 64a54f55-63f1-059b-a5d9-04654f3e16a0
 42 38a40d98-767d-1e7c-8758-e6837f0d4e76
 43 416d1013-3c2a-7a2e-a927-1b4e2b232902
 44 9980a50c-5fee-376c-ba20-b8f2a328e997
 45 b74d5a1c-f2a7-5743-91b4-17eb0762618e
 46 04ecdd4e-3aae-3742-8292-8c93fb12a98a
 47 3c992ba9-3ecf-58fa-9e22-b91c9a56de1d
 48 3081f346-d785-11cd-bd5c-698e76fd0482
 49 722390fa-02f0-443f-be44-b622c15a28f4
 50 02368854-0c60-177f-953e-70a6ff36dcbf
 51 06f67a95-5a85-54c9-9bb0-8876d3b241e2
 52 4635207d-e387-040e-8a93-1185f3fd1363
 53 1159296a-68ce-2aca-b37f-c8c8b0b85e23
 54 46a860e3-a395-5bbf-8662-a32cbec10381
 55 a8c614ac-06dd-18ff-9a0d-cc7ae1dff6a5
 56 cc3a7a15-50af-3f55-a410-8e55ad1a0129

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 20214700474557417886775604558272313620040173535141502513. Exactly this sequence comes out of new Random(45).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 81 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related