201303301424 1bac27

explained decrypted filler

seed 991

Metadata

Post ID: 1bac27
Title: 201303301424 → 2013-03-30 14:24 on A858's clock
Posted (UTC): 2013-03-30 04:24:58
Timezone: UTC+10 · title 14:24 against posted 04:24 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201303301424) = 9ef9e0a7d23e0f62e2de4005a01f50b4 (name+title)
GUIDs: 48
Filler GUID seed: new Random(991).Next(9) ✓ verified
Run: Run 43 (seed 120,022,078) (seed)
Draw: 83 · predicted N = 48 ✓
Machine boot: 2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 1
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

97F57E79D73E35D3 B86718DF43B50B43 BBEE5C6A31AFF235 960E33623F34184E B2D1A635557A7241 310FCDBA02A11123 2AC8690D04F15839 44FA35CDA8C714E7 42431C6D39B4A83A E5478AC5868C4961 4F0644855B328548 8D5D498BE7F4764F 34CBA20C9B07D6C2 AD1174CD8201AB8C FC2972A9ECA9488E B72F34E02C06BCED 5E09DBDD1382AD78 74F703A7A7263FB9 91FF9D99978F77B6 326B9356885A3766 C232511AD806F5A1 AAB976A8E09EF011 B0E85601B3D71D27 897E81923D3135C5 A38849152953C469 90F051E7257F7480 1FD7A7876062B3FE F1BCF206E33BF0E0 20DFAD52D8F95305 ED16D39E3BF434FD 960CFB94B158F333 60673FDE198772EF 8EDD55F5637BAF78 15321264349C9CAC 89228FCFCC38B8A7 EFBA13AD44974C8B 609DA5DFBAD8EDB8 AC0841DF169E710A 188B5CD4A70EF4F1 6E04454B1400FA60 01DC0DF93ED1EA79 BD46BD75F315C1CC 9980F50973B8BA80 C137111A32BC56E2 9A5137815B1975F6 D1CDDD4B0C183917 66834E3C1C778777 5C7F5446C2A9BBDD 4FB3B3AF8F21FDD1 EC5C5EF53EAD9D7B 575C6176C1F8D355 73C19A1A052F0190 608EE59301723C72 55B8F1635F991879 C316E454E40396B3 FC610AE85E4EBDF1 E1323684D5557D52 AEF8420BDB6A6738 C078FD23A279CC89 EE94A61D60D23B4A 50D7AFAD02CEAA42 454B557F5ABB1838 5702A4A5AFF119D7 00185514C96F7C9B 70A71ADAEAF7B6DF 595552F9899D4CC6 0EF398C6D7205FA6 FA06BAB4709636F0 86FC006867BFBFA4 5A442C43D65D8DAE 802938A7828B7159 0ED396708C515265 2AE509256EC38916 FBE323EFD393F55A A615D1986AB71597 C676FB608D3518C6 9439DCE09DC0C57C 1B171CC9EEBAEDA9 B1E25E59BEF35A07 3E42322F9B941A4C 76A72E8EAD2A8B24 E5CBD9114A1A4AD7 6FDA2A7A03D6EF8B 4D0FD98284EC7F0F 8F2AD7AA4AA6A1FA 558E38B868B47C5D ECAE036F3FC05D95 2A2912E3116D8888 5AD8C49A520FDF47 C5792C78A424AA72 55D4BA8886AB9011 9DDBFA71330A98E5 E47DB2835B6A5759 8531F461D9D08895 31872FDA5BFD3C44 AC78E1FB9FA1B76B 8E1EADDB07365CB6 D76803C88B5ED9E0 F0033369DB20F063 D60EBD95009C4640 9044C2ABA5879303 6658F645E470EA77 E0BF46ADE11CF6BA EA0F6570E00D2933 4B1BBDE994A0BE20 21C0D91E6931F232 4EDFE66FD11C87AA 45E35DAEF19DEAE6 9935D65924635330 F233F89CB30FE2B2 770B06536DF92B40 CE40EE03C206D1A1 0E0335BAB5448064 B79D8A011D7487CC D5C2384DC8D7E410 25219B00EABC3D61 A0BB3DDA8376CC4D F0AFE9CFDC551B18 2B1AEA7D0F41F794 33A20498CC3E83D0 C22133BB6ACE8AD1 34A9BE7003F9C5F7 B7E7BA1B85258E84 744867E35D69BBB2 4C4BD0B10A12C950 5AADB3FEE6D44FE1 67199B35E9D43374 D53D86A4BB9FE1EB 2EBB5DEC238D9377 3B3340694D38FDD7 115716E182C1D10D 7080E40F6DC3AB5F 68C922B9CF9F3EA0 5CF43E4D2C2FC93C 8C2877CE7D2F9936 6CC57C5821E28828 42544E8FADB768BD 1FC4D21557FCBEC6 7B0426CD6D6C7723 A8DF74B06DE24BBA F3AE930231C6C845 25DE5B4CF14D0CEB CEAFBD2FBF2524C2 7696C2C561C31DD8 A4629DEDF9C32858 45F9D62A31411D85 63C869389C127D42 96672FC9A5EBECF9 E20DB8DA6775210D 65045512668F23B0 D18E923143DC40CB 9BFB2C17708794DF AC0E22B2B1F7DAA9 7E2CE003DA97CB07 489E32BF532243F6 D0354B55418FFF30 7E5B05E1570C7534 309D3DAAA5BD9636 6C9A1EE7BFEA3530 CDB900A2A1189A79 723E334C589B56D7 36F9B664D8544F15 871A7A2F1A69D14F AB8CE8C95996960C 04D82301FDC176C8 3FCE3D3DA48AD698 95F672B5524F1116 2E7E47A857FB3CA0 DFEE4F3533156314 381E1E63C5C5C131 C29A08278BB67D11 ECD44649B839E4E2 0B227C322873A2DC 0C2EA3CB5937AF2A A0548572B9F95885 7D4385848AC8849C 96D2E45F1756B0F1 5F345B984B8B0AD4 A89C43728E9FC2D3 CFADAE13841384BD F8CE0F29C3EC4BE7 EBF35312EAC95934 3CDA10D3C8618D6B 13639095B19430BB 90BB26E9C4248D38 DA08CE642D18266D D9FF9AA0789AE012 8B3E7164C086F380 E32F443E6776D026 CEF0EC9DC119EC3B B02287E12771F4C9 F78F960986AA300A B6BDB1043CF2BC88

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201303301424 (name+title). Key = MD5(password) = 9ef9e0a7d23e0f62e2de4005a01f50b4, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ef64ad75-83ce-48cf-bf0b-655dda154879
  2 4ea0ebb7-58fc-5a55-9822-5a3623d150b6
  3 8c357ae0-0ce4-4be6-ab95-4ef06169e0af
  4 7fd6a0b9-696e-03b3-ac69-203dd8bffa23
  5 f9b82e76-f087-58c4-9265-6a93394d50cb
  6 6e298c5d-ac7e-57b2-b6c4-f722cf4459db
  7 9ed430b6-910d-80d3-940a-79a7cec0e446
  8 35bbfffb-5d86-5921-b610-5eea76acae80
  9 c3f18ee9-ae78-5d89-9383-a556f15421f0
 10 c5ea7aaa-66fb-6fa1-a160-91e4216500a7
 11 f39c7f8d-af9e-3df2-b25e-df8dbe288826
 12 673cfd2a-e680-1ced-95ba-38643a22c108
 13 5bef364d-47ac-840e-a662-182818ee77c1
 14 9ff10a6b-4111-0441-9fe8-36c75b02d10c
 15 ca3c653a-03bd-5e9c-b82a-cf5cdf62ee75
 16 2deb4244-a2f4-8144-98ce-02f3c57cea5b
 17 3d37ea09-f55e-33e3-ad3e-1e49e0840e52
 18 76b55797-fcea-3b71-80cb-0a69a2915d22
 19 a85805b9-8a0d-491d-8660-bcc87c3a2f27
 20 da59122f-2267-0a62-8821-e6e5d65334bd
 21 71937926-09b6-43ca-9584-b20d425fb549
 22 04cce367-e911-89fb-90a7-1ac50299020a
 23 db06a603-97ad-4f6d-9510-6f2f0bd058a0
 24 7ed1b086-8ed4-2f17-b019-6986638739c0
 25 bb8ff582-87b0-794e-bc89-097ffc0f52c1
 26 de1ed809-1522-842d-ab30-99fc85b29f2b
 27 b67cf056-8204-8d5c-95f0-40d107db93ff
 28 c550f909-8404-60a3-9c4a-c2c214cad93e
 29 5202d501-0e9c-2044-b16b-672bab4ed27d
 30 106bd4e8-e3fa-1057-a7e9-475fb7dc0818
 31 841af3ae-2bd4-0f0c-a923-a1eccceffd1c
 32 39ec5b2b-644e-45a5-9ca9-39a6866f2e94
 33 3b238c05-11a9-7c07-b489-327385c5bbfe
 34 4b4886f2-1eb6-7d6b-bf8a-30b298fce54c
 35 ef5aa763-58e7-6bf2-a8d7-bc1c5d4fc738
 36 49a33894-3e7e-617d-a2c7-8c4f3bf02f08
 37 4b47f62f-d4dd-81ec-a913-bb16d046da00
 38 789eaf1f-5d6b-603b-a53a-a0e1d37b9dc5
 39 2fdb807e-5229-080e-af54-dfbe6ad1a8aa
 40 5f094358-f107-559b-a030-fa070fad7540
 41 606cb417-8649-2852-9369-b203f6297d28
 42 1b143c96-8eed-0eac-a847-86860ee4804d
 43 32ee2f82-66f1-1bd8-98c1-360ba6260e70
 44 4ec736d3-882f-3cb4-8126-6050e712434d
 45 218d0933-218f-375a-b98b-c4aaaa277dfd
 46 74201ffd-a1d1-461e-90f3-54f6654684b7
 47 07aa633c-c856-460b-aae9-9b3b3b9cb251
 48 5a56294d-6327-825e-a092-6b132ff9b12f

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 454055855631805833404842788621047766860520133448. Exactly this sequence comes out of new Random(991).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 83 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related