201303301804 1bal7a

explained decrypted filler

seed 849

Metadata

Post ID: 1bal7a
Title: 201303301804 → 2013-03-30 18:04 on A858's clock
Posted (UTC): 2013-03-30 08:04:58
Timezone: UTC+10 · title 18:04 against posted 08:04 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201303301804) = 1fb970179c3e1ea2ccbdfc7dc6ee5bb2 (name+title)
GUIDs: 48
Filler GUID seed: new Random(849).Next(9) ✓ verified
Run: Run 43 (seed 120,022,078) (seed)
Draw: 87 · predicted N = 48 ✓
Machine boot: 2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

8458C4596E253E1C F6D50D520AB9344A BC640390B7A7EEE8 0FEFF3FB7F218635 D36303A037A6DFA3 2548028EEEFF4F41 BCF6C5BD9138419E 9ACA72396BDDE531 F1666C017A45E53E 7C6005E1C7E9CBDA 4CFD371A11702BC4 79D992CFF8056875 2BB16FD6D905EB4E A92E4BD7FB8C57AA 3C629B51EFE3A8C9 175F4E0F3D9510D2 5874FFD75E64C596 F8DF726A97732911 FE5A351DCEE7210F 9A6E85862C8DC072 9E7FDCB2F1DB450C 6666FA731F990B51 7F2435DDC716C5AC C2356C12415E1D22 6527CAD149681E2B 8739953E138CECF6 013430F2E65B50DE E92B588332D0D731 163A46ECDBD52D89 C080CF5D93648309 A0D5D7C42EE43C1B 2275F49F92C6040E 61520B39B7CBC58A 29AE00A3783C2740 B0418987F65E265B C61F9819EA4DEE3C 89749109C1AC8F2D 998F08E6200B99FB 01F9DA6C0E2A8571 5ACD5620B0A26D71 B29ED173AF831654 29674D29C36A4EC0 9EB9DFCEE1EFF24D 89E59B27C550B9B1 73AA07D138F81A12 999A10282B3E55FB 42E06DE158B096E6 6F3999A93AB64FA2 934BFA1C659A7AE3 9E992FC037955239 F7774E3C0474E270 D70E90157179E6E4 88A0E239DABD0089 28BB95D1E1B1BC9E EDF7CF9C3A3E9E44 DA8D76B52D78B6F2 5FF9DEF7E4B22023 B126376252ABDDAE FC84A2DD8532A797 EFF62E98C9457AD2 0706876DB8C7CB80 1711F10CFC849304 6CFCAA025DD29DE4 6AD84FF85AD5A1A2 CE390DCEBCD13C78 BD628D668A3655BE 6B7708C5EB0CD86B A80BFA16537209BD 63C92603097E9C6D 0E35E0024055C531 CE7B65B97ABDA897 99F84CCAFFEA6B24 E1E3BE81DC3F02DA FC72C0C82A4D0763 CD651B925BB5B591 30785BD375222B04 49ADE79E7FF9BAFD 67F00F8036F69AB2 98FF83957D46BEB9 80CBF842FC8957C2 3B9EFC0D5215FC66 BBFF2F92B4C457F8 E6C1B9292D6A6EBF 5AA362B6D41B3351 F2EA394DA475450F 0E9A04A41236DDAB F873E0790D15903B C0ACAEF504D277FB 40D6D992E0EA264B 5D7ED6AE3C62D327 EB6883347E8A71D8 06F5A8E12C587461 2D4F7DC839981843 672783EA456DD570 EEB9E27956FBBCAA C89A842C4342E06D 995888EE89E665EC 73A35EA1F2801EED CD8CF9E0E00A4F9F CADEA383430ED641 5CD844F919BA236C E4DFDB1A1BED1819 9B934BB179AABC3B A5691278930F3226 688306E6510DCB8D 2384D965D7FF53A2 9BECD29C7CEA5F6D BB41D16E09DD058A 31D6DD64E4D7F098 8FC6C56B4A10DF9D 237AC0BF466D89E7 EBB0BE7426E7941B BF4D85451B9B99C4 B6CE5CDBC7929D0D 71E07218FB20C5A8 DBE58976EFC54115 FFF538B9C3DD009D 348301D3B7BB37E6 5AB316CC0BA4AC3F 88C344DE70B86A3D 0EC3E710042EB7C5 AF9B134AF9B7383A 3BDA958E708C66DA 2A2CBEE0E0345C9E 84F77E277B53565A 5AD1DF465E96BC28 B9A730C155C766C4 8D4D9B66FD6AF29C 6ECC1187C15BC32D 24CF6F88D59AEE42 56C5C216E4EEE08C D5736F41E7F96477 A2EC27135EC1932A 2F61FFA0E7A0449C E4506AEAA75FEE74 01B627B8DE1DD4F7 11663B2195F087A1 DE744D8FF195005F 28B79B95A61A8844 F8E265460467F844 13717361C3CA039B 7EAA670B017611AB A11A4694D8425BFD 52000A2E27B5A3A3 A60D1072CBB2514A F1A0C091BCE1CA5C 2C4E675ABB83A27C 97165B9FB4148A16 315E47D9736DA4DD 7490FDE1261708AB 6B608D3D13718098 DBEB22B4F2C076B7 260DF18D7FD53E1E DDAF33FDBC29AAFA 0A4A784DA88FC8C8 C666E8865338B37E C1C67951516B8A3D A26BD2EAD695B635 5073F2E677E8D9B5 A227C20879E24D18 A0802873C512B2CF 0BBC30D351732796 ABDDE973AF01953F E6839DD8CB34230E C46148C27A299912 5B61D3A7C1B612A8 0297C62A45F72819 E811006839EC51CB B5A9F5C624F2A58F 7990EB1B90C60F3A 52A34D80233A8464 2F1EF0CB37AF4CD1 E5FEE74E00D79821 742E5D710D668C9D A9535B533C9BFAA5 B2DB9059F2CF5C9B 3C7E4529DD3A4E9D 7FDEE5732DF3B1B2 91C8C0E1A8DAD4FA 9E13306F83377220 DDE46E67F7F80AC7 948608EE675DB629 EAC1BC3DB2C8A169 CF88249C35907101 F6F1F030E17B19DE E9A8ABE5EA66DE3F C5FECAFF2CD0BFBD 55D8832B3B8D48AF F144071215C5E3C4 E55827E21F92E24B 29FB1340B75B413F 20C842073834E78D 91C3231908B4A4EF

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201303301804 (name+title). Key = MD5(password) = 1fb970179c3e1ea2ccbdfc7dc6ee5bb2, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a243c70d-07d5-29fe-b541-1d23a58d6dc9
  2 4dd586ef-54a1-841e-9e29-99225e40576f
  3 2ff404f4-2357-1957-b25a-cb6371d0b27f
  4 2a4fc989-debf-6f3b-80f6-452fa4159287
  5 32213694-10d3-4089-ab00-f2fae8dc64e8
  6 ae0b6764-9d1c-4d14-a618-4e41346357ff
  7 350a852e-12e6-2a88-8b7e-215640ad71d9
  8 dfb93fec-6c19-3431-958e-02ba87bf36a6
  9 df477e94-b58d-0e30-a603-225cb984b8a2
 10 0fc8bc8c-b14a-37b2-a79b-91008083ea5f
 11 a6c4062d-3bfe-680d-8f6a-4938d0864452
 12 54fa466c-a34e-2dc4-a206-c7eb639b0d7f
 13 c6489a21-96a5-2d8b-a39b-a51fe9aafffd
 14 b0fe87ad-4603-130c-8f97-a9fb96d55723
 15 2dd98eb7-badc-29ab-b7b4-90bd945f6e45
 16 3f55e8b3-3f92-25cf-a7c5-a64fec30349e
 17 d9897a84-e321-6156-99ae-adff9907e332
 18 7152b8ec-48d4-3203-b866-e48fd87829e4
 19 4fbd19c7-7896-55c4-a241-66bf6e20dd3e
 20 50e930b4-438a-0b74-8a5d-7cad7738b03c
 21 e021076c-4f92-5c58-863e-419d4b8fbc53
 22 e40d0728-ec9e-1777-a4a7-665fcf06cc8e
 23 518cfa8e-bb36-4d7e-a0fd-b9320a644aea
 24 0a348583-047a-59e1-95d2-7430a97d1331
 25 d12207c8-8594-8f4c-80b7-f87f70a0571c
 26 081dac29-5e92-5a58-84d2-9f248a614428
 27 6b9dc91a-cca1-7d7b-b711-1635622cfc58
 28 c35890dd-d0de-6aae-ae73-3e484616d416
 29 e7e0efc3-1e00-0a6b-aa0b-828f1f1d5307
 30 dc7c0f2f-0d0d-7f92-9865-be71b447a2fd
 31 eaa750d8-4562-52ba-9adc-43447b35e3a4
 32 8a0963c3-58c7-0f33-9805-244f498b87e5
 33 3dbab188-7dfa-6ff3-b9b7-e1dcf7110888
 34 039f3642-fae7-2971-8a73-0371cbe5e8bc
 35 29842a3b-cdd8-0b71-873d-bf0248aa0441
 36 455f934b-3864-58a7-8b5b-440f4d832858
 37 0ec5f685-d0b5-25b4-8413-d1411a7cd8a6
 38 b4d38228-6f6e-8f76-9ac5-26b25b676aaf
 39 00627893-5aca-6daa-b515-43e9c5d919a8
 40 aa1c8e06-221f-0efc-982c-244f6a370740
 41 ed67965a-77e4-2456-b0c5-af60c9681823
 42 0c047c7c-1ba8-5add-8d8e-015df862dfa0
 43 0d4c8a93-15a8-7dec-a304-e6c86aca1caf
 44 7458443e-c21c-3f45-ab23-51bcdfc2be1a
 45 ab4e2716-6bb6-4336-987b-f9cb3c098170
 46 340eecc8-8c77-4838-a8be-468b1d6b93aa
 47 e304b5f2-d3b3-11f5-ae3a-078f5b2aec78
 48 59ce3805-24d1-60d1-bc59-c0f3c07980f2

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 281644230362212263505145857607506205286025734416. Exactly this sequence comes out of new Random(849).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 87 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related