201303310029 1bawsg

explained decrypted filler

seed 620

Metadata

Post ID: 1bawsg
Title: 201303310029 → 2013-03-31 00:29 on A858's clock
Posted (UTC): 2013-03-30 14:29:58
Timezone: UTC+10 · title 00:29 against posted 14:29 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201303310029) = 296c3534b0d733ee7022e1b789d0f11d (name+title)
GUIDs: 48
Filler GUID seed: new Random(620).Next(9) ✓ verified
Run: Run 43 (seed 120,022,078) (seed)
Draw: 94 · predicted N = 48 ✓
Machine boot: 2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 6 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

966F41D7E31110A4 DB39087D22ED1E57 E8E2ACF00289F2A2 C6885803C02AE6E0 ABAF67BF56AE8A0C 3901C3034D1DDF8C BBF3280D29499C47 DDFD3F1CB2A0D3C0 18AA8A38EF0F3165 90378887700A28F9 8E7D7BF773859EA2 A290DA81E2397227 2691DFD3E155F0E8 291A1AA24908088B DBE8AD7C4B9D2D63 60E3D7A6BBC14093 CE0EFF1E7CBEDEBC 9B7DB17341D27895 D36375A8B173ED49 F8269EEE5DB1AD37 1C3C3948D96AB965 48E7707B9A21A2EA 1446DF462010C976 2FAB44E76CE821AA 12267D97FA7F157B 12B32D2FAE0A385A ACD359771442484B A1CD13684B7ADF63 988E5CD3CEE2F382 AB0FE05F146531FB 53E2B977C5B29CDD E074E4A2F02C2358 D08A12FC9EA1834F 65AEEFB0F830B496 64B935D12A57ADA7 84FA8BB28E054201 609B660765996C2A 28E10F92B1FAF494 D4FB2E7E69CFE784 2EC8C7B66B8DCFD8 02C7E32056D0A13F A121D4FA898D3D7A ECD7B093B51B9EBE 86992807B3DF3713 D241F28770C8C8BB 5EC3E9FA1FBFF38F 6B8BFD7482D8362D A9811CA64217C505 431301A754A76F3A 21689F65D94DA615 EA230AE369DF4960 86FBDCE2AAFF33F6 6CAFC1BF44073741 DC16CFBA931FDE90 58F1F3B325E2CE05 B003235B92B6BB21 0521391E5DB76FCA BFD8B95B73D58C7C B7CD420B283CE744 329B7BC380180AB7 0FBA3D9547F36BB5 2E1F34FC9E54B885 61E7D9075A56EF91 137AE78EA12D3AA0 23A8B436A803944B A2621901DA62E23B 7F2BF884CD496BDD 548B33E2A0D4809D A6BD1EB0A2281388 F670DF3B7DB047C0 F8FFC47EBDB450A8 03ECAACE0C814586 BBF554D193610543 814D991DDF002C9E A6D5C8D843A19FAE 96B05496E24AEC82 ED8A20D2154C0907 191DDD2848BDBCE5 7A72BBDD4BCD0A2E DF3FAA3D0A3D9084 B2E3305FE0208D33 BBD1C4639543670E 596AB611480BAC16 3576B0AD277DF2D9 093B02395940CCE6 CF5396602674EF86 3F4289E3F71A5AF6 4B469995CFEE18D1 7A75D55FA9EA70F1 43E890C30C698BAF FB57925CC3EB53E6 5A822A1AA5B0BBD7 CBB321F0A3B936A3 36FC5A8900699BDC B60A0E58F057DDC0 4C879B1EEC340B93 C0E9C960BEB6E32B D1B5643E6B22B021 70992248DD6311C8 A0D5ECC30C867EF8 941748D15CC7D251 D2C5159A916101A6 0CB27BF6FACE8E78 2F72DB9C064ADDC2 9876F9A0F1CD44B5 F8B98F9FA2C1C5C5 BCAAF9BC4EA9FAE8 7A5C3BABE8E3A3A0 30694351DFEE2690 4DDB959DCC6C106E 97B52CE428C0CA6F A2DBE6A6EC10FE1A DB1BE03C1ADFB7C9 8D0218ACDF830FCE 33B1FB542B4CEA6E FB31A0DC5CB77455 5E402EB1AC6548A6 667C2202A059328D 94D21C82116CAC12 1965CEE0566B9594 0720E0E144CF7BF0 AD86C11819AAEBBA F4FB7CA95E0A43E1 6594C63982FB6739 1CD4604EADE07CA6 E0F1CF34A74C4DDF EF5D9DD31186DAFC E6A408620D86F856 E31343B6DF3BB80C 12CDBEA04A749453 47CD723248A868A1 EC87EAB40D85703D E5751441B91F63BC 18AF5DE4560588D0 81F2FE0D24F6C72A 508C516B9FDBCB5F 15DE0741A3A2151E 22A1BD5D4CB810FC D57908D3B20C82F2 5062CA5B5FB67FD0 B345CE583F9BB638 9EDC13BBB0471EE3 D041BCAAADCED172 1B59E5089E325771 82C1D502414407A5 E6DA873A625B3451 2125298CC90D5FD2 49E1B5570F1E1679 FD2D54FACD2A04F5 2575E4D958FC2C7C C68DAC4E875D2E5A 1C08AFB4B05BFDEA AAB42E69D05F07DE 12F463265C236B16 469F090123EC1AB3 85028D7A53BE6455 2B4BC39CCB37C82B 948900783832A056 6CA3A5C73392CD95 9C1FF08E0A77DF3B 4A1CDFDE4B84AE7C 758529044D63CEAF 8E4AB4A79E479CC6 38AAA93BAD28D3B4 0D7FEF15CA2132C7 A58E5A1080A57F75 B1409E2C230AE1CB A271197E826A99AB 407A39977BBBF1FB 344793256815EF14 66B1423094260C80 B97C80A453969C68 DD2F9D2B3205575F 5DDE5A19298666AB 538D4B1EC57F6C3A 9759F6A8053039CF EAA25148BD2461A2 86004D84BF4FDD9C 9664FB3396E74939 C80736455DA3307E E33A717835D3DCCD 501455221712F916 38F7E2F69DC9F596 D6ACF4F51513E3F5 A4A7E81615B4CC55 10059078E574E9E5 DA5F2AB11D998A2D 910DB65FDAD48735 C12A1DA2FBE6E953 2E33110493FAAD45 2CEFA5A76ADD9604 CF8E99E021990F63 23F8C352FEEA1447

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201303310029 (name+title). Key = MD5(password) = 296c3534b0d733ee7022e1b789d0f11d, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3fc26c5c-8bf8-5750-9a19-e9eb748cea5e
  2 42d7adf7-ed18-6db7-a1ae-cc0e8df7c37d
  3 c9776488-aa46-15e1-9a80-01aeee9d6902
  4 aba3ccd2-f59e-8739-9b3b-76a101bd2ed6
  5 61f8241c-ac9f-1fc9-ad05-8a64795a855b
  6 f4393989-6772-3196-a004-96ca7a0ea2da
  7 2e9e076f-0fc1-66e5-b748-6de51f450e7d
  8 401f9819-bf54-4c38-bc2d-466f357385fc
  9 6471c253-ad46-6249-baf2-12cdb27668f8
 10 097a4eef-277a-80f1-b7da-a3b67ba83b55
 11 4585a06d-6ddb-078d-bfb5-239772d13928
 12 8229df0e-6367-49cc-8392-87f1d4a6be8a
 13 1ac3886a-7f35-70ca-ace9-8e5c066e6f5b
 14 50086d74-ca3e-0d3f-bf8f-2b7d109a9c24
 15 e359e194-1f85-83c7-91fd-5a1b372f2a98
 16 24846223-a0dc-290f-b0c0-567f595fa7a1
 17 9e909101-eadd-490b-84d0-5915c2c8a43a
 18 64a0ef5d-5277-3280-a5c4-478f797919f1
 19 08060eed-24ab-4006-a3d7-1470a61520fd
 20 cdf27dc7-ca1c-3f7c-88de-509ba6fada89
 21 504b9187-7622-1051-abcf-f0273509dfea
 22 0c398727-6802-883e-beda-70580733e45e
 23 aba613af-0fdc-6a81-86a3-58804e41b81e
 24 9dccf14c-b9fd-5bc5-806d-350c9592107a
 25 131ab8a2-e727-4270-93a0-c6fd501b035b
 26 f25d1b13-b6fc-26fb-a558-d66f8c68ecbd
 27 fdacd700-ed73-8e1b-b3e4-e7bc48e02cee
 28 21e51ab2-3b84-74e5-81e2-a319fef1b041
 29 7d28bd51-0092-7544-a4d4-dc992557b487
 30 8e8f96fd-2795-3310-a0d3-a5741cd0a92b
 31 eeb01a63-bd4a-0ddd-a7f8-386c684275f2
 32 dcae8f17-592e-6372-b763-abb63f46bfb7
 33 eff1fae9-b7e5-5edb-9996-2b810f1cc10c
 34 17e54cbf-02a8-449c-8780-89d7a6d78429
 35 99fc8ddf-75c2-1219-ba40-06daf18c63ae
 36 65d0ae7a-f49a-5802-8ff5-318699ea0b8f
 37 16f0bcd6-3741-5d6d-8a73-87f0c0e2f3a4
 38 403ed702-1ca7-8d2b-8fba-2292c4be4ba8
 39 203252e9-ed73-45b5-966b-9687a1a99e73
 40 e647e3f9-df0b-8c1d-929f-f03b6947703e
 41 903636b0-b427-4a74-86ea-7ddec8bc71ab
 42 8ba399d9-1590-8a31-b72e-9f5bca655088
 43 5fb38400-b957-723e-8327-e0251b8ecb69
 44 27a1ecb5-f788-3175-a386-896db21e4c62
 45 7262a032-18f0-74dc-8dfb-e48aa8c63b9e
 46 b6345248-3aa3-74f7-81dc-489baf5c7cb4
 47 dc6a9fa5-9eda-286f-96a7-64691f3e3fe5
 48 24052396-d98d-1f9d-b7a4-1c5af45828b1

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 561813646804708243431865428773065415584848737721. Exactly this sequence comes out of new Random(620).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 94 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related