201304040209 1blf1r

explained decrypted filler

seed 197

Metadata

Post ID: 1blf1r
Title: 201304040209 → 2013-04-04 02:09 on A858's clock
Posted (UTC): 2013-04-03 16:09:59
Timezone: UTC+10 · title 02:09 against posted 16:09 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201304040209) = bb5ce7b3a6cfa1dec0e435485eee8235 (name+title)
GUIDs: 48
Filler GUID seed: new Random(197).Next(9) ✓ verified
Run: Run 44 (seed 1,087,967,875) (seed)
Draw: 24 · predicted N = 48 ✓
Machine boot: 2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 5 · 1
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

362534FE1E2F0989 3775D82F503E8BDB E4DDA885C03CA4EC D84AB8D9B6FDAF8B 30C9E55936C1AE2E 88B714F6F4108D2B CD3F7463677A0908 7A2887C2BDEA5EF9 B64D84D45C630964 7968FA26D0E754EB 158C3AD1A64B905F 950CB1369E974DD2 3E705195AC2D0F33 29395D7F6A4B3DE4 1B503F4CCA7E1806 4460EBCC18A72C92 F6AF2B7D12B99648 0A4F00A205D49D7E 90D820B5D90623BF 1ACA659F7C3EBDFA 1B65496785ABAC24 6CF6F33D901B50A5 0ADEE50056E0E72F E4DDB0F29C782402 DB19FC68647434CF 580E407C490F876B 097A8E2FC45411C6 1E1CA54A566DF8C8 E9EAA7C71B53F224 6E008EFC1A604395 12BC8BE7F112C730 8EE77554E2347FD3 36FDF415C7C7AEEC CF9CE15917F23C65 4508B6E7FBDA5484 01165B36E466183B 23E0DE0E4EBA304A 861D3479EDE4A31E 5B48FD0BA8F99A78 CB65DDE2ECA91499 40236132EB1FF999 E9957FF7113B8632 848F85B8F323A009 DBDE98A62C9E7A3F 6036CB37FF4DAEC7 0C1C275B182D659D 51488A2A6EFAA36E 5F6730381F9696F8 13AF5B46B35BFEB6 F02C8106E796A839 87AF72729FD6194B 34F72D72CF9C0B25 6F01A273C52587D2 C6EE9231047F9352 739E68F6F9597F5C 27B7E2C91CDDE405 CC43DD2A30286965 3C2B51A06B000B4B 3785E4C960D6EF34 D2EF5B68CB6E50C7 C26B8D71AE171496 B6D3D080B394E7CC 66581EB809B8EB78 194BC3E321F24C6A 24E047470B4C2847 554904A12E07600D F150E20C556AF889 6C0B8E3CC4B28D67 658309C53D267E44 DD8F42EA3CFF2E6F E3DDD69948C819C9 DE9D27121FF633E4 1D92D3EC5ACA9DFD 953C4599C89F03BF 6BAEBDB136DC6751 407B00187D76A85A 360264BD1C5CBD7C B6F26D7121DB197C 02D6D21D2C1280D6 AB0AAD7D4318566F CCAC95B576BBB88D 8A64A5A7BA7A3E83 7C14EB975001D58B CBFDC0A77C4F7643 35C81466BDF19D85 B36FD82F290D9D86 6710D7600C5600F2 3CDB219E69C82EB6 EF28CB7F9A18F644 A627AD56062E770B 7FC88A1AF0B041F0 F8D05D3E51232D88 2723642054F689B3 D9E915F05C32AB47 C0F97355B67E6502 465A93C17752C355 A2098A29EA33835E D02443A6DB4BB900 06233CEDEFBF8BA5 9B522171766E56FE 5B266A1F35D17A00 38FF17127B41197C E420737E6671AC14 1C32C2754E414072 25EBCDC2B8596226 91DFA7C3952B60A6 3B4D561BF3B05814 8FBDC5924FFEF935 15794F05C7EBEB5A 4E594F553FFDA8EC 9ABA57958B674608 E0D4F1465E054263 80680F56D328A534 15AE5A054E44654E 812CF08FA49BC2CE 99505D7CCEC81C83 6AAFC27244200736 B5EF4705FE970673 8AE18764EFF7E7D3 16F6DB7E60CD84CB A4C3E57CDE691FF4 BDE393F3CFE4D71A 7274E39E823FDF5F D88CB07518D919FD B9935725B2668DB5 EF31BAC4D2CEC742 71823213330AA7D3 D62A3A03D53E2FA7 216BCEA6268B7A4A B3752E9D15427D18 134597892C23BB96 F09E9179EBA28036 3A981EADB4080094 FE37A5434E5C5EE8 BF90F22B48690CC7 872AD1EBB379358B 7E70853B08C0F493 CF4456B094F86371 B4BE853DF6D789AB 00A6C13F1C64524D 9EDF1B33BCDA4AB0 6E0FF5ED3226CBF2 779DA5268A0910B5 B11798E539FE926E 25945A9244B4366E 1EA6D03554D3F663 6AC12B58B8D01E69 FCE7D32CFC175C68 3D7312DA12A2D27D F331C2FA5F08B5AE 7E08F7D2CE4D3990 1421DBF8C86AD946 835CDBC9F2B9700F 131735E17BBE1542 5AB6856AABF9007A 399C2E825239E699 35A61E6F1C48FFB6 2AFEEE1437ED0EE7 C20738CD6C2B0571 3643B72CE235D378 1941A4EDD66C89A1 C8BB65261AA59D34 3F6C6161F125EED2 21A2FA2334AC2D58 FC58BB7DB0EC14F6 E4FF2C3B8EFE9DAA 44BAB6AC1D25D465 88A8CDB9E676EE82 B44D256F4BB51A9F 6DD004B34B085678 A1C66ECF521D8CD4 7F22EBFD9FE47814 820E6970B1B5B7B7 594FA4219CC4B216 D1186A51144B9B95 980043C63B4FF498 05BC77F6CF2721EC 4EBA266C9C3E3801 6E15446BCCC3C818 5FFCC83024B16EAB 4CDE4A3E32DA5362 234340BA4625B409 DFB4971EF3FED14A E9E864174BDB1BFC E239F0DB900B5FBB 4F877CEC1D7C924F D625CF41685F67EB E91FBFF0BB4E826A AC3F24846D6B4B15 8A162FC5ED005209 D94EDF3C2B41AABA 2C0554E0D0FEA104 F19B9CFD62573041

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201304040209 (name+title). Key = MD5(password) = bb5ce7b3a6cfa1dec0e435485eee8235, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 89d9492c-7749-5a59-98db-184860b771f7
  2 27d2c209-024c-5e6d-95e9-b754c95c4927
  3 bc0f91bd-d39d-46ad-93c4-a582e636fdfb
  4 9d32ee25-b49c-516c-b858-0727b232deae
  5 601bce9f-38ad-1999-985f-87fb4835fcf3
  6 f9013d80-b11f-6a29-bb3d-915fde5d6c8f
  7 50f9a9fe-9489-111a-90c0-68306da5a2ce
  8 70ef205d-e3e1-220f-9a82-ecb744d07659
  9 134f6553-e488-3aba-ba5e-4c3cef8bd2c2
 10 80313d1f-8fe0-8338-9ebf-8b91d5047991
 11 831f8d64-ee93-31f7-8cb4-9a77a7b819ec
 12 381b5e06-6eb1-2eb1-8611-ee9940236efb
 13 b5f17ca5-60a0-0b74-bbf8-dd917a39b321
 14 58dec793-1192-8a69-bcbe-c781512a99b5
 15 f4f301c2-d21a-72fb-b4db-3f4daef61f6f
 16 ec5b2e08-3cb3-0608-a57b-4bbbd17c320d
 17 75adbd60-eb87-669a-a5b3-a437b5a3c6da
 18 16484762-f591-1caf-a42f-e9ab1031d4a7
 19 c514cce4-1ebd-0353-9049-af46167e0b9e
 20 cea5b070-9399-524f-8198-9023169aae77
 21 99cfa488-de50-8c25-815e-8e1192f3b1bc
 22 9cf1e9aa-2ca0-12a5-a4a3-c0dc9941da6d
 23 10e998b0-cec0-29c2-ae6f-6ab989ea2755
 24 4d576c6e-cf99-7330-9528-68213d4f4a40
 25 be091ab3-74e2-065d-81b3-042e67b9f629
 26 cedb2d8f-706f-2955-9b19-abbfe4bf660d
 27 6b96f038-4598-2e9f-bd71-4673db5eb387
 28 976f5170-b282-62e7-adb7-5a62e90333ca
 29 98f18626-8759-8c7a-a1c2-ea61b24c3e5a
 30 6234a073-c121-6683-bd15-c67d68d83a7d
 31 2a7063aa-9576-8701-92cf-5ac903f7e7ef
 32 4eedae20-7010-3a0c-8683-4c190f5f7ff1
 33 4089aafa-85c5-4c4e-a65f-cedcc85bfe83
 34 24084e2c-ef89-804e-9475-83c9c2a18c72
 35 21e633b4-2b67-3b87-9a5b-62f8f6e61af9
 36 1ceff60d-5b6b-2329-8fba-6c9c8ad1bf0f
 37 296f06a8-7f35-160c-8a5e-185c8aac6b1d
 38 05038eeb-69d6-5497-8782-8d9ee26443e0
 39 2a8d8ca6-c263-0c2f-bd02-c4baadd33165
 40 bb59294f-0877-7422-8181-695e02dbfe39
 41 e5ec98fa-17e0-625c-8773-0309c061fdff
 42 58e3b546-62e1-4e2f-b7ed-2bd2a5fad25f
 43 ed9af3a7-0306-7cdf-bd30-bc1c2ad1c35b
 44 1374e078-3b9a-5be5-be6e-e7f4b3774321
 45 deeb3ac8-8950-6cdc-ab7d-8f4299447d64
 46 924648ed-9a26-2735-ba1f-1217cdbfdc74
 47 d19d3389-b58a-364e-9f61-795383be1e20
 48 3bf06646-6757-4485-8361-6dbf26956347

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 554516123832087061058127022686834832150764756234. Exactly this sequence comes out of new Random(197).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 24 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related