201304040801 1bm91h

explained decrypted filler

seed 891

Metadata

Post ID: 1bm91h
Title: 201304040801 → 2013-04-04 08:01 on A858's clock
Posted (UTC): 2013-04-03 22:01:59
Timezone: UTC+10 · title 08:01 against posted 22:01 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201304040801) = 14b76c973039757dbc2494aa229f128e (name+title)
GUIDs: 48
Filler GUID seed: new Random(891).Next(9) ✓ verified
Run: Run 44 (seed 1,087,967,875) (seed)
Draw: 32 · predicted N = 48 ✓
Machine boot: 2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

87F36FEC25351984 046DBCDFB824E18D EE8A26AB9A934346 3EE7CF24882E6FD5 84FDB4C9E39904A7 3EC3594A32A471B6 36F61D3D054A1BCF 9EFBE6D2261C0CCB F09DBB4ACEC602D0 9BE5FDD483275110 EA89700EDDFC9C0A 9534D8DF2A2159BA C2D0DAE28145C95B B28996FB64F84677 D287A631DE93B0DD 3679C6E4F405C280 9C961954A35BD69A 5CB905FF0C0DA5D8 64F1FE7ADE02C7AF F9C10FDD4124D6AF 40AF7B81DE994BFA 235FE1D77A3E02E7 3A1EF92C08E3AD87 0A838CAE0959C34B 1AF7D3FC2BB66D24 3EA9E7F4BED10338 D14E7F590B4F709C 89E79A840EB87177 1A172EE97E607BAC 53E09A9FB75B7567 E5420B8EC7829BE6 59B365982176D28B BC7C2A081AB8FF2E AE38054C2C51058C DE8030A80B87E286 0E8A817BFD6AD242 C83554DA8F9D41C8 68F61B82E23EF5B6 530D13DFEF53DE1A 19AF14314151276F 3EEAA1180743B04E C2AE4B5C0AAAFFD1 8E2A32B08ABF5DA0 3D41142E3CC7DDCF A5E82E9BB3B819A4 AE833527BB6AAFC2 544E580B7C00FB4F 08EC9405447A5B28 677B70677C062F8B FA4E769CD5474768 71A5254E5A2715CC FB473A9D6F618B5F 45782F2E27D396E2 E61D9FF8FD59AFAA 0E5EE707C4B4E354 9007E06ADF5AE813 D4A0BA9128C312A7 AE59557F873CA9B9 68CCDC53483F8B7A 5DDA0A1B36F10EE3 1CB472114801279F 38D6932091D6863C 25AABDED58767A70 67962A7D71F54182 EDE81A8CC0506CA5 90AE27322BC8EB31 CA22A33004B522A8 1F83638F4EEA645C 668FBF837D1EC7F3 6F9B264DAE0664DC BF5A547993B20CF7 6F89305A2423E785 F2FD8704DA5D70CE 5E937753BAD0B4F7 B3E91D2FE9967742 7C0C68297891C27D EF1186276904FA4A 4EDA8FDEF30FEB39 B6A5E4B7AC60776E 13A23799345B501C AC1517A23851006F 9644D9F3821B325F E9E941FE8C42494A 9D4DCCCB9A5D0F47 1EEA1F595F1E2731 C43C31B4C4924D90 B5FABBEC21B5691C 2687C469EFB0875E 7FA9666B78DC1EBF 7F611BC322BEE99F 1464B760380DAF47 966286730885048A 6850AE72C60C860D A66684DA39B2B3F2 7ED9C2DEEF467867 A64CA5AFA11B24DE 55CBEEBE8ED794DB BAB23EA12ABF9594 3713B9CD6A9530D1 4236A98F4503F894 AFC425D4AE904587 E73271B4502AE7C6 B4DE3164FD4D53C2 520D82E2E429C4F0 085102C891F392D9 F364EC0B071C9D1B 6A02DD2AFA3F366E 2745367D78A9D348 0226775854118075 9C050A4467D8226B 2E22EE989A452A67 EACD9DB6FBA24A4C 39E00E0788154680 49A41E88D7E58EA1 B51C32EF54500B12 E59CAFD2BF5231B0 E5E1CD6EBFC6AEFF 596C6D93BA588C0A A687FA9FBA7C8423 3FC0DF2D4B9100F2 99C82A5656F81944 A91F3C4B3FD64F02 22DCEBDA7FDD8E82 7B6B61FD1A921092 56F6775A35FD4E78 27820E0F8595B6A5 DE6AA529CCF2EB71 6B5F2871EDB75CBF AF098E5CCC82323D 8DD8F4F49AEA149B A10E9F33BF523459 D4DA572A79CCDBCF 53CE842FB76F4E85 25994B1CF4AB5A4D 8B195A767A5D1204 69197E47414670BF A7C0408467C8F882 A777DEEC56819D2B 13FBC7C60F4AD582 EB12E47E4A1992DC 7E772DB46C60BB63 C09A98850BA6A456 9EA5EA85EFA484BF 04215C4EAE9D3657 A603B3B560594D68 22CA834F4E5516E2 1323003DACC29A3F 6EC07B996A6AB30F 251A3BAAE80FD833 FA0BFFB6D67B5C4D A7521F096F551ECA F23A179B3CFBBDC4 01496D470FC65A30 29AADB9B27AC9AB4 C75397A569C9D515 7FA1A8ECE3B5F9D7 9A805BAC3E86B813 8E4CB94A8F6DFD16 20644748BFD65D48 7B90DC93DEBC65F2 6F25AF091E29B5F0 C1D1FEA45ACF1EA9 73AF53951297810A 809F32F18B548536 4ABA35B244745534 D793AE1BDB57DF81 B9B776BB81C19498 AFD591B98A19FA23 CB44A00C242470B4 5B181ADBDABB49E2 421E8AE867658D6D A0C124AF40830C81 84B760AD6C8BCEC2 3A737B473E55FE31 888FF465A6B27D2C 7DDDC059A691A61D 17EE080BF203BE83 9907FAB2EC309BF1 1AA3D0999142C168 7520CA5C0540513D 92FB46353389EB35 BE3540ED1AAA4C25 3ABD5FF8C8EA0317 135EFEDFF5347A0F 098F387DC159F092 4F508DE44F800882 3D9E9B75F89B647F D14987A8C81CECAD 0056DA599F95EC4A 5B9C67E4FAF1A2AC 99B4E2284835DD85 59A25234407D6D67 73C55A93FEB2D723

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201304040801 (name+title). Key = MD5(password) = 14b76c973039757dbc2494aa229f128e, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6b705bff-b971-19d9-b361-4593b8f1a774
  2 819fe969-0adc-2e6e-88b9-c6f2a3264b49
  3 d0e17c52-ad35-5781-8b27-98f929373dfc
  4 ad90c6ec-73bc-612b-88f7-63ac1b9e2d6f
  5 efdc3466-2ab7-4443-80d2-4accb664b3e4
  6 63e4c4da-00bc-166b-9a00-8ddadacbc8c6
  7 44dba566-38ce-1071-9188-66eb5d615223
  8 e4d3f845-26a7-3c37-8eb5-2152b3aa75fc
  9 e08c5ad4-f983-1d32-b95c-90e301137912
 10 ef98325d-c067-7d5c-a934-ba2881e64d09
 11 cd6d07af-be6c-6486-9d25-6b1dc06edb5c
 12 1da72fa2-2955-0970-8188-45e6eb455487
 13 d37370a0-7dde-1794-ae20-5cfd0ff842da
 14 059ebec9-0090-01bf-87a1-21ece51ed062
 15 a2846ac9-4302-5274-9aaa-1302e2233bc9
 16 a3be9c8e-579a-4890-bd84-41f44c39afb2
 17 61a510f4-3475-396a-9e7e-0344613846ba
 18 d824c861-2cc7-3bc7-bf1f-3c72de1e6f7b
 19 0560ba93-84a4-7fc8-b4f1-dee866696bd0
 20 8518805c-8a8b-2d29-a1ef-f708be437b66
 21 9437ccfa-ae0c-191b-a616-60308350c523
 22 a2321dc2-4363-3b04-94a7-a98309a4e8dd
 23 c127edb8-c928-5388-a04b-7db7fde32945
 24 56607afe-06b4-23ac-b9d5-221babdcdc25
 25 fe770d43-4016-053f-86bb-c145152595d0
 26 1ce5927b-2e2b-5b26-a605-cace111d08f7
 27 9eb9daaa-ce85-8500-a532-5b888f088491
 28 10897b56-665d-680d-bf1e-aa907a767c74
 29 a0ff9c60-92c2-5572-a44d-175fb58fd70e
 30 0c7e3cd7-c222-530d-8bb5-ddd5388429d7
 31 17650b7b-15a0-1efb-b16a-829697b8c022
 32 2a177d23-3a8f-12c6-895b-8930b76c41c2
 33 a7d55610-dad6-594c-9975-be004de84a1f
 34 ce0c068a-5676-2140-81a4-a5da5dd45b9d
 35 fe7bb03b-9984-681e-9661-b67ce3753933
 36 55ed856c-432b-3e5e-9f93-e84bd7564242
 37 d1874c5a-8218-0e9c-b854-579c63902441
 38 570832d9-a782-5ce4-884e-7ea204d0f73d
 39 8d32eca0-1577-8e42-af80-0360b17355fd
 40 f1cee7a4-032d-784c-ad19-ca4a072626ac
 41 3d2a92db-a81c-4deb-9950-ef49ca8bd149
 42 fd075dfd-a3a7-2158-b07c-d42bccc8481f
 43 f92a2289-bf25-875b-bb8d-3510134bd5c1
 44 dda23a19-7140-00bc-8631-be6047bba557
 45 b15d336a-91d7-67b2-95a9-72aa8075fcf7
 46 648f67f7-66fc-4405-b315-0470286f364a
 47 610c0562-7710-4380-8065-9f0a1859af1f
 48 bdcac5c7-6cb8-3b9b-aa52-0db31c72dca2

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 125641131760105433721352058655115263058742806443. Exactly this sequence comes out of new Random(891).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 32 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related