201304041057 1bmn9q

explained decrypted filler

seed 748

Metadata

Post ID: 1bmn9q
Title: 201304041057 → 2013-04-04 10:57 on A858's clock
Posted (UTC): 2013-04-04 00:57:59
Timezone: UTC+10 · title 10:57 against posted 00:57 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201304041057) = 09040a13f7247d7d77cec834efd51ab7 (name+title)
GUIDs: 44
Filler GUID seed: new Random(748).Next(9) ✓ verified
Run: Run 44 (seed 1,087,967,875) (seed)
Draw: 36 · predicted N = 44 ✓
Machine boot: 2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

BC253E30B35DDE62 C7A2F6E3C981DBBE B6A3E2FB746ABAE8 965E2F9D0A92F91E 1C3EB7DFA17E41B8 5B5AA74937BA3B9E 338D1202B93814A7 92DB12D2BDA6A429 4260E1030DF743C9 C558285E6727B17D C23428D0A0110EDF 6E3814A6E8ED54A4 1A11344A700F4415 0D75A0A7629EF36C 96F27272F554FD9B 54195306779DA5BE E6D5FE583C376485 6D5F23F8B06EAA11 52A98FCE0614D650 8D29D6670F9B03E1 DA3157B23ACC13FD 2B98D2D3E09DC35F DE536B7533B23580 CC666495F543F606 7BACBD52FF6B3439 CD35CF88EC846E89 CA953BE8C9B9EBE7 3CE0A52A693E80C4 57C69877DFA90A07 FD708B374C765B19 F1A954EB1DBDD682 EE39AE863BA4D490 C178FBEF55158A29 0008DC88EA798429 46FE72E6CEB8DB1E E8625E96D75908DB 04258256B1199B6D 45D3E76AD5DD9E8E 482F5C9818CF11A4 376169F90E66A58D EEF9E18E047BEDD3 CFF48944F611D687 A0088044D682BDED C4B011C6249D6FB4 4CF7A85F3C03B0AD D912E5E7E845C477 535CCB56CEBD5F56 B79A6BFC23FCB524 AEEF0A58198AC48F 2B0B216E72AEE85F D20097015C77FED2 B1734D01557E1FC3 874CC73192CD28E5 DA32883402E23D70 2E529E1CF942F5DD DB3E4F703B8D6EF3 711E4F78F128818F CD61AB06A86A2776 0AA8287F3CB8BEAC CC99327D0B3D52DE C3E43475675A189D 871DB03E1CD3F520 B52F7FE88752A8AD 67E50E8ACF476543 BE9DE71F9F04C347 CD5CAA618BA84327 1DFF2F3866CA7772 3085A9398C783BCB E20E018468FBCFFF C10401754F81AC1C BF8DECEA5E8874AE 88CA813BB5B5F96F 56050E2F8E6C60F0 2EADFBF76C9E1F3C 7936DF92D0F733A1 60AC07F2C60DE750 58343233DAACE778 D9DE20438B9AFC3D DCD2E7DF3E1C86E0 13AACC91ECA28E7D 4500648B25277A0B 81A1AE0F2DAD0251 278D5E35AD88687B B2C7597C52D21B20 4F45B1888ED6A1C5 9BE3BD5C8278C499 8F2F8A930A50F775 55741889F7E5484A BA5283DAE8E526B3 D6307C0730CF9A53 A072C4388FE42B27 A08288AAE975602F C9371A70D7F596DF 895CE1B02506083B 58DCF12794A3FF16 72FAEBB2906288DE AE65E3310A191DA8 D13EB2766EC0F135 D03BB599783B72CC 5D91619057F7F2E7 DE1ABFD9C7F3A065 7BE9214CE5E55900 A90E1B1A940378CB 6A2E9F67D7AC0705 90C7F5069955F3BA 0ABE15C7517E906E 12158DEBDEBA2587 D074E39152A3E6A3 CA39370585CB9019 72411BB7CCCBE57E 073E7B3E3B1E49A0 7ABAA060E01261DB 4B79962E8EA042D5 2309C2A413FF717A B0A9D31BE44372F8 B4CB528B015784A5 B12E1C421FE9116D 7269D78488CB1CF1 3236FE7F2D6943A6 8D8A645E4BD1A38D FF30F987CB714C1C 3A191FF8BB25D8B5 7394F98AAFC2B417 BA23F3C2531361EC 97A09554AF532194 B41B69CA5A30060F 9B532891B60D237A 97ED1B835611D949 F06E6B36B11C605D 259CBE359D9388C8 E4E919995837CB50 9FAFDA9E4B7FE4FF 75D94E4DFB657CA9 B620F6E23C15BB7B 2B85E187FEEF5893 E969D68C0AAD1F71 FEC27B9B1243A48C 6C8A63190FF22557 7519D15FBCEC2048 1D8D2A1F6CB2A4C6 1543FB3AB4E1088F CA865C33F1B726D6 FD262921566B799B FC1F711D0D2C9B09 8E12D62342453541 86A67F665E5AD8F1 A077BA482DB0EB5F 301C0B3D13828F96 0861119ED6FB2CCF 9A5D27C89B38065E B899DBC994335E58 89D0A0CDB260DA22 53D713413CB9A460 E34E6369C2FBA163 E808F4B5FB00FD17 4E6F3B87827C3D9D 62BF2960517B0342 DABC7FBDE3E7C9BF 4113AA08957ADD36 5E9CC28BEEB276DC FB418D917DF9E55F C40582B5637B34AD 14A063AB1ED708FB BF7BB5583E93945D 1CEA77B65A4DF3E6 AE9630D6AA1D63A6 32761EA09E2B897D 5DDC80BE09F9291E B214BDBF68536754 029CB3BED9BA5CCE D3E2A83FB62E6DFB 1670D511C00DDE7B 3AFE6C2A15F31E88 C46D42A3EDC394E1 739B06DCF4FDFB2E 2965E4E7A5D7CE83 1B857ED927F019A4

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201304041057 (name+title). Key = MD5(password) = 09040a13f7247d7d77cec834efd51ab7, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e1f2aa38-386e-4177-bce2-82787b12b5c2
  2 f2ef4dfd-930d-2822-b30e-f868d73ce80c
  3 ef31b114-96e0-57b5-8a67-4915b2182abe
  4 d0dd94b9-0d49-19a2-b86a-98e8935070d6
  5 c9fdb55a-7439-8411-930b-21c098d5bd58
  6 f775f48c-0d64-2302-9c9b-0856809feedc
  7 3a5a2df7-dca7-0080-a399-0cef5ac81828
  8 4c983a2e-2ca7-66d4-8075-8c77d1b20c61
  9 e8b3740a-bec8-4a13-9189-a7a9722325bd
 10 ef6220a6-b538-0a37-a2fe-a0f2ccde3e70
 11 122f1102-2c01-3117-b945-e5756dd4cb4e
 12 0b67af09-79d3-3463-86cf-2597b3d406bb
 13 93147971-110e-75c7-b7aa-441cad621d2a
 14 42d80506-7797-5ac6-a024-6f21f14ea3a2
 15 a6ba9a36-4356-5772-bcfd-eb49c80f3609
 16 e7c0c93e-8b85-1f53-a197-03541c385072
 17 e6c6dfcf-8455-21a7-8951-6f72fff8ded8
 18 6d5df037-e585-6832-8dce-440eb5c886a2
 19 6c5ae97d-99f8-893e-97ed-8eb408819bad
 20 99ab97fd-fb07-8c22-885d-d4184041b0e0
 21 a240599f-741c-19a4-9732-db016c5aa782
 22 509cb0c9-b5c2-3ca9-81e4-b6cfd93a566d
 23 c4fa7da1-ec92-31a8-9009-3d9283b42623
 24 fb6e6661-3ddc-342e-8ebc-24bbb1c0d1b7
 25 feef32c1-c6a5-0f16-83bb-d3b212c78e6f
 26 cd35652e-9222-5445-812e-65405090d7db
 27 40ef302e-948d-05d7-9cb2-997e9a6d3599
 28 1382c5c5-a1b5-1e6d-b9e4-d9298162be42
 29 05aef91f-106b-1a7d-9935-a9c1460fa6e3
 30 a6cc653c-ce6c-4452-ac3e-b147c8da8f1b
 31 c1a143f0-64d7-2bbd-8b07-3a4a44fb0a7e
 32 97f10c27-ac73-46b9-8b95-fec31dbc6bb2
 33 2850f99f-f249-09df-86cd-8efcf60ac9a3
 34 22a5298c-d93b-6757-870b-a1200411d342
 35 c5a7d0e0-7dfa-7538-9577-a1dd19036d7b
 36 495ffdc7-6afd-1046-a47d-cee7370f6665
 37 9b06d3fe-dba7-59d0-984a-d81f9cbddb6b
 38 d06bb7af-cb35-15fe-889d-efaf3581136d
 39 11d989ab-522f-30f7-adf8-080ecd9f59cf
 40 236fc5fa-94ee-64c6-8554-4aacddbc2680
 41 bada545a-0fec-6465-a37f-817f503604b0
 42 ebd146b4-9a9a-40bf-9caf-202fe07d368b
 43 6256d61a-3f77-0152-b92c-8836afafa52f
 44 7e26916d-d571-8525-af51-2e22a882b864

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 42518206403375512688133305011424067151366408. Exactly this sequence comes out of new Random(748).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 36 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related