201304041817 1bnec9

explained decrypted filler

seed 409

Metadata

Post ID: 1bnec9
Title: 201304041817 → 2013-04-04 18:17 on A858's clock
Posted (UTC): 2013-04-04 08:17:58
Timezone: UTC+10 · title 18:17 against posted 08:17 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201304041817) = bb9a725bef41d7705421d31ec848d4bf (name+title)
GUIDs: 48
Filler GUID seed: new Random(409).Next(9) ✓ verified
Run: Run 44 (seed 1,087,967,875) (seed)
Draw: 46 · predicted N = 48 ✓
Machine boot: 2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

A1ECB7CC39546D3B 3E53C7CED1BF9ABB AB2F2F2EE8E70906 A255752E8F73B3AD CC22BC9C4C314468 8BEEC99F26907DB0 1BD0C2188A8B2EF8 5648FE083F28860F 13843117E0D1AB48 2603CFC224037F41 68C7E0652926BA4A 388EE7949187CB60 8AAA4A7FD11B7500 6A85014E315B358E 31641523BB9BA747 B7C3DDE1A5E91FF7 2603042F52F09924 B4C1E38065C3E4E0 2714AA5440F5E4F4 EA2898ACECC4C43B 01F286CDAE772FFD 18F48A0788144F8E 3C19902D34399497 157286FCC1DCD6F9 06FA7A64FF6CEF85 9F5F9B930CBDB0E3 29F8C77FFFC823AC A3AEE7A6970FA3B4 78252210E034354B C92F38FF40F509EF 36F37D242051C061 175015CBF300F237 1CC3746118FD6114 0C841B9B9DA1FA1B 05CBDCDD3212FCE2 E3A91044650C2803 DD830E205A2BC979 61F69F6E87A8B3E5 F4BBA123B76D4275 CFBB9A0FE27CDD84 BEBA9318214F155E 9FD7F57DE781CCE8 C591F9A75EB4F242 051C15734E86F9FB 67325D3C703EE45E 59D5DFD5E892CEEE CCA47BBA52BD08FB 64157105C1B96971 AA78589002BF8454 C538A636E5E9AE24 5BCF4290D5CB7426 05C6502ED6AFB872 C06BEEC6D0A11E31 53A8C3F2068F6962 E156B37FD7D75821 49CC0065BCF0C5A3 16F2139EA4397BD6 1C30ADC6834C42F3 AF9264CEBB103CCF DA43EFECB1DFB265 99C8520A0EB8F650 798D5A6F2E0F7B81 D52B1BE7B6987B63 8C4C4A1DD8FACC3A 5F6C7566FA8AA1A4 C82DA092B474C278 C5B3CE34253208AE 9F5C9E3E45BCED91 4C478C686B783247 9259A7FBA5BD3338 71F6BC296F382944 21E3A7666C25D369 193411C559AE133D 1962F73D9C97DDBF 72600514FAE7F37C 151680A5EFFF2851 AF4D38DAB23C6A25 B7D82F400B2FC7E4 A1F0D70EE9E8CC30 DC3BE932200FD276 FE222239CD9F67FE 354CCA60322BF85E B5CD9815F65E7C20 7DB54AC13C034F52 6C6A845FCAEEB395 66A9AAAD6B88A79B DECC24C89F9FA910 C63BA39B8D1AD9D4 4F8B5FDA5057447D 3C901CE6E238D400 E993A92431876C21 5E5E56EF631ED0F8 1A650EF836528359 59F746B3969589BF 0E61483C13861A8B 0454FA60F68E7F7F 97BAB52A3F805E3B 555A50E84C786F07 A9DC2EB8E0170EA6 35B2CE1836C625D0 AC6579C1AC348EB2 AAAE0E5F45DE8EAF 8A57166396F05D53 E44BDA2D838AFDAB 563FF7EB4C750DB6 D39AF135BC98DA8F F7EC0D2E1587E6A9 AD9A14D999450FF7 478D87B20FAD0747 584F72CC7A6E11AC E03C74C7FE64B9E4 2E01EB0B71B51BFD A4088E5F27431432 544EA2414B8BD3F9 8996C95F5B69D9A1 04FEC97D59186BC8 A887797E27D7BE84 9D24FAE4803F2929 C67CC42904D50FAF F042FBD43393356D 29F96212DF088A22 2602253CA38AFBC2 0625CC919B2CA5EE BF86EBBC8E776845 1490B59AA0531755 C829B60DC776A88D D19AEE9D92589757 5C591A876E94CF73 52379D30EECB54F8 06E8DCC5995091DC C29E76B5BE687EAA F1E76C3F31C9DC0B B752BB37B24029D7 24A8DFFC3573E5F7 7C5F4130E5CDD0C6 B8CC90688C56286F 1589673F0B8C3424 2C836B0E749164FA 8A48CEAF5D0E2FB5 659CCEF55060AC40 5686BF6832E315EE 8B07705E11B59A0F 82C95E768AFF5D84 67B24644BF2838E4 AD2203942098211F 582DAB6D73A4509A 3DCC3608D1DD504B 9BAA22508FFE8FA6 177D350B49BA7894 92F6B4FB2F21C109 A5CEFA11E24986F5 9DA68C5940414542 EB30201E277A8D9C DDC7D806DBCD4D18 C873337E5F25AD10 6350FD75C2D56F3E 18DC6FA198E74349 178BE974FE2E3668 F06B67FFECC74F41 E09BE49A281E4DFB 7A8235F7A9FB36CE C2BDDBEBCBE8A652 7091ED6F4D3F9F76 679DE6B93F8CABE8 969F8C3284D84B70 A44943FEE6EB7EB8 DF599F5C5995615F 79B03F95CF006905 E0B5AAE0A2B68DD7 3B7A2737F18665A8 FBB30338707CE6FC 50E5D641C5454DE6 9CB3D32731767C5C DD6831820D374D3B EE4283E496C0BD6E 2A5A46FBFD0EA5C4 7051E344B36E329C EFD7A62E5F70D02F 9357BC477FD5FECC D094AB9B4DB27108 BF7D8A9BF0E7F5AE 6CCD94C34D888709 6CDAE9FC9C34C7AE 2C3BC8F00FECCA37 7C0A7C34AA511849 8E311C79BCB3D87E 39ABB9C9C5074397 0E82161FD6757607 00AAEB9DC2555D5D 4D4D9F75A7CF8CA4 93EC37DB63DCAA0D 8D72F62C68CC9929 A923C31D7A9CE17E

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201304041817 (name+title). Key = MD5(password) = bb9a725bef41d7705421d31ec848d4bf, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a35e6dac-0397-3f4a-badb-14691060f37d
  2 34f92531-7c8c-7660-adcf-310c1db70b62
  3 a71008ba-51ec-515b-8f48-88edc09a1183
  4 95f54e2c-d1f9-7fe9-a84b-72e3e04ff5f9
  5 570bf358-947a-7d93-940e-d10d9e7de388
  6 c18b2169-8569-815b-9e57-9fbd240729c9
  7 ff461809-274c-1c2c-bb44-e64086465afc
  8 0f68e2e5-b238-51a9-abb8-e510d25f66a3
  9 a855a357-3b19-5dfd-9e00-cbcae25a5943
 10 d4e1a43c-27a9-09d8-b61a-cece4bfcad45
 11 9cc4660d-198b-50dd-8af2-1c4ce40703f3
 12 7f1c94e1-1e83-7f69-8d4d-92033c1b03c1
 13 47053083-ce9c-7004-a6c0-6e1f47170871
 14 dd95a2d8-a04a-23bd-b8ba-40e6d5b72404
 15 a2e123c5-4b73-20a7-87f0-9f5f22ffea09
 16 a00536ea-ec8a-49fa-b214-9dc57ed88d73
 17 27d6e774-eee9-7949-9306-287e9fdd216f
 18 4c6b90ad-af4a-50c2-9fdb-c5a64f6a6036
 19 8da1ac15-912c-6dc7-96fb-37071502d7d5
 20 065ca8de-53c2-62b2-a2a8-ff39e9273f97
 21 82ce6f4a-8c70-1438-91b1-f48f77d32e36
 22 7fc33c01-1c31-12a0-bcfc-b13dd54d2a45
 23 be3fb802-5254-1b7d-9dd6-24f1790e6568
 24 bbf0be99-71ae-8cda-9b75-814b579ea2d5
 25 995742c0-12e6-7022-aceb-5ec97a909328
 26 177c7696-8e68-5733-a045-119471bf35ea
 27 770bb383-d8da-591a-8b05-76e6acd77e4e
 28 1bc0f9e4-dd13-00f0-996a-b09a0dd194f7
 29 5e2980da-de53-49a9-8f8d-bf2c855cde5d
 30 f07af451-c866-4650-a4f7-2de4e75186d6
 31 2984749b-1003-1393-a2da-31cc8a1bd743
 32 4635b199-3c8b-1095-9bbc-394109e8b4ba
 33 fe4133e8-d60e-6249-b3d8-f9b9ac3f3914
 34 0c50917a-7c36-281e-91b0-b23919801e32
 35 f90d4769-c1ab-4c37-a662-703dbaf0451d
 36 f86bfcc6-994c-4fcb-8568-0774c32b2f6a
 37 a97c8648-f582-7cf0-a4d2-a77146755a9e
 38 dce0ad12-cf43-1789-903e-8c38ef39772e
 39 ca2be827-55da-3783-913a-e16937b669b5
 40 010a3eba-deb4-1368-b8f8-afb78c028fd0
 41 89e80fde-9786-4eae-85e7-b16da6f903ac
 42 6f5a5351-777d-3c15-b128-9a7377f20cea
 43 355f8a05-3d36-15cf-b5ee-1f7e6dbad604
 44 da41242b-5db3-5b17-b884-e3951c88827b
 45 a7bfa32d-05b1-48ad-becc-eba0b25fbb79
 46 0f644b2d-7aae-8454-ab1c-07be5ff859ee
 47 b983681c-ad01-4b02-a970-778d62b905e1
 48 07f5a14c-f56c-7dea-b60c-b96703269f08

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 375778155057722475661118755044116244713143154847. Exactly this sequence comes out of new Random(409).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 46 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related