201304041901 1bnflc

explained decrypted filler

seed 383

Metadata

Post ID: 1bnflc
Title: 201304041901 → 2013-04-04 19:01 on A858's clock
Posted (UTC): 2013-04-04 09:01:59
Timezone: UTC+10 · title 19:01 against posted 09:01 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201304041901) = 25f69bc0d9ee86b30b043f22aabcff42 (name+title)
GUIDs: 56
Filler GUID seed: new Random(383).Next(9) ✓ verified
Run: Run 44 (seed 1,087,967,875) (seed)
Draw: 47 · predicted N = 56 ✓
Machine boot: 2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

996D52AE9D4573D3 FC79923241F60548 DFF4A8C63DF23F2B 1DC4F260BBEBD912 D3035A33C2054800 BFBEF41B87773EED 2F698F95CAAC7303 7D9112E467995415 5941949CA13B4D40 4A80ECEABD6DDD75 6CC8F5AFB17CC3D8 8B4A56566BFD3AA1 CB3EC7F6383300D2 FF9DF3FF6C793237 083EC8E222A23FA7 2DEEBF4D4572DAC9 CD55F68B32727DC2 B767A42DC677960C ED72FE473B33CD81 58903AF849B3AA87 3659B184CA90094D 5D2ACBCDB10B2F9A E829E71B19552D23 4643265CC00D417C 344B75FB9D40A1B1 7ED14072810F8444 26887AF0BDEE12AC 71955AE843329089 B27301F400CDB4E0 4850592158550208 DFA4D2F03F9E43E0 A13BB0E083CE6AF0 B3F4CC3CE172435A 05FFC3BA639DC6CD E112337C04A07E91 C75A1A3F63B9A2DD D2EEBE9CE0CAE723 78CD21BD61634B56 C57FB59C464B3B4F 87B06B1EA458C138 0114506CB8D46EEA 2A47C260FA74FBF1 BE3B3488A545BAB0 7D522E146D552041 285AA9255505CB4F DC955D92E40A2DFA F461CC51D45BD03E AA7AC0B77B33D6B5 FCBA89F8D69D4DE7 B31009490F069A0B 31B19C7EF462903C 3B669D88C9A1D48C 387A9F2B733CD8FD 1EDCC071E1EE535F 9F7F79EB439B6701 949C133E8008DE0D 81CBCB9D3E30BE74 F1A820F0B51642F0 B7C49E8F12AE77C6 D519361127BEEEE2 7C4F0E99E26A1EC0 BD4F6E23615E2DA4 A417ACE53A5847AC 16613AD69CA16273 FFECA37413108411 7839269CAC85C644 A6D2522D0AE1674B 3866B95A3379665E 5E63F21BD2B6D72C 700F4B72820F7F79 4B4598E6112B0371 EE8D63FD04BC3C3F 68E5DCEF8A304AE1 5AE618CBE4A19624 E08AE1D79783CAE1 45910E9DA4AE5F61 FEFDA46C256067B5 343AF4F3D3EBB766 3D494C317E273E39 40128F6135C27D1E 16CA0FC7B99A5768 55704066E3B674BA 4B9BA3B9FBF7FF67 763CFA5D4451994F 3247C0F632A3CDC9 51CCD832182D9891 C09ADBDA629A68FF 8E1AD14CB0454A61 EC0371590090959B C41AE2295503820F 52BF0D7C0399CFA1 A02BB6C624300062 C9B12006551D0386 3C07B7E62D97E21D 59CFCBDD815A1876 840FB07B64F7B07D 7FB77F32140C001B 3D3A26F6422C5BCC BA2C73AB0A48A0CA C565E168126C1C7F 088CEA6D2BFA565A 735A21FCBE2E3635 4C6592780B3223BF AF595EF95AE27FE2 48E939EDD3A34F82 EE7AB8981743593D 0A6FCA0097CC56F5 238D76FDC0C9D9AC 7819160C19F6949F CAA9B1CC8D970D3B 3F4B0017B0F1CC49 CEB96E40751EC477 A017FCF1A1332AC6 7A1CEE28A93CC8FB 1025055BB368B6E5 B2840429CB3611CD 961883A2CD670AC3 41CB538EB1DCF382 03EB2F37A3707C32 B73C45B181205876 EDF22B0695441CD5 A9CBA9676EF40B95 AE5F47CBB514E2D5 9BDAC08AFFD1B60B 6ABCAC691D7D7C7C F0274DE8C2348DBC AC4246A47D233AC4 C5B1D6D4C747A182 4649C5AFC63A279C 9D84D2A58BD44665 68FF1ACC5BC52954 F432680E15795DD5 CC24F9FCCE6F54C7 98CF59CE12B74ED5 5F83C6771AAACD94 D73EA80EDA0928F4 8A2585B023FC4007 35AA8AE87DD7696E B7BAB484D4FAFB50 E8431972BC63C5F5 241A3E9648E13658 954515FAE7FF629F 14B90C85F518707F 12982739D5248258 68A056CE9A9C7757 3830570E8BD76E42 C2CC99D01E8D9637 9CFE5C30BBF71999 0DE34C0DE58FFE9B 3D86CF3300ED5D16 DAB33D474EE52729 B437EFD48E09F12D 89315854B83EE285 B990B947438B4E6C 4B91A691AB127486 311CA91EBFEC1967 76B991C508E726E1 46E1B1DEFC2DF743 7A6D69E11F926871 0A4AEF21799736AD 16CD7B6E4FEDFC4B B6E997818452220A BBB06D490C736CB6 3DB7D703E417053C AF27A970A4AE6912 717E875F96D64D71 254552F65B767C9F EB4452A5340531BA D86819C41E689A67 C096C52583574771 D78E301C3D4BE394 D103BB742846AB8D 5CB3CD55155A5CFB C59E7D00F045324B CB7DD491D3C404D1 8A910FD148CDE0A8 2A1203863CD70871 4BB438DCB521CCC0 0BF5CF2A244ABA58 6B6EE6B9617B7CF1 DE8F9DE3FE0A0CD2 8662D260C46627EF 702916C1584B251E C6286C62FEAEBA43 7ED3609A80ED8E47 7F8E220D8F5F07B0 D246BA5E1FD4BD5B 8C20BF0360B053AE ECF22F294B0782B9 0CCD7ECD65FB3106 185EE8EDF31DF6B1 747DFB39E9D3855E CB7EBC9DD44254E7 F8AF1149CA159250 B5E5133C41D51004 41D972677D4AAE9E A2B7D54951EDBB78 7E5CF10D5D09343A D94D6FD66A8D9316 0F9D4CFF0E9C2F8E A51B0F72C2D06E45 BFE9CD60D922C9E8 B9BC1372CD04F1FB 44DAECA7E57C3ADB 3387AF456A9DD997 70B810D3BA8AB412 2792F49A31D1FB3B 5BF212B7AE9056D5 2CB19FD38D783DB8 46EE472A818A609B 9D7D12C6D1262F24 F13FB097714F82D5 A48C806409C10E33 3254C52D97C69357 170C094A95EB0FBD 9649329E60A398C3 BE14123EC6BD4857 64C915162541ECB2 198177EC05F1D1E4 7D0543A8D0E4687E DE523D1FA331C8E2 7649EF9DDFB1B223 AFB373419510B939 7E01E8A8A3A28028 3E212588CC532190

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201304041901 (name+title). Key = MD5(password) = 25f69bc0d9ee86b30b043f22aabcff42, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d0f43522-3648-79ee-ab6b-14309acc504d
  2 bdabd2a7-26dd-1a40-b84d-18aaf0914c7f
  3 cbe8f041-92b3-45c8-b5c9-7bf72445c0be
  4 c2b59733-ee3c-249b-82ff-d7f0078f1048
  5 2043e9c7-429c-1151-9b8d-3a5d505c8f77
  6 44045cec-320d-2269-9718-af147d6fdc0f
  7 83a09988-481e-4119-8b86-91a5728fd0c5
  8 4455f513-25e8-5cd2-afae-d72f943a2813
  9 66e44b4b-480e-3d54-9a7b-6cad5fce214a
 10 83c86fc7-195c-497d-8e96-600f2a9248da
 11 c19823c0-9edf-4d6d-b64a-d42b1b93e98a
 12 94286071-5723-462a-88a9-b45d8ac696e0
 13 5f6b55f6-12fc-8a1b-9928-9f07628d8f07
 14 3cfaeac3-0784-6a0f-860d-8a159092d6ce
 15 e9578e55-4de6-0d18-9c7b-71f75e8bf98b
 16 8bf56146-19c0-1538-88ae-e4ab25a7c3df
 17 3ca67218-f563-78c2-8bc4-d5b250729df3
 18 01388bf4-ed28-42ec-ae7a-a4eea57f5d24
 19 49595ee8-7298-03eb-b2d2-0e8bee5e20a9
 20 bb5011dd-330a-508b-a923-96c1f28d3f8d
 21 2e6387fa-8f61-6c51-bc32-7e1278eaa3d7
 22 6efcf450-cada-7707-8687-7b7c3b3e98e9
 23 a9c1cfa9-f946-6c72-a8ce-0b934e240c42
 24 55cf7b6b-79d2-7222-aacf-3f3bf214d11c
 25 95fa6cb1-0b85-26d4-b413-1b9422d780c3
 26 16630c69-bed1-7fd6-8321-a3b18cb6a9a2
 27 87ad4d36-dee9-239c-80c5-735619e231af
 28 917189c2-b87f-820c-9764-c9954a0d1f8d
 29 9a2aef2c-b9f2-3d6a-a8a7-70a2dea867c5
 30 0d272903-bc62-4be7-b5ce-4657f6523e6b
 31 7691d3c2-e6f0-58ed-b74a-f0191f1026b2
 32 d318a65b-033a-363c-9534-df78e9612f29
 33 45f1f601-7c5e-222c-979b-e8caaa0a8bd0
 34 e77fa835-100e-5a0a-a33a-aeaf18a18f9e
 35 cccfcb50-2204-300a-adc9-d6bb22a32d73
 36 d8ef62b8-7872-318d-a1d6-1ecd64978960
 37 6e237158-0123-227d-97b9-ce3343554429
 38 80613022-57dd-369e-9643-9c236ae12de8
 39 219fbd6f-6657-8f76-9b8a-d387a6e8a261
 40 762ed485-0322-3baa-9c08-eff8bdc9e5ba
 41 9236644c-ffcd-4b0c-b8d0-5fcf8e380a9e
 42 0f1aac70-4d3d-168c-a4fa-d2a2e4d6faff
 43 4b0d6fec-786d-26d2-9d11-05d9273605d1
 44 938c58a2-3776-5e2e-8814-25aaaaede665
 45 6b4a0f88-9c8c-7145-adef-24f718cac8be
 46 0142e98e-0010-072d-859e-3895b1958b43
 47 2c95d684-7266-58b4-aed1-b25ec625a570
 48 0c7a19ee-7f48-43f1-9a00-97e42712d45c
 49 b9e7f47c-5d82-5623-851f-6a9cec5a4645
 50 89351457-0568-7e9e-8c48-1803368dfe5a
 51 1d12535a-20ad-8d12-8173-dce450c82877
 52 51a42af3-e353-3139-a44d-7a2be87bab10
 53 2fe14678-42ad-8d36-b8e5-58108b4d5b6a
 54 d142b9e0-9b98-46f6-a6dc-3fa50c1e1411
 55 34c374d3-7681-7fc2-af73-38297c7a1d26
 56 02d223de-780c-05bc-a0fe-8a65fbbf9a76

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 71421245344486017405676727283453253323834125705457838470. Exactly this sequence comes out of new Random(383).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 47 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related