201304050221 1bo2qx

explained decrypted filler

seed 14

Metadata

Post ID: 1bo2qx
Title: 201304050221 → 2013-04-05 02:21 on A858's clock
Posted (UTC): 2013-04-04 16:21:58
Timezone: UTC+10 · title 02:21 against posted 16:21 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201304050221) = 5c35b90e0817cbf88ae1a98407e13afd (name+title)
GUIDs: 44
Filler GUID seed: new Random(14).Next(9) ✓ verified
Run: Run 44 (seed 1,087,967,875) (seed)
Draw: 57 · predicted N = 44 ✓
Machine boot: 2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 2 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

84965EF24C1156FB E83492A44B7AB321 AF1543F292F7313E 12C552F83D87254F EA96F9201546E0F7 2518448FC814295C 03C2A1D199997CB5 F369BB2F294BB4CC 69618350137B2396 76413DF57A88A3E8 77A22249E64B4CBC 3C69A9A8D4652F13 0ED57407C747BFEC 6E71E4C5EA92DB71 29518F61D297A3CF B2EA0CEB527D100E 2AE25D892F2B967C 57A41995435BD461 93E5A2EB6CF85633 03E18A57DBD7E7F6 7A2283883B5916A0 6AFC7069A40B8587 553142F526B0C7AE 15C70682C269973E E9BDC8E4DB612FE3 6F406CC0DAF18653 66330A2EDDCC94C5 933F74EA3F514DC6 72BEA71A88BB0221 72095B5EB17B4648 1BFD6B5E667D7DF8 91B20DF22AC99992 FC6113DD4388138D 27287815C532930C 9553AA3D8F296685 CF8B64075CA18468 59C58530ED9F2390 EEE16B2C44DA63BA F736EDB7F78FC4C1 E35E741C96A43D23 00118D1D84EC3907 6A74D8A04709FF32 BB25B12CEEE4E1EA C28F793A5F1A3086 170D7F8B4A250E1F 0F09FD270D916600 463D7439698FC0AB 80C49A7BB17135AA 74A7ECBBCAF823E7 0C1AFE0B5BAF459B 4C6DC91207FFBBD5 C3EFF0933E3867F4 871339841DA7A5DA 8D9A785DD0736703 245663BC8E367795 6B300C45894ACE11 1618F2A65D47FA76 62F686C48421049E 9E096C8CA4D42816 D5960054D8CA9861 FF613D44EE5E81D6 033E439F6A991BE8 5049F1F6436D350F 8B87842586EFF654 967A8652CF51F5E9 DD0A65DF5EBAADF5 70585EBF4A799608 50B266DAD6BC7343 8038B7F31408563F E2A86DEFFCABE5D3 CF16E8199477DB19 0A353EAA9B8279F7 D4BF3D95BF9D2C7A 6190CB085EADF4EE C3E1CB4770937AAA FC6E855F259ADAAD 97B7808DEEFBE00D 50ABCDB99EBDBBCE 94456C504E2A6C17 668F95283E492A42 A55B325181255F20 46878CE4D202B20D F8C758961BAE61BE DE6D27FF983FC710 87D69B803FD048DD DA452A6EC83343E6 9AF791DE13B457E7 609B58D0622D87AC 7DC75F3C22A497DD 3E35633820CC84D0 79B9EDD2CDCCECE2 404DC328D4A45274 6A7BD6775C5303D9 47AD7E70C6E22F1D BC0AB7F103AB7AD1 A2E95A892DED7C0A 3D0A50FD43B80738 B4CBFC4B80AF5F8A EC21ED4EAE59B832 EF70BB397F89B76A 5829365D5CEF8832 C110FCC59EA75EBA 93312D49383E6D10 48D576E3529E7F46 E8D672EA97414B24 EA87BCCBD4D99062 C46DA077B9BCD090 576DEF52E26C046B F36E41C398709BA1 CCF02F904B42A4FC 07E737A3D7044A0E A91B3F6ADE955E73 98F51ADC01B87D2F E0ABBFC08C246984 044B4FB4098BF9E2 7B54AF091ACB507C 6EB5817624192238 69F4593EED188E05 B2F8E8810D4125BC 78BBA63D633F4D4A 9DAB77793116B0B4 B90D56FC47BA2745 28E51D6F673D6555 184B4654FF5868D7 1D2F62168DF88595 568F8176CC727614 7D4232A589DDDF89 7DCC1DF0E24691AA 174E2CA9F97BF477 7AEF320A8BB94463 05AC9D4104032566 7294D3E8304939D6 3502730C32914030 5425E97AFC134D8F 8944E0E98776DFB3 1C0BF1BE6AE7FEBF BFBE5B646EB95FFC 279702940B435E3F A9B46B40F95BCDB2 85563FCA6AC5211F 52DA8D2C909B145F 625B17547D747A2B E1877461CE8C730C 37822419245DA8D1 58FC503334161356 2CF44B4863F69DFA 12B40898FF5F2B40 D0A5FACE1F999DF0 03EA5F280F197BF5 5EE642E5088E70EE 6770A5570C38E926 82AB8BF41A2A5375 5CA3E6FDFB7CECB3 439FE3F6BF69FAD9 CFA49F773FDA6ABD 458F9B38C26B1DC6 DB6ACB476899E92F 24F86127609C69AD 0F6E614AD5A3DBD1 12E52C1D7EAB9788 254C9724ECD617CA C9C5A238F4837FE4 F924D0FDAEFBA29B 2AB656B99CE84DA5 6340D6D56E300E81 61B3075496D0D44E 16B3A6B46EBD5CD5 A2EB52BECB3E80D6 52EDD721DBFF00E8 343EB4668B2DB3A0 4F66BF4C3BF9EF0E 91AD640B1F1D3F22 7C288481D7265638 47869E739B3421E9 4942C4DAD43401B0 B58A2CB136DF1985 4C8818AB6B219585

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201304050221 (name+title). Key = MD5(password) = 5c35b90e0817cbf88ae1a98407e13afd, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f7a66c5c-6c93-0f01-bc43-3c8ebc0645cc
  2 7f0ede67-79d3-8b00-b9c6-81f9b18412c8
  3 a4279b2e-5bc8-4230-9dea-6e2664642315
  4 c29a3a11-fb33-4545-9600-1dd9b3138733
  5 129fb8b7-3c72-4cd2-92d5-858f5eb57914
  6 f55a925f-4844-70e3-90f7-7383154bcc67
  7 5185345e-be3b-1d7c-bee7-dfe136b91a70
  8 7169c392-983e-4072-a891-7c38718c1d7e
  9 53ec7746-2bb7-6309-bce1-df49d685bcce
 10 de0b9c5a-8245-378e-94c1-0cf7a12c634c
 11 d570d226-e5bd-5ce4-a40f-7633b02e6cb1
 12 55951fb0-2e38-3739-b837-a32f18ba6870
 13 78935edb-c19a-2493-8670-ab8910112881
 14 a1ba5ad0-3617-6187-9b3d-3140c5aabb15
 15 3131bdea-368a-7f22-baf2-abfd9d9f414e
 16 1ad306b4-fe42-6d48-b4ac-d39bb35642f0
 17 45aeaa5d-50b8-61d6-8111-223e74f1c811
 18 7a03d3cf-cb0b-686f-b9c7-ef8d9ede7bb4
 19 8e4d6847-2cd4-05b0-8dc3-4d27ca791cb6
 20 f854cf59-548b-6f36-b611-f141379a0332
 21 ef86ef9b-36d8-6f2c-bed9-ac4462a9a304
 22 0bdc2066-68a0-29bb-a28d-08d86ae8b829
 23 0dad1eb0-2c93-3d69-922a-9fa18903b3df
 24 3a65da08-8067-8c95-908f-b4d8a4f52a94
 25 afa96f44-a46f-0479-a53e-bc91e4bbf8ad
 26 c834a1e0-040d-45eb-b485-757a99a3c5d7
 27 e49b64ad-5a43-858d-8693-4b38abb5165c
 28 4403aa45-20b1-3072-b1ca-271befd47a16
 29 f4f8ff78-8412-37ec-9205-82794a5b000f
 30 246b1989-a311-3b87-98ab-18f657faa56f
 31 25af0ee6-f1d7-348c-bb54-ea17ad219b48
 32 aa954aa2-3f5b-1e1a-84ff-546f3998117b
 33 be888758-ffb4-8f95-9f06-4753a90b2cff
 34 09325985-5cdf-33b1-92d3-bca294895a26
 35 3d92eaac-91be-47f0-b9c5-d5400a925094
 36 cd7f1a14-069f-38ca-a027-a56340039036
 37 7633154c-d38d-5707-8e29-b273e8c81665
 38 c9049f16-e6e1-8c89-a42d-e5a4e0a2a916
 39 3e9e2caa-7b36-6606-8902-863a991f6491
 40 705d2d5b-2b69-80ce-adb9-d3849b3ae834
 41 863c9a3f-4658-298b-a948-1b1494a8e602
 42 1062c357-6969-5df9-8348-dcb51d2e0147
 43 08997d2e-aa64-1c7c-ba83-176a9acf805e
 44 4a056bbc-1717-7d62-a65d-07893797f74c

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 08444714635326766606623804833331834358682517. Exactly this sequence comes out of new Random(14).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 57 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related