201304051405 1bpoc0

explained decrypted filler

seed 367

Metadata

Post ID: 1bpoc0
Title: 201304051405 → 2013-04-05 14:05 on A858's clock
Posted (UTC): 2013-04-05 04:05:57
Timezone: UTC+10 · title 14:05 against posted 04:05 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201304051405) = 08de87eea399556719caaa074ede5f1e (name+title)
GUIDs: 48
Filler GUID seed: new Random(367).Next(9) ✓ verified
Run: Run 44 (seed 1,087,967,875) (seed)
Draw: 73 · predicted N = 48 ✓
Machine boot: 2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 0 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

74FA53EA6DC12F8B A5B1A84A442EC87E FCC6C50EBB65989E 85BB7F28E1D35C0B E4B0A950C04036E5 5893B81B1B81CF6B 7BCEF6D60F48C2F8 AB54FF8610179800 DDC59B97010977AD A6527B3A9B4CE9D7 EDBC8BA0E505BF07 E0E272D32A258A1A 566016337C182D3E 8ED53091CABE42A2 A31BDCFEF0C62116 C48B36FD525B7E9D D43921CA5C9E1256 E041CCD83B5539B1 4B50BDCF435752B8 4AC0832732249361 B132140CF15E63B8 201C84A3571D8B89 A7C95E3A48ADB8C8 C7452525DB0E0B4F 60ECDF9A02358274 09298E7F59063A28 B6BD5CB9A71DFF69 6FF38D8EF95ED3B7 03AFD43CBEDBD54B B8E730C437472995 928EC631C09FFB4D 8831D77E98B470B1 03DD2190837954CB EF52413178E4A29D F059989F90CEB14A BA9EF803AC243AC0 99395AB04143D211 C43456A5C151C16D 0DBD5DA573D7C358 6A71AE813C00F431 A33CD236AA5BB6C2 72BF272F84E27ECB 1FE9657513ADF515 50BCBBDBFD463240 162717F7911379EF 23B9E4E4B8B3CDE0 E80E23F11F70F57F B5F6E0E755DB22F0 25113AF74FEECCD6 9F3A6FDC9A7BF179 36BD97FBFB9CA67F B3A209F5928D90E7 07E1FD537C8A4BCE 72C4F521E126E4D8 F70FFFA4239BA74F 7C2CFEB869A60C2E 8F6150B958D3DF95 657FE0164FCAEF0E 8E345A79BE0B18F4 D1FAE757EA6B48AA 239205DCA3353E93 244866E718F5682F FD2AEB1393B5A4B5 DCC1410717B6F90A 0E58942BE55C1DC9 3B17CA17FA89802C B0FEFA88A05D2305 B7020303AD59B127 CABA677D4FBD3CEF BC2095F7DFD9A45B 778C193F3DE056A8 BD256D24DD0AFF2D 205EFD80501304F7 9EF1460E2987B3C2 FB81EDCC4F41B6B6 D17DD3BFB2B0123B 0E04C4FEE4F2ABE7 F67AF6F507936A62 0A1A8DE1264E3AF9 BD4B852F3347A6A2 D8DA82A340E1E084 592DEA62E1B2B33F 4194633F2371E431 6946D998515BD92F B88A9495820BBB4F 2017CBF39960BCED 45571F320DE0636C 9DD0010B84394535 A3204A55A6122734 5DD4579961D9CEEE 6761EACE1851A561 8D91FAB6BAB06642 D4FB56D13B3FE9FA 157C5D9C25FF94D0 2968284A61E3D028 E6398DB9C2C8D2D0 E210EB0715A79F5F E626B4E4FF5DA68E F8F4542A3C8ED644 E7D16BDC4D8DF182 4523710318C94F03 18BEE8BF28CF92F8 D25AD9ED208C1204 B64E77AC23240C86 7A7DC4F0FA774E99 760B1FE942853B73 C2DE3AC9664A6932 C5F6460A05AD7A41 C0A72167154C9363 30441D303D76C6EC E01C7958E84C171C F22D46BE0B8187E7 BFA3409A25D80D8B 2126EFC0A8455B6A CF9010048A66867C 33E993AAAE2AD009 E7BB869B04E80723 F93C15ABE0298B3A A3C8FE42062B81E7 9AFA9E1E8C8120F1 DA682D0B936EBDA9 BF5D9A66E2FB5164 6D7F6F29970D1E03 D5101AFE52BA2F87 EE8512B8A21CB647 0254C139A42929A2 B314681CFD2C8C30 F0266689CAC17E27 60E573F30DB348CC A0E217B0A16C8E70 A2B12DC7CDDFDBC3 6AD5E1CF794FCCD0 3D2ED5B88D06635E C5E7AAEFB9E8195F E1E3255B48AFBBE9 62FB628C16FA8037 FEFAB3E3B42F56DB 29D7913ED188346D 9C45BE5CE0F10ED4 726EE01AB60D600F CF3E8B20B609AACE E17069B6DA22300C C6FA33FF6B239EB6 1734113B96BFB863 2B951C692CF738CF 000290DCF2EF34D1 7AE0626B329C0CBF 66A3EDA1793186A9 56017B5B28F7380B DF251499D5BF79CA E2ED264AB54C768C 0AAF3DE493FF3F2D 84342E717BF7102B E97471EE7A4EB146 BF21908163EE7CE2 C62CD653B52E3748 01DD4DF682FCC3AB 4833438A26ECD765 FFAA36D3034875EC 28621DC8C13CF0F0 E6503278EA2EBFF4 B5FBDD8D2146CD9D 8591886E89FDA436 B7EAFDF41C72403C 80E2BCA1E5BA0510 A954313604656D22 928F5F6A0836D55D 1DE831D4FDC89388 C34DF0AF1970BBE1 96C3114634C0857E 37D8162B7713D62B C63B30021484391B 123637F226889F78 AD641D3F05B59C56 58648D09CA187C98 31DD17E09ACAC74B 2C7AC7DBA7F7CD94 AE28F49BD1DC317D 552409E91080D4DD BB026EC5C5C29904 56C4F5692C6BEDB4 3CEB7393F09EA82F C493046C63FE7FD3 EBF97342FF9F7BFF C568824923877541 B8243AE4A2360082 99A88EE9D3D2EF0A 208454209C36AAB9 81C5535D046BD0C1 5F146B380C226FE0 CB9AC9CB2291773A 06C65FD81AE8CA84 9D66F9126D08C0B4

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201304051405 (name+title). Key = MD5(password) = 08de87eea399556719caaa074ede5f1e, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9f9498f6-4560-4116-b061-7a3b1e70fde1
  2 7dd94d4b-2ef4-4d08-a572-909fa6f2d789
  3 c7938616-df75-2da5-a432-0b3f84d175f4
  4 00890e18-3e0c-87cc-aecf-69116eda8c71
  5 0263c800-e158-89e6-ab1d-aecd08b3ef6b
  6 3ec2b61a-3ad4-2d4b-ab9e-c18bddb44ec5
  7 22215d9b-38b3-31c5-b4b1-3dd3215f1623
  8 867887c6-3da5-50c7-8285-b3c90ba0332f
  9 7357df62-a655-3939-874c-691b954c8ccb
 10 4b8e2d4e-c7a3-5ad0-b0df-28a959751fec
 11 8ea922cf-92d3-644e-97fa-129923b2947c
 12 0afb0633-cd34-8aa3-8167-f4dd4f34aa8b
 13 f00bd8bb-c42a-8634-be58-4fcb2a072319
 14 0baa6f2e-4537-368a-8a5c-799939f84f07
 15 768f8893-3d34-7690-88a7-0ba5aacd7566
 16 b48f2f74-5a45-2f52-a445-617ceabc6a38
 17 c30def73-2464-13f1-9f54-dc1fa47aa519
 18 87a2d75b-7b0d-42f7-b5d2-bdd4e83bb274
 19 b267c423-91a8-581e-b373-d44d64cd441d
 20 ebd32ec4-ef95-3890-a053-f5d1ebb1c32c
 21 9ce6677b-a076-53f9-9c30-e851ff2f5ab4
 22 9a207ccd-eed2-7d18-9520-c9f811bba5de
 23 4fbfc017-f8c9-0013-b6dd-8cb4c8ac899a
 24 049f6ee5-97be-205f-919f-66536ede1b55
 25 231b18ec-56e8-6c11-9da4-e679983df8b5
 26 82fb5bf4-09fe-5586-b147-0931a6e6ce31
 27 5fc782b5-4a77-4a2f-a960-77e3183c5397
 28 3ed497a7-2d41-0c7d-bd02-82f8ca9c4d45
 29 33c41aed-32f7-8c7c-8ab2-0f264a4f76dc
 30 a8340cc4-4b50-5e2f-a560-166f6d2a8fa8
 31 ec1cd42f-9270-6589-a83d-87caabe6fdeb
 32 e471197b-0cb9-1cf9-9603-03a5d514a35b
 33 83e90120-b9ba-7358-bcd6-c3100f245024
 34 bd289f58-2253-192c-a755-2a47984b6c63
 35 a049fa7c-b52a-75b8-9313-8afa987b2d24
 36 5ac8002a-50c3-6b5f-867e-51b37eeaa094
 37 af8bdf7a-f2c6-0168-8478-2dc18cb73452
 38 ac677ef5-0fec-421d-85ed-70fb3a8aae65
 39 8e21e010-e4fd-183c-98c9-c174e129d905
 40 a1ebe415-2d8c-3786-9774-86bc528d97d3
 41 e25b9663-b576-2057-bda9-75a9cba3da3c
 42 0ac3fcce-3cf9-654c-bac0-40d039ef59e3
 43 8ad4c620-0ef0-0d2c-99ef-27368ed7df1e
 44 4c3eaa8c-aa33-7b38-8eb8-267633ec03ce
 45 896a2e19-83a1-32d5-981e-d6a25453a5a6
 46 856979ec-2247-8764-820e-4369f438d223
 47 22602a9b-e6d9-17d8-91b1-0b96cb3ba55c
 48 c7459605-0224-16e2-82f1-6db2ecd9795a

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 442882353568837214535702654085617176041326073811. Exactly this sequence comes out of new Random(367).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 73 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related