201304051957 1bq3g0

explained decrypted filler

seed 50

Metadata

Post ID: 1bq3g0
Title: 201304051957 → 2013-04-05 19:57 on A858's clock
Posted (UTC): 2013-04-05 09:57:57
Timezone: UTC+10 · title 19:57 against posted 09:57 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201304051957) = 4ef1e604712627f5146095ef87cc94ef (name+title)
GUIDs: 56
Filler GUID seed: new Random(50).Next(9) ✓ verified
Run: Run 44 (seed 1,087,967,875) (seed)
Draw: 81 · predicted N = 56 ✓
Machine boot: 2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 8 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

BE486E505F93B9C0 A5425F031BC31D4A 5D482730BADF8BFB D046EFF847530A8F 98ACF81B75578698 234D3794932F36BF D973E00F2FAFB8F7 2AC60E781F92834F 9B1169F96343BEF7 50B305D933EA33ED 3758F35ECB32121B 821463FD3C9EB5A7 D85FCE7C1D44A5C4 0D796022AE9CF88F AB92D90A6C6F4F22 097CC8FCBF501416 BF6A077E1B34DFB6 0AF644B19A6B37C1 6EE5631666989C4A FD4EACAE5013A068 17FF50C4A6722215 3E86BD8441AAF056 C890329FFE8FE82F 60A1981ED17CD1D1 0C1851D83923483C 43F2630A7DBD21DA BB5DAD22E9F9300C 449B0C657923C55B D4AD6058AA056474 8B0592694C54C277 0747F77BFF448F2E B93B091B465F6C81 93CBAA00BF2DB63F 0B50192FEAD76E4D 4D12EBE1C70126F4 381BE881FEC5B24A 3BE8C8896B277947 ADC11B41507927D0 31C470945D66D077 316A3F5B5AEF21F1 C353E29AC0FEEE32 69D002FB5CEEED6B EE56A699D5212E0B 6FB2D6E1561565C9 74F8BBA5A34679CC 090406AFEFE6ED8F 89B1EB1DD5CCE584 D8FB74485DF277F7 9AA7ADE74DE42F93 A2FC67A7D5A94E2F 40CA55810703AD74 7CA8F7E2F499F5C2 6BAD811220E30C79 728974073656B47C CD3F965555E731D9 76DFD3F62A42C84E 90FBA7FA09F7070C 7938324115A260ED 6E7040C09FD20C94 19CD3FBCD4175058 CDD53CBB84546096 EE1C8B61AF764107 43DD9C93C4EC3AE3 5C7BE823AC7140E6 7B4AEE4407487E47 9E8B0A82A04ACC7F F943EB6703D2EEB3 54A8DD8E97D948CB 93548E3A2D49145D 5262B270A006B6D5 81F4AB114B9CC148 6EB97DC89A0C3049 E2E8FE9DE330A49C CC427386147155D7 E99CC28CE79552F9 AEBED86C82DC56F1 C92C3E343BED075D 2E5CF99DC16E52C9 D36459F7456DFDD5 04F0B5CEBDAF12C3 A709EBAAA0136777 98D116B3B0405B05 D9A79161E976E230 73E1B35C5F556736 5F1E60FA1E6B31AC 6DB285DCBE029F08 B612851BAC1EF3B5 D67E873C8711CDC4 8A12DF5D2C4AAB99 E39018F9012803E5 83427C9F52965753 D979BBEED73E7B9A F75E7F7BD6A411F5 DDA607CE696CD9A1 4ED6C43504B09495 A4C9A9F512FE9546 33807E0AC1A61361 EB1F7EBA7C1D89B9 ADA34E759ADFAE22 AF84B2DF717173D6 05E70AE9E533996A DA6B8FE137BDFEB6 F7FB813874FF6F9D 09E0F11A5D3DE720 0E3172C5AE1FA000 43416B898FB7B98E 3B309B2C097471FB C808046328F573D4 B13A4EBCFC5DDD80 A3AC20C94C62A8A5 4C2B3FBB7742B75B 1156D658B11C8FAC 6326098FAF20D29E E6EE1E463C92FD4D DA1B59B404BCDF10 D658640C4C63F009 8D3CCFBAC9963EF1 2A7C5C7BB8CB44B8 FC26F32824D40A7F C72695489C76639E 6A4A5440F6217892 D821206F7C006823 1BB88408AB8873F8 553D38812F8CB51A DE5B7BFA27694AC5 DD42D88CAE815AEA DA24B83AE4031BAC B74A7AA1F7C83B73 A3E25D986A17AE23 45C43E24E51415C4 32C89C3B29B5FDE8 0F3090FB36ECD2CE 222182F982632CC2 75E11B85E6F128BD A0E0F81BAF87536F A684211EBD0FF7FC 74AF026EE634CA1D 54C23ACB240983DF B43BACAA7C97FD83 E4C2008B3D0EE183 5B898F070036F2DB A637F88E6B142FE3 ABE2157B5CEF6DAE EBEDF852FB668B6B 09A7AD7C499F5EC7 C1997E18BB0066C6 65433B99650089EB 3AC5A02FB67880F9 4A0113AA77BD42F7 8A6B1A27ABB789CF 18EAE6492DCFA154 FD1DA1917CC62710 3823C26133657B64 11E201ED82FC9141 F3BEDFB0D3DF903A 8814BCA15D0510BE 44929A7AEC2F9200 479CE541B8C5BDA2 6B56A691926102A6 6F1DD85FB4C1EE80 F9D3D8A1D17B5495 268658F4CC72C808 004517A79631F629 D79B58F62A993835 AA97C9A0B4E0796C 289F6062E53FA2E0 DB3FEE77CA2DE5F0 76F31B41D3821F27 F65A35303ECC6472 E781AB8D1DB124BC 2A10A2D19DF1CDBA 9924C5EBB7D0BDCB 62816C6E425782EB 91C0BE6B0580C47D 2B7CF434F6ECFB51 764B00DC0E204484 5206E0987397B364 EE7AA4F2B8D3C385 712A19C13C96D8F4 F6B19A5F26BE8B8C 1A993C28B36B3D10 C25035A39359B967 E7448130CDC63871 2D4D1E0361C4B634 0E85C2A42EFAC919 DA51D985EF486555 BF2624BB83634773 01DD598F4CAA1F26 2213D044A93F7FCB C0028817AEB9631D CEFE589D6DA178EE 77F3D6572FFFAE81 CA64DE1061D34BA6 2FA28E106BE44F5B 90C8ACF102B70EC6 3AA4036D3E79F0BC 447BFEDAD3DEA216 A9FECA29CC99E753 E769AAE2DAEE1A06 C386AD62793957EF B8753630A663104D 91C14B50B059C940 8874E636287E5AC4 E2170FF4D9D9141D DA2641C09B51882B A361B4D61C5915B9 A89BAF16F8117863 BC850E4D7930A608 F8249BAE64B70969 700E1ED73CA451B8 D8D4B8F7763905A6 C55A04E8E981AD85 912393A1B464CFCC 6C4D0CB18B2CCDC0 52F9F04960B0776C C01AC90C4F508FCC 2AD7DA727725F37F 02320BC1DC54C2CB 4EBAE71DDF953FDD 08D8588199AA04E4 6661BDC694E2A5D7 D9561951249D08F9 525873077D18B9BA EABF8D067B7DEA02 AFEDE9A2B13E2A97

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201304051957 (name+title). Key = MD5(password) = 4ef1e604712627f5146095ef87cc94ef, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b7d83d39-66a4-7caf-950c-51a2618efa47
  2 25268914-c5fa-4181-926f-11756bef3c22
  3 3a4f897a-2e5c-620f-b04e-cc0c758a30b7
  4 0e2b78b7-9a68-2a44-a700-d617660379b7
  5 37e09cc7-bc30-7b75-ba9a-9dcc2f1d92db
  6 0373ea6c-035d-2c81-b6d3-5756b6b2d261
  7 350a64f2-70cf-2959-a292-2f538e260874
  8 e51b80d0-202d-4150-9986-d56b25ceffba
  9 4ca87eff-fe2e-14ab-acf1-e7fb492b3346
 10 d6c39bb8-59a3-691d-a643-76c6d5a29850
 11 41af155f-af11-1e7b-a85c-9d4ca602f7aa
 12 bc18d09c-a001-4bdd-b37d-8ea95c656a11
 13 8810434f-3b28-065d-be08-14f91c17b503
 14 6429e821-e726-445c-b742-a723c3a99def
 15 d1bd3950-82f1-8a2a-80cb-a0d084adcc69
 16 247eec49-4fc4-2cdd-acb5-441f6e0bbf82
 17 ab96b7b0-0d2b-7828-b4f5-f63eba11eb08
 18 39bae280-ad97-8ffa-9704-093c2568afc5
 19 927b8302-1a3d-087f-a58e-ef2fbcc912d1
 20 bee37a7b-9903-67ca-bb11-5e7e998c2d09
 21 b0eb7cb5-ab22-4aaa-81ef-c196ce42c165
 22 9d4cd2b9-3339-10ff-afbd-938de6b0c5ea
 23 7abbabde-b125-303c-ad8f-e996e7a90a19
 24 5c20e400-5c88-4203-b839-b1cae5be4041
 25 9f719477-c8e8-557d-96f3-15831af81627
 26 dc201957-4681-6816-bff4-54e1e06c17bf
 27 82684108-6faa-8472-b961-e3d7c277ecc2
 28 334ca3a5-34a7-6f82-9947-6c4ab678cd45
 29 da557a8c-ba63-3c88-b5b2-9ebf9b81e86f
 30 0d2ab0ce-0ebe-30a0-be6c-e49c057b8524
 31 ef6cf720-7d71-5cba-a198-7dba914906e4
 32 bd89e3bb-a733-5db1-b58a-0bae6766dca1
 33 48d5f388-7abd-3eb7-8cce-678d16d5e61a
 34 67c3b67b-d6ea-2c6b-9ceb-5db08c408cb7
 35 75abb3f6-50d3-041f-84a1-2d6f019028a6
 36 ea22fd02-633d-8d91-a2a8-254ebfbf3c46
 37 63b06741-74e3-465e-a14e-3886fde489ad
 38 02c89413-0f8e-4a17-9d0a-cfd2ee9d49d2
 39 42528ca8-f388-817b-a9f0-3d8ba4a43f62
 40 566b7c86-abbc-3769-a09d-8dece1b7cdea
 41 52b444d3-720b-8384-9451-02b7f256ab4b
 42 9dbc73ae-b8a6-5353-831d-50244709c546
 43 b31d4419-54bd-6c9d-b370-bb1e8653e7db
 44 2e96a95e-5b1a-869b-b69f-ca1bd3228685
 45 3c5a9a64-0cbc-22d7-9ceb-f5c4f7b8a848
 46 54b2147a-9ce5-774c-9427-161ce0db4a84
 47 dc2f94d8-7c9b-3915-b12e-1139d68f94b7
 48 e0680ad0-684e-2dc8-a913-830cd1dedc63
 49 bfec2e43-a9d4-06e7-a1e3-4628ea5ff39e
 50 471e8acf-e223-7014-9427-bfe8d54dcb5f
 51 8635ac58-2f40-18f2-9b8b-059aae89f403
 52 d411f9e9-113c-266b-80dc-cf45bd7c4066
 53 df491e1a-2963-8dfa-91c7-2053b3a7bff9
 54 4b596b02-4311-6faf-9598-9834a275ede3
 55 d3c1a7c6-ef07-181e-96ee-da0689c366a2
 56 e93d117c-28b3-681c-8954-5cc0020863ec

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 74627224161404827806413456863355320844838568273207128616. Exactly this sequence comes out of new Random(50).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 81 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related