201304052209 1bq7z4

explained decrypted filler

seed 917

Metadata

Post ID: 1bq7z4
Title: 201304052209 → 2013-04-05 22:09 on A858's clock
Posted (UTC): 2013-04-05 12:09:57
Timezone: UTC+10 · title 22:09 against posted 12:09 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201304052209) = b07a18a8ed45c4c0ee559cfc4ff600a5 (name+title)
GUIDs: 48
Filler GUID seed: new Random(917).Next(9) ✓ verified
Run: Run 44 (seed 1,087,967,875) (seed)
Draw: 84 · predicted N = 48 ✓
Machine boot: 2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 4 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

BF8237BA7DDF8226 85CE2673AF1E54E9 9EE5EDE3CAC9AED5 7AB67A91E037D181 F1B05E563C311070 9C029366E335DBAF 593F78FB48856F61 01C448AB1AD15227 5F7B00B9EA86F74C A26A9D443FA52896 CBD0513983DD58C2 7658F01D5AD9E585 D0BC21B4A7251CFC 17FFE5C6B8983DC1 F20CB262BF623545 E34AE2293DB43D22 D8EFEB23B2CFBAB8 64DD2A102F517300 C2F98301435BBD6B 11E7534E9F622951 262DECC26D1736B9 528F7F18597B3EB7 271066D42FC6201D 40A540F560A492F8 70EDA2A7C16A5370 8C0B62DAC4E3622B CBA74FA02FA1625F 4599C7088D2ED72E 62319E9A64A11B8B B8B267307068F69F 73215B93454530F5 67475E23E9E9A927 61650309780722B0 32494E89003E2B4E 71405ECB5B26D74B 7D6D6A0ADA9A6724 62FE17E030CD8FFD B5AFB632A1ADC83B B04A42E8047F101E A2F5FA2DFEAED4F0 07ED1A481DB824D4 A428DE4C5C640955 7C8ED9E9CFA95990 5FD83BF4307D16E9 6A6CF7B5976F6EB2 3627214696AEC18D 906C05B40EEA40DA C0B2D4ADA020EFEA 59C77F0734791524 9DED877F56854931 B8D860CB9185E978 E0E9D5A2B1D18273 EBE502D4DE447E28 ADC0AE55B2605BD8 7EB9D5F2F0CAC8E3 BA2EE8BD02FD821B D73F543F860066FB 3D681F91A9374A26 61801907AFA56750 B410843C29B68D25 9B6382EFAD2F17F6 AF925C0A59668B16 CE65F16238483C11 91A26C1525FCE8B4 6802896E093707C9 E3513CA5B4B987AD D856A28EFBCE72F1 B95AC176299BC58F 9D7D3390BEF14C3C 87F885BA68F7502B 9F4426509628458F 8857C072CC3195E2 7872E985697D4198 46A48C65DEADB19C 73E17437DA1F99A3 09DB17329554E1B1 E9E5989DDD54A675 7678DE1948F5B941 FB6BE05AAD66FC85 03F1525523DDFF82 AA63D870F17A0BFC D696B95342E6CF9A B863C5B762B94CD6 428DFECDCE3D9FF8 076FE0F739F1D484 2E0C5A359B25F2F5 8FB5C54BDD672E55 6E0FB6D37AC4C085 E1AC1D7AD8294C95 06F47F19B305BDF1 28D25579DC9E5869 83D7535751F716BE 2CFA44F070C090B5 FB8FE50715FAB6A0 237E9941120A36D2 78C6D6E23FC57A5B F3DADDDDAB597BBD C947EC99A3C54E31 296763B3DAD6E923 5FF706A3893134FF AE879EF9FBCE9C15 B79003D45F27545D 5A961373279A5C24 B6D824766D75CD33 C4BEC1E983AFF31A A993CC3DBE0892C1 E0599831080F706A 79664D3A860A891A A2FFA027DDCD6D2C 8A25F61D366014C5 009BE5E5EF18ED3E 8C646F889CBB6206 B9DBF6E078ABBAFD 214642B2F9FE30AA E46848B3B5053EE8 3659F647A7375435 6481A94991DCB5E4 40C74C0414A710B0 12F8B68DB3089868 95258C90B764269B 0A99997BE4E60233 F2A1F004B9EC71DC 5BD36C86E9A5B965 BE063AA6270F2AEF 03C96468820107C2 13E3CD5D69152D5B 34C11B9FC1B670ED 91C40C58D9003746 9EFC776644353E0E DCA3DF2CCA6D333A 50D3E4D862F26F5B 84EFB97D0ADE3DDB A9730D4F6006DB9F 8C02B6D4AFAED3CD A4464D6493028A28 3875CF2C7ED39422 71DD235A3ECFAFC6 C4AB44677D6EC2E1 2F4CF9247C605AE2 912D57631459465F C5B0CBAF02964F42 B176FCAA8B045D5F 4DC538415024B56E 1949B06ADC45144F F4BC04D158B5E13F 7009F846E5C46A58 D5E056B8FC2F6207 5AC98AB18A2FC2F5 FFEF77D007275A6D 17C0B496AA16C164 E99C4D4EFAD17BBA A66F76948B9259A7 9E289F369AE0C61D 625FDB116C2F5646 729BD174864303C8 71A518295C147C16 0EC9C1B606548944 C51462693845DED6 87FFEB2AE3E67FFE EED42552A7B787CA 023488F3CFC35F18 193A88A5CA96D553 C687D1E9A18C51A5 4672253D1EFBCCFC 448D295D2816C3A8 0DB57123984EA50B F792A68DB4912FA9 8CFCE57EF472664D 11C66511774096B6 7FC1200A5EA62044 3AFDD7568B83193B A798E5BFE34BD020 673CD086CF1AA0F2 D1F7AE24E09BE462 AE4808558285AFB3 D8FB9738136B8259 C903C785C2AC2937 BE66CA6E8E2F9096 434E9A08381EE74E 2399EDD9280919E2 B7F0ED70E93A9AE6 709D694ACE4917C8 32BC37BE776B289C B6AFE17C3C4211C2 61B96AD38A407226 4EFCABE68B881E1B 0BC84BA5FBF32FF6 02AC353394E3EBE8 DB8B903E99F1E515 0FBB3A02F86A453B 95DB3D4CB33C9319 B7E014BC0EC4A00E 4393044D221022E7

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201304052209 (name+title). Key = MD5(password) = b07a18a8ed45c4c0ee559cfc4ff600a5, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 52897b3a-6b1c-7ceb-9adc-0d0a5e750fcd
  2 863d2cfd-7503-7762-bbd2-164ea498de67
  3 dbcac466-2ddd-6e7a-8cd9-dbe4857d50eb
  4 f119c7ac-14f8-2a95-be3d-be317a4f2170
  5 e6490d07-01b1-14b5-af2e-6f895f5ecafa
  6 ebf0a008-f4e3-87f0-be67-752113e3b42e
  7 32f766cd-e5d4-69e3-9f41-b47444ee467f
  8 ee518c02-53ee-40d7-ab81-64b10ba246c8
  9 9b768bed-6bd1-34c9-ac3f-18ed4c60bcbd
 10 d2530652-70f9-3a83-b381-dedac07d5d6a
 11 b5857d59-890d-7c87-959c-82087fc44baf
 12 80e4c9f0-8628-389a-ba96-fa0f6723d8e3
 13 74f7000d-7473-08fc-822c-85611c127bce
 14 27276208-b00d-4365-a118-10e0f2165bb2
 15 697588fd-9159-74bb-9c9d-76068f3cefd9
 16 e2525713-1431-64e8-8c08-106907e3c58a
 17 c8492266-59e6-2d0a-bb39-6ad1af1019b5
 18 baab7800-d852-48e2-9668-e87505a7ae1e
 19 7deb2892-5531-42c6-b086-29b92e943ac8
 20 e5af8875-82f6-3185-b548-94592449e76e
 21 692896e4-c416-59a6-a394-56be90eeceab
 22 90e450cf-db73-7e71-875c-4d15971b41c6
 23 2238f81b-d64e-84fd-818f-d24cf098aae2
 24 0901fb7e-2de1-38aa-8e8d-c44e05372122
 25 531d54f1-7a0f-59e5-8a83-b75a37ad0996
 26 07b9267d-6f3b-2ae7-b3e6-283bb6851a10
 27 15b46f6a-8315-3dda-8b53-8ecc5135e7e4
 28 d0fb8acf-4a7f-7a8d-98ea-3c305cceff3f
 29 9e0383a6-ddde-75d8-ac87-358f4bea5fd2
 30 e8ef062f-5350-55ac-bf9c-8ab5b0005d24
 31 6379adfd-c9b5-65eb-b824-feae6a8e2db6
 32 449d0ec8-a3fc-80c6-b55f-8fae3fad6dce
 33 698cc002-6b96-0165-a152-8239d8bb4412
 34 30c947fd-da52-8bdc-a6bc-f3ca50583d49
 35 99749cdd-e526-709c-a9ac-0443ab4d9d2e
 36 a6c8403e-aaf3-4878-81fb-4d736f9fe1aa
 37 66fb05f7-7a68-5755-8075-e8bef89ea534
 38 960f7b4d-40ac-2519-a4dd-770f41b89449
 39 d4b33112-6c00-30ef-8c7a-5c2a0f67fb8a
 40 b12c6a13-9ee1-5a2c-b673-282c11eaa295
 41 9e61053d-2195-4256-82cc-cfd5f8358c3a
 42 9d3198ab-c409-45eb-bc71-788699c4f575
 43 0e923378-b810-68ba-994f-2c8ee559af0f
 44 605c8b7a-25c1-0595-abc0-10dde1d910ca
 45 6c2fde16-ab00-37ed-85be-33f4e198805b
 46 efeda274-5254-3187-bdfe-61c959a1e3b9
 47 92abbeb0-dd24-2526-afef-4880810707aa
 48 f4501698-b149-7870-8bfe-15e42265cd1c

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 776218643373047624435783523775680874523544603327. Exactly this sequence comes out of new Random(917).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 84 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related