201304060105 1bqis9

explained decrypted filler

seed 729

Metadata

Post ID: 1bqis9
Title: 201304060105 → 2013-04-06 01:05 on A858's clock
Posted (UTC): 2013-04-05 15:05:57
Timezone: UTC+10 · title 01:05 against posted 15:05 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201304060105) = 8bde9ab0457f5f3375815da5f1c0e0fc (name+title)
GUIDs: 56
Filler GUID seed: new Random(729).Next(9) ✓ verified
Run: Run 44 (seed 1,087,967,875) (seed)
Draw: 88 · predicted N = 56 ✓
Machine boot: 2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

A88EB8B7CA1C2F3F EB84D5CFDA5A179B DED271D8D0B0E3C5 18D9B3BBAD4C8D75 1013A5DB4BD58028 6FDA74CA8A24018C 6D32D0039E6183B7 DA87639DD29CA8D1 E0009A441DB2A2A5 4120F3226BA862C0 F059DC5F011C319B 46384498AC9E278D 84EAB296E44EF7E6 181823EDB796FE94 24A04142742EFCC3 8000803AB0929FEA 423BFF090E0D4A7E 675F20A23E3F5A3B DAC98056DFF54F7A 1E9E62A0C198A9FA 0D62D0142F4D2FD2 C35B18AA5DEDA979 415A7A2D10DA7E6B 0989DED0D8A74203 5433AD3C76D1039C 04713DE9EE21B845 1CC14967D781A997 2FB0AEDA9D2AC080 53803BBF155D588B DBC8AC5E485A4C76 AE4539485DEE607F 8DA2239E8D318899 25BC1858B3906739 CC86C5645ACC3C79 A0493C6B55F9F3A1 337B72E26E6D3196 2677B5E61D267950 B5D5BC54831855F1 B6827FE66E86B25B 32E6BC8C869D4719 B8B6C36C396C8213 A32B524B3FABB784 437703CDB3F5B54F BF3E4B0BC33C6D5A CE38BD3B4CF6B7FF FDFE8741493D1349 43703249BEB03DE8 7BFC9ACDCDC61374 EB183A81EDE64B7E 6740492FEA9582C2 D8699FC5995D22F7 76C582B1A7BBBA69 75919AADCA9B00D0 0637E49E43BCF573 0C5A6F11E0FD65ED F50571C23E7B0557 62F86C545D8AF3A2 B951E5840D63A55D 00BDDCE0552C6D2A C4502A54D39F5ED3 B02544270F1AE36B 3BEAD537FD26B018 4496C7870A43AFAC E6E6AC030FF808C0 F9B9907CE20BD5E6 05930438EE60BFAB 5975DDC9F84AE0D4 FFDA41D04451B890 40E9CE4EE4784B68 38BA140A5E53C8F9 6D7D9C97FD3E507F 0B198E9B1D16F842 6C829DD8E2301047 13570223DA0B6C03 7ACAF3398BF22A2A 3143412C854F6141 5AA26772F66A1531 20F63151EAE253BB 44EFDD47594C5A62 F1100D79ABA14EB4 18F5D6684D2766E7 649F91053E223448 08650B4AEC950D9D 1368408F74B6A4A8 F49A272F997C5A69 99B671ACE83B40D3 2911425404CCFA5C 3263138F3D20BF4E 16AE92718E5D02AD F7FBCBDC48166287 F9CC3C3130B21B74 977B169BAEF65458 C7F03C9AE73C8BFD 6129E29FF5C67737 24219C7125FF2B45 06C6719908A882ED B529CF1F6151AE3A D35C7541E101E414 901F82C18733FB77 2155E815C834EBEE E8F6B756F68C09D1 DC91F0E39982AC7E B9862CF6A5F13FE4 99FB9FC765B0C542 DC1645687217ECD5 4A026725434AB43A 81AB3309F9E6D7A3 CAD0DEA73BE91B7C 562444DB75A7135B 497F2081DDDA951C 025854D608AAA418 768ABF7D8CA0D378 4E9A9A67E2F23552 04EAE13718D0F171 E2D24063C9753D10 E1DBA3B26A666FFA FF093586ED1A7FAA 5D88DC486D0C9185 9344113025811258 061B20415A432414 7C6F364F98781328 EC612F51FEDF9AE3 3B629461C9F3D433 3FFC4189A6E619A3 87571D512E971B7D 14BACFA5A86EFA18 DDCBE6509BDB0068 C0B84E5C7B0E88BA FA6B01A9D3815E0C F0D4DBF1993B70CE 1D2D341A5032B75C 2F8752D2AC220B48 B6ABE09EEBC55718 CFF6FF693189C667 8CC57B3D05D14F3F CD28FB00634A9FF0 4388237BC6167612 7C2BD46747CCB231 DE5861A3D7944F7E 2191582D9AD5FE6E 38C332F49E77EFCF 9337F4C91A6FF9F4 7FB4446527BE5641 8191021F49E10419 6435E233F993F23D 94D1C77C32910EA2 784299E49C55DAB3 BBE176095718759E E98BD12A3DEB4CF1 EA9DFA831DDE8232 0A953B67F2ACE6E6 0CED627DFCABA2DF 740371DFAFCCABBC 9C898BCEFAE9E363 6FCE9FC6740B44D9 C47B4ECAD4CF39C2 AAFB1FE2DE27F6D2 61F5771E2B699DF8 CA7C03BFC65DE87B 3DF3E6D463814B82 3173BF4E35F313B7 A176C54F47F2B2FC 4F715F21E2C58FCC C9D69FB8B7C7BC03 61D1FA59382E06CB 0EE1CF35789B666E F9C3A55ABFCBC08A 3B6E0866AA01205C 68FCE124A1D6CC59 3BC9C6920CE421D9 1119CB0923F322B0 E9DF4331B84C27B8 24D7EC113E92106F 7C22BEFF1D09B51C EC40E0E4D231ECB8 D2E6E47BCC75F2AE 42436146775BEDBE D0DF19D32186B39F D53A5FFF89D2EF84 30AEFA80266696CE 0469CDB12656B5F3 583FE6520EB27BE7 7B2A3905F649FD5A 662E32D4044AC230 F4B2B12EF417217E EF505BC881BA3570 CDEB83FA2617C5D5 98D5E4FC060F4908 3223BE466602F156 D823B5EEED39807C D7673C571EB7D875 6715A08622022F45 CE66C36C0B09F9BC E8A9343A32869946 A363FD82193CF9E4 D1A2ADF0D23F28C7 ECA95B68AB8554AA C4E3BBAC1BB48773 123DAE589CE24D3C F8A51CE0FB0713CC 0A58F3553F8D8EFB 41897401DB7253C1 B49C9A8B8115EBDB 8209EB2052CE0B50 559FAB946547C746 C9A768C16C5CE6C2 FB3927D3E7A82300 8744C8579F0F8446 56A07FCA0C60CD8C 105FC291325AEE10 0E60F983AE86A852 D5F5A9433F1C3BEA 27AC18F7FB80CF2B C61225AFE180DA30 DA9C32CDA506062A CEDF20D4C20F1600 11E1EDF80E55E516 2283F166E66A119E 9C63C36EBB7B8564 C9717CA565C91E15 6414D1675A607760 ED44A8EBED096C53 DF2F785B0BB65128 1770B7B0A5038A89 4FC257250E28C853

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201304060105 (name+title). Key = MD5(password) = 8bde9ab0457f5f3375815da5f1c0e0fc, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d263df11-79b2-518c-a978-71048332eb02
  2 c90ef792-5528-631d-a607-7188192ac150
  3 348a1d37-cf06-23ae-be33-0da7691e4d57
  4 67aa192f-188b-1166-a32f-d8e81f051fd9
  5 53107b47-2f26-39a1-984f-08cf120e5d1f
  6 14f210b9-1975-50ea-abfc-76fb934df641
  7 e8c576e8-23fc-4f59-bf52-c68c50d2d7e6
  8 25f4085f-9929-16cb-8017-15eefcf5c956
  9 4cb597dc-72ce-13b5-a835-29987cd9a93e
 10 3dab43f7-0dcb-02ed-b94a-8b98b2ca5bd4
 11 2d8d559b-d886-367c-9ac7-239f9486a002
 12 86d16a22-5ca3-5a37-8852-0a0ab78672b7
 13 040b60de-0817-793f-b8df-dab57d8c4d37
 14 0986db1c-93b1-67f2-b265-50cd1af88f92
 15 4903bad2-5531-2b96-b207-95aee468c0da
 16 1442a39b-c47d-2069-b99a-60ff40314057
 17 f454fdcc-95a4-2c5b-8b64-eaf172938797
 18 fe316478-5ecf-82cb-9f01-cf7930c9b7e0
 19 07722493-64fb-3ea2-9205-8487a1b1f02e
 20 3b46f021-abff-5d76-bfbc-0fbd297db349
 21 551fcbc0-6a0a-65d8-b2d9-15b90868c69a
 22 94d1352a-fa4b-67d4-9832-aab87fc4eb90
 23 8427a4a6-f6cd-10b0-a665-652a59f8ee21
 24 de08d1f4-f44c-67cc-a226-a3402ba606c1
 25 36049770-3acb-1d1c-8591-474223f240de
 26 404ec558-3c76-382f-966a-36f867f230fa
 27 40e4db02-5243-6bcf-bc0f-aac4900b62fd
 28 b2400c78-521e-36eb-9715-4a1f19b4c1d2
 29 94e990f4-4a01-815e-a707-1f7a44b0cc66
 30 4d68d0a7-13a8-1fbb-8795-50650ce0872e
 31 250aaaf6-f735-27b6-a2af-d8bf2aa1ba86
 32 5ab554f4-443a-419b-8b05-2d31e0f5184a
 33 a8c4e62b-d9ae-4abc-b5ee-166592dc54a3
 34 55f4c154-52aa-2a37-9144-ae08f37e7382
 35 d6d92971-0d00-1e5b-8967-58a5cb42171c
 36 9e8a260c-afeb-3a37-acc7-ac5836094d49
 37 31511b3b-d3a5-8370-a560-c374c00dbed2
 38 11bf09fb-e917-14a7-a7c4-5d3774451713
 39 860128b4-baa7-1c97-a898-115fa9ee2576
 40 d99ee108-e26a-7ed8-9c12-0c42b27c5eae
 41 86af77b4-ec3e-19dc-9236-2f34efcf1cb0
 42 3fda6906-a935-2159-968f-73633f4bf570
 43 ef45896f-4830-12ae-af3f-1e2534e6fe41
 44 320ed184-0530-60e9-bc1a-bcf59e814bed
 45 85ef9475-0f11-238a-bdc3-dadd6f045590
 46 55199a1b-6eb4-7612-a89e-8780fab0a8a2
 47 ecd598c2-59e4-326f-b9ac-0c1aa52b881d
 48 af8dae56-b15b-7f5a-9e80-1f30d3231a7c
 49 b3d67304-a115-3890-a2ba-0b54ef595f99
 50 c5641aec-c522-5494-ac47-22a2d340dc2f
 51 d030bb87-c73e-0812-8c1b-341fa435ccfe
 52 abe1d2c6-831a-28c8-85cd-b88c852b177f
 53 68e78aba-e778-3d18-81b2-0c19d9489e0a
 54 1ee9d508-48d7-0a26-aaf3-e71aac2a82f4
 55 2389d08b-60b4-10fc-a1a4-2e1dbaf5b971
 56 4b560fa9-1654-7057-981a-b119dfccb161

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 56213541103576222835661613638124421381171216273735023017. Exactly this sequence comes out of new Random(729).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 88 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related