201304060401 1bqwty

explained decrypted filler

seed 579

Metadata

Post ID: 1bqwty
Title: 201304060401 → 2013-04-06 04:01 on A858's clock
Posted (UTC): 2013-04-05 18:01:57
Timezone: UTC+10 · title 04:01 against posted 18:01 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201304060401) = bfa937693dad3ea7a351d91bf9c1e1c5 (name+title)
GUIDs: 48
Filler GUID seed: new Random(579).Next(9) ✓ verified
Run: Run 44 (seed 1,087,967,875) (seed)
Draw: 92 · predicted N = 48 ✓
Machine boot: 2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

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

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201304060401 (name+title). Key = MD5(password) = bfa937693dad3ea7a351d91bf9c1e1c5, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f8730d41-b206-1ba4-8e40-e1627807413b
  2 48f3f7a2-164e-624d-813f-88abdfaa4947
  3 3607e673-c082-4def-b40b-9b0d1ed7baef
  4 0e8a1711-0b8b-179b-8ab6-5dbf5ce33bb0
  5 640a2c8c-9135-53df-aa20-1e8348bef65c
  6 a513a160-23d5-4e81-b284-bde291420218
  7 ca27a3c1-cf9d-2608-9a67-41ba3fa6a990
  8 32eff792-816f-8c32-81b4-9dcbf669f3b1
  9 c111c927-fa54-5443-bfd5-921fb69acb30
 10 7df43c76-eec5-7c85-b5c7-a6193472cdfb
 11 8569add7-dfc8-7acc-8c67-997459249bf4
 12 92c96305-4d19-48c1-9cbd-4e7a409df720
 13 5dffe5dc-98ba-6e03-ac7b-f2ad77c8fd3c
 14 acdbb081-363a-681e-9337-fb454983edfa
 15 e7c754eb-a610-2a9f-b0d7-18cf5a3bf342
 16 c3c96291-fadf-5464-814f-03962439ad0b
 17 cb283b84-32e3-244f-bb35-58b0dc988864
 18 7aecff6c-7388-8d0e-a987-9fcbbaa470f1
 19 f9722b8f-2913-36c5-92dd-56c6d639bc5e
 20 1f1e2159-c74a-48da-8f0f-c4f169585072
 21 5984a6a3-73a5-6777-8b80-45aaf78f2b82
 22 97146d0b-6c89-878f-808a-fbd7fe3ac060
 23 b4f20a76-f593-7743-b623-e3a0911d1c3a
 24 e59821dc-825c-287e-80e2-28c93a70b150
 25 0aa641a5-e956-4ced-8d78-a53d65517fa1
 26 3e938d4c-8f77-8993-bb69-793f9187526d
 27 69ecc29f-31eb-61ca-b0bb-1bf76a819098
 28 0d2149ed-e6f7-3606-a124-8b3c315f9558
 29 4a9a51ad-2b4b-42ed-a61d-e02761fb3140
 30 7567a643-8eb3-3eb0-9e28-abd4fd87177b
 31 8a6ececf-10ec-887f-b3ce-e9cf5d401c93
 32 dae87aad-1f68-8652-8548-2dfb3fe2b9d1
 33 b1219dd5-8ba5-19d7-97cc-e98c404efe3e
 34 6c473678-d739-415e-8d6f-1da4037a99c3
 35 b87a5e86-6c48-715c-bc61-6b069a30de65
 36 b2af258c-8da6-74a7-8481-4c73373687a0
 37 3f7063a3-3472-56fd-a4f6-ebce11d89ed8
 38 0460805f-e88e-8b29-bcea-e0ab31d276ae
 39 130adb26-e485-4dc8-a5c2-1664fa0d54f4
 40 91a0fab8-cbc4-6540-bd61-050d54f3cbfc
 41 db51f585-cf70-0998-b043-33983a51a9d7
 42 23efb446-d5bd-5b3c-8f58-91306b483b71
 43 5945ffa4-2737-3071-bba5-fe081f280fd7
 44 e97072b3-9c44-789e-a360-bfe21bb85a30
 45 f6cebf0b-c95d-16e2-b069-9c82135fa039
 46 d9775f40-8b58-631e-8266-2af39bf1dbda
 47 2f1c4204-802e-2678-909e-cfd74fde6435
 48 4bc0d60d-b524-4d91-b3ab-10ad2212ee82

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 164154285774662528346872486343881477584605371624. Exactly this sequence comes out of new Random(579).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 92 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related