201304060445 1br0fh

explained decrypted filler

seed 534

Metadata

Post ID: 1br0fh
Title: 201304060445 → 2013-04-06 04:45 on A858's clock
Posted (UTC): 2013-04-05 18:45:56
Timezone: UTC+10 · title 04:45 against posted 18:45 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 2,832 hex characters · 1,416 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201304060445) = 88fa5daf9377daabcf8a8505d358cf3c (name+title)
GUIDs: 44
Filler GUID seed: new Random(534).Next(9) ✓ verified
Run: Run 44 (seed 1,087,967,875) (seed)
Draw: 93 · predicted N = 44 ✓
Machine boot: 2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 8 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

3270707B9975F43A D98751BF237BE78E 27836498EE8E89EA 52B7B820403432D3 70B77B8978B672C2 F86F4DFE5611C9C1 46F07301A7DE2983 07E95C08A14575D2 D9FE488207184FA1 D015C5D0FAEB48B9 750697152C7F0F69 0E93A7A07F685034 987D0197184C0CF1 3B559B1A2ADB0F5D BE8E1CD474CC17B8 B0DCD7E479E37DF3 533B7BE1BEB661CE 2A51EDE4A4C0913F 240AEF206A0FD301 8B0E50790173289D 451EEE940729BCEA 53010FE8FDF9AAAB 6E792A573F2978F8 A2B348FF92AA0496 4710E5C91D21331E B37260A7BAE0D3D7 257963C828334232 3E58780A6870D4E9 CDEC6897DF600EE9 63D9DC974DA96A94 3F7E33155C3C2282 E552458CFA5A0E2F 6D0962B25DD57A43 2D8BD9E0DD447088 59C3E1B700C13125 30E326606317704E AFC0D273B68A7935 B63D3BA84EDEB549 0CF06EFD6DA112F4 ECEA472D0C7F0BBB 910FEF8C84D0D936 10BE0FD01C03608D 6C9D5565CE86A250 8BE85DF6FE2156DC ECFB26012C8931B8 6D414484B9941302 1BE8D3453BF18EAB 253848276E640A68 E825B415EDC2041F 63C7440BBB18EEA0 E77102BC5F1FEEED DE686410B176ECDE D669BCBAA243E46F D3CAF8027ADB6DCA 2E22D62D20766142 4B935D4BAE6F1659 6384813757E72F45 D68C1C355E6C2C5E 1AE99FCEE213E8F1 4AA29894A14EF826 B12A9DA0987CF8EE 828E6189AB812279 96D42EBD9D366B74 E177D25C2839E3DD 6A43EDC43E4017A6 5488CACBC7FEEF7D 25CC85B2534CB16F 71733C2133A97F71 56843FD5A6104CDE 9475A52DF3171E9D E2312CDDAF6049D7 ECA965A7A6DC57C0 5ED8E8A8B8C312A4 869E40586658235D 88FF6D367EA91CFF 4B7842C69DB19F5C 4D1D55ECD22C6672 62DFDD490C46762E 7B98695EE8F32FA6 B9434A2EA001FB78 112E4D800318C916 5466FD2C39683F71 9FD2BC001DE8054F 096D796F69F5C1D9 0C5409F065624B09 CB124FA19DACAC41 33488DBA41BD4967 766C7E72EA907EDF 7007B6AD48F75229 B2B18CE7D4C8D32B 6A267BBEF443CDC5 BEF33A61F125A3F5 165DB64629C5C929 984FCD462D4FCD8D 848CAC65D4149705 51725F091A87251E 6A36921F7F342DF6 C691ADA4F3116EBD 77FF01F05A3DD4B8 F9E961020E675A1D 1B155FD5529EA77F CA90A2582DD690DD A0668CA7AEE819E5 B639F6D8B4D8BEAD DBEADC0BEE5C1DB3 1A47F37FF1E7C358 E697603FD0DCB1BC 334967BFCB044015 C94E02FF4EB5A91F 9A8E8C7A51FCB29D 1DF15D2E6AEF22F0 85A99080772F5053 C689BEE0C93E3D98 A614FCCF00FC1D89 3970DF3F83C64D1F B0A7219555BC84F1 8CB4EAF1CC615FC6 69F821B0356DD0A7 CCE4BF4D9644F54C 8CCD1034E8C62350 E3570560AD972CE6 EF54A1DD8060B138 668B592C8B788E5D C80C81FDABDB0728 CD46A6D1298E174E 797F0FE28C2EE648 2BAC6D66BA3BA0F0 8BCC22EEAEC6D7C6 2BC91B382B9DA422 48D54DA09C64914F 6A6D4706F40692E7 74E3B1F0245AA107 8661892397371F35 B373824B0F1DEB51 C6F0911657F30802 CCFBB375072B7238 651DD73C13F88B4E 1057B0A30CE4C975 6F22C159AA7B4F41 B1B43B57D6619F00 D6C6300894A76C75 963BA8622F44216D EC7248A9132638D7 614A741679FAEB74 35EFEBD37AF572F8 47F0209F2EE78533 C0F58551F7F73CCC 00FDF521C155072A D399BFCEF8217A62 B9BFB439BFC6CA6E F8507F28E46970B3 F50FB334A12D69EC 5B6F1B09569690A2 AA55291FDAA72774 CF32A0D205607B2D 070B2E115F7F07F4 2C9C0D6221533C34 E2B358517A483C84 599D76CB39D842F4 B3F046FDC0793755 97DB997F89AEE033 F72321C6CF8B2C11 EB0E4632DC77B9B8 534CB21EA378D802 40A2B63E9E6BB230 6A337FEFB3A349CE A7622C9683AF2FBB 8A25299DAA0EFF06 F064CFE88B9DC3A5 20573F8D8A6294D2 CDABA37EDCE22857 5341059FC04926B9 C9D595836D860BE3 63124C5929AE2D8B ACDE83B0E2652365 F369963D1E6DD525 417D62A3B59D381E

Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201304060445 (name+title). Key = MD5(password) = 88fa5daf9377daabcf8a8505d358cf3c, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f7f519ba-ee31-66ff-808d-df66be512480
  2 6f1616f8-a5a2-4808-9143-d0b635f629ca
  3 05ddae25-d5fa-0b13-8855-beff2982fe8b
  4 23c338b0-f493-4505-9166-f04dc4bc06c5
  5 baec3ebc-7a2f-2f13-bb39-383660660c2b
  6 a130a2fb-bc9a-1793-a57a-1c7d7f886559
  7 6ef72360-3f19-1fa4-b97a-4c386669fec3
  8 0a46cab9-1170-33af-8e78-f0d31c243940
  9 82bc7c20-5691-080a-b78c-74048fb57135
 10 7c93bb2a-bca5-1345-b957-58dd88e0a47c
 11 b44f8880-d1ba-6808-b238-87d3abb1c3d2
 12 150dd968-e2ab-38ba-8717-c2cbf6527a60
 13 e9894ca1-20e6-6a7c-88f8-3538e206a439
 14 7346d09b-eb8f-2268-a809-c57b264bed8c
 15 e104ac0f-d989-6df0-90cf-57dbb88b3c33
 16 4b8a4a12-c4b1-46ff-97fe-cb6a7d240f3a
 17 a1f467a6-95b7-3104-b2c5-f1b994c59f05
 18 5130acfd-b9a4-0450-bce6-430bbff8d329
 19 3ce4cc9e-213b-172e-a221-293fbfb0829a
 20 7cf796a3-9811-09ec-9e1c-0876b71a959f
 21 0b9a9ca9-8a0e-6687-8542-7b09d3de7e5b
 22 9f52f047-3d57-79eb-ad42-25c05fa46683
 23 914e1dc9-233d-22db-932c-25a90d4210c9
 24 805bc11f-de50-56b1-8e0b-286af55467de
 25 25e3de8a-7921-02f2-ad00-966f1bd0cfcd
 26 37626ab1-7f7a-8c9f-90f9-1c62186551b0
 27 406654fc-26e9-0723-9d08-30f1f6a9457f
 28 d9cba70f-789c-5f7a-a049-95d071bacab5
 29 6dbb124e-49a4-0eff-974b-4a834e70f30d
 30 9f335e0f-9f45-1a2f-87f7-59987696fb08
 31 5c7cb25b-1b7b-2e6a-a15d-d8aa1b905de7
 32 f377be6c-2555-1761-99ca-a4f7d38706fe
 33 bc78ddbb-2915-0e72-ab6b-02096b2af614
 34 5792731e-e5e1-307f-90f9-c5cf47fa7785
 35 177ec91e-7fd1-0f69-b294-711f311e83be
 36 e2955855-ca8e-8349-8845-d02cdb4163dc
 37 c6501516-8773-3801-aa5c-438304171cbb
 38 ba6606df-d43d-2438-947d-e7d56dc37468
 39 40b22038-fd00-7c57-a257-ad127056282d
 40 1feea4cf-14f7-186c-b270-cd86263cba9c
 41 84156f70-f899-4845-8653-78d6b63d72ca
 42 6ef6faac-d874-094e-a898-41d80a2f0491
 43 5df067c2-790b-5aff-ba41-0ef1ed2e1dec
 44 73dc8e43-64f6-6c2c-8aa3-fd191d4cd596

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 64042113016362643010672508050121030832714056. Exactly this sequence comes out of new Random(534).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 93 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related