201304140621 1cbiwi

explained decrypted filler

seed 683

Metadata

Post ID: 1cbiwi
Title: 201304140621 → 2013-04-14 06:21 on A858's clock
Posted (UTC): 2013-04-14 10:21:57
Timezone: UTC−4 · title 06:21 against posted 10:21 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201304140621) = d4511bff3888540bd6d199466dc2a993 (name+title)
GUIDs: 48
Filler GUID seed: new Random(683).Next(9) ✓ verified
Run: Run 45 (seed 51,450,859) (seed)
Draw: 15 · predicted N = 48 ✓
Machine boot: 2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 3 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

E5F20341E4C01FA6 1C9FFCE16D58D194 B537C0489A8EA3B4 5A7237EE7B7EE105 FEFABB1E7D30FD3D 9DF1B7244E527D8D CB4CDB37E558AD64 851DB84423B071D5 DF9F06F83B00A398 9E27DA6F9AB000B2 C2E12257A243375F 2EA2207BFA3FB3AE 733A825897E7682D A73AFF2B76486EF1 48693F7932194CC4 D17762588DFFF5C0 FEA12461E05EF726 144370006CD95F28 7DDB6AD60E55B009 3FAC5D050FE6E652 E5F8D345652705D2 1A3710F03E6661A6 85F22D94D6BC3AA1 EA937785A1D9B6B3 98D7E5A88E5F5A6B 9D6925818EE1EAB1 5C7ABB817D2A836E B70B7EE61BE2207E 0E912AE905914D2C 73A2B655847FBC14 21ADE066F87DB8DC 72C381AB42FA2FA2 490FA31CF88CF634 DFCC5BEBB42653DF 8A2105931D7E387F BF8DFBA5357B4757 DB00D3629E8D113C A9D825B89949FB55 3B8ED49A9C35BD62 FC52F09703E5F5A5 739CF86D6744A2A6 1293FAE3F83F8E8E 586CF32D154BC90D A7555F1990FCB0B0 E889A2FD3161E819 6D710FCD6C7F76D6 283EA8BAB82656BB 14042F7ADD82ABB3 06FEFFF77D62E37C C8CD6C52229B368B C877A1C622E2C100 228C7BFC86757260 DA531946167EE8CA 70EC9535E4A64A2E 01FEEEB73A0BD4C2 77B10CEF3C20CE73 54E51F492C1449B4 4E3743D1108EC83E 39771CE1C1A12987 1D8A9667DD2C7B9A 348BF501CF14BE64 BCA0736599C6BFB9 FCE5F8A2AEB273C0 BA9BFCA8FB92584C 042D027DB48D7FAF 2156351E9E51EB51 1FEE11E39D158C6B 6B6BF7203BCE492F 7E384F2BC0C8D3CA 74A0A4FE6A514900 581A5DE7DFACA2B2 CBAB41635403F11D 912E363D47F0C17C 39E2386097218DF3 7C7A0B6AD14D95FF 1B47EFE9A38EA630 5E2D5745D44A36EA 3C4F4B7B1A397BC6 9F2E05D8426CEEA1 4702C929A6A6153B 386B3FB3CFD45D53 CB88683B31076A6A AB757EA13B46149D 4387FC9E56E01395 051C4278D2297CDD 1B7BC01E2FD78794 E370C65051464939 1F8C49113E2A150B BE7E7C5C588BCBB5 9D4E86D724F40D58 9AF3BBFF8A679C2F C2228776A7DA18B0 069CEAF6322C6082 8905349A51875A77 12929EDD27B337D0 1F82EB13A3A8C52B 617DB6606BE191C9 863C43A33A5577EF 76FCECBBA73EAC58 0190ABB3F4C7DF49 1E2549AAA167501A 6285DB8CE161BB42 4A4EDEC2BDD28248 88095F671B5E0A9B 68E24CCF483F9964 5F712642BE4B75EE D111495161A23FE4 339FDB4E944E386A 1E8C9A4119326118 1A685662454B5C71 9DB27EB4E5CB6601 BAB721E8F21EB6F8 420CAEA8C879C4D2 34F5D8A18DED2591 1E10F2DE6506B41B 6F5D29D5FE1AD92A 8EC52A2086E946FB 1A297FD7EF8D77E5 D90BFD8641847B43 0929F89AFBE8E67A 145A0BB9B53D635C 0449A9B92F97E88B 60F27177D7151DF9 42FEFC020856E65E 01BB8BE732A8C756 15F4EC1398F255F6 30365686EADD8D07 FADBBC4F569B5DF0 269F0DDED48F5B8C D989ABB089378A1C 24825A5952C484A9 65A1211D575062B5 C654A7475CE0ED6C 5ADFF2784CA08D31 7E366CF8671D6208 55476747B356724F 0FB25AF52348DB19 9DA644351DF8635D E21DE449C3CFA9D7 EAD281E60D24FF20 A984DD8745050962 A7981EB3D669B4B3 B2E523E1BC20D455 732B363B53A7903D 2C57EC46AA3788C9 4B0A03982710E940 AA257F44CFC3F2D0 4BAD870CB1A4F100 4A98D7F23C6C2E51 A46BA9D743AF6566 91FA5FDFFBC73E21 3CE7C0A556D0F19C E09F69E4BF635D8F A86CD761DFA012E1 320E3F272B2B7F5F 4D10714E47A68F38 9BCBC9F354048277 F781B8BFBA8B3B97 B98497E40A7FEAA0 2BA3699346BD2690 EB8CA1DC488F44E8 74B2614EC67F5F3D 8DC5FC92008B1271 EB14C159DA9D5B2F 7996DA2E2AE48235 DC13F1E7901E233B BDFC72E56C799A08 EAAA74E7853FD2B8 239A5F614633F004 2B130472C41567BC 9B0C2CC328805CF5 765A957FB81D29AF 617A838CD4671288 B0DD3FAF0E5BBD82 A87FBD703DF0F32D DA3E749895A9BC06 9FEBDC5B1C88C189 92186EAAC7772B63 E58834B73CE37228 4F46BA361E1C75ED 11B9D8CE701CA087 ED5906A906DFF77A 326D43FD9992033A 49E537F28D83B354 81807AE7A595D88A D1E06CCAD0137DD6 04B36F101E50D9AB 22AE77CECE884312 921BA8ABC83266B4 933629832EEEFB06 B01825DD0ACC14CB 8083C29872315EEA 0742F2B9F8566E4B

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201304140621 (name+title). Key = MD5(password) = d4511bff3888540bd6d199466dc2a993, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 94b160a2-8b67-4014-83e1-33c30a214bdd
  2 11b304dd-dddf-2c56-9e9a-72f738cdf0f9
  3 3a67da96-5f2f-188b-aea9-f019533426aa
  4 e84dfd67-4959-3934-9aca-9d9524279ea2
  5 bd4639ee-4806-5e58-9c58-bf3696aa056c
  6 97edf041-9397-33de-bc4c-22b96ced1aaa
  7 2a894dfa-e0b5-8daa-8d8e-b323441653b4
  8 0d048b62-54c4-05ad-bde3-2b47c8a87cfc
  9 6d5ae7e8-46d9-440b-8e47-34da6b8a7639
 10 794b24ec-7da6-1b22-8057-d0a2f70752a5
 11 ac13df9b-2284-4c02-8289-80ab7a23d456
 12 dcd67da3-14f6-66d3-9e7c-b85ae69bc471
 13 b17bf6b3-5ddd-1a3a-8081-5da9d36f3785
 14 7b97c239-173f-7d7c-87e2-15ee62b43517
 15 61b8c50c-4b4e-0a2c-9e01-a99bd4f8791f
 16 3ea6bb7c-4a5f-5cd9-bdaa-1310f6706a41
 17 29ea6538-6415-80ef-ab1a-d2cd85a7b908
 18 f7897235-e114-4ae3-abd7-55a575f4fa28
 19 e604ecea-08d2-115e-92bb-24109a8d207a
 20 d1d26584-7ac1-6be1-bf05-1c5256075f4a
 21 73b477f5-317d-5f13-a18d-24f90b21c7c3
 22 79928362-75c4-35d7-913b-e5e20c107db7
 23 a1062bc4-2a77-36bc-9256-9a1342637f6e
 24 8c5d4cf4-dd92-51ab-b099-50bcf18b09a0
 25 40786479-9dfd-57e0-b85d-6cc4380855bc
 26 9de4b5a8-6ee5-71b3-b7a9-c2dc16080732
 27 4ca5f610-2504-1f26-be63-d69f5aa6002e
 28 1c41023c-8275-7a41-8afb-c399cdd26214
 29 72333c7b-3f47-1721-8484-98edd6ba80d4
 30 6758f96b-14d0-1252-a1b8-9535b31efbbf
 31 03790749-40c6-32ed-94ea-65fcb546d392
 32 d28f4f88-08f2-3514-8393-8ca6ce4a9a5f
 33 71a9202a-1470-8013-a6e6-930b4ffbfe96
 34 dde3b4d2-b33e-1223-aa76-a35d30f32eaf
 35 cc6ddab8-2e05-1b3c-8afd-4b2819670d33
 36 f1f324f3-05c6-3d17-89ba-131016425f6f
 37 7f317952-9fd8-7a3f-b02d-94efb318e18b
 38 999d672e-6db7-770a-a433-2f9c88d8b493
 39 937e629f-85d9-2751-90bd-e24ee5a25f29
 40 98da590e-ee61-69d5-8da2-911d3d699d32
 41 377d9003-0e7d-73a3-a83e-9758b9934387
 42 23b6c0da-b30a-4934-8a91-36f4c0a561af
 43 4f301212-c4a5-8cd1-9afe-60d369cc5da6
 44 07e46a40-902f-5264-9310-233a44021a8c
 45 311165ee-b47a-0ce3-b3c0-2099d14b7464
 46 f3d4e617-bbfb-22dd-a783-2fc234e3c97e
 47 8f06efb2-dfc2-6acd-8aae-4be082706c88
 48 34997b11-796f-1e56-9d00-cca61b79c340

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 421353804146170584165335571711338113772674850261. Exactly this sequence comes out of new Random(683).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 15 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related