201304152111 1cfi1k

explained decrypted filler

seed 467

Metadata

Post ID: 1cfi1k
Title: 201304152111 → 2013-04-15 21:11 on A858's clock
Posted (UTC): 2013-04-16 01:11:56
Timezone: UTC−4 · title 21:11 against posted 01:11 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,856 hex characters · 1,928 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201304152111) = 756095ce435f8e7b386d1f1b0e1687db (name+title)
GUIDs: 60
Filler GUID seed: new Random(467).Next(9) ✓ verified
Run: Run 45 (seed 51,450,859) (seed)
Draw: 25 · predicted N = 60 ✓
Machine boot: 2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 2
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

BFB1F39F28095FA6 A77C2B83DC53B0E3 FBB1205A0C57047D 1ADBBA14BF2FD9C9 45919A294A9F3AFA 6E7A049291E6C303 B8F7E25625CE4BC6 CBD2FE9115F140F4 EA9215BDDC61A41D 891ACF2FEE7886C9 5812A018841E2760 6CAEB1D51C2B44DD 6E01CE0564D59294 B8A353F2AAB668D6 05DD67D6CAA5553E 3437557081C259C9 399A08E4039E2536 D6AA05869694E0D8 372F6B30A9D749D4 1A86B47C9BAB25D2 0B100F603754FCCF A6A30711A47BABDC 1A42728600652EA9 A3C001E757372234 B6943B78E565C094 831D45035E33A3A9 0EA07D064E769AEE F3903DBDC33BCACA BD8354057A4326E7 705B4EFC27DAEF16 F7E763704816DCCE EF0CA99A899924DC 849C2EAE2A86F6A2 3783F26EC79D884F 44D7CF18F560EA9B 7841E895F52DD15D 812722D12D150589 70B34AFB558487F2 A4899B286365B2EF 54B246E2BBA3A507 05FC04A36A569229 3D40BA87438A3D42 4CF9B0F6B9DED2E6 928C4F27750393A7 C56DA082216EF64B 2198AE4589EB15EB 80782A60515614D1 9AD0A055C06BC403 2414DC62973F84D9 A937B58D375754F8 824D7EA15F8881ED EB01D7D6F8DB3B2E 89F00922AD1B366E 05208E751D3B7C9F 12B278DA2C8DA27B BB64FA5D0095B653 5AC4D6D2B03C3C98 8E33D5C459BC37EB 1DA250BD998D8469 B5CCB7B0E16BFCAC 8CD456FBABFF0C61 0FF47A7EC2DC52A4 3494050AAC27C171 F9010E7C33B31A06 C0CCC3D12B8DCEFA B714756E2ABE1098 72A522464F510613 B3C49009F39710E0 B945C6E38C23A860 97E13661BE0D3F39 1FAC36CB6DA56D04 1DA76CCDDD227265 BC83B94C9A5391FF 879A6A16A3B7100F FBCD876D5F666AC0 7812421371346D82 29F7D514D77CAB48 ED8028A49E79F9E5 2E91BF1D4253ED0E CEBB6E48C9F84C70 B045A9CBA8D4A333 B791C1BFA99F3355 0B060AD0B617F3CE E4106CFF2E3FEEE4 BD21A7CFCB22BA9C B5FB7BF657406A28 DC6B169B878B7922 7366997394EAAD57 2BDA33CA4334CCE3 0DFD7AC422505A87 0B7BE235A690FAB9 7EF357C342CA37B1 BCDA6642AC1DB876 087C7C595EDF217E 94FD2D2156E8D598 BAF60EF3128CB7E6 41A10C57D0724344 F6717910F76371A6 5035761B13DE201E F0D6402DF578E1EA F9908E596A26FF7A DDCAA4FD5FD7766D 11B09CFD6F52E506 56198F9FF18F644C 2263345C06B66E57 DA4A89E32356BC74 CA0C800B5BFF6E33 2AD886BB1DDFC32A 6A7CCD2BA947599E BDBDB52B01DA2B7F C792506BF281A94F 52AFB12920C8BAFD 5035A7EBE3CF63D1 22C9E137F33AC867 43A02434215E129A 68EFC3D4B2C77AC5 CCAFD98911F120E8 F307EFDAF237ED7A 0016DB142B23E826 E0EC5C00118E9A5F F9B5AFD5A92B0DF7 6FD315048A7FA592 A6E69E387609FE82 B1ADB7A61F89AEB0 C3953ECAF87C6BC3 E8F6E75B5B00FE35 9721AE66E0111F0D EC23EFBC759C333B ABA7A5ACA21D0764 5B1A22B47DBDE9EC 37D5C1D9461710DD 261BA5FA0837DFF2 FDBB404B521A5873 66EE0C862DE64F3E F570CA300DAD5F3F 416F8DCF76A8E262 CC7F0B7DCCA08DF5 CBC392234A0174C3 15DBC5C9DE762910 73ACB63B8B0B47C9 0D38486BE356CB39 9F77A4B89D91A2EB 3BB61721066689CB 54343240A40F1388 E7CE4CF6E1F1D795 3E46E2877FD943E2 BF437DBCB0039661 069C4299C168A91E 1F0D3715A9888D16 BCD846B272FD37DD 46E799B585BAB09D EF1C30711604DF2B C817CED560204923 21AB993E106B6B25 0F187621EC5D9D41 F6269C8B6E15AD9C 94AE4D8FF50889F5 F43C678B54D15CE4 17F7F5FF305D985A C07C3668D7CA383E 8994919937A52D33 D8E617D6BA648C84 1D9EE76BC0E84E6C DF1E5E219C4BB1B6 303C7B02F6B4EC7E E21CFEEF85583AE8 D2DD2756163DB79F 7004362D8FDA3DBB 45755424A2B5F81E 383B62EEF71216F9 451EE3E873251B9E 72C6F11AB06B627F 4B8C836A4D66D248 8C75C48DE69465CB E95BAF6A916924F6 7A3FE769B7D89392 5015B2C45B2A837D 90207B2701B246A7 AF7BB3B50FF4D3F8 AAB45E62280ADC85 DB08D0E5CFCA65D8 F9FD3F2F9E13EFFD C62F02C296CE14AB 8B700B6D514ECB95 5958A1CF52E0B55C 07B0E90BFA2681E5 D3D2966B9C218499 7370CCBDB2E314B5 84272822F2157FFF BCCBEEFE2A9BAE8C DA0370AA59644750 A0B458884AAC5E99 92944A0923A881B8 6142532C4D1100F3 307A61442858BF79 4292872C69F0BDCE 7CC8608C5E59EA75 BCE38FA67878695A 6BA6B6BA7D901AA0 87F750134EE9C341 31FCC4CDC47D9C4A 665C9CAAA9662C88 108ABF144A05D218 3DA4D02967EACAA5 69ADE019A537498A A986942849C160CD F92AAB9A96C08B4E 2794AEBE67A0A7F0 3317DB81242DB0E9 C56A1FA2C237F4E0 C4858ED98A295A54 EAB60C709C9F5E3F C17CC1771E7E7DF1 9CE4ABF95BB107CD 8AC13709BA2FB980 7688F2642645B0B6 F9576B9880C4641E 629D67730986617C 828AAFFFAD9CC0C4 9B182DE40EA35789 3B546D7B35ADBDE9 F16F7E2FB1E81CA3 41198B23ABF4CE7C 8CA7EC81263830CD D34EE26C2C78F1B1 C18D3178371D51B1 C1B4AC769DF02A81 E393419C8259D94D 68055F63331A7601 D9F3D350A84CDB3F 730DCDD404974949 A1411CB8A1BAAF56 881F480EB5489E14 4E0B416C0FDF5EAF 089D9045B663C303 390C5F4144FDA9F0 A7EDEA29AC8585BF 3FC1EBB92BBC312E 818D364E5D4A92A1 3145620BE9BBF5F6 8B8A486D61448891

Read the ciphertext. Strip whitespace: 3,856 hex characters = 1,928 bytes = 241 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201304152111 (name+title). Key = MD5(password) = 756095ce435f8e7b386d1f1b0e1687db, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 60 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7944fde2-66b2-6914-8be4-43f3948cfe2b
  2 b21c5dff-7806-7f20-a825-f771ac5c84a5
  3 b2005729-b4be-1bcd-83d9-535a2ea8b855
  4 4babbb42-8a89-2d46-a961-08c3829a70b1
  5 f519df57-29f4-0177-94fc-5ec4bbd0ede3
  6 544cfdb2-1d63-697f-85e7-6868f1de832b
  7 e80603f0-81e5-15e9-ac08-a78cf2304968
  8 caafbb61-09db-6ceb-9931-06faf5e21929
  9 6b7fad0d-3a10-693d-9951-01de896a063b
 10 037c3c95-c3a2-40e0-9a8f-789dc7955b8d
 11 867e7eb2-ffd9-36b1-b28e-017c5a565e0f
 12 e4e6b141-c81a-095a-9c8e-c276cd145c08
 13 9a0fdbeb-1909-63be-8fcd-f21e34c513f2
 14 a4b6a6de-7a4b-3e65-82eb-3f8ea350fd86
 15 2e946a69-2391-76e9-ba8b-8f75370bf69f
 16 78162859-70ab-6e0e-8f8b-c5787f045595
 17 b95331b6-ca5d-1f8c-b17b-6cd52adf3138
 18 4215c8b9-4e59-433f-ab07-4f9d6cc07b71
 19 90fab744-33e8-2179-8a5a-b80eb96fa16c
 20 4dec6262-f3db-1bad-b76b-982b6ba67156
 21 95abbd02-b17a-715b-843d-ce9d51d6951e
 22 3ca09ecb-95b5-346d-bd8b-695f676dff00
 23 ba80ba7a-8a95-8e91-8034-e085ed258073
 24 05e8460d-9ad5-18ce-8a37-9705796de1f3
 25 0fca76b2-b1ad-46cb-8df2-78b75f3d39ca
 26 944f5a39-d8ae-89d3-a6ab-2e82c473d4f9
 27 17bfc03f-52d2-30f4-a03d-85416c8a44db
 28 20456a4f-8d23-025e-846b-5073cd90de64
 29 ff778141-207e-446f-9b5e-6f206c6be21b
 30 f43cccd5-d9b1-1cc9-9d9c-6bbeb696fd90
 31 3bb2c04c-01db-59cc-8470-3f429975d772
 32 000d1bd9-9bb9-42ba-bac9-516eecee3aa6
 33 e14f9114-61eb-0ee8-8b4f-e2d31b6f2ac5
 34 f7005f1b-2faa-6b91-8927-f8b621c21bef
 35 0bf10ee2-67f1-60a3-9381-56419c8f89c5
 36 b8bcffd6-1ef4-0c41-8efd-d9d48d83f61a
 37 fba15edf-d565-71f6-95e3-49878f465704
 38 54bf247d-ca68-5af1-9e2e-bad98b303317
 39 56201719-5949-25b3-bc78-b1673bef8571
 40 a1b43b95-7ba1-1dc2-b6c2-fc43a4a4d556
 41 fdc4ee0e-cbc2-039a-8101-33eb3e1a854e
 42 fe4cd474-d7e1-4b3d-8480-16e7023937c3
 43 44fe24fb-5445-28b6-bc0e-3ce174cbd5f6
 44 7fc41e2e-7b82-1256-bff8-a2a1ffac3e0e
 45 49bedad9-2474-161f-bf5d-23805f6ad0e5
 46 1d0cd910-b8af-0c40-ab1f-1c5b522e768b
 47 bd7e6219-f29e-181c-a9c5-5ce19cd61f06
 48 18cb2dbd-cbdc-6960-bb52-12fb54b54940
 49 b241dcfe-6fe7-66d8-b9ec-d30c420af5c5
 50 5b8a124f-331b-8d93-a188-2198fea4c48f
 51 322b18c7-397d-5b23-8244-f358123bb178
 52 e69e6877-ed11-1366-94c0-f5a480bfbce6
 53 f3edb857-fe5f-03a9-99da-347ea013a7af
 54 e1b029e5-9072-50ea-8c36-d516f6bc0b2d
 55 8fddab92-4696-649b-b8bb-3a2b1dd6c904
 56 5e4e8cef-0b8b-26ef-80da-31847e529646
 57 3a2b1e8d-a754-862f-8694-3694a24c597b
 58 52aa3387-174b-0f73-8b5c-0ab375c2c024
 59 64722e0b-bfee-6c29-a47a-426c3e449ee8
 60 d55026fd-200f-133e-b16b-a5d83aa42f7d

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 671206166430637614217381483041540660752104211016685105628061. Exactly this sequence comes out of new Random(467).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 25 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 60; the post has N = 60 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related