201304160104 1cfztp

explained decrypted filler

seed 254

Metadata

Post ID: 1cfztp
Title: 201304160104 → 2013-04-16 01:04 on A858's clock
Posted (UTC): 2013-04-16 05:04:54
Timezone: UTC−4 · title 01:04 against posted 05:04 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,600 hex characters · 1,800 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201304160104) = e8aa698daa06c617a631e25051d3611d (name+title)
GUIDs: 56
Filler GUID seed: new Random(254).Next(9) ✓ verified
Run: Run 45 (seed 51,450,859) (seed)
Draw: 26 · predicted N = 56 ✓
Machine boot: 2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 15 · 5
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

16E1E34A52D5BA21 F2D1EA653B0E2961 4C9DBDB17C507932 051FEFAD1F15B1EB 4F9E2E3A5D6817E5 3B974415274E1C19 78369940CE6969DF 687ADE35C6250935 26B6D38C63F1E587 E528D729E1276328 797A1EFDC7844DE3 A5795983E4E66EA2 C0039CBCD3D9E970 2BC73C8B3AA6AA8C 94CAC0741B89F9D2 26C5B496DD81D105 C97F147861E81773 1566CB76D1E877D6 268CC032DF26E953 0317DFBE0FE83A13 8A7187C1D903C375 19204B4DA0186269 09FF0AA9B399C691 517F8B2E7519E494 C01CE65358C50D6F 4AC51109C246721B ACD60574B1D1E922 9B64D3AEC6C1A98A E655BB38E58CEE8A 9FD3EE6929ECFE46 4FC9153EF8F305FB 12600050B91E6180 F9379EBA3EE5223F 778CAC709251811D 493DDC28FB5CEED8 065F5925D0E45307 EC4420D4F50DDEE7 E825F93F19318083 542255CD2EB8A1E3 FE6627C10672D1B1 B526476B67281308 D01514D162EBA683 1824C2D53B6B57B2 42A72D4A433A74A3 D450B11D24511A6E 47A76BC30D1598CF 22DD541EDE969FD8 10D9F77BD8BC3BDB 6BF4B3083F5162B9 814194FD7F92720C EA98EF7422D208BF 23F34E3E0F80AF82 38F6DAB77D255F70 9F70B81A16824BEA 59C6F27B9A4D3F92 B8987F7FB2B0471C BDE06B52C520AA12 DE0B4743D32C86B6 07BA3A0EA6F291A8 924784CBEA625595 125F0CCA068B2A8F B92139999BD20F33 89B2BA195888FD14 495F9B2A2E4724C6 7EA617F2D0E65A66 7B2746B1608D02D5 D472E55E62CE0960 B7C05937F557CDB8 3E56AF5C02598B5A 478F62003AE82479 D110C3616C1C2FBF 293F3B9AA23D2AA4 A718A31818DB2783 DD6C1A4E5391F230 3EF0A71E31C141D5 FC750EEA4037DCDA E46996478B448232 6729B0AD5411F383 9E7621968F5FB929 ECDCA28C9D26758C 9AF5C15EC082470A 5CE7A9805CD8A5F0 CEC1129CA69D82EA 4D84627E7915FDA7 19983E4D8A7BF22A 02229312B25AAFFF F8DBAA2AA07F4D50 16067F74578EAFBB EC98404D02FD0270 6EE5A30C278DC243 F0A172874C580B1E 95F1951BF559CA14 977CDE6E96316ECC EDC15E8E82A19A60 591DBD36745A2B17 D9CA7693954B3406 F4EB314934720F46 30F1A4B5FE6BB77D 1B01288A3C31030C 4AD2075CAF6AF4E6 337E65D195CBF037 E0F8F222E76EF51F 67E42FD591550516 081453F9AB5C7748 D757E9DD0BC4E154 B4761CD0886BC670 30002915AB872991 1A53DC690764182C E56EFD0954347260 C6F118F257F22375 A871E96E0DA448E7 4641426000F4915F E63935B8CCEFA842 ABA48B5D2A6232D3 7210FAC675C669B9 9BA20935A2E1A5AA 635EA7BD2E6E9CBC AE269CDE7E2B0DDB 9E71E674C95FBF07 AEDDC71B5FAC2269 418FE6A3FDE7B78F AD2FA3D9716BC280 5F5759998CCA52E4 B4090886A1B5AD70 460A8A12DCDC1BC0 3D15F57BE2545D9F 5FE7F4F90D073279 AB589EFC09EF6D0A 8CB06F8C290260D6 B7EEA18C8B44DAD0 BCD098EB5D1FBBF7 EFAC35B112227625 DEF10588F81FB4F4 BC89E1DBFB05F766 8DD7D64C2D6B0131 EE13FC0A4367DBCA 3111EDABB47CD4D8 03D519BD7D699876 D0E89A50FD5D4D21 1FE7394E680C17BC 2795A64972664EA5 7BCDF618F32BC37A 99A2B1A06F95D5EC B08FC115826A8C97 B22E94F2E5A3990F 202DD0AC21DD5ACE 0C5C36AF468D0AED D0A96D20A2E2AEF3 BBAC77A08A04F7BA EEA70ECE3D809BC2 E9C7AF3F29CD2007 43619FE2945AF7E0 3ADEFE3D4358B45B 66C0EAAB2AE0D3F9 937B9AC0DADC1F06 A5D56D715144C51B 76718F6A1BA7E936 ACED630A7F76908B 02858BE272734361 78ACE7DF7478A868 DB705B3CA42BDDD5 4FA86A1A9D3EA6B3 2582693397638FE3 5E33A1FAD6AF9B1F B0093AB6EBF03225 DF863C1C6510320B E7E1C24A982B7CE3 70A1FD15914D23EB 3B4703F9EC252EB8 AFFAE516C2FA0ED6 96215EC10FD71984 C37A0832085284FC 75F0B8786470807C 4B69B1B7E849AD4F 709818C77D040FDC BCA4F19CFFCD59E4 23D4BD070ADC0E43 D4F50460A99D1755 6B846582E62B5C6F 365FC3A12D37CEEE 341A741B53FC90DD 25F481B541C45218 8346760C1CFFA137 EB12783786083AD4 6B48874CEC1E0832 F68AAAAB531D672D B74D99A3B3547255 3254AA8C6E26C56E CA28542CCDC54B74 41897A4AC2CDA827 91170830103533A8 32F40E9475C46029 F3BA25FB354E126F D14871723707A497 696EFC5CC0703CAD 67A813C820C78934 B9ABC773DBFFF556 C45FF17629693301 4A409C77D08A9331 34CD377E9B5BC435 95E2B7C907B71D71 5AB24DB5101E7AC8 AF306DE55296E876 48CB09AB9BC44770 2E6998D1F6AF2CA2 729B3CAC71606CEC 51E6FBD59D6347F7 F2353B1BC3AE2CC2 905A17D9E56EDB59 D76C3B681BA209F0 20DC3FD892133157 6D3CF734936CAD70 5F174F52C6882F06 3D938F388A63ECDD E7E7F9EE1976008C 94A8A75FEF9DF67B 17E8EFB4D64A8DC9 408BBE7716344B76 ACB36851C46855AD DB2DFA28773A4B7D AEF940776BBC9564 213B745DF693881F C7342423E50A85D6 1971D5AACC2422A4 274C0BACABC0C10B

Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201304160104 (name+title). Key = MD5(password) = e8aa698daa06c617a631e25051d3611d, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 72d4cf1c-44dd-3010-90e6-21d875ad2f67
  2 49bfd624-39a9-32e7-a9a8-418b83ee75fd
  3 1d963cc1-691b-285e-8768-b3b96d91b09b
  4 e47a2e59-a217-6d85-a693-dfc3af043ae2
  5 b138709a-7ba1-7e24-baa8-6928dda93b02
  6 8c35fc2e-d643-4177-9fc1-0bf0264a556c
  7 a106e6dc-a46f-6e23-8e65-28361c95022b
  8 60b79d60-d406-7671-9aae-6756e39d0b86
  9 baefdaa4-a08f-3af7-bf72-933bf28b36f3
 10 4ba4fdf6-09f4-89d9-ba40-270cc2748a02
 11 0c9042aa-d21d-3981-b92a-4c834170bfbf
 12 1f887939-9590-6df4-b102-429bf0ae7354
 13 4a7bef94-8f36-29c8-984b-9c80d47ee64c
 14 d4056dea-6bbc-5872-8f0a-c0e48eb773cb
 15 be2b6e7d-3cb5-6c24-af54-dd536150f19f
 16 736daec2-e6da-5b87-a5aa-7f4f240d7d5c
 17 30019ffd-02bc-5b9b-ba44-8bafa7179b50
 18 68c6fc44-f338-4fd1-9240-f834cd2ed2b2
 19 f15a53be-df31-44b6-9481-8bcd5c6849d9
 20 ddf3c129-0ccd-54c2-a5b2-5436b44e35d7
 21 216ece50-5a13-5f10-b863-6095d4b90875
 22 28d1f7ef-dfb2-1952-b52f-297e45b5ab05
 23 1f391b42-936a-8cd9-bedd-76bd7a59e36a
 24 020c1d21-7345-6f97-adcc-6b6604e9d8b4
 25 0738592b-3ac6-5f9e-9904-41038d30634e
 26 7e3953fb-c015-8cb3-b618-be3fc97aeb2c
 27 3b62a97a-7f7a-2748-8128-7eb3791a11f1
 28 ae63fd78-b274-0ef5-a8cd-0c1e486e7ac6
 29 b7895def-a92d-6c77-bbf7-37f1f2dcfa6a
 30 b75d6fd8-9253-5ce4-af99-00a7d70b2271
 31 f591a22a-c066-802b-923c-6a48d2f36c63
 32 b2ba1b36-a6a7-32bf-a9cc-131d6cfa3ea0
 33 6af557a5-fea0-369f-b4cd-0f5902557720
 34 9e7d6684-d460-366a-9060-006edb78fb0b
 35 74b406d9-52ef-3de6-abe4-99c9a60cefbf
 36 62661f0b-3c63-6f6f-a920-6f2d013a3c1a
 37 18c98754-c8d7-3cb0-a0e7-b03e47f05102
 38 1d91a8ab-ce67-4b31-9fe7-71544fe75c00
 39 2090b73a-8bd6-784c-934c-38cf1cfa1982
 40 4856099b-a4d5-187e-8e6d-50d0c6e5563c
 41 b0bda3f3-bc98-475a-95c7-6a1919006eb1
 42 bdce9023-9be3-248d-bd06-426f7b878996
 43 a7bb735b-e00a-3c81-b1bd-4732c704b89b
 44 9d3db2a7-120a-08c9-bcef-ee3a02dd669a
 45 66c5a61b-5c09-76e7-b665-b987bd33e10a
 46 d41f7480-003e-4247-98d3-3eadebfb4e7e
 47 f047407b-1896-64bc-aad5-52598c314b9a
 48 25cfd0a9-6dc9-3106-b2ca-4c10c3750e60
 49 0836a8f6-a1f2-865b-8a11-35a7e58f0af5
 50 df9e0d7f-5f3e-7197-a8de-68497cc31133
 51 5b3c3b5f-36d3-8f42-8b23-96cfaf026f88
 52 968695b5-5d2d-1d60-8a31-77be37ce0b1d
 53 e2dd1896-9253-1fb2-bc87-2cfaa5942c15
 54 95c153ff-a254-2c47-ba46-8d2367dedb45
 55 1f1d650a-79c3-0fd0-8500-bde4d1c557bf
 56 cd98ef24-d89a-25df-bae8-857c4e1bf23a

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 33267467383625655445518658206583333634714230746387811202. Exactly this sequence comes out of new Random(254).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 26 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related