A858DE45F56D9BC9 archive

201301030359 15vhjm

explained decrypted filler

seed 609

Metadata

Post ID
15vhjm
Title
201301030359 → 2013-01-03 03:59 on A858's clock
Posted (UTC)
2013-01-03 06:00:00
Timezone
UTC−2 · title 03:59 against posted 06:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,832 hex characters · 1,416 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201301030359) = 800241becd574f27dc993949d28379fc (name+title)
GUIDs
44
Filler GUID seed
new Random(609).Next(9) ✓ verified
Run
jan2013-A1 (short)
Draw
1 (assumed: numbered from the first post)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
21 · 8
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: short

From the post to its content

As posted (encrypted)

C2295DB502F404DF C8F6E743AC3A6447 6B3D0909A624E48A 55447B0ACCE0B76C 382D6AB3A160BB8E 2A2A9082A4C5AE35 75E6603D56D763C8 FA5EDC55EE2BF9CC 175148BC7078F16C 0AD8CBBE415C4C99 A32BA6FA6CC5E2E3 285A27F2211AAEFB F5758D471EEEEDC9 1900AD6AA7527266 7F6132F6E81C79A7 37E03D938F990CC4 24B984A6303D030B 2C3A1D8FD0C0B43D 0F40462796E8D228 B79D7C0318912527 1C330F65832C43A8 5023171865E72254 2E80AF9377E6CFAD 2724CD02C75F9B98 5740EC5D22FA60CD 0E02089B26814FB4 60BBE5DFC0695CF5 FC8C1A1C95DDB5BC B738F1E05C59C1CF DA549F0D1CA0790F 7264710A448783A0 4890D8B9756D9A4E 1675D6E4B5D7DC0D 465A49428A1C9B62 7D5BD597D1686FEB A8617B6F90953F70 5F3D5C2C625A462E 43C8DC2489B347BA AE2C9AF37FB77C73 EB88521D61C467BC 27A3349B138C86C8 AF617205EECB71CF 13E54D55EDC6880F 3E7E7FB03E206C76 775D0283D170438B 481D6103EB1ADA92 EE0244574FC0696E CDDB4DC31E3AADC9 F9315273A3E5865B 30E663DD777EF6A1 2715A56A1666D29C 2C66701A477CCAF6 50958B2987EFEB60 37A60DE4DA37EA1F E54072C22A4E600A 6B5B745FE728F345 83CCED8F74BFB055 05B65C331D7AA17E 8E082715760BD22C DF0FF62274E643C0 F1623CF04C72F4A5 609C94178C1A997D 640E31C591FC9143 74915F434F0B4590 865865477D16FCF1 25D8EAACE024C574 2AFD0D33A8CA9AB5 5948FBE48D9DCB0E 854DCE3EC11993E5 D171F375CAAA537A 3684F51B47744755 C1DF4F232C3E4C3D 408CAE5CE5AC12E9 C41384BC6359EF65 071F643AE55C536F 923C75BE0CBF6583 99E5F40474113731 10488DA928D4819B EC9692E327589B5B 30B29F8C13EA7C55 8AB743C922FAF236 5ED541E3337FBF8F 8FF679E3028AAF1F DCB0CBEA3148AD51 A17694B722DFDB77 C242D3330489A792 189EEE435CB3E86A 749B7C3C2E2A26BD 66181C7537963A1D BA4BD56A56C8F956 023D23E04A65A0CE BD9F3139FBC4FC10 51882BF4C7F5E828 0642DEC1C149CCBB D23DAD6F19FFD89B 0D683225BCCC52AA 6C0ABA58DDE66DB8 3F1A131F47DB3938 7DA2CE0015F0E590 C2FFC07BB099108F 62574846FBDD5A06 BCF895EC413A0159 95E3BB68227D9C7F FD231F4CC7CBD95F DF734DBAC0F36D71 29397926E051DA7F 498E2F911F9DCB4D 80691CF7BDB5D28B 926CC059A353DEA7 65654D5049435D00 9252A0CDA403808D 8B0A0E30CD9E28E9 F3E71C3C4046AF30 9448D02B3031949A 8BDF5B1528FD2F05 6E050D486C611234 2E48A0189B4E51A7 8BFEBC774CBC5FFA 218A22EA5CEC0187 DF7701D3FC95AAB4 76D7037C8493D821 630EB505D82DA1E6 7B5AAACF870EE0AC 68D38EF894A8DB7D 866A2F9E5E23CF71 E7EEB0B523C6E8F8 C734DE1548081E64 033037E9DFC6C028 86AD19B42904A9AB 05269CC343565B92 F5F9FFCD7899E96D 09E825FA8DA2FC72 B8B5E73E764700A6 C183313B1A36B2F9 34362B0E28148753 964B073D14E7A262 CEC42AA5AD0A0208 1497D1E2778188F4 655F1A93130E1358 4E775E09AE7A2647 757AC284AE0D9537 3EBF42096F0FFB99 CD836A5E449222CB 97CA4A0DC831EF82 5520B64AAB8A8485 043F740594DA5924 9795703B42F087AC 73C3D4209BFBAE9F 0603E0E4A7AE8534 22D294352B62AA5B D7C98606254A01CC 44B3B443102BC9C0 30F38CB35C8AF369 E796E97949415B52 BF70EA5CB2467913 90EDAB74BFAB37BF 4716030D10AE752F FF7D670DBB822227 2CD12E628F6E5BC4 B03FF9F1AB952EBB EB37F22EA339E926 CA9EEEAF97B0F532 2C4E814119639139 5CDD89D4029A8F25 95A29D5B0BF2E46C 6117E40B8FE9E4D4 EA4B8F22C4629591 EB1F9FAC8608170D 884A0A249347AF53 7DDB106D7B9E1D92 9C544BB72B330B30 51B285C360D9CAD3 0CDC6DE571CBB4F9 10BAB4FF8A4B088C 5F2F20FA9AB7B49A 140037AC16D9F374 9A19ABE433972617
  • Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201301030359 (name+title). Key = MD5(password) = 800241becd574f27dc993949d28379fc, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a9dbfcfa-f2e2-71f7-935a-30613a27bb1c
  2 829f5259-eb9b-492c-af09-4e4cdb252b18
  3 91606744-4148-422f-8fc4-94db5715cad8
  4 4808ce1b-7c3d-408a-b291-3ce59c98c0fc
  5 99bfd30b-0f5f-1684-ac60-3de98c8d362d
  6 d84fae55-6f6a-6de9-8e24-ecd8d6fcaff4
  7 0b434374-09e2-6d7c-afa6-957bab2b6239
  8 8ff4b168-2e7b-8a2a-a0e1-a7befcac7bd7
  9 b3762e4a-ddee-271b-bf29-b92cb81a8a69
 10 fff1a011-85ee-7e50-9138-af0259c3cdff
 11 8e2484ba-201d-89c4-9d41-c3f7bed1a570
 12 c87e2a98-579d-8cee-a45d-5e8b41b29050
 13 25be2c7d-1c72-2e8a-bed9-838b1571a83e
 14 a9684175-a4e0-2423-ac1b-6d9d56cef2ac
 15 86bf5a1f-dc68-2bb2-ae89-568eae78d7af
 16 d9163924-ebb4-3e40-a23c-72b9d0fe32d5
 17 60d5c14e-be1c-7a2e-8839-0a5b9e73d6f3
 18 e2c0ddbd-27c9-54ac-a9ad-cc6e79d0064f
 19 461e2661-fbaa-128a-97fa-fd3451062cb1
 20 8d0d9c2f-47cd-1c88-abf1-5b7340af008f
 21 e89b101e-d516-6e8e-9e3d-6262efcee28e
 22 e5625dd9-e785-2fdd-8660-4659225f2a39
 23 6474a070-1b90-8a40-b54f-3ce6ee394e15
 24 a9a6fbd9-a3b4-7b0b-a8ba-1de102924c5b
 25 6d906552-27b1-36ba-975b-216c4bdbed00
 26 6475f060-e089-2a2c-aa6a-205f353402f8
 27 af7a341a-ee12-4c9f-986e-4806a90891ed
 28 8ce928d8-561a-0c27-ae6c-a36dd1fe2845
 29 26acf1ad-af88-604d-8659-82be19b70532
 30 99e52ea5-cdc1-45f5-9664-355b0a859ab9
 31 925c4b7c-74c6-07ce-892e-b5cfdd8af822
 32 13226006-179d-754c-bc6b-fd99cf6ed875
 33 f98ce928-98f5-1c31-a97e-e6ef5fc6e482
 34 6fefbd32-054f-2ee1-a334-acfe51d85375
 35 5d18c18f-5d74-263c-897f-e8fbaec2136f
 36 f9ba5a5f-6a84-1e54-8276-e10a727ebe04
 37 1387d03b-621a-45b5-9946-bd8311d46330
 38 107bb91f-4ac9-3877-9777-e0f5288b98c1
 39 6ac22d3b-77de-5600-8a75-8cc06271cfc7
 40 edf8bb16-17f7-6cf7-9321-d765ef8ab1b3
 41 b5392e9f-edd1-0cae-bfd3-f1197d80a283
 42 58fdce52-501b-8843-bcea-bf9d41feb3ce
 43 1c389e0e-fa7a-5940-8dfa-6d5dff37a9d7
 44 12def2bd-e316-1c2e-aa93-29e6ce4ea171

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 74441668278822237511628732406407122143560851. Exactly this sequence comes out of new Random(609).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. Grouped in jan2013-A1: piece A, 9 posts 16-hourly (zone -2); undecided: candidate seeds 162,853,390 / 1,000,996,750, 2 hits vs 0.91 expected; run 39 and Dec Patch-Tuesday boots excluded
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs