A858DE45F56D9BC9 archive

201301281659 17fi9z

explained decrypted filler

seed 261

Metadata

Post ID
17fi9z
Title
201301281659 → 2013-01-28 16:59 on A858's clock
Posted (UTC)
2013-01-28 14:59:51
Timezone
UTC+2 · title 16:59 against posted 14:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201301281659) = 5b6fd0fa83f4ca1da8ec83adc8245b65 (name+title)
GUIDs
32
Filler GUID seed
new Random(261).Next(9) ✓ verified
Run
Run 40 (seed 1,069,639,703) (seed)
Draw
7 · predicted N = 32 ✓
Machine boot
2013-01-09 05:52–05:52 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

CA2464EACD8C99A6 58000BE95632299E 5C909CDC8E196043 660EC412ABCC269A B038ABF6F8EC6581 72054DC72BC0981F B86902ACF3BDCDAF 65B3CB4BE225501A 4636824FC637EABA 43EAC56A7259FE81 114ECB9233B97817 213BAE5F6C0B576D A54030A002517D1B B454FE36A5696838 4C25FA331DE35CC1 5A515C2BAEE42C86 685B674C78CF9CA4 791A2666A9E58A34 7652998821D0748D 355DA707A428CC82 A5954B31E8C98F8F 2D3A33DC276E94C2 9FFAAF80FFE56B23 1416EFEA8087D01E 95A41343E16141EC 254258764953D841 0C5E18F5B26EF20C E3028788765A1366 B729372AFD1C5F81 603F0852B5730F63 1FBC448D3AEA1C59 489C1C5827595F96 DF301E585EA0C581 DC59E8717800FE2D 175A8815C89D13E3 1BD04530D2802741 99EA1D4C75C5288A 667409C034FD2712 E90392B3A880FCFF 34ABF6D6177924EF 36F4D46530F89C00 55DA3A5393753024 CE585004353B54DF 5969A412C86CB247 D4E76E89309B6FD7 49E6EA46307D36BA 074D96A0AF66292C E593A24843843934 52AF310F755CA583 7052EE3B5498792E 6A8A7E7E8E41DF9A 0EFDE595B41F6B41 1C8D1E40665E56AF FB1F061511B4880A 1828B985145EF608 96AE6F11D1C2277C D1CEAC947D0993A3 F6D995892C0CC77D 315D60AB6B4EB899 2E465C8FEDA3A87E 04A7F812455019A4 3F4FA5C2AA803E01 2FFB62631C2D97E4 07943DBC3E50EAAB 5C5CB46ED1985A8D 75437B8EAE8292CE BB5F5C7609F72B80 17C386D49D576899 ED992057F3F8CE7B 1F919A578350DDF5 6A7B330BD3CC53D2 7FF42B59140CB8D0 7CE6D41BB5EC7808 BD53EFB875D525D9 C3CD559CC808F101 5FF4E5D375B22AEE ED6C6314E066007F FAC1F60E99FF4DA0 3CEF433C3E0CC101 A286344887D95BE8 F16C8367BF75BD80 3640EAFAA9BF659C 80708A530C077869 91D7E791F53C5E0B 423411D0417BC711 D82491AF19CA3B02 9280C51141C5A6CA 091E70F962E1A73E ACD663FEE57D1925 CCC61479211ADE90 66EF7B68450DA19C 657582D026699CEB 05445672422FF2D8 09DBC12342B27CE8 D4D3638486283059 80404EC8F6371556 B71E027BAC642286 B84F9710AE67D1BA C8E06AAF6286A101 AF9CF3D5A729BFAD D0768D852EE4F124 A0802D6FB3752EB9 07EAFF74279DD65E 97834A2B80BFF506 DD09AA4D2188EF66 E8DA924DA6C79124 DAA2118EAC124A93 02B6AF2C911E6BBD 0A4304FAB52F5A76 AC66A834FF89B068 3C649E5C3F02B3EC 323CA3430E3C6CAC 77F5E486E00B1D94 542B2A0538A16F52 38A707E29F75BCF6 E47092F50E2A51F8 5A6DFD7E287A086F 0E10B91A72B1DEEF 38155A43A5361163 2ACFAFAA71F138F7 FDEA4F22FD0973F9 0B9FE98E66BBCA22 369ABBE12D41C89F 4A878DCCEE8927BF E7CC8DB5E8C507AB 9DBC30DA7EF2263B 89D794D9D2542E66 C6F72BF81A3C293B A8C41D503843BDFA
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201301281659 (name+title). Key = MD5(password) = 5b6fd0fa83f4ca1da8ec83adc8245b65, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e9d42f3b-6ff5-0ff2-b205-a0e79e3de549
  2 2c0c062c-679a-3bb7-8777-5e4f9442a986
  3 71102377-9d78-1027-8348-e2b6bce32bad
  4 3dff9c46-fca7-24f6-87a3-4b44ecd739d5
  5 4479fc7b-b771-0a1a-8a63-1b43401c7563
  6 70e2325c-6bce-591d-a18f-1f1bdeec58ad
  7 0ca2edfe-23e8-7023-98eb-f8cc266fa2c1
  8 98cf24a2-6e14-385e-9bae-21998613c365
  9 b9053c23-00ac-2ea5-a779-435f7bedac98
 10 026808fc-a5eb-4a72-b897-920134dc52a3
 11 33748f18-fed6-50f8-acfd-2bffca3cc198
 12 26cb67f5-6973-2d85-9e29-dd8dbdf08d67
 13 f90199bf-35f4-00d0-aae9-60080765356c
 14 4f2c6cff-52c5-2440-849f-289b5eb74f34
 15 565506b4-b871-6a09-88ab-553c55e0c39b
 16 d2514e89-fc58-09bb-8157-109cdf143a51
 17 e5f015fe-ff6c-5050-a30f-2a2999d8c556
 18 cfe64655-b45f-7663-9551-a934006513ed
 19 a3832938-88c8-60f6-bffe-7515ff6b0ad9
 20 8659cc1d-e21c-32a1-89c1-4b90edb98bad
 21 85f247e6-7873-45b7-a897-f636c3918365
 22 2e6ddcf6-d1cd-75fb-bc23-30796bb9ac79
 23 f4936f93-e027-05a8-a30e-f4ec64897291
 24 47781d9a-e6f5-1b5f-acc3-9fb03200258b
 25 1875aff2-9c27-2f2d-8290-f70c80fa9437
 26 e2aab83f-a275-3b2b-9c01-128ef025ba68
 27 017450b8-2633-2686-ac88-c18c3974937e
 28 0bb238cf-6d2f-335d-ae81-caccb8d6d209
 29 1ec008d9-4dcc-5626-bbb5-1ca469668256
 30 a626004d-b9f5-2150-b360-04004f74f7fb
 31 668e2684-f7f0-49c9-85cc-79c71e8edcc9
 32 7628bf88-8370-13c0-afd8-4f7b51d2f79a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 03120573245202605763470123235241. Exactly this sequence comes out of new Random(261).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 7 of Run 40 (seed 1,069,639,703): new Random(1069639703), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-01-09 05:52–05:52).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs