A858DE45F56D9BC9 archive

201302120659 18dgb6

explained decrypted filler

seed 266

Metadata

Post ID
18dgb6
Title
201302120659 → 2013-02-12 06:59 on A858's clock
Posted (UTC)
2013-02-12 11:59:55
Timezone
UTC−5 · title 06:59 against posted 11:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302120659) = 5b38cfee1a3c6eabf2a54be4c3fb46f5 (name+title)
GUIDs
36
Filler GUID seed
new Random(266).Next(9) ✓ verified
Run
Run 41 (seed 1,681,282,046) (seed)
Draw
11 · predicted N = 36 ✓
Machine boot
2013-01-19 21:58–06:58 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

3F56BB59AFFD0BAC C0C18A31244EB1FA 31CA8F265329FDDC 660BF45BA7ED7784 3018864F0EDB2D9A 0515671F70EAAA3B 70D64896A3641864 425B7C7BD83FD144 BA57147E724088AB 557AEFBEABF2696A 312ADF510DA21662 F2F01FBBF38F8228 83977EC6AC7049FF FEF5226C25B4D27C 29A628CB3B127EB7 F56CCAC8B2EFBA93 7282A0C67AA8D42C 22E033247E6BAB19 04F1C32E569603AF 501C5EFA68ECC860 34CBDF38CA91D8DA 2E09AC1E38BCF003 1FEC8CB2FCD45F36 6EC997C8D3F2383C 615E8B2A9AF61FDB 2B72F9D6BE92D8A7 C398EFA2A3F6CC63 003618149F0AA3C8 EB983DFCA277202B 0AD840E42BDEF35C 5C6913DE4E7843F8 D794CD544D71612B 18C329425E7B67EA FCF454ABDEA162D3 19502A0F4B3DD9FD 8A7F1F1AB1339CF1 1A758B464676CF3D B008E1DBDB0CA768 FDA44B5534B6E7D3 E8BBF790713C8FD9 5F4739F23354B372 4951AA269308FF14 E359A3A0F71F4FFF A38C360E3FCCE967 541DD1E795F82ABA 4BF2113FAC6C634C 93DDE31F5D6FB395 91DAEDEEBA5842C7 A37C394DE09E7697 9441D8D9FB6C18E5 6D98E23AF4569986 99440C6AC2EDEEDF 1B893C14AEAFBD6F E277BD7588DED863 122B51704A58E3ED F7474234E18BE5FD E41F3F313E1C2F7D 29F25ACF3A6F3465 D4E1E801A4AE5B57 222366B6EEF675D7 EB307B373F84FE95 77B469152B249B87 F684E799133D82FA 23F7A59D98145A2E FA220A7D6CC5C6BD 097643C9F1861578 EEF5593F38ED6828 47350D9F4B3A88A3 1A03CFEFF10E5643 F35C868C04490783 17FD52A077C8DF97 AA8E83D48E83097A 3CB0859EEEF1B69C 40296C30B10CE798 9C205CABD938CFF2 396710A226523190 62F2225EA4335293 0A336D2FD80F8FDE 06EE71D609201E24 57A7D1A52CD0D5CB 323EDDF058CD4652 7CC234238FA32951 8931E474F2FA27F2 1CE0DA5806CF100B F58A578B1F40FB5A 139BEDF05DAE1DA4 30173A22F41CC86A 656BA18E5751F64D DE1D6A2305C36D1F DD8166C527A90B85 BAB751511FA42777 FF4EEAFD9C52FED2 1FECE1583204B0AE FEE4812EB76D7AB7 BD7ACAC0B0B72E46 BF2D23A9461967F8 7B8A661A7847DBC7 6D002112C2B40D6F 66185FAFBFB79F28 EC2B45EA758E4B8C BCD79C1205662EE2 D1705839ABD96EE3 1D21B0F558230649 455EA1CC48EF0FDF D4469E5E0A2E4835 99254DF07EAF3618 6E79F0379233E472 4CF3482838957BF7 74DBF7E742CF3373 8AD75389FB1C2D29 B199D5BF224A6F17 F1BEB0C9768C10A5 C6DF9E76DBFE3476 0327F1A4EC7BD2AE 0AA15EE2776830F6 0809BF5BC6E21C61 D8821D225A35EDAF 15FB371D7DD89787 D675E96208ED849A 828BE9E990708B79 5EAD90CC1E100B9F 50FCE58BDB3F9194 A5BB3DD3F7AA0414 5AD08A778089D15B 9403970D975A1654 39367290BE37F6F3 59F50C1BBF3CBFE7 D7ABA3A1FE36BB00 379FF1C684DCE607 2648AE849D8897DE FEDB68D2FE2FE0F9 B2B0F3DC64594F12 5C4A52AE71131C41 8338CDA072213392 0BA5ADDC1E7881F7 8A38DBBC63735A10 A9110ABF99FCB74D 545E0E4C8345F078 76BEB3EE92BBBF28 B4763A4A5B550C79 38685A2EAA39DC8F 5656F9179DFF9B2A 699FAF09F85814C8 CD2A2315B69ADBAE 14742C05554A7CE4
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302120659 (name+title). Key = MD5(password) = 5b38cfee1a3c6eabf2a54be4c3fb46f5, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7e0587d4-7f06-6b29-b84b-927673ac68d2
  2 182f79ec-a16d-7712-ae47-cf6c3b5e8850
  3 b2202c21-611a-6561-be52-41f74d9c1b93
  4 3358d967-f5ef-3751-93ee-f7fec0e07724
  5 4c8e43b0-d9d9-2787-93d6-1cef96969f53
  6 23c46d3e-d6e6-05d4-b639-712a882089e7
  7 8272a22f-be02-0a39-95e4-c6c511dcab2e
  8 3426903d-86ed-8433-ae62-51af9cd46b6d
  9 acf01218-56f2-7169-a860-bc3d00c73838
 10 271ae43a-fcca-3259-ba08-3f8c7e214a9b
 11 39b09832-e0cd-2458-96f2-2eebe91832e3
 12 7e19dbc7-7904-1862-8f99-3f0649408ec7
 13 87481bc0-ef3b-415a-bcc7-911fcd8d5bb8
 14 8d7b3ed6-3331-78bf-b48f-68888f44bdab
 15 86c6f2a3-fbd7-1679-bf2e-74af40a37376
 16 2a88c75e-dc6d-14a0-b6cc-7ef53074d288
 17 e5d15f97-9e41-684f-a994-6c85db5567e6
 18 e901dc30-cb6d-88e1-9878-5e032ecd1558
 19 d8325ebd-0916-7dc4-a81c-4045cf6b2124
 20 1b5860db-5498-2e80-9cc2-eb39a68d893e
 21 8cd850fb-7d3c-1ddb-a79a-322840e98d5d
 22 f4f7d37e-0181-0f9a-9894-2f8886989788
 23 95df42fa-68ad-8b93-92f8-897aa33c7788
 24 cdd51a93-6739-89be-b30d-0fe5ab2430fe
 25 0cac5820-c6f5-6c2e-a032-ee1637f3e7da
 26 9964e623-614e-5d7c-a385-5d8f0515662a
 27 6b1563cd-b4e5-5de1-a25a-72a2670d5b96
 28 4c54a2bc-dadf-4858-8b17-79db23149f2e
 29 b151cad2-f20b-0311-9918-a58213f9e080
 30 34f382ba-c0a3-20e0-bda2-73583a513b73
 31 f5bc5540-607e-3a7b-b090-35750bb065e2
 32 735dc2f7-9df8-428c-916e-1691bcd7ea87
 33 f2b99fee-61de-2419-95ff-4da90c53a408
 34 0595837a-424a-5f32-a26d-8b349305506c
 35 1f4447f1-fa9f-40a0-a2f2-9bcc5135077b
 36 7f00a6a7-1a4d-2428-a9ff-28563ab4de5a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 676320087321471168721088655402342542. Exactly this sequence comes out of new Random(266).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 11 of Run 41 (seed 1,681,282,046): new Random(1681282046), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-01-19 21:58–06:58).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs