A858DE45F56D9BC9 archive

201302161559 18nll6

explained decrypted filler

seed 575

Metadata

Post ID
18nll6
Title
201302161559 → 2013-02-16 15:59 on A858's clock
Posted (UTC)
2013-02-16 20:59:56
Timezone
UTC−5 · title 15:59 against posted 20:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,832 hex characters · 1,416 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302161559) = 5b3e0c6e1022fbe8b185d45725bbc2a4 (name+title)
GUIDs
44
Filler GUID seed
new Random(575).Next(9) ✓ verified
Run
Probable run 3 (seed 33,600,187) (probable)
Draw
4 · predicted N = 44 ✓
Machine boot
2013-02-13 10:24–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
9 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: probable

From the post to its content

As posted (encrypted)

128E18A38E1F0E5D E6B145F5246F752C 570DE0CD4B531D05 8C62180474A1D474 BA3E32D03AF69E2A EDDAA81CABF0239A 42558D8AAA03764B 42268573B5C11AA1 6F6E58783A1584E9 10FF531AB0AEF65D AABEADB46CC425AB 2D5DB2CC6B99D2C3 754C2D1CD81352FA B3B08077E4BAD85A B40E1F7BA40581BB 1020D36535927728 0C8ABE8E218EE8CF 1C950BE1C20A788D 9301ADE0948773F5 00A8BBFEF43F5C4E BB25D2FB430F6B00 E1415103844C50A5 7D8FDB0D0F437506 5B874B68B243AE1D CD6C97C17E763C35 5FC13A510403C419 0BD442EAEAEBB939 299D0B7FCA0CC3CD 674A9546CA598578 ECDD940FED903904 B9FFA8CE61DF00C3 B3D2920A083292C7 8A7892BCC700E843 435FF10B8B085D2B 716C94248F218A0D 3098B3FD8C56F465 5A39B1E702054C10 EED92C546FEF54AF 5CC2FC5B9455A65A 3D91BAAEE9CA92ED 31ECC7EA2EF7EAA5 39ABD1D8E5615CB3 4C6C3E47A42E029B 5196F2FC23C3ABD7 4000E59A05000947 E67E9807C25FC9E7 0E30547CF780E561 E89ED7419D1561DD EF0CCFBED6587E60 A891A3D2A2260547 6086D60685A0DE90 FFAB5D070382F44C 8AC23BD19F1E5F4F BB98A253525A9F86 87D000F2EC0D5B84 ACA01D19FB050FED 16DB02396EA99CFE 7CF5AD93D64D19B1 BE6484BE0E5CEE3D A423731BCC5629F7 276FDBF5062B2949 C83EFB664AA668DF 0EFE15B1DFB17F03 00F297213675FDC7 0E2226AFE27C1B21 54934B9DDEDE08CF 84253BA9F8C391EA 8CBA6A67F9BDB13C FAA168C3E455A9F6 EA3F49D73283D4C7 A1D8B39B2973D4B6 E2E1EA6F3573AF34 42C3EA1D285BCB5E 3F646D6AF82B02AE 0010129FB632A0D7 A5ECCC083CAC70F5 8C6761BF1FAA6812 3A517A41CB277556 6E1EAE0B35283401 B32D959AD4E20C4C 799F35BE4865111B A338BFF9E502134A 74C483136094EC63 B9D06B2CC284FC72 73876EF659870DF9 D0BD8A8D7666AFD1 626E98ED0B660E17 7B7716656DE28644 28621BE69E823650 B5F49661EFD07DAC 47F85B28DDA55BFB ED176AF3B6D7E9F6 0DC9B237DFB34AA8 5A6BB5178C0A3716 63B14C5526FC2DA7 8CAB4786D48491EF F880DD6481E3B90D 6ADA34F2A42318F2 31413671D15A2777 72A74E72BB81227F 0E1EA86E453C74F6 3792D23A517BDA04 3A97358916468757 33BA4D5B462793CB CAD974D88467F1FF 2E51345FFE2F4A7C 114E519700D2902F 7E219C2C255A5831 BAC94AFA0CFB72A0 720F4544CA2E391D 51F0E8FB9F77B754 3CA24E2F67303D87 92928CAF626BCC9C 3FC23F9FA74B920A C7333D331FD96ED2 B21FE5756626A3F4 1E159CD7E7BEB094 08BBBF64D63A0B3F 910D481E319263B5 735E722661AD54C2 BD1D370961DF19DC C7E33DCFA45DA013 F8980274BD5619DC A7F7ACC30CBE7749 7FBF2B8708CB6760 9888B3F250461BF5 C0BB4C7E3648A00F 6B865DFB112DF038 CD0A1148EDAE6F0A 6F205D5D104AF5A5 69A98AB46CCB6BA8 01B4833E62AC8973 242223C655198D34 F8D4CC545710C74F 7F73AC3578E7B60F 061FB298B1CCD711 8A97221AC9246DE3 0CC2678577FA1F18 24238F3E66C71739 A16092A13F0A177D EDB011253B66ECF1 C64A756B4896B274 1D243208039C99DD D60DCE0E19CF7B8B 62423153C5CB3484 A5D0FF4BE6363028 FA5FD8493B3CFB5F 0F2494930D597212 385414AA211831D4 F9AD6DF8D9911FA7 800E920158793BE5 436E10D45D9972B0 F68F5F4C8C8C46B0 DD34F0221BF8F656 BE821FA9F5F5EFFB 674D55F217E28EF3 0117F7853CBB7648 9EC245B410B18E4B 767B10B7AAC0F527 BA247307AD0A8FF5 DA820A13D00501A2 4619785F8D22BF16 1366A14B3C084C22 4A103206AECCD206 759E6B0B1402F31A 6673F33186F4AF82 59DEA5B1E8134213 9AE8CCD7BB19F2F2 037F4F7696EC4899 DB07032B3CB508F7 2CE4A0E9AF0C5091 C0205A29F68F8549 8152054AE72EC935 7030AC565780E97F B96E3AB2C0F4145F B4419D869F6A5FC6 6D65172ECD213409
  • Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302161559 (name+title). Key = MD5(password) = 5b3e0c6e1022fbe8b185d45725bbc2a4, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e470a58a-1b2a-10de-9728-64bc19821cc4
  2 f1be0f73-ad09-4a6e-b322-267dc2d16d18
  3 590ece2c-12e4-635d-aef1-3ebc6a452cd8
  4 926ab298-0d9b-2898-a172-3c375bcc21e9
  5 b8cd7e30-3281-7194-97d7-ed887cdbe57d
  6 a6021a8b-418c-0c79-9ae3-cbcd4c11b777
  7 87200cc2-4c48-4123-8de7-ed6841f85b59
  8 d98dd8e6-590c-878c-8c48-b4539077cc0e
  9 bb12aa4e-f2a6-1c75-aee5-01a4fba9491b
 10 cc352c18-c877-2e70-b042-5fda3646acf9
 11 aafbf800-f3a7-8a20-bd5f-35aaeabf6026
 12 1fa30daa-0675-3ab2-93b6-91bf67550518
 13 9ad4f1ba-858c-84ee-8090-9d3ed51ede92
 14 5bf98a6f-63e0-5dca-a36b-cee16431476e
 15 d7115610-50b5-4946-87de-38cafe5ea250
 16 81fd400d-d1fe-118f-a79d-5e52ed1f74a8
 17 7f8e5e08-aebc-540c-9f5f-37c24dfbe221
 18 f374a45d-371d-4154-8526-7f173f4c695c
 19 511d2ad3-ae8c-2b58-8470-1af5c8d3dc32
 20 91afd2a2-a771-8bba-b672-85e42c7eb83b
 21 b6b899ca-521a-184e-a908-94b22da2bc79
 22 0ed961a5-6b8b-8346-a4e9-44679fb487ca
 23 a343256e-8a6f-1c7f-a64d-2aee8a9fdcc6
 24 93417c9a-1614-8e43-831f-16b1b55d82be
 25 90b0fd06-5860-040e-918d-50b5a2df88d0
 26 aa6f3bc3-043f-3b9f-96a8-c2773833331c
 27 18356d80-6a64-2bbb-b2ab-345e96515149
 28 d8a64ef8-5ef0-89bc-80b0-ff13d087555e
 29 3f6ebcbb-7ade-382b-b1df-86f61f5d7618
 30 30ce0833-382b-10d3-9cf3-a8732c062a78
 31 9e753a26-63bc-44b0-9c18-efe433e9b0bd
 32 12a0b957-754d-878f-8738-ff3c9fc7afaa
 33 27e2040e-b142-400d-a346-7d97163580ce
 34 9756355e-ac46-3524-a168-f6002e02b093
 35 31698539-4e99-3850-9876-0bb45f5556fa
 36 87923008-e96b-6286-8d6f-17e30e05abc8
 37 e230e552-7986-2e98-9507-bca196878269
 38 4497e528-ebee-261b-ba8d-9fbcbedadbb4
 39 c5c4ee5a-0f87-7ea1-866d-6fee57a163b9
 40 c1279dd3-6830-35f2-a900-17b205300ae2
 41 ab502764-938b-840c-9a65-d68d7d4e748d
 42 46d1503a-89b6-448f-8b0e-580cb9a38da9
 43 229e7fe2-1060-0859-883a-fc5f29edb09e
 44 9f06f60a-4715-352f-aba0-521d52e60454

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 14627048128385415428181803283148433622738403. Exactly this sequence comes out of new Random(575).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 4 of Probable run 3 (seed 33,600,187): new Random(33600187), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:24–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs