A858DE45F56D9BC9 archive

201302181559 18rtt6

explained decrypted filler

seed 204

Metadata

Post ID
18rtt6
Title
201302181559 → 2013-02-18 15:59 on A858's clock
Posted (UTC)
2013-02-18 20:59:56
Timezone
UTC−5 · title 15:59 against posted 20:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,344 hex characters · 1,672 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302181559) = d07d23fadd1c5839fe53ed73e3ad369e (name+title)
GUIDs
52
Filler GUID seed
new Random(204).Next(9) ✓ verified
Run
Probable run 3 (seed 33,600,187) (probable)
Draw
6 · predicted N = 52 ✓
Machine boot
2013-02-13 10:24–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
13 · 5
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: probable

From the post to its content

As posted (encrypted)

73794ACA7C21060E 8CF8EA0788291BC7 5B0B53A2AAE66B8A CBB6E220CDB31080 D56DE57FEFA07655 9169802A35E328E4 AD27D4451062505E 3E53C316D487C10C 69AE5124544FBA70 0966F61475B5797E C55FFE852B31D6E2 A3D1DFC85C7C85FA CBFE4A366E8D00CD B5712DA5CE0F9629 5C75CB78FB0A447C AFE74401D34D6BD5 A649FD652BC62BBE 89C360DC92E29A45 6FDE7DDEB4BCF735 0CA033F2A476F42A 49CF3D12476256AE 64C49FEAC4A0A39D E97A4A3D57E59528 AF5050EECCB7579F 1D5B91E4AB5320C6 85F435234155CFED C1FC09331DF47A80 E407D683384A6A11 4F24EF1257070CD4 1B4AF351C39DE5B0 BE0FE141CDB8D3D4 76091F960E9DCA54 9CCE98B8C6E418D0 17E9FA607FBDFB69 91E48DB2C26DCCC8 3AD3EFF3F5256E17 6B2736A2CCCC71D4 40C88F76E6F1430D 2FB904DFCA788CE2 255DA31BA0A831C5 8580679CA491B35A 58DE3F98C838F872 8018058F53212033 2F505E169EC724FD 66EE1DECD1CA006E 1AD2AD5AABE60461 D11999C8708D4C11 0AB74EE3CD38E48F 888BFE18F4197D69 575A9171E3889446 4AC8CC3844F47937 9EEFF84877485A45 37119B65149032E2 15A70BE0B8E0638A 9530156D510DA2F2 ECFA9F55106A86F3 AA27B827B14E2C67 43612A0A2AB9D34A 630B4A77469D393E D352D345492EA1C4 922211F66274359E 25F058A7A518AD59 903290AA03C58FE2 E92460334B8097FC 7117C974267EFB7E 11D7EEE02986F27D 3E12EAC2CC1205B4 10E411B60E5B2A4C 1781E640F75D1AC2 A3A286BB6C675F09 C607148AD67435A8 0BDF6AE820C2BFF6 1718E8CD250E60C9 A98CD83DE46C14AB 253ADD5367924A48 C59E09515CF7CCCC C1CCA44116FFAAB0 35BFD4FFBCD94EDD 4BE09172221C46AC 4CA360C02174717B 67B5B4AA70CF20D3 E6D17CD2BBED1811 8730DA1C7585F5AE 14E53891DE22FA98 9CD403DD07116884 51EBE51B04D3824F 712E8D70A3FE16AD CD0A10D6D072625E CADF1C916A4F534D 8E2597FA97CF78BF F97A208DE7E4D549 7FD47811E36E470D F34FDDE4AFBA4CF9 4887C5C3676D746D 9D8B387D36259031 421887690198FF73 AB1E3B3785BC55F6 4469A022F01650EC 8BBA4259B5764982 148207B01F6D4A2D 4916DAE7D4DD4DEF 312F4FE439C0F37B 2078B42B1BA5CD1E FF06B7D7A40B89FD 38BDA5C3EE47AF71 B7FADAA8C6090E73 5E3F70CCA7449B9C ECB4F9538B84A353 AA959295AE6E0DBE 3DA99B2DB05A1FB7 CA9D771EDC9DC1E1 FA63DF1D78470FA4 5BDFB115D4C330A9 D494F81E9A23DB5C 582F59C44F014891 DD0BC5C6FF3A7D33 9811D3F040C869A6 64488D85C459B2B8 F9A5941D6CBA2E09 35E85F7AB11A8B73 E80998B72C4B1E31 4942A2F1985B75FD BBB5C9935AABAA45 CA15C15A409C3A22 C9C37F1F23EC05A2 85B85E1A413307E5 943AC8E4CF93DD8A B5262EDAA961B1F8 AC3B7822F9A62965 063BC54560870347 A129F99C02213216 7AD27D696294C122 5993A4F94D9AD1E3 A3D0D0A9294E5A4F 9229C2E39E67DAA3 7002499D5B3ECC10 81849950D35E273B D9DC38180FAEF387 B515FAB45824700A 35BF13BD53AA8DEC 6BA42CF75CFA37A9 B7A79B780DFE9944 4E9DCBA73F90CA69 C28999799AAD2FD5 0D37C64B91DE6C0E 38FF49D47FCBA8E9 2769B0096700DCFA 421E4E71FC25DC7B 919BE7E6D9785EE3 3A0547AE530AE329 F02F2083AB7BC676 02485579F323C5C2 2D19D44339CB34C7 0AF408A3F55ED005 49F50FB16348B361 80B8F7404312F1AA 64060BCCABD22BA0 6690AD7AD66457C9 6F1CBB896DD27D84 FAD5EF6D97A4A9D0 C9658E7D583BF005 4F0C2002D87E7243 5BD10F46D9D9E7B0 873229038FF36072 CDF759A5F9411E82 A5B838FAABA8AA9B A262AEF8E88B9B7B 5A04F936952F4C02 E47E653823756729 9BCF0D7FF90C32B9 F765746EA4709EAC ECED6BF5F79DFC12 E8A68570536FF106 A4BFC7771B7823CB D89628D418D465F0 EF981E30D8913AA2 BCDDDB3CF416B497 399A36EAA2BBA421 B8B18E5B9C12D777 2D2D9CF4422692C1 185A5386EDCC90B9 ED0154A5F22FD78F EB2858D280AABCEB 32B50DD13DAF7AC6 825F6A2A46AFF8A9 6350B74F07F9D151 7BA683E11A8E14B3 C2697DD5B217E69E 70A87CAD9CBC7CB8 A5B532DD491CB003 9DDCA36CFADBA8E7 BC2BFFE2DC2FB178 26EA37D257A61A04 CAB01A6A36E2C53B 7A498F568F2B2180 D0FC372E9DC648AE 9FE311DA298C8513 A8933DD426AD5EC9 0B25D87DF3485D74 7B7568B6BD2A67B0 40F4665225A4EFFD 1797BE441DA106B5 009327BEEFB12E96 DEB2966EF47BC5D3 BF5230CAA18E3825 7599A846928AFB85 8BE79071B6A1E80E 3962076C820C6407 EA73D24AE0B982B9
  • Read the ciphertext. Strip whitespace: 3,344 hex characters = 1,672 bytes = 209 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302181559 (name+title). Key = MD5(password) = d07d23fadd1c5839fe53ed73e3ad369e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 52 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b33b999f-ecf7-297c-8a39-7c51487ae72b
  2 c36f0572-7b37-6655-9376-51da34e61525
  3 6ee468b8-2b7d-3a2c-a729-4cffdb51a7ad
  4 ddc0161a-0ef7-050d-b975-7117f60e23ea
  5 69d816df-89a6-2538-abec-f15cbb331eb8
  6 3b6c6293-7dc9-7d2a-811d-58c2f0044078
  7 f8c15fda-87d2-22cf-b649-30186040a55e
  8 f4dcf36a-56b8-7348-8407-8ab3b7c35f9c
  9 fe061859-9a3f-1026-83ce-ebf6fbf453e8
 10 b8dde865-170e-41d2-b970-b18a6236c723
 11 a3b5af11-ccde-5941-9b83-1379fc452b71
 12 8e52e3be-d988-65e4-a72f-6b09718f753e
 13 b3ffced9-b61a-7841-810f-40278d91b8f6
 14 cf2fe109-510e-5064-a8ab-150c07a3ef30
 15 e81b777a-7573-6300-8031-7d463d825b87
 16 66e0b5c5-694d-3331-bd36-551010857c7f
 17 e30b1980-044a-5d5d-be9d-f9fe291c217b
 18 74a2a8a6-dcbb-46c5-be5f-483c1f7078ec
 19 740065a1-3f9d-19cd-b398-01eb200b5fb3
 20 08e9d10d-ec7e-2ff1-b630-abf593028145
 21 0337e6b5-097f-8049-839d-89c6137a6db4
 22 31053d67-b9ab-864a-b347-59677d7c5081
 23 afda572c-b834-431b-9c76-e3f26c3730f7
 24 01c33718-ff7f-2aac-a6d6-8b40cf8e3c54
 25 35684100-2b61-611d-a9a9-afab02b51a07
 26 6ba26176-938b-66d9-b023-def2490b12b4
 27 52ca4479-9dbf-2d45-b1bb-0d2bf0e4adef
 28 a0d02299-5a1e-0435-ad55-64368370e3ce
 29 d7669623-dcc5-8f13-9dd8-59d1ad4845d9
 30 11e10004-4b2a-3146-8998-d8927d49d4d8
 31 a7176184-6c42-4afd-8aff-f78fa471ed6f
 32 46d88d76-a047-19b5-bda9-e495f2091899
 33 ae891139-83a6-2a92-aeb2-6c296fd24885
 34 5a89aba8-04b8-0709-8f93-19fb00d49d40
 35 8b098b20-2922-73b2-a8d2-3b100a43c20f
 36 cfd9c521-c46e-52e6-a5fc-b32add3b99cc
 37 239bb6eb-9d8c-044d-a340-174e5e27c491
 38 4db447ce-209f-3c42-ba45-6500660b7594
 39 8568cf39-7d9c-23b4-b95d-c794b4aa0d09
 40 83885b06-3c10-7b74-854c-cdb5baf25fc6
 41 fc568695-a194-171e-8a4a-c7f2d17e8ba3
 42 bf3cf396-f3a7-3d73-bb81-1868b000aa46
 43 d62181f3-f69d-72c0-b7de-dcf5afe27be7
 44 b8936dac-1f07-3622-8d51-3c6e9a58160f
 45 21806ac0-bdfd-4eb4-a07d-5add00f64a50
 46 d1a00e43-550c-486c-92bc-5b4c60e848aa
 47 216f6527-bcb6-6e86-8c01-c8fd51b4f19a
 48 77b22881-cfed-5897-8e08-a769f279e5eb
 49 fb51b4b9-c80d-043d-b9c2-a447c291a9f6
 50 4ec3cdec-258b-103b-971d-565f459f01b7
 51 7ff24dea-01e4-0750-87c3-9ea1ed2227a8
 52 ff13ee64-e3de-55a5-b2d4-07f0a7f6ff5e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2630272714567563541288426620834120750327137344650105. Exactly this sequence comes out of new Random(204).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 6 of Probable run 3 (seed 33,600,187): new Random(33600187), 4·Next(8,16) per post. The RNG predicts N = 52; the post has N = 52 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:24–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs