A858DE45F56D9BC9 archive

201302250820 196v4e

explained decrypted filler

seed 134

Metadata

Post ID
196v4e
Title
201302250820 → 2013-02-25 08:20 on A858's clock
Posted (UTC)
2013-02-25 13:20:59
Timezone
UTC−5 · title 08:20 against posted 13:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302250820) = 47f66017aa7d4c6a588cb68d8983a4e3 (name+title)
GUIDs
40
Filler GUID seed
new Random(134).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
16 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
15 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

A6745022A75A4D86 4D2B2D9B5DF5F196 4CFE6CD839C3CC7F 55F5F511CB901BF9 39F092B86EDFA2F3 E83E6A3244E7A61E C3B3172257CAB344 3CFC69E202D4AE42 7795379496429B17 31E8334742CA50B0 689D0E0A47D9029F F93E912997B80021 6029C6B7C7B26FF7 EDCC20372751A1AC 8F702DCD9FE7F0E6 19DC929D22A03685 970FA0429D85F4AC FE3C223EC45F5A87 BB3D358D4BE6CF14 2E9834EF40BA5105 34005065742EA12C 20CB11943450296D 85EE972D90F0AEC5 8B8186ECD1D0CF77 A1B202475B645CB6 8597AFE44783C6C8 7FC804FF772C62A8 2ADA1A78AA6DD116 4E66B0FC1104C6D0 4623269A9D781F1E 259A4DEC9852A1D0 2D441B2BB67BC411 C0E2FA98448C242E B32D862CEEEB49C7 8D668D2085859DFB 876BE98AC7C2E69F 2E5B78FB1FE90DC0 5C5F6EBB33632EBD E390173045232A8A F6CA890A51CB1577 4BB7797A64BC790F BB145AF92073FDAE 5B80F2037CD13AFD CFEBBD5EAB8271A3 2386D65A99195A40 FC3F5D66CA9BF6E9 696AB5C8EFF292C0 2D8F7BB93CDA53C1 4E1C30110FF2E660 13A788CD0AEC1C62 66F6D378C2CFB1D5 1EF5FF0C575DA3D7 53D2AEEC4010DCE3 4BE53FC0D70C0175 003A02CE5AA123E2 99F85E4E918F1292 FB85A790DEC84166 061786549368CD01 3FA0801DAA38FF1E E1D4954FDA27A746 60E6922F1C4605FE D02D6455E48B0EA9 3EAEBAFB42E2A3C8 68D228BA3CA50412 ADF94B0AEBD0EF4D EF3F6F614558F731 64C123AD2A4E6035 50E28B0FACAB1AD8 043272F361177E88 D6A9CC48A83E9B1D 582127C7D613984F 0E29E9331488E7E2 879DE7E3B3C27EE8 0BAB27C88C85A00C E8F710E5DE35B3A3 9963B141926359E1 1454A0217E7BED6B 75F265ED21A7231D 20E0C6DB1DBA2299 181BC3FD7905F470 72EB6D127CDA6E85 5573439FBAECFBBB 8B5DC003DCF889E9 0AA46DAAFDD6EADB 53A1E2EC14F6647E 3483F3BB23C7FA99 ADCCC9D0D35B02A8 2B33176181D151BA 46A6E0558437E2BC 315124746BD467E1 D18AD848F48FC2FC 704154A5E9FF5268 469BBE602F7BF3D4 76E4E6DFC7B254FB 887BC7795945E9E0 8C539C347081F349 10924F49F965944E 88D1CA99B87FAC6B 958A35D1C812818B 195F3655C7AF3D62 11F5C817923D68FF 204455939DDCD027 310D541394ADD1D1 CA17722E55FD4484 0C52697C9500CB09 FC078520BF1A2714 FD9A9092FDC77BA7 1DAC2051F4612617 4303BB1E588FEF44 C681175999AED64B CB8250E427D845F8 9204B9BF282B96A0 28E77C9FCFBAB98D 0F78D76A7B8A644A 1540F922E9C6A839 3632204FA839AD8B 452CF4D8084D59E7 51A69C36482E5C54 B7079A6CDC775D89 96142004BCF1A3BB BD9A63985D691AD9 5B2817CE813BEC71 3CCB7A29CFBFFC4F 4010B40DA6278114 44082FE385F2FEBB 6ED482EFDE90591C 2B6714E4EAFE9E00 CDD8B5E02214045C E02A9C64D2E03C2F E8961C5B893CF111 FBA2F9655BECD596 189DBCA4CA775D3E 5EAE96F4F2272B38 396627D93DF0367D 1F2F518DE72A3B75 AB6D342DD78393B8 302388E73E1CAC21 F1E33EAA2CBBE656 24B1D8393C8BA9E4 2C3C278D64C9ED2C 9867B4C7604211C4 09F2DC6CDD96B1D3 5BADD7306CA5E3D6 C971A8229420A72E B6B179C645E5A8F4 9277AE2D96024B0A 9FFA9F407B5059F6 BBFAA96C94164152 F787D127545912F9 70B0E15FCF4342BA 3D6C8DF1F97C4A63 E502EF1899B7545E B9FFE3C3330529FA 4D416F0AF36E5717 3C26EF3A04CEB584 1679651168758776 ABC0215FE22822D1 9B7F59EF7662B0F8 485E69B508C71537 9974574BB26A9430 57E59EEEB411A21F
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302250820 (name+title). Key = MD5(password) = 47f66017aa7d4c6a588cb68d8983a4e3, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a7edfe15-bd20-6c05-953c-9cd2c5a375d4
  2 8a1f01a3-6d14-19a1-9d8c-dc6ddf0bec4c
  3 f89bff6f-833e-3907-9353-9d11986756d1
  4 baecf02c-6e3a-1d66-a788-41e4c1f8d349
  5 a2df3edc-5555-6317-a736-32a102909ae5
  6 205bd42d-4f96-5e65-88b3-4621ac5fb106
  7 753f3c06-17fb-85a4-8fd3-ef414f7f6ae4
  8 9512833e-3c61-6145-a84f-7da6d878493c
  9 4e82ef00-42a5-503c-871f-92013bd6ee82
 10 dc531c32-3661-69be-999a-f0a96b6b2057
 11 74bb81fc-c32a-077b-aea3-99bcc67ee336
 12 0d9c4618-6bbd-0d02-b5d7-e88217711644
 13 8487baf1-d266-612b-8716-03d7c99a8943
 14 54e9b673-4760-17d7-ad55-ecac9cb905f6
 15 6db83dd6-0731-72c5-8175-c16fe46f1621
 16 c178f534-21cf-6ac6-914d-d5796c6cf447
 17 93358699-17db-1fde-a637-0ba8e066b73d
 18 91c6b2d7-ac54-0f71-9c97-84ea5de705de
 19 38cc594c-eec5-2c9c-9959-a0190ba4aeed
 20 b7e3d6cb-5209-1f20-835d-aa7f6282477b
 21 c92f0d1e-968e-524c-bf18-7ecc927634db
 22 7ad76794-ecdc-6054-afde-3ed0b5f1ea65
 23 8b4fdf12-9cb9-57bc-8622-d693ded952b8
 24 065b4832-936a-7b87-9bef-a5c4a5921d8a
 25 e6fe5925-5c4b-75bb-97bc-6b953606d05d
 26 a797940a-fd0e-649e-a19d-0e2dc51a5e8b
 27 9208b154-bbb1-1d50-830d-2d305291ea3c
 28 d0384f81-befb-63c2-bc04-d0896f0731b8
 29 ddded8d6-9d32-5d1b-9d59-1358a31688b5
 30 90d5fd23-0254-8ec2-8655-ce76ddb8edb8
 31 9a1b8671-09f1-59c0-96c2-224dcc0f5feb
 32 21bc34bc-6c7f-640f-8f62-724ce033db92
 33 151357dd-fcb6-1d80-878e-34f3f218f06f
 34 5f113077-891b-363e-a116-ab9f68fcb5c9
 35 97a0b7ee-774b-3e73-8625-30b505b2c6a1
 36 53b66c7d-5f74-5c13-928a-d081a2ea8b54
 37 1f6470ea-0d6e-02cf-bc83-07ed78dbbd24
 38 7e52754a-ab44-6c67-a678-67c914ae884d
 39 f9244b0f-08e1-2abf-a94f-b5fb7f9f06ef
 40 58621da8-4f02-0624-afa2-c670aa03eae3

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6131658656006176102156577616585613350620. Exactly this sequence comes out of new Random(134).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 16 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs