A858DE45F56D9BC9 archive

201302260514 1993sv

explained decrypted filler

seed 302

Metadata

Post ID
1993sv
Title
201302260514 → 2013-02-26 05:14 on A858's clock
Posted (UTC)
2013-02-26 10:14:59
Timezone
UTC−5 · title 05:14 against posted 10:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302260514) = bca4af56d9691f19bc020618f24af33c (name+title)
GUIDs
32
Filler GUID seed
new Random(302).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
35 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

5AD838390DF28F72 4F70EDF0029C53B0 5663E2DF643F770E 9958892402EDE1A7 B3F5A2864E28AAFC 2F5290CF730792B7 C0FED309612F2924 F9C0DC094C78AC9E F23E103754E1DF3C E8D200E5E1801DE9 F42C2B36F22736E2 1032FB90A45392F2 CCA7705413CFBF2C 3D6C5A9FD011DA08 BE467C16207B9AC1 767D7348815AC4B3 AB2403F4F90A7813 A38FDF0B48DA65AC A0FC7B330337B2B8 A03E00D9B090190F 35FB4010389AFBED 03E66CBA220DF8E0 99364B96B9B6B512 861567A9544A7E04 ED9FBE1241724584 4918BE7CAA62140E F1D020953553E214 D3957434EEA04F66 2C3E9E503D2FC558 13EF115A721EDFDB CBC60D35DB990B2D 8F2A108B42418B4A 7F947D1E0004F3E9 672EDBF92173CB78 05CF8F4441724EFD 88AD98272A1542F6 60918586AEF1BFD9 1D51AC8779468897 A3FC964C69159308 5B2DBE2B21BA8D8A 8CC5034EF57CCCAF 4235B4C47EE06D32 193B98C93C21EEED B857DEEC15415127 03FC4A7B03D3E67D A1D24770C561F0F0 58CED1A38EC94B3E D95A1E253913EFBA 6ECD843C05586E19 A9B95C1E1DD99824 E46B67EBA17EAA39 7BB22CD4430711A6 DC5211E3A9A4B680 FA6A87E30CE91DB1 C025EAFC24574F3A 369ECADF3899D223 8FDB79D8ECA61132 180886371C2B8291 7DDB6398812ECADF 556F75B296BB26C4 5DEEA6F15C031035 A7B9809B200005F8 168902C946E7EEE4 43F295A8F17F7A06 769A1C3BDB219D81 85796BCBFD0CEF9D 16AE8038D93000F5 E720B638FE3D30C1 119E609230B4069C 7BED184D27DC1208 D2F3CD945C77A284 296471C9D644C5EA E5D23194B7E81936 995BD00E5FA8CF58 8B38A9979989133D 4270797F771FB70B FFE4C37469CDC712 00BB4FE6A3133888 F7F82919E9E97084 16915CF07F583A90 A37D5638F12D6AB9 7455BB48A60832A1 8AD2DD846C33808C 624129B8470515C7 E8A7A4D077661069 201627F44D6537EE 128F9D364080AAEA A25E019F2EC0BC37 11B77D2247E7F10A 02C284E99D834AF3 D057521D975BF366 D8DC3BF1EC63D311 568B32B00639118B 2F1851059711272C DC40577CEEA264BC 9DC494D5D3A4E70A B727CED36AC50526 4811FA1EFDD1F5D5 6EF43B9716FD01F8 421B8E3C4D8A725C C6BCD7D283E42333 005962F3CE9D11F3 500A2BE76298106B 47892423C10F3662 C95173705DF255B7 7CD922D6CAE607A4 34704763F2AB3AD3 6AFC604B20834B11 41089E6CE67F62DC 85DB42F16F6F2126 C52DAC4370265281 23BD3B0ED62CD304 97F1EA4BA53BC0A5 55A5298D14E79FE8 867B290CDAA66963 2E6B12DF1FD1B65C C644C35E37A92A5E EF7CA19BF57607BE 612945B691C62AC4 55A600E829FE561E 2591AA02D11E1497 02E9277AD32C128D DDFFD4A23D994EDC 0F43FDF9902373FC C2D91CEBE834B109 178AA86D6481004C 4A4E6845C474818F 5E59944561D2506B 47DD0796079444AA
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302260514 (name+title). Key = MD5(password) = bca4af56d9691f19bc020618f24af33c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 101b1244-071d-4646-beea-79fe08fe95ca
  2 5ee67c92-d102-3b4d-a771-b8c7a691b687
  3 c79a1406-794b-7009-8a69-fa765fbdf1da
  4 444079ba-afd3-0c38-bfb3-3a63e7a158c5
  5 dfa248d8-38be-4fb5-b994-13f79c0c62b7
  6 5ab86301-8bc8-4c91-9b84-4364f41768f1
  7 cd491d96-e2d6-1d43-a395-c6fabe1555f0
  8 c90d7018-4a70-8541-9d1c-0ad241cccdca
  9 acc4f714-fbcd-35cd-8b9b-43253700bdf8
 10 057bb99d-8fc6-5101-990e-b52009871d01
 11 3de6d8c8-b246-7b03-8a42-147ff7ca64d5
 12 511a0f07-9aab-2f05-b75f-97c6632ea7a7
 13 9bfee3bc-09a6-20ef-afd8-9e4e771d21a1
 14 512204ff-8afa-5627-9074-af60feee1c86
 15 316c614c-5b0f-3da2-8cc4-e42d0118a0ff
 16 0329c588-08fa-5555-8812-15c78e7cc55a
 17 d3363866-03eb-7108-a839-146538fd3c39
 18 6f8c79fa-cfbf-2fb3-9572-1cda0863754a
 19 d9ce7226-cc42-7bd2-802c-2ab324b45cc7
 20 5444aded-0450-213e-97b4-dd1cb087f286
 21 94cba68c-416a-8b0c-b69b-bd9fd0373dd1
 22 41281371-748a-8899-ad05-4f127a1c0761
 23 10069d18-4fab-09a0-a30b-3ab1080eb493
 24 21227a25-c621-4d6c-9b89-82d1592c6b51
 25 d7f59400-6c95-207c-a109-c929dbb3a683
 26 b6238b4f-ae61-6995-a17f-1b15adf3d972
 27 4b6f93c7-ec8a-5039-a1c1-b64a6b43c2f8
 28 0d464f49-0ca7-72d1-a4e9-498b1bf64811
 29 4e9837f5-fb26-88f8-b973-bf6d1a1d6c31
 30 10e1b5f1-a86b-2f49-9a32-dc302c966ffa
 31 56dfd277-0fda-6f01-8748-73d8d3e2c1fe
 32 4198c34b-de98-0a02-9cbd-91f3d4475e29

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 43704418357225357272880426578260. Exactly this sequence comes out of new Random(302).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 35 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs