A858DE45F56D9BC9 archive

201302261044 199he8

explained decrypted filler

seed 39

Metadata

Post ID
199he8
Title
201302261044 → 2013-02-26 10:44 on A858's clock
Posted (UTC)
2013-02-26 15:44:58
Timezone
UTC−5 · title 10:44 against posted 15:44 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,832 hex characters · 1,416 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302261044) = dc4aeecec77e197b9dbf0a45362aff55 (name+title)
GUIDs
44
Filler GUID seed
new Random(39).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
40 · predicted N = 44 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

D4A9BAA5010C8CCC D0479B6FC7FAA889 4E2F6119A222F3CE F2E56840FD79ADAA 2C8941083360DEF0 997DB3A5647B1108 449CF4E188923645 37236C8F8D72FF6B 473EB99E4EA75F2D 1673327E40EBE78C 41AC97458B4722BF BD936F875A3A65A9 6971D33980B23C55 AF2C52D83A8DF09C 84AF49B97156B122 8746BD529A1C9B13 71C47CDB1021DB91 728539143B37804B CF70D56F8BE61AE8 D89159B9016E1D6F FEA77C57E5EC4651 51E55B273224FF48 73C8718C7E4F7066 7411DEEF5D93EF9D 757E64B2CF37721E 47E866C50906CB2E F1ABC3181A398EB2 EB776ACC6DC2BDAF 8217A89BE809531C 3FC36EF7F7E2FAAA 3F74172E3D5CD313 F7A829D3E94DDBB5 DBE2C260E6F9E695 B19726DF7C37CAF7 FF185FE7EEB01882 C29B1459A7E13976 32DD87A100C69A3C 63A5D437EDD2474A 921722D0DA5DC298 A934084944FA6236 527734C627FA51EA 734EBD4F2C0E64DE 2CC49D1E308401A9 79507D0CEED17F58 4E81C7691243C977 C7735C0ADAC7E9D3 963E4E52CE080E22 37CF51EC26504D4C 70EDBA5030CC02A6 27BF56C8984E6D3E 25D9D17235BDDE51 698D4B8B9336583F 06B3DBDF7E174A8C 4193B94BB5F5329E F5048D97BC29E823 871CAD925711CF11 1EB51241C07E3432 881618D1A0364781 C7CCDBB775794812 F0E139D6FFE7E38A 8E46C989CD61E623 9C163279515DC8D6 92D70CB10859BDFA D8704601E942A43C 96681B5B58DB815B 454C83C93E51FB19 898B52B9669EA724 26ED852AADBA1772 215F34401F27AA6E 4172F2C7177FB368 0F86DF9866C6AD83 E4A2DBF6109DAB92 F85C29A1A0A65AC5 53D2F30DECE9D7FB 67AF2CA95CFD999B 2A508AA68BC1C187 D78A55C2F3C456D8 9BB40D1A90F87587 0BE67B055FF40C94 B34BD3E06322CDEC 56EFD27B5EC265D6 D3D537CAB60005DB F48BFDDDC31F4B1F 126EEED51198C381 EB3B72D2C8DDE341 E36AAD543B689971 87CCEBF4B32E8993 6E3C3820F6B546EF 68CC17DD5213AD3A 47C152BDB0CEF850 685E83D99D32D597 F24687698236AD7B 0D22B23B98045D2B F648990358016BCD 73B1CF5FCCFC1B19 88BBE5E9A15224E9 690A1EFC128886AF AB8097D00FDC20ED 3153DB65BC3B34B5 DE3A8C3C3F516490 875E3E1CC31F2A65 E93629B59A54A67F 10A6D225F8FF46B4 B395AE8715DC8FF1 09F9CF7FEA4B7EC9 FDB431912C469656 1763D36EBDF22B37 289603951F0FB4EC 1F98BBD2378666BD 04CFF9B917FC32BB C345C5C382AB4A5E BEFC09312852A589 1097AF277074840D 1E3540F273C06879 B20B2B9CFEABB194 CE85EEC606511145 50F617608F1AD384 87645CFD9CCC7FC2 56F7B7011BFF2B45 587DBCEA9CFFEE6A 0B9532446EEDA192 82EA94948B9526DF 9DC1301F7D667093 ACFC565294A779EF 3EA302F8238503D5 1B61294C5772ED5C 836D333518A4D941 E9428110E7827F03 54A8EDD9089A98A3 CB56CC0E3A71A409 F3D5F0E201DA7304 F23F5C3A4EF99A8F 97A0A09FE350F48D 338DC02A695C6A0E EC0115B822113BBA A2E2DC8FA29CFF34 A6AC28589FB9D110 C940F4F627372BA1 8CC6F89984CE4646 8B875D482F7FA25C 0EE363410E45C09F A0C4AA5C3DFFF047 3814D3C627D55494 8970D7229D06CC98 F31E94D72C4462AD 243C8ABCD80393A9 A0D1FA469625EC6F EAEC5B0F1937F6A8 2827D96243060FBF 2B332DA260EA12F2 C84A36F446F938C7 9BB26E53138FDD06 95FA68B03C834D2B 1A8369FFF887DA88 616FB9964852B073 58BDBACE30DEB740 D67DA986C25D1BB1 5F2CE6ED5BC542A4 A115D4200F5E7725 6ABA887B7D7DFB4B F61F0948F092470C DA6E3DFBA8E4A4B8 8E99E1149B0C9810 22617AC7FD1621C9 0F2C88FC91181D57 D5F05FD18BBEBE66 3615A33C3F4AA984 1DA166173ADFC7B2 EDC3A152E8EB48A4 C47E14AEF87BBA3A CBE480B57B01668A 2F0CDE723ACA983D C92E1780F4E850A1 D1811177971E3C8D 2045B163419ADE06 05931C8B266F3A0B E607EDEB74FF3AD3
  • Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302261044 (name+title). Key = MD5(password) = dc4aeecec77e197b9dbf0a45362aff55, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c5db9b2d-00f1-064b-9e8c-8288d63d34b1
  2 9594007d-bb43-2629-80bd-e6ac615c89a5
  3 84ed157c-8075-0aa1-a70e-5894bb557589
  4 38552aa5-e7a9-7471-8ad8-d4b19fda2084
  5 229751a0-e343-7b12-8403-963a803227d1
  6 6c5561bc-170e-5276-ac69-f68a6a14c2f1
  7 d6793548-af6f-33f3-9726-be3ab82cf7cd
  8 9553472f-0ec2-0ed9-9bed-4f33e340f2f5
  9 a544f195-366b-7974-b508-15d7bc201533
 10 62ce445e-04e7-5b0f-a6ee-b707355b8398
 11 b2ac00b3-19c6-08d0-8557-6d75207e8a9c
 12 5d26bfa9-e4be-8e95-9891-065e461ad928
 13 5e3bb0ea-16d2-33b2-9c25-44940e1d118f
 14 67811e17-c951-6fa5-8b31-e04aa81b2679
 15 699c60e3-a07d-20da-a6a9-16acead0e2a2
 16 a33322fc-1c01-35a3-ac42-4eb9331d601f
 17 0effdf41-9814-2594-89f7-fcdb73a65ff5
 18 7ebc2ec4-e72a-1ad7-9820-19baff1f635a
 19 e521acb9-48ec-666c-b233-4d6fa5a54b26
 20 749f8ef7-a62c-3275-b21b-648c1d719ecc
 21 5a010164-0134-8649-a8cb-19676d33e7c9
 22 c666d47c-044b-3959-a970-83c8efab2b6f
 23 19e4be17-f480-58d1-a672-b8775f3cccbb
 24 638a1bfe-b3e6-5de8-830d-6751a63fc5ae
 25 36bbf499-6303-419a-a48c-579073cf8ad3
 26 5d6fac4b-2f2f-5a95-a7f4-275f60f7d94d
 27 d859b856-4de3-478e-bac7-2e4953b8398d
 28 b6310802-93a1-742f-af63-2218bae3b339
 29 9fe2bb3b-ef8e-265c-9360-6f1de06090aa
 30 06184ede-7a52-4da6-865c-0d7c6ba5fa90
 31 93e3fcf5-8d1b-59e7-88af-67d7b802e93a
 32 3a727e80-f50d-6cbc-ab17-f07572b751d7
 33 9883dffd-e83f-8ea2-be48-5bc7d1ea2c5f
 34 00aec576-dcc9-84e7-a13d-2f8a12105042
 35 a2cd392f-8a95-2b64-972d-9d9c101fccd5
 36 3427fba7-e066-4f40-92a3-58849e060a44
 37 cf9afc59-8ee3-3909-8546-547abd715bf1
 38 8973a53a-22da-8f50-8518-f35373b2835e
 39 6370c486-e24a-0f9a-b30d-2d50208f3c40
 40 bd994187-4a15-00f4-bc7a-2993b98ae8dd
 41 3e6506ce-ccc6-4fcd-a056-64f5626a4d37
 42 79845330-04ae-4dc5-81e1-a6a19cb4133c
 43 eee4df4d-97af-3a9b-b3eb-872ec2504671
 44 9b799725-3d19-69dc-b74a-9bba80264893

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 02077530750836232163835545472456882438004436. Exactly this sequence comes out of new Random(39).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 40 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs