A858DE45F56D9BC9 archive

201302261256 199qld

explained decrypted filler

seed 976

Metadata

Post ID
199qld
Title
201302261256 → 2013-02-26 12:56 on A858's clock
Posted (UTC)
2013-02-26 17:56:58
Timezone
UTC−5 · title 12:56 against posted 17:56 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302261256) = 5fa543f3d6c98c6a898e75cff87b6034 (name+title)
GUIDs
40
Filler GUID seed
new Random(976).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
42 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
11 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

84D583D6352EE116 CD705F3574F855C5 168707CD4FF62088 BCC6C33969D67703 C953D3CF16FB94CA 933CB287EFF5EC80 B51264FBAC6A1A81 64BBAF09148F307F 91719FFC1F587529 B38B32051D44B2DD 832B0539CBDA1523 67E3B64754C258BF 24C07DA82B824C4B 685BAC3B38231D83 29AA0C196676B341 710F621EEDC62574 3A4BDD66A350B187 B30A7CDA39B7EBA3 D8B25ECAE429AB6A 86739037FA00E9C7 1B8E3E465A99F50B 7B72AF27B6396DED 9CBEF1AC1EFEB6C2 E46D20C0EBCE2839 8489291F7FE0D30F EE902B91F1ADD44A F6355E006B290BC8 AEB0F366B9E6731E AD893C88330084E3 6BE11D54487C2343 E34BF0F5C8B8FFF2 E39866145B2C0ADA 7707912C3979009E EF672998C5C3F6DB F28DB6D4CEE6F1B4 2CACE6D26705F08C B510E4202D94692A 120BB3272B7BB5FB 4508C9753BE18FD6 2A3D7576F70070EC F0A7750B724A1CB5 40CAD0F30E0C7F94 011543CDCF1190EF AF49F8693790AB04 2C02429E37862CFB 61463CC8CF6D4AB4 47B75B00A042E6C8 F168652B4EE1C245 6CF5CFAD84CF43D5 E79BC89E25055995 8D85A3326EE49A43 E81F33EBAE77378B AC3680F7D0D05BAB FAC4E8D3D899490C E7931E8984E821A2 854D40059CD35379 BB4E81F8961D3B24 849B134F16E6EED5 8F6E5552E4F664E6 88F609E4CA5E942E 29C4D662EFBFCD2C BD98A26CCBE1B2B8 BE14018ED9C83B02 8329B63E769189A5 ACF1A261CC15E989 985B34936A3EE247 986684F1CFACD137 FC093694D838D1B9 5C7D3C2A929FCB37 89F24E6AB52CC8B3 2D9FFA64E5E33F8D 0D3863288CF68038 04087166DF222540 4830ECC9DCD95C91 FA2289FD2598D122 8C0532AA85FC2797 0867AEED7BDE25F0 A051C992ABA18131 17C6EC09D54E9E62 89A6E97F89F4E783 1BAF517D6087F4C9 5D20294FE7053D3A 4FB759BFBFCD2FB3 7C8E95D3397FBF2B 15EDC4BE74521FE3 27D6191462A8E1F3 A2479EAF15926812 4180CC8E9DF08305 72B7C3F9D81FCED1 592ACF9342D03A4E 7668448DFAEBB13A 623E6F76EF5C7EB2 DAFBA492E9C9E1C4 FF7E6F4E23595891 23B203BA3F6ADFB0 52FF959BFA06058C 90F21091F7610821 F503A148ABA127F1 DF2D36B97CAACDF4 630F397E12984874 328D52E694FC2696 C4085731C36580A2 9BA065CC95F98681 42BB64A02420B67B 4C92FE389275A1DD 3AF7CB39BB4B4376 A72E244D202517C5 64E70D92B6FC9F89 744A91BEEE150929 069315A074753986 D397B7AF265ECAF6 B036A4796EA22E53 3B50E405AD3813DE 9FFDAA2B6D09BB45 A34AAC7DE92A6344 12E1BD2AEB5A5053 EEF9FBA0AE5BD15B B7AC2D8460B49CAE 877780A81B4B68BC D2EA5DF0CEAF8884 607248BD1AD7E6CB 4652C27A1B0B7F15 80F7D5FB0256FDBD 141264355ED3EB4E 9658B102B53D7E0A 513C2CB8A843EA43 3D53133C3CDE8C79 F2A6B44B4173FC74 7B6717D581ECA03E 11A987C3B84BEC00 4244AF325AFD2D52 A12B689AA3165418 BCE107CB9B8531AC ABC1F09E3425F714 37E3C12DF48D127C A59927A13D448F51 527B753AAA77D295 99689C4B22367E56 C15FC8AE93547278 12E5988AA07B8F00 0782ACCDC4749628 B8BE9CE10A90A82F 8A4F433146A3D622 332E6D2A49B1792A 08A55C980D43304F 0C85D02C85CBAD66 E45922562BC36B7E EB9FEE1F207C1563 564CFD26A069BDC2 9C49129845D97206 4824EF5447B174F9 B480550B9CEC3E31 5F9523360FF57BC6 96A11C1E20CBC0CD 23D0040D087B3A3D F7CFDC3FCADF4897 4FAE6A7F9BC03A49 C68BA8F01650E90D 79C3F5F2909FB619 CF40D69B3B16D73D F2958449AE6781A6
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302261256 (name+title). Key = MD5(password) = 5fa543f3d6c98c6a898e75cff87b6034, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ef3181eb-5d58-5225-975d-d57d1ff309d3
  2 ec9fb826-7721-1be5-b96d-a10a8be564c4
  3 8ec82f39-8b45-80fb-a3d0-fbb8fc2b1562
  4 0f448fad-eee0-74da-9f2a-c0e75360d316
  5 592fdfdd-6fd4-7ee2-bce0-ba2683a3e125
  6 5f52c21a-483f-4735-b2aa-e84db735a044
  7 c509df21-9143-181d-b077-7748e49b2463
  8 49f81033-a775-0d83-8839-e4323cd7faff
  9 ed784905-4fb3-6c2d-8067-fe4232dfa821
 10 24cf4b9d-a187-1e03-929b-27fcb7bb4269
 11 0d856a54-7da8-3a9e-b1ff-a16cd75e382c
 12 31e33e98-0a48-4ab0-83b1-091230fedec7
 13 2f34a7c7-4170-5493-99f9-d229fc0b08e9
 14 535c5936-65a9-299f-976a-560614164a37
 15 0d6f8355-54a5-1d10-b65b-e9c45979ce8f
 16 8a16d29f-6d07-54ed-a6cd-1958c15b4fc4
 17 9c6a3d1e-c698-1d44-8611-c064d3a78934
 18 1211baf6-352e-14ad-89e8-411fe5cf7bb2
 19 dc931b8f-7eb5-0580-93d7-4b4a9ddd8c25
 20 c46c78d3-1621-2afb-82d6-925332847280
 21 04044a72-e37f-42d5-acb4-dd1a131e5a84
 22 e767a4a4-6426-296f-a42d-e66524c4c734
 23 30b5af19-f5be-8b7f-b87a-88c0928f33f0
 24 f69ffba8-a930-862f-b19e-b173f74ba83d
 25 e4c47679-f16a-3aec-a568-e9d84c6d956b
 26 cca1c912-2c47-2395-b0d3-b4edd8009425
 27 fb63e1a6-3f3f-052f-ac00-0241cc4c3fc4
 28 654e8cee-13cd-323b-84ca-14acc1d60916
 29 b477f6fa-1d7d-1a04-a0a4-6c1ad441f270
 30 bfa29f6b-1647-1629-8bac-ef9a1adb0fbd
 31 74072d04-f4c7-4ef9-8c91-d2e6d1be5d35
 32 02d71fa6-3e60-4f03-b219-debd768f0fdc
 33 80056bea-d417-6e62-976c-f9fd60e40f92
 34 501df2ed-33e8-4b5f-8d85-6fdf7f727723
 35 0aaad90b-ec7b-3d52-8ab8-bcc01ede18b5
 36 24b24451-29cc-073d-ae25-30a2ac7571b4
 37 9a4b9b32-5674-4bb3-9d1b-267f8fce49aa
 38 653fe12f-9f40-4a1d-8559-b5d9ee13a2a3
 39 f5dcd778-5f49-464b-b2f7-b300eb64486f
 40 27653746-2036-1746-bd13-50af35bb045a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5187741061345215110242883203114464304441. Exactly this sequence comes out of new Random(976).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 42 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs