A858DE45F56D9BC9 archive

201302261932 19am1q

explained decrypted filler

seed 733

Metadata

Post ID
19am1q
Title
201302261932 → 2013-02-26 19:32 on A858's clock
Posted (UTC)
2013-02-27 00:32:58
Timezone
UTC−5 · title 19:32 against posted 00:32 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302261932) = acc19b800466285342ddae16e69039df (name+title)
GUIDs
36
Filler GUID seed
new Random(733).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
48 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

018B3E6D40989AA2 EDC7DA642942F5A3 B7891E1601D08081 3F8229DDFB5B35E1 ED6BCC72641E0DCA BB083BF44A95223B A2A5D07A589D554E 4FD40B02C238DD4E 836A4492E4019D53 CE1126743C78A770 6406199B8B1600A8 CE7AD7C52C9BFCC4 3D0ED282C876390E 2847E7102F4E0F8C CA5E0E67373B9862 43D3919DE56CEE19 1F1541D635AABA09 2222655271810C1C 486D0C1D13527963 A72E1B01C3CFC703 AC6904B7CE7BC93C 256A119E1477744F 047ADBC79400215D C3F3105854485C7A 8E78780732456027 FC739426D3626062 F1C2FD498DB0F661 FA7B32C5030DD753 14E95CB9DD556F26 D07565574CA023EF A3C1C667AA20EA8C 26D72BABB7AC9DD1 F0E42F11930D1B5B 7505A3D32149CD2A 21548DF78E68344D 31F2913F64428024 9C16CD473E45E47D 1A68245634001B09 E2BD315D17B6A09E 189ED3464A392AA1 7D9B867FF6098C75 50CBC1DDC2AF68D1 50005A2822D120D0 983AD22EBE4A10EA D62EAE63F1C4DB3B 0E7708A0A54A300C 968CF238101A315F 046D7C3B09E3F109 58960E0887C67712 9F440B496DF1A1E2 A8E9222B83BAE0EF B6182DDB7475718A 96BA4743C0EF0818 FDBDD45D7D0D262A 91A1F51AF50055AA 0134C4F2D252A5D2 0192E10ECDA99450 5BE4BC1E98D467C4 9CE49E4DA24FA008 34F136A03037E96B 936ECFE5E83FEE82 AE299E9F8457520F C9866B406C52E079 E6C4C3B36E231B46 61045572A952EC4C 28EDA59F989F3445 DCFDF3813D5B2FB1 5132AAAFAF3B0E72 EC95A464AAF958D5 008354BEE1B65DAC 9851142A3286BAED C284B382CB77D4CF CC531E3F57E797BD 67CA66B86943A693 9616E78C058F3E55 5988AB002D9E8F25 8DAD30F5BC65BFBA 63EE5D67B78F779D 6BC0C0EA3B33FAB1 A0D07C71A58829B0 880D2F57CF92C678 087BFD0E534BAC65 AED03027023D2E04 A8E3A4C38486D838 442B7A42603D72D0 E353CFBEE5C82B2D F30AFC3BB541BF5A C4C9DEA4BEF32587 D9C6026E9A91CEB2 83FD5C0B6A9CC319 D1D9BF77D667B7CB 62FEC024CE136099 69F47A0AE90E85AF E83B39DE9A7691D6 8DF0773D9450B213 B3A57A40F10CB423 C9D9A9DFAB63B9B3 38425663F0A55B9C 661B2709813A240D 3118B9CF288BBB9E 8F0D541993765C88 F15A700300A3FF0F A93DEB9A66E5B5C6 989FD56F1D920E32 936098BE709501D7 C09F240535FE582C B74A9449738FC671 C5D4BC3BC4FF5A9E 10286BCF86C1A559 F7B4A101E4992A93 ED6B2A4C48D5C900 95345E9647C565E3 93BC3E068DED14FD 892001E08EBC37B8 346F7315F31060C2 4F81510070140B0D 55F664E5CA47C43D 04418008BC2A08BA 106BE7542619FA73 06517DF72B42C286 13BEAEB0CE067CFA DCF839BF1EE85010 3E601E2217D65B1C 78653560DCA7D0D5 35100CEABE34792F AD3D4076FFBD4B41 FA2E55FA7CE73486 F798FB591EA0EC47 5229731368ECCA9C EF6622815F2E50A8 575A77C61582D71A B7BDB9BDCEA55AEC 7AB886091B0DB32C AC6E0D6CE806FE7E 666E43E3FB1F5E50 A847698B4231BF1B 6E79FFE5E713087E 833F08FEA63EC0A2 A7E3CCF4A02300E9 84F6CB20F506AE0A 4AC44A18A0D26693 0450DC6E03AF5DBF 6168F5665820DB69 A71AA9146785066E 33ED92DE9526A127
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302261932 (name+title). Key = MD5(password) = acc19b800466285342ddae16e69039df, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ce58bceb-0c31-5f17-b1cb-f6a64592b058
  2 1a953190-8875-849b-a20a-0e0410a8de41
  3 1031c657-3ca1-1d50-9358-0fffed1d8333
  4 f728c0eb-0747-0d95-a072-9d453298c573
  5 41ceb4ac-33d3-19eb-be3c-565146caa3d0
  6 f039b217-4f0b-180e-bee1-ba96df2fa0cb
  7 8ee230c7-6115-2f69-86f4-a1e72dd86194
  8 4545c9ef-1b56-1439-a2b3-84c2a7039a14
  9 4657251c-c8b7-5b6a-ab74-006fd941ad5f
 10 ab08557e-cdca-5926-8387-de072df3cebd
 11 2dc4ee15-b78f-26f3-acd8-6eb8d038fe6b
 12 a16554a5-538f-6fd0-b2d6-4eaa0e6655e0
 13 d4e733f8-8ba7-49b7-a7dc-452aaa7170cf
 14 462e35dd-023b-7383-8f34-f59fee04f14d
 15 d57ddf50-2c42-06e5-b149-cede24d399ff
 16 fb0d7ff3-7ed5-7373-877e-b148fb3791c8
 17 0d3b924b-cdf1-8e2e-a357-9d67a4d1d3d8
 18 a6223c72-94bb-440d-afd9-6436d852cb2a
 19 10f72a44-022a-4dab-b570-de88cf8934bf
 20 f989a7d3-4cd1-1889-b3a6-6a6f4b4cf67f
 21 8b7ae7ff-bc81-1b2e-8599-028fab7823e6
 22 da7b9f23-bfb9-6cb2-abe6-66c9ff737976
 23 97e9b189-c543-701f-81d4-769dcb88679b
 24 00dd2dc6-b817-0c53-94d8-cbf9e655ce9e
 25 a60c2ecf-94b7-49cd-a990-1d91f46b83cb
 26 c216634d-b634-8dda-a010-bcbeea841e66
 27 690245b9-cb3b-12d9-a847-7f24ab429d03
 28 0999f17c-c8fe-76e5-88e8-cf5266c2a227
 29 301c5a08-eb77-09da-b1f3-2ada05cbac8a
 30 62ce2f67-6c2e-3e8a-a2ce-d3cc395221a2
 31 3c3c9b4a-5e15-79aa-af79-770d8cc72f83
 32 a18e870f-781b-46f9-89c8-5cf036777024
 33 9d5a105d-a0cb-0ab8-ba7e-2722fab7c9a9
 34 738814ad-4363-37c9-b21f-9dd8e3a8946e
 35 bab671f8-48e2-5c9a-9f37-51326dd46008
 36 de87fff3-ae8f-47b4-b2ca-b02825b22457

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 581011215526470784411670481703740354. Exactly this sequence comes out of new Random(733).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 48 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs