A858DE45F56D9BC9 archive

201303010232 19ga6g

explained decrypted filler

seed 162

Metadata

Post ID
19ga6g
Title
201303010232 → 2013-03-01 02:32 on A858's clock
Posted (UTC)
2013-03-01 07:32:55
Timezone
UTC−5 · title 02:32 against posted 07:32 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303010232) = b91d6a3e84e7b8014da099f6b044c887 (name+title)
GUIDs
36
Filler GUID seed
new Random(162).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
98 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

24CBE93180F81203 95DE37636C5EDCE6 2F5AB37EE557DFF1 B72D205DA200EEDD 1D5189707585C668 44B54DC83C7879B5 88580DC752B7B332 26A09F169EF01EE1 7A2ABC899D13F53C 66BBEED3966B1606 5372AE36F908E038 89EF179BF6579F26 F9918125300253D4 45233E3062AE5669 7D162D11913A4C38 767930F11AD3E9C6 14BE8F0F9CB3DC2D F0EBEAAF1E9E1777 F06FCA0370ED431A D512BAC0B6E4B55E A45A36C06F92CB8A 694432E11C5C3339 A2408745AA64A732 47823464253FF9E1 C9C473F20758A88E F190A0F00BCA8C40 2185772C28C7A70C 47B484454724BA08 3B13A3E5CC640E07 A00E9205F4183DE9 763271F781AD082B 50D123B462B980B9 92EFF8CF40748916 D0CAADAF5CC5D186 7AF3B2481EC3B4DD 6BF183B5D17E8701 EEB04E2D1D96BE0A 40BB5B97A90D158A B01BA7A68CFCB0C5 357D532BCC8C917D 8F05EE6D53B5FF25 5A473CA9EC811D99 663BEC77640BBB38 FD4171A86844942A 07B155FC5D18F34A 4848A2696DB41C15 58C53F3416BAFF56 BCA2B2A9E4991885 1824EEA7F5667A47 E4D7A06C7DB594BA C05B62CD3AB7A057 79F922A7F8AB128D 0CE584E714B969FA 9B0481CC839A9E0F 15AD41E6F9215152 04697141A50744E1 03FA9BCA857771F0 4E1C7D12B7122B2E 5773E4CAAD17B096 F44CCD60291E87F9 47BF07DF22BCBCD9 FE2A784BB29DB761 E34C32EDAB33DE63 B8041B5BB8A8C630 9C7CCC05A2808503 C7624471835E65C7 773D6042C48A736C EDB93CDFA27264CF 1AA6CFFBE6F5982B 6E575DC75FF7B2BF F9AF334EB43079C0 5C812E5A3BEBD48E 23C4226E2EEA7E2D C97F0D48C3638F36 9BF09737E534659D 9EB5E89A8336DAED 25386CF6DA6FD3D1 D7D4E770D1970245 8053584FAEDFCB89 924A92541F9D0843 126A0E45F4385020 D449077E51174078 3A3456AC7352A87A FB6B7FF542E072D1 6E7CA26EC3EED5D0 900838D02A7AB040 229EDF8048169E47 46133F3A43D94C36 0F6956BABD188F43 1BBD4E2DC91AB904 5E86638AD33AF2E4 0A13E53AD56441A2 F0657D62735DF05D F1E4F0FF2EC85F87 E0474697CAD3FD71 A872CA530C313886 BCC582359B368191 8A7AB523716FAD42 6402DA807DE4E1C8 5F336DBB56003300 F005C4894B5256E0 29991DC6E75FE2A3 88E28C2001D631C4 8E37476519BDF5BD 4BA937425662646D 5326D8AC34A2B0A6 692FA1EE6E77BD18 28EC54F0CF04967F 9680903C9F02F5A0 F4F9DD4ED57B0229 5C64764913E2592E 831A5A174C2F366A 728764AA2CC7E30A 1BF09E0CB1E8F53F A2872ACE8B37C58B 217A95382055B1E0 5358DCB93513C4CE 87C8BA3DF95F3D29 6B76C3B288051B7C 0EC7894F598A7C54 D5205BE81F24F322 F4A66F1BF051C6FC A40CCA7D359767D5 E74B8261D158ED04 33268DB51C447834 122385916C6750DD 6FB0536470932F3C 19CF23D16E3623A3 E286600551FFC987 7749336F2C952370 B02D60F38EADACA6 DC76ECAB6121FCD7 6F8E588C9D713EA3 712A5AE19B873716 B9E2E137EA7AF0C3 4A1169E39094110D 5422289D0BF517CB 5C2B40EC202EFB31 BB952862113117E8 21BCC94DEC991CFA D155BA6585E17274 3B9F2FE3BE85483B 0AD51DE9834B143B 9C96D8882FCDBE93 75C7EAE7AFEE360D
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303010232 (name+title). Key = MD5(password) = b91d6a3e84e7b8014da099f6b044c887, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0db1a913-9003-36b8-8605-35f39edb2ec4
  2 3fd29b2b-5e80-3c6f-b6d0-c944d8d274ad
  3 f83c6678-870a-0b19-9b7f-5045b870e5c9
  4 2651f21f-a95d-1538-8321-698dc3c32926
  5 263d81e7-42fe-3bbd-a773-503a13f21e3b
  6 2599aa87-0029-1417-ab9a-e8069d44200b
  7 fee6f538-0a6f-4af8-a436-c2ede95ffe48
  8 0e077d01-8e62-6c5e-995f-23102211216b
  9 396b59ec-9cda-04dd-b83a-52d68121fc1b
 10 01f10ab3-43a3-0321-9393-ac32323c8788
 11 9ea355eb-8b7d-5054-ace3-4da811c7f207
 12 21ff7ced-fcba-8da0-a1a1-0d7b83e893f1
 13 2ba03492-1768-8da7-b619-75b81c8c22c5
 14 eeb7e255-a87d-6329-b3b8-502754ebf945
 15 dfe04232-8d55-365a-bf65-4d6df016b17c
 16 d244cf88-bb52-1fb1-9cae-9cbbed7c9bd7
 17 6627d102-c309-81dd-9961-2522fdd883d0
 18 93738bf7-6245-3d74-ba09-b43cfdc0ba29
 19 9a739255-0f94-0fe2-b323-7a1cf4a98340
 20 99fb7a2b-ed44-0c94-b8ac-ef88f9935112
 21 48fe127d-c195-3e83-a91f-e03d727ea892
 22 9401106e-c321-5d8f-b7d9-7dfe3988d2dc
 23 e015cc6f-acc7-374d-8749-2a5f16abe13d
 24 b9c1ed3d-5fd7-55e5-8b40-a5fae88d5acf
 25 8dda4a97-e4c7-5b80-b492-a719cde807bb
 26 e83f50e1-13ba-6e0d-87d9-888d7c943b0d
 27 9bc5b198-b6de-10b9-b5d4-f63bf519c3af
 28 8a36d78c-d8f2-0c6e-9719-3f9fcb07588b
 29 4ad3a4a1-1970-23bf-9558-eebb6c9f5282
 30 ae7de5fd-ae4c-450f-a7da-e980e267bee5
 31 70011857-9528-8ca9-ba6e-3be3dacfb5bb
 32 005c3253-1cf1-11a5-806c-dee59cda6f60
 33 37ff04e9-f7a8-3d5b-8ae3-289b6ba7acfc
 34 d7dd6c1c-fa4f-0380-8510-049406a31cef
 35 2bda8de4-32b3-1e35-bfc2-230c2c729ebb
 36 9f988d5f-dd40-7416-9bcb-417d7deb2d2b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 330131460058863183003535561024813017. Exactly this sequence comes out of new Random(162).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 98 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs