A858DE45F56D9BC9 archive

201303010550 19ggj4

explained decrypted filler

seed 993

Metadata

Post ID
19ggj4
Title
201303010550 → 2013-03-01 05:50 on A858's clock
Posted (UTC)
2013-03-01 10:50:55
Timezone
UTC−5 · title 05:50 against posted 10:50 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303010550) = e284d439e8656bc2ae7c6789bbc0a2c1 (name+title)
GUIDs
36
Filler GUID seed
new Random(993).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
101 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

9EB1011721EE9BA8 C5CA35020A88D0F5 2CFE87E5AA857ECC CFAC488A45D7F0F6 C4BCEFB4C56FC349 C9E484129D83A475 50D57A9D54494935 BAB71025FD6706C7 D4F5B1E0AB8FB598 46B3D8D42B2D2FC6 BEE0D25A10216B7D C2DBC8D58DBDCA46 D6E7F8E0E1303391 AB027307262F0A6F D4EAE844BE118825 47291E2C892FD780 5EA43275594DAA25 893A25FF6A01FA12 2ED34DFECBFE4B29 4709F67BD6D2AE71 654BC43BDB3C9809 469CDA738B3C9A58 61FBB7849A935C17 23E01196DAAAB578 51D2FF6DE34BA4C0 09C199C34937689C 04FC1D43E574AA61 22484F007624BE94 7CCA4F739BBF28B3 97D0304DD80EC8FA 82F8483DD91AF09A 7264109D4BAB6E2C C109B05C8FFFB5D4 9E69F22965777A31 11A2B4D4787D7E6E 7BBE0B99B900758D 0BCED45C7FD281BF 12173FC5F04BF812 50DC8F09FD0B675F B41FFE65153D9DA6 0E908642B6672A91 499C0091C561517B 41EFA51CF8FCF9E0 A5EE7BBA6996AA56 49D30AEB50685E0F 96B5005415C239BF F48D8F07AF4066C0 9D29B6951F36311B DA4AC3EC01CAA51D 2BBEBE3FEA3B3203 D70B69C85214E223 B64527C739D7A41D B47C508AA14EBB39 FB1C6B1A4B9E2678 307CE78429BAF1EB 552CCEE5C4D517D1 DDA04839E78B5619 0527506C424DB450 D48A3A07FD1F8A8C 4E7281141E30D934 AC621EBFF8F5BB43 5AA445199ECE2A47 68B8359E8D4C184C 4E182A44FD624E70 1D6FBD5D9F5D3FE3 C736A3257775D4BF 903267DDC9886B6C 1F184485FD769291 DA54F10643640638 4C4BB6883782168E 862AA1CF12CED121 2403D0F988972970 016C65D7085F3ACB 42561037093B1C8B E9135FB3A260CDBC D25E9F70947B1097 3B405953D6EBB7A0 2711E2CE0DF9B857 5FEA1EF0B235645F D598D06A40E36346 8FFD9D2C0C8046A2 383D0F3325CEE874 FAA0A4909DAA43B8 3D59159F8C1C0A6C 29A9E486FCE43D25 A71DE51DB45DECAD 36E40A557C5559BC 2CEE8841982A5F47 E31BDB713A4BDC09 C5523516963AC487 0F5087CE56A178CC F4199C901708CFE5 F511B316EB797BC3 AA91DA9E5BB4F450 EA4B6E9BC747DD35 BE2910E6A544C54B CF81140E16E55D74 D9B29A0D9DF7B1CD F8FD2B9A8623AF47 BF52D90BDEE94CE8 5E2E76CA0FEA4EB9 C5721FA702D590CA 65A5DC8123B921FE 15A6A2D43D408BF9 CE40FC53FC2520EA 8397749DEEFAA5C2 C553D3523273B653 FBA4B1243718A1B8 7943942F4A4FEE71 C9E0AB1052A9A2F3 4294768A7A736502 0A17BC85202D0E0F 727C0CF3A38283FE C8B8DBFBACECA090 5C8B038BD60E37C2 8BC902E8FA128D62 EC0115EF4FA9A042 D595350B6449D2DE 4883955A68FFD5C2 13B2E20A5D359146 96DB8D5D0553BA7C 2A21E302B49B898A 9634F5B5555B7457 CF62FAD42975A2A6 9E20746C174359B6 F4BF7E919B38AF2E 184F3E375EFD5B44 2850B9BCD97BEFFB FC79C0FCA2E60044 11AAEB0A26F35B38 87EA715C508498AF 74D9ED7015286BC9 FDB4721F8299B337 33E3455A4C3BFD61 068D1785F76DFE1E A988879458B0A3DE 4A8EE51F6C376F7F B44DA434F2C7CDD5 067DF6DFA4331E0F FE57A648F8CA7A85 6C54BD77DFE7200C 15AD815BBC24F57B 53A2E87469194D72 352058E58CD5D711 97F5F273285A5155
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303010550 (name+title). Key = MD5(password) = e284d439e8656bc2ae7c6789bbc0a2c1, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e68fa626-66e0-4f83-8ae5-503924e70775
  2 303d66ec-f2f5-1fc8-8803-4bbc850fdad4
  3 75a720b5-f1f7-7ff4-9769-c0cd752c75a8
  4 3ec9cf4e-2d9f-4b28-b326-09963213de8d
  5 8cd17015-0edb-4704-81bb-6866703522f2
  6 a43f1c56-20f2-3f75-acc7-c8f2527942fa
  7 bf3563c3-4022-71ec-a361-b76c57e959c6
  8 a465051e-8ab8-5299-985b-7a18bddb693f
  9 92d41142-b636-720a-88f0-41c116e11ccd
 10 5ff9f313-baab-3a2e-94cc-1a2ca6cdae25
 11 18b94c99-dd12-7759-a15c-c949cd710294
 12 26eb2ca0-ad7f-6ab8-bfcd-d432ef3972ef
 13 0cc10129-f9dc-29ce-9776-d7b5d72b4319
 14 136fdb50-c3de-0421-ab39-3753438550fb
 15 8bef3f5d-2ab6-020e-8fdf-e8dc7769eb09
 16 95568d31-4762-1d65-806f-b9ce9247cbef
 17 5b67fa47-8bb4-207b-a952-04d2f8485853
 18 995596fd-d748-5d81-b081-06732a25355f
 19 b54e5f14-c356-5bbe-adf0-6e3978511f2c
 20 a1cdd465-567f-7330-aa4e-2cb25d47788e
 21 9fef5dc8-0b38-6572-bd06-0cadec3188c2
 22 fa47b0aa-1226-40de-94ef-78af6d2201ea
 23 264d6899-0c78-7b3f-9f66-675556754387
 24 a0bd8d9c-8d86-87ba-9a4b-326609d7f7f9
 25 7b8547ba-1e50-0cd0-9784-e9c49cd78f51
 26 53381bb8-cde8-159b-9baf-118685826fa5
 27 2bef97e4-7ebe-681d-b304-01bcbb639438
 28 20f9bb8d-e3d7-8ea0-abcd-094500e34f4f
 29 63a2ebe7-2634-75cf-9c63-fcebd3b01c68
 30 e9694445-694a-73ef-a1e2-e7def8ed1c1d
 31 99fcb18a-43eb-7662-8ed2-6aa87b00c9ac
 32 15a27ffc-49ac-0c2f-8d01-0ec5e2a45db4
 33 897cf794-1564-56b1-9b03-71c38124c473
 34 25e84c74-4d68-71f2-8c8d-37a93a8d8be1
 35 b882dc54-2ae0-3be2-99d8-3c8c2a73f19f
 36 e50da3ab-8469-7fb9-8fd6-380a4ba9975a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 417443757376200125576478016877705737. Exactly this sequence comes out of new Random(993).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 101 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs