A858DE45F56D9BC9 archive

201303011120 19gvi4

explained decrypted filler

seed 698

Metadata

Post ID
19gvi4
Title
201303011120 → 2013-03-01 11:20 on A858's clock
Posted (UTC)
2013-03-01 16:20:55
Timezone
UTC−5 · title 11:20 against posted 16:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303011120) = 4b427048729c843291df3ce52dd40683 (name+title)
GUIDs
40
Filler GUID seed
new Random(698).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
106 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

38E26AB50D951DFB C3BDC3EC4C7DF6F5 02B991D3AA895B79 F2FF9055FE699F3F B06C3E153444ECE1 C70295AC93A6762C F311BDD420A2F720 8442F8317D070C52 E4D0B9BEDA8BFB08 85C83754451A6918 44CC28C92959ADF2 3DFDCF7ABB8C3EF8 8A066C02241F9B9B EC256E8B976BF476 37324B5D6F9C75D7 4059BF32978236FC 604EBB8F78951165 D1409F3A86572DE1 8CF393EF68D51848 FCD4057AF0599BCF EE5A8C96DB7FC77E 6721A01272B1CD1C 5AB7F8C714E687B0 5FCD9DB2652CC21A A9A8AB9AB92A8CC2 A5DD0FEECC57BB80 0C4FFC6928D59AF4 B8B04C839BCA4A2A 545D7141F46DB339 1AC868F01336D050 AD92F8755ED5AEAA 1A80D301F83B0A11 9FA5797C6F92BAC2 80753687BB0BDE5D 3F439C84A958F37A 6CAEE788737AB873 92C8BB06D7E767D7 2CF16315D0412E58 B50EAA9396B7AAA7 315DBC24DB1D3669 E81013B0E37160A7 2B59BAD7FFEDA436 0263ACE151D6EE82 88F0FBA93656241A 67287681D3E8380C 6CB7EB36DE6FC278 A45021AB9BB5F186 8FB7B207956EEB77 87DFEFFC1CBC1B3D 533CC9CE5104AB6C 2DF90F442A3DB3D8 245EF44369A0938C C2DCD16A3EAAC8CA 0C0967C1DA499622 743C577D87686237 6575F803390AEE50 97E483A2B2F7BD4E AF94AE825264B4C3 BFAB17B692D72F7A 48C4CEDD8011EA92 9111F1E2761F2161 B3D8FD8AED615468 CF1B9A2F842AE4E4 BC9FD45BE0E7DD60 3CA5702843EAB532 9E5A3AC8532F978E D5A4955EF6B90149 540928D840FEDC7F 102B5B93B74134B9 84E673B3A56E29E7 3CD15DB88F36A637 211507BEAA05E60E C476DF2D3487F3B1 3873D52F4A7983A9 F339FB983572BF59 74C0AA3C235E25A2 F04BF77BF1A14DF8 B1258AEB4AAE6B42 BBA6DE42B0D2E342 E2D5E10EB7C6DD51 E491E1FD00F3C814 E9B7B0D7FA43EC80 51AEFC7C427F674E 3F1830B7ED2D0257 1457D2A65D547349 A4C1C91F67466C26 E1D783A70A4B7860 925ED623245FBA6A C84DBE2D065E26B6 90BE6A141FC08F27 6BD7834503556A39 3B233FF4F24272A1 3B45FA790BDD03CF 87C893A4E97ED570 5BB04CCEFD7658DD 708263668629135A 46D12CBE74AE7406 2D08272BB2BD1D26 2F350EBADC09619A E9DE3CBBB522F652 C5B991A400210D3B 689C998B13447B94 66EBE5DF63726B56 33B66AE12DD2BE03 96D32A8CC678450D 9EB655512191120E 25F20C2031546F21 FF18C0CF104D5B2C 92B3375D48D0F340 24DFDF30667560B3 2CB3E899C7C10765 003A99A908AB3FC4 40E0142AE98CE100 5187FB0D07113FB0 112E70BDA55FA414 861B06FF45BDCB6D A6103BFC13B59D7E EB1E333C87930E26 E02FA958F72B7B9A E524F46C269386EF C6CD596E2700DE68 C896CE17502263E4 B2686EBB063D9C16 0507A60AB1F2FAB3 F1C4F5FA50A68956 BBC7D9D464E968E2 DDD967C992006CC2 F9B73FDFE5F940CF 5ACA9B66574F3F0D 048EB82C4268693F 2E0B61FE87C5E909 98C45E7A035DC1EC 1F3F2E06DB8EB8D9 AC1F2F0349BFF07E F879DD2AC2A1A4F4 0F1E6A2457BA61D4 8AF3B278A0E46D15 F3BBFE0160B068A8 FAD095595DF8F46F 9653AE87D784C4F0 C8982ACEEDAF86E4 1690D937F309BA69 59343F8E1200604F F974A82C80E33BF0 1D975FFE11E0A865 0BF1B7FD58157163 143DCAC9496FD92A 9F3916CA113B219E A95D37AE056C84E2 140887954DA658D0 FD4AC1AAA0ECACAE 21AC8185423FC5C5 7CE9C286CE5476F2 E4A4CFF0712E15CF 15F849D50E3CD549 421226CDCEEE3435 1EA8E382A57325EC A88A992FD6E64381 494EB21C47F293EF 2A05D420C7308015 06D837669A8BFD20
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303011120 (name+title). Key = MD5(password) = 4b427048729c843291df3ce52dd40683, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 62eff706-0847-3867-9d30-4ca2775d951f
  2 d0497b2f-1eee-5931-bda2-c81675f500a9
  3 ec9a1f80-3ece-50ab-8918-0daec9d4e0cd
  4 ed5ecbe3-47fa-49db-9f53-551114e2c522
  5 c3e81c15-2e71-3fea-ad5f-04fb23714af3
  6 75156279-3f58-4570-8e3f-c98971d51a8f
  7 e7f61ab7-208d-585f-ba25-b1adf5ddb2f2
  8 d3f58ff0-aec9-5699-b5ba-ef9ee064056f
  9 5df0452f-dafc-26cc-90d3-4547e1c34d49
 10 8faa3547-035b-5b01-a805-8a0fbed70137
 11 321a92f1-207c-454c-80e8-f6e2022faaf5
 12 49a0be1d-926a-32bf-93c1-a35caef173f2
 13 d5a70e4f-88f0-4b19-8750-0ceaa15554bc
 14 51ece838-8c70-55d4-9f7f-3634a4094b2d
 15 ff3bc880-c338-511e-9b2f-9fa216641cb3
 16 9b313d77-04b6-8f5c-a395-15d48edd5120
 17 975b38bf-432c-20e9-b931-d86897c63bf4
 18 93604073-b3e4-6532-a5a0-d8bb86cc5490
 19 6397666c-ce88-5ec2-8a8b-ffba570e8a03
 20 98b1d2bb-384b-571a-a2f2-ccf15c2285e4
 21 d54afc4e-a059-5df8-8d90-9a117d6387fc
 22 140f9d7a-53ae-0a75-9aef-f63cc85aa127
 23 47d8ce56-5d5a-8e66-8de9-91647d280300
 24 d4b1229d-597a-7b34-96f2-ac0fa0ccec97
 25 dbd73be0-3257-08af-aa2e-c6982e10eac0
 26 2f3e49ca-e20b-4e11-9c2d-220264dd5e50
 27 3e517d7c-fc25-0e62-b35d-a5f573dfd5d3
 28 759cc014-5591-19fd-a4f2-717ef6ddfab7
 29 06f4883f-b5cf-3378-949a-6b4061554d45
 30 c92b8789-a621-11c6-b4fc-c6ba7ab80d2f
 31 ff42d951-0911-7943-8859-29ee5ab3ef4e
 32 6b86ffcf-bc32-21b2-b68d-78e657074e19
 33 cbce1114-b6b3-850c-8098-74216590704f
 34 1b9230d9-ca20-433e-982e-2f202f04a3d9
 35 c8a5f65b-4339-3367-8f8e-1090f2632493
 36 0ed647f9-d33a-07a0-aca3-333c7e6c37c7
 37 0c00232c-6de1-1729-98bb-6f98723c19d8
 38 ed415722-442d-0461-b7e8-fca723efccc2
 39 4beae18b-18ed-79c6-a4cf-40931c35bb5c
 40 7555cc4e-3ca2-234e-8474-40f960adeed5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3554345525434558265550870401317284301072. Exactly this sequence comes out of new Random(698).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 106 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs