A858DE45F56D9BC9 archive

201303012220 19i5q3

explained decrypted filler

seed 174

Metadata

Post ID
19i5q3
Title
201303012220 → 2013-03-01 22:20 on A858's clock
Posted (UTC)
2013-03-02 03:20:54
Timezone
UTC−5 · title 22:20 against posted 03:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303012220) = fae3e4c7f5a82b20a936018a84de9e9d (name+title)
GUIDs
40
Filler GUID seed
new Random(174).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
116 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

E3A024F39142EA74 139EBADF0D3792DE A028E5281D5CF45A 6562106DB7DD0ADE 0E5201A7436C6F79 BD9C43A44C2B7026 C1D4C6174455E507 A43E6AB9283B0DC2 E9E24731E6A2BC06 FA52D70CCF8D3C47 F5DB0BBC24AC3C42 53A94AE0C2F48052 D19AB8751FA42391 6FC87403249FE26D DDCA9B45E2B6339C 2EDD5AC48E7B5FFC 8B9A27ECE0DAAAF1 924B78DE87EF7AFC F99B42B914DEFD11 EC8433673F8373BE F5FF3B73E2FDF361 EA435381D8FF187C A71F883F70E896CF DAAAB63FD3CD72E8 076B8688286312AF 3D211EA4537A7B1E 1F4C63C82E7BADCD 3AAAA27CAF82608D C78DE4EF34700BD9 5FE4AECDB2412D6B 422E1EFE566F4AA9 823719BCB70CE91A FAE2E22ABE096785 1A47154D0CF5C081 C310C502707E30D7 E97283831A4CD7C1 3E6378B40C1FAF44 A20547E6EB1A71A0 27EF866960860DA9 4AEB642E52ACD875 2E29DE0F3BC7A84E A38DD41E6A520020 5D042CCF316E2792 899ABBD11DFAC3D6 BBE8DE631EE978FC A93725449498AAA2 0B69E26218D853A9 33523106BF4829EF C194BA29C72AC98E EF4059D37A26D7C6 3B5E74EF343D1725 E73EB39926651271 1A1EBB40C86770AB 0C6BF2123776D359 653C7AB8A48095EB 3AF033E967AB04A6 B921913CA80B73AE 6C92816791745C00 D80B1D6619DB28DC 18A83E416820FAE5 DC26EC1673AC1879 88163462E4E11DF3 E1C9CB709F9D0390 CB99AF78B76DB214 50078FBAC2176FB0 0D4A5E5852340BA2 71CBD09D67301D12 F80AB44A4B3B9DF3 15757A4C4A429306 5F8374D2A04A608E 28CD0E267FE8E233 614578AA0E8AC61B 883075C8CD1A89F4 0507ECEDF64E445D F03B02D089F3301C 4A9C0CB735AC6CF4 5551FCDB7A5F088C 551DC0CDB6B02742 5AD810BFE75677B8 6E04E467ED528C5D 2F1A47AD4AE6AB88 60AA9C2E4E27F95D 348B9486CBFB6EE6 2A1C67E274BAF719 926602452C4B66AE 7A7B54B4DCD445F5 9AFDA576C591EE74 B01268DBD1585A82 EAD667C32727832F 6BDB0DA90FF959EB 959CED73022FDA2F EE6D28359D120424 8F039F88A442C8DC CBB8FC6504C6D639 4130EEAF9A43165C 061E7420AC068159 977FB47A869FF2D6 2FDFE35708B79BAD AD45B3C230760058 464EE7F5046FB507 0026869BFD0E3AC5 93BCEA64668A99CE 2F262F6C74A5FD83 43C1923A3F36ECFF A51BB1DBF9670D2A AC812E11C0900036 DA7D5ABF03F23747 1644F3D458DE2226 B790360EF5B95C3B B9341017EE54B7AA 04BD71C1FF7BC06C D1958BF99E015C84 FE3C95AEA2AB03AC E5EC478B1CA9CE1E 1B599D3BF7F45822 3C6A56D2606DCF82 73CA66AA24346DC5 D46DFA6698018AF2 A271FD0E616F4E27 E0FD72A3994FD566 0A83C7B5FA2BC267 75D87412D364B311 7422F26E5066B6B3 B94EC39B48E62C80 966B89FB3702B3B7 DA7A06950C818BE7 20B303FA1A879E67 28366168FB7D7DD4 88DA5C1927F907A4 5F21805C1E4FBF8B 529B37037A57172E 2489E282157E2BBB 691E44AABC89DAA8 42F476F91F445FBB FCD1847D6E0F69EE BC5DAF6292A75086 A0FDB9B8E4B5DC0D FA428750ECB5A677 B20D0C1008F18FA3 C1F5ADC8CE08D3A8 318FCFCBE1B76099 C75FF84890C5992B 7BF0F6BE5FB1425D 6FE9177B46969646 0823E21DD7E8D57B FA21BE3DBFFBCF3E D2530357D08BE98D 9D7878B776A94CAE 9C6A7849888F22A8 32D59C249707971C 0BDF3F3F413F89C8 C0FE57CBA72A0EAF 40D337F27715F347 9AE8BD28B8C3772B 0045BA59A131BE11 4036231607864550 5EB769465D2260CF 06F313794B5651D7 426D71375FA663A6 B4BFF4A79B864A59 DE228428FDB92F71
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303012220 (name+title). Key = MD5(password) = fae3e4c7f5a82b20a936018a84de9e9d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 8bbcb120-b131-5253-9a05-e2222c3edcde
  2 eb3eef08-132c-784d-bef6-d12d63808cb0
  3 a073d4f7-4aa3-3691-ad4d-279481a09bc6
  4 a81d63fe-26d5-66f7-b6f1-8c047244de56
  5 51d24f77-6b3a-6eb1-8c05-a52aa6881e63
  6 2efbfc9b-9795-58aa-9109-4c58d482dc42
  7 f89b1c5c-7e4d-71c6-8a14-b8776bc7c796
  8 6dfacc55-85a8-66be-a332-226babc67a7f
  9 fd1512bd-8eba-4c4d-afac-23ab0521eeca
 10 5fda7b48-98f8-3fe2-837b-4215451113cf
 11 1611e17d-0d6d-432c-855c-c292ebf65d72
 12 889e348a-e1f9-22b5-9884-ba0fa80e533b
 13 1d5a4683-a126-2dd8-a401-144ee8eb6d1b
 14 b50997d2-8fcb-870f-b4be-c4248ec3e6bc
 15 39db2a0d-af43-6bea-a55c-35cef800cb31
 16 0f68053b-ca81-67ac-a2a1-5fce91cace73
 17 aabd0085-7dff-0bc3-98a9-3fe62b53f744
 18 c005d97d-9412-74eb-8863-87b7ff9c092a
 19 387ccd94-e550-3102-8396-68336a8c2c25
 20 163cf5e4-8870-6634-b9e2-9d0f76a089c6
 21 30547bae-b39e-8477-8305-bd81b47ede35
 22 abff7b33-f45e-4c2d-80b9-a7bd9a9bca29
 23 fb768cd4-312e-3e87-ad74-385f70d6c531
 24 b2e42aff-3de3-70b9-8054-8d3f743570e6
 25 9fa4eafb-ca0b-6173-a904-e036a4324498
 26 7db410d0-fe97-3181-8132-8557fa8742c1
 27 2fb35ca2-3545-47b5-94e0-3cb95fbf5bec
 28 6888e411-d64f-4090-b1d9-11e60198f3e5
 29 3899f865-dd4e-5504-bf01-21694b17c341
 30 968fe602-1c18-1203-8292-e62c600589f2
 31 a8b48348-c869-30a5-8cb4-b79482342e1f
 32 6316ab9d-0bc1-26f1-b413-acbc90d160ff
 33 4368a1f7-2070-267c-9de7-62d87633fb1e
 34 c6cb3c8d-c9d0-3e38-8502-f42195cde425
 35 c643b5da-4f94-309c-be2d-6bfbb624d47b
 36 cfc0b1e5-6dd5-23aa-b7ea-5a720c18e515
 37 24cf08aa-6a23-14fc-a36b-d4ab2a57ad08
 38 a7a377bf-1693-8bc7-913f-b1c79e70fa22
 39 4499e8c3-41e4-162f-abc0-487ec4143d49
 40 d9a3c305-b429-636c-af78-efb476b7c738

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5736657643422866073684376344513223321816. Exactly this sequence comes out of new Random(174).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 116 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs