A858DE45F56D9BC9 archive

201303021238 19j3go

explained decrypted filler

seed 415

Metadata

Post ID
19j3go
Title
201303021238 → 2013-03-02 12:38 on A858's clock
Posted (UTC)
2013-03-02 17:38:53
Timezone
UTC−5 · title 12:38 against posted 17:38 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303021238) = 9e8f147ed80879d28e4efc43f9dbd8f0 (name+title)
GUIDs
32
Filler GUID seed
new Random(415).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
129 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

1E55E250B6175205 75EE411688C445F5 4879211E38792ADE 21694AB6E4C3BD54 0DD27A8214592A0D D12E0D6956E25A4B 37E3944E695F5C2F 47FAC5590CCC5B12 E6F2B3D337C1F586 1D83C2E2B064880B FAD7AA3E284A90AA EC4355F2C95625E2 3B16BF41160FED8B A48BC0A8B9D75EE3 BD35C519FC485425 186E47E6DA6E6281 555E9A4F09732FF5 698D660B9A731CE6 7FC991D99CFCA233 847FF5FC994E01C8 6E48AE98C9260ACE CD171E1344EFABCA B18D84375C84C502 72FF124BEF762A6A B402D6CD96E5E095 5C16301B061C4F53 8BC42CB10CE42789 BD9919BC8A244D54 982B661338DDFFD9 77F573A25A8FD1CB 39CB51C926A1EB1C 024EBB43938EDA60 A7FE567D38D3C3DF 23926500EB3BD0CD BA4BFAE70A19996D 61133FFB0E4AE2F8 C3F6AB8A09F38917 43655F6313602E1A 3AA55BABED7C3A8E 8D0F0C3869E8D3D4 BBA31C4435AC23D8 0F3E9E2196C4DA4F 35E3D30234BF95F6 D69DADB9A7D4AFC3 F066411516E352B2 6827EDDC21E2D16C A0089DE2A9BE7668 8E0F528ACE027C7B 6A6A3BD6C89F2A3D 13E4A9DAB2C92367 3BB8904670DCAEF9 F21A2A21B7DCCCBA 9B2D6A8E732EF4AF 3FF7B92D66EC3AA5 884AE99FB6CF7C12 A4247899A41076F1 4DDF8550ADCF1480 B76B4F7D97688367 96DC497DCF8BD238 6CA67279A0F6BF2B 5C937B38896B240D C82825D0D5EFA73E F907436578EF8A98 34F3E69DA8B20CBE A5F08BAB26ACFBB7 CA59F01C955008C3 C167C3DD4E8233E0 504AAFBDB5B0C147 EB07C614C493D5B0 061269626CE12438 C2357D73C492E511 72B375E4C4EA048D 93CA7B5D876B25ED CCFDE8C1395E61BB 9E93C014FD568D8C 3BBBE275BA137FE9 B0AF49A9856F6E0F C020037683221958 E469449A88EBC6C8 E1FA90CAC9B8A09B 0CDEF4B5D13FB225 A262746C304BFFE5 517F2911EE98820E 33304EA8B6F90667 BD3077F47B387F83 E48945ADC96D3538 D12F38096FB2579A C74C25C558671205 825CA1628A7AC975 0ABBCBF3825D5E1D 80FE62F030A3C145 19631498F181D96F 13AEE90F7C7BEEF4 50E02422625112A6 80B20E7A5F90DB08 A9C0B3954B0A95DB 5C56C5876E0CF878 C960F5C3F33E207C 89BEBA1A5D4D5E64 57EEC0693534C15B 313FE2B9EED269D0 1DEFBB5BE7310D0F D9F8DE4CE9228982 137DB1DDFB5C2C0A 1C0FF2429CEC6702 4A71D3BE1D1193C5 EA3ED45BD34DDA62 C41F8B1CC561ECE6 CFA62373179F0801 5212D365EA1C9AA3 811E92689708A5E8 69A00D5FD6619DBE 4219F1052E2EAD6A F408997E4C0A059C 792AF97994D2CC4B 0F55991B344F7088 61750322B6CC9B9F F8BE6952A4C66986 E5C9D7CD5497558B D5D57A5A19656CCE 2E7B9883EE17E218 7DF17E66C7364744 AE37E8733C894EF5 7B098391EA36655A BF61537B51B044EA 042F71EC50FFE548 476C50A79DB1D691 6B1E0A210C76A983 51F3543FE8065CBA
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303021238 (name+title). Key = MD5(password) = 9e8f147ed80879d28e4efc43f9dbd8f0, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a40974b7-4b1b-4f58-8af0-79297f1f1dc4
  2 36264e1d-ec52-53a3-89f6-e2e3675371fe
  3 7ba9fe28-5180-7d71-8a94-2f9540f4a8df
  4 17c452be-7679-177a-bfd0-3a02f6ddb6df
  5 10be2a96-3c42-5fb5-b441-280b08f8fd35
  6 4b71795f-2655-2dab-93fb-e390491421f5
  7 4026acef-aca5-7bcb-9656-8f8598ffbf79
  8 4b2e1f10-f63c-5a0e-9dd8-fc2d580f8a5b
  9 b8c08d95-556e-21c5-8430-805850d700d0
 10 425dbaad-562e-2c0e-8516-4bb8ac46345f
 11 39357d99-ab76-0834-ab00-8a594ce97e40
 12 ff52878f-bcf0-4e19-86c2-f36aef8e2717
 13 06e0b916-6cdd-8334-a7c2-300f94b1b2d9
 14 90cd96df-cd75-3df9-a3f3-803efeb2f014
 15 31702e97-0d53-457e-b773-5019947395fd
 16 f5a93e23-90d2-137e-aebd-ede702d983e8
 17 73040b7d-e3fe-2feb-927b-9d565eaad7ee
 18 1f291830-7a67-24ee-86f7-a40f2c1b2416
 19 fa53236f-ead0-8947-aca9-254313d08c6a
 20 3c94a15e-c989-0396-974b-3f700b977517
 21 f8a44883-a05c-8178-b173-0f1e041c4ea5
 22 29d0ad18-bfb7-5aa9-8573-7b736d5417c1
 23 15251185-bdbb-11f3-8b82-136eb5506e6f
 24 6909d1de-7ac1-0c83-a4c9-08d2fc75a01e
 25 109e62e7-adb7-37c4-9bea-9db4ad582373
 26 27367d82-ca97-41fa-a294-af758cf6b11d
 27 a633b1e2-31a0-6edf-a4f5-c484cb4a6e2f
 28 f725431f-c8f2-73d0-befc-241c95ce9124
 29 0063003c-7307-1fbe-b8ec-6a546c8319be
 30 5c8e7d9c-f0a0-2456-998d-83988e2a800a
 31 2bfffd92-c6fe-3a7c-8469-7e174bcd3f28
 32 f8066009-a702-6e07-93bc-546b29fd62ed

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 45715275220483412280851034671236. Exactly this sequence comes out of new Random(415).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 129 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs