A858DE45F56D9BC9 archive

201303041832 19o4cx

explained decrypted filler

seed 635

Metadata

Post ID
19o4cx
Title
201303041832 → 2013-03-04 18:32 on A858's clock
Posted (UTC)
2013-03-04 23:32:51
Timezone
UTC−5 · title 18:32 against posted 23:32 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303041832) = 5fd78c0bde6e60620f80801b5e89ffa2 (name+title)
GUIDs
40
Filler GUID seed
new Random(635).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
178 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

1B46719E960B5B1C B8258FA06330837F 95CB3D3DC1C74396 73C5E12FC9DEDD31 8A68187878A65E98 902D4A9547842C11 3A3D8F9452629A8A FF9DEB7F7C18A390 6C654A9F37D626FC B13378FF9896B704 06F57C163BD5E193 010EF3ECC3D706D7 39B4EB160020B610 33D9C701D281E98B F8CC27B8DFD81A73 FC1472164497E16F C47035AB22F41A5C 641B0F9F7D6CAC6C 90FEF36ECD3ECE82 B223A19B9EE88221 07D83CAAFB43DD1A 20054126A5EF4444 87DB430F5459A68E 8402C4F136DA7323 B5E5519F5A787618 8862D8613E50057E 584938276B277CA9 8D63C325A01CD8DC EF997FB25E54C199 A4DD5C00AEE3A33B DA70096898373C02 07C63A7958A608EE 7E9687D25A7FE751 8FCEF6D769DAFAA5 6F95C9083FC8B2DD FBB6BE82929CA0A4 3CCFFB5E25BFEE4C 3BAFEC7D73B2DE27 8C6491965C817FFB D85606313A48EE1B 08F760D919E5590D 93AEA719B1B9795B 8BC5B58C8EDFB6FD 527E069834CF2941 DD1202E76FAF10E6 4DF4BE1594D93612 68C15F9E0237953D FC9FE60FB046EBC4 00497B0BB30A4322 DB3F8D68EA251554 5C93BBC58171B707 F48F45016A9E3027 21A3F814BAD7E451 BDB34DA448258B29 B0B2A8BBF613BA89 6397579A78492C9B D7DC75C88743A694 7561ECC93DA10A21 B9C8139C2D2B2C77 68F0AA3853882C1E BC36B1189D0EDD78 4FD70BFB7A0438ED 03567AACA4F8AE41 73C764EA765CA75C 29983A79F0BAB685 50F46898C9C86AC3 01F3925F8F5C861E E336052D0A264557 73CC0FE026757359 7C028C5F5CC51044 5BC7385D44023334 75BC146B225B30E5 E0F0D5CDD485DBF9 2E073BF6D6E5381C 1589070B8A0173C5 951C67FD78B6F52C E31B60DE92ED4637 C17437CD93594396 1C1073E0C2791BA1 AD4F195FA5B5B225 BEEEB78D12490534 559D857041F9D450 580ED7CC9C5B476A DB6E15573ED8790F 0CE56D03E33D38B0 90A858B509599737 7E5F3C60919B95B9 6EDCABB68ECA3B62 412E8846EC4C2352 7DF95D8DD57E8088 88445C5B3888CD21 79E743EEF10630CD AD3C1636B1D3C136 313B4BBA218B06FF 55FA1CF248DC6873 245F4DCBF714B0C6 996ABEC4B87C72C8 348C2232D72E53D5 C099C1885904A043 4AF86DB95FB4595E A70F5AEED51F3C4A AA485B69571662AB EB2BB32E642F4330 2713681096E49897 849DD73A14D23259 F407C35F7F121D26 B6611B2144C6369D BEAE1F28E31CC7FE DE371388002B188D 65BE48B2DF90103F 8EF2217DB0F392B1 621FA488247AF45F D233A389B20713B3 F3CE2EBFC1DB0D93 139A417F0551385A 6D05223D89138C6F C96BF547A6ECDCC2 1BDCEFBAF4062E38 3F9D86BFD40800A1 A42E45CA52324A38 772E0334B1AD910F B1B2BCD7A3CFA8D7 993ACD913C9BD302 583D385680DAB80F E59578C15D81DEF2 048B892AFE36CDB0 03C97A792066A31A BFB135DE16B0A637 A3D332255398CEA5 CB20376D4F22F838 E1568FB19974AF67 9B092A7E6C7A22D8 4B94D312E2F59484 DC4D3016DA5F5E7F 5090B867639F0DDB 651DD37C62F12CFA F58EDC928349A31C 2602C182455294C7 28BFD970584C1318 FC53751DAA08E483 BEF63BAD175B757E B39D3F640420E9A5 B9F673363D27EE17 837BEAB9450066E3 8121B702D83B7EB0 57775482CFB5D683 D2D97BA8BE4C38C6 95817F5237D48582 009F195C9EFE21C7 8B4CAB93F120D785 78FCE3AB89D7F179 20F9450EA512E9D0 F015BBFC3C354901 8581592687BD7DF0 3481A2DEB34F5314 9A891097293B3E5C 8423970608D6B0B6 46C5DE889F786D45 418C495B0D99C051 FAE393E2C8E13BCF A75467934EF7C101
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303041832 (name+title). Key = MD5(password) = 5fd78c0bde6e60620f80801b5e89ffa2, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 08c49289-5a2a-401a-93f3-7f9ce88a7d38
  2 7a4e52ac-0378-1590-9485-bbebdd17630f
  3 7ca03e04-9bfc-5e04-8be3-6e257968f8f5
  4 e63a840c-209f-0a8b-95af-2068d88783f6
  5 92030556-1925-8e40-b442-f77cd768de5a
  6 88e319ff-9654-4896-85f3-b8ba2796aeb7
  7 d58036f1-7814-3d03-8d81-8649c393e23a
  8 137dd066-8541-06cc-9e92-a60ebe6888ba
  9 2c109647-dbda-459f-a175-7fa269366286
 10 7a9110c0-e2de-3e27-9cfc-842b029671d4
 11 5dbbf907-820c-1d7f-b819-556510bb69f9
 12 b0f114e3-22cd-1d67-b921-91e3288da2da
 13 53ba3c50-2186-1ba5-80b1-419585bb85cf
 14 a783b029-5f3d-7349-90c2-c1fce82296e9
 15 b72eb714-4766-42c0-934c-20878d7779c7
 16 e49149f0-b5cf-5202-924a-0313b6c08c44
 17 2dcb494c-b0bc-7993-99d0-dc826dff4be9
 18 f1a1f77a-ee27-6e54-a9ea-0e9490244eb9
 19 27d83c38-2cae-7f98-b4a9-f9752797b8b7
 20 b3f7a5e1-72ae-1b0e-b11b-79e1f90206b9
 21 de854c8c-c8fb-1467-a5e3-192cb725ec77
 22 fe393480-20b3-593c-95a4-009b950ed2b2
 23 0b5bf442-6658-288f-8183-c75e2c933d18
 24 a4a461c8-0f98-7b0d-8bcb-ab60ca211b20
 25 968a3161-c74f-810d-93e4-1140c9f622bf
 26 1fb84d8d-3f6c-8e47-b358-a16b99f0e604
 27 af3086f6-b365-780b-8f7a-28aa12bfaf54
 28 5e7c2b20-dff7-1087-b978-f8bf0ef2c08b
 29 b79fe3ca-3e6a-8a38-b864-16d07a923528
 30 35931e46-2453-489c-844e-155e4bda9a2c
 31 b3c4837c-b82e-5216-afe9-11dc6e406e02
 32 51381646-41f6-6f34-8cc6-2a87baca6008
 33 9fcc7d37-de94-5c6d-88f9-44fd47b1358b
 34 90f72b6e-48bb-80df-b70f-4f2505db398a
 35 0a903ce6-6a4f-333b-a2b1-23ea93f4cdc5
 36 33cecea7-31f9-2959-86d6-907adf1ea8f0
 37 135f52b5-eeec-0671-bfd6-a8b25d2b924f
 38 758348db-3484-125f-adc6-6d5fbc0d0335
 39 61c49c97-c377-09e5-854c-119f3d7555cc
 40 470a5475-653f-478a-96c3-5bbfdada1d94

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4150843043111745767115278871845658320104. Exactly this sequence comes out of new Random(635).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 178 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs