A858DE45F56D9BC9 archive

201303050108 19oyib

explained decrypted filler

seed 318

Metadata

Post ID
19oyib
Title
201303050108 → 2013-03-05 01:08 on A858's clock
Posted (UTC)
2013-03-05 06:08:50
Timezone
UTC−5 · title 01:08 against posted 06:08 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303050108) = 685470e0c22bd49521c39b6995de6f43 (name+title)
GUIDs
40
Filler GUID seed
new Random(318).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
184 · predicted N = 40 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

44988EDB58B00286 2E92E46D00B4C2F2 863CA9B5FCE0E866 E75CDE1E2DCF5D21 C6D5A5AF82796967 8483FFEF7EC0EDDF 1ED94E3C5D7B3DC3 44ECEF591F8901CE 6B06B30F6E21CD5C D57B1E05CF4A4345 068C987CBCA28B6B 225C05B818056BC7 686D96334466E0A1 46F11793321C512D 4FC0BCA506574BCC 9C878D95806AAEC9 362EAECE57F49253 0EF348B16CDB9510 030FC24C0E619843 1BAD18ED0BEB5E05 E454835123746EEB CCAABF30EABA28DA 2E159EDC784EF9E4 EC9A1EF6D124855C C3E578F854ECB7A3 5BAB8E5F86D2E0EE 7B70DAD33E649735 49AFBF3A3593353B E3A3125284C93187 C38F0ACC365B109B D77EB49F0D9DCB08 7EA4DEF880B88137 3C56E810E4DB366B A7A045AB72AADD44 6266A00FA052D516 0DA3295193F416DD 5464E6445BC3C789 A5187C8B2ACA9321 578C06B82C62CD3C C2F1A1B54C45D67F 3703E762DE907C1B BA55D344D08C0F25 B1445612A4D8CCA9 973F1288A17B12A5 41AAF9C836A6E0D1 F87397CD80523DBE 36D8439B8E0B1441 4D68EB5A4D1E437A 12700436435D08E2 6AFC035C6F7BEA73 3814B20C4C3D2855 5B15A63D549DEDFC DD4953B383842544 5F4234059BBCFFDC C10E9DBAC0502CB9 1893E8A7FB3FC7DE 26FEE20E7AE63342 293551781E867846 801CEDB58C7C0467 64A1DCEDF95EE5E8 C9044815F8CCF8CE 4304B226B7F08A7D D8489D513D7217B1 188D2BDCEE1CFA4E AA0B7143FF3E7FDA 9D7BF58678ED7A0D 06DD90240A8C7948 0D4C655A8F7F0410 1DA4A35588D28D81 16DFE14D9023EC88 5EB735C6D498AB9D 860C7823D373C6DE 0ED9F1FBE44D7450 01E1B5C9EA31320E 18AD818EF7483880 A8860BF8D78809DC 136116C26BDF1929 A5FF64CB11FB8205 8B28F2C5CFF49294 5290C48EAC44938A 3AA011A2A05B6E42 D264EA7E8153A7EB AAA3538876724C9E 82C218A0ED8C805A 7BD0E7D3E466E432 A6D3A2BDA478C7BB 3B31327386EB7E73 F0052065D46A5D3D 0F03369A10C76BF8 F54D2E151D08122B AEB4EBF74057F479 60152B8A7911239E 25C401BB9C7A1410 1651280C2D5BB54A 0CED1400E11D7EEF 9FAC49F5167A000A 99D85AB4D03ACC99 500AA4C1B764FD8C 1F6E153B4CFB7598 E91802428C5E1EE5 1092D382F13F1A81 9233ECB9B2AA33B7 B784EFF74A935043 B73248B7FE943324 2501F01FBB0E9B5E 221DBDDB69BDEACB E64082CAB2AC96E4 4B6D1B8096A0EDBB BAA9C05A83AC8C3E 9DBC19EA11273B2D 2A6B9C8641B5A637 97CE9DF53985E042 EDAC2C6BBF1E6ABC 671B69533CE861C4 95FF9C9F8FBFCF22 16CC602B7E8C0EF3 77C3F56874DEF24F 7FF69D6568196B34 5A4D8BEA6FB0EE07 2CBB7D48C8C7EC13 9DDC4E5894D50989 E393A30C0AEB98F8 2AAB36E2FF828513 528B4078EFEE16C3 1D57AD8E9453E159 7DA292298051C28B 0E345C5C8E9B2FEB 1BFAB0B2FB21AFFB 0E7A5DFADCFF6D2D CC74B3AA5C810E83 722AF50FAE5EE344 94C61D467E50C664 5CA37448152861D8 5F2FF78F90FA6176 A8B7437862E83D23 BC70B06338BEF4CB 77651A6027FB1C7A F6D587FDF68F0315 05AC99FC051280E9 154B5D5677CC1C60 9BC84F8378A497DF 79A6EFB4FDFF4D8B EB843B51E93B83C4 47B265B9D57697AB 2AA7AE2FB29C5575 D5A370A28EE00268 9C46DF86C2B3E386 E7DC710011564771 708868105596A2D3 3346F63CF6A22C53 27E879178EA1D430 D4275BEEB9105188 7466D0111CD3F29F 1E4CE1F7AA693DD1 35679BC61B1E8632 D2E69395D64F2AD2 EADCA860BE8CBEC2 2D547696D64188BB D29B2AA50FE82E8D A5E502C93B481C49 5EBC35142157C282
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303050108 (name+title). Key = MD5(password) = 685470e0c22bd49521c39b6995de6f43, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2b40eadd-9bd2-726b-8a02-983f74f22ec3
  2 2fbb0ecd-73f3-183b-a572-dc040d6bceeb
  3 14a19fcd-2da9-093c-8a3d-9febb1d420cc
  4 861ca416-694c-3cd4-90d2-a360c6b7842e
  5 adf779ad-ddd4-7131-9ae2-34c3fd785072
  6 5761501e-af9d-484b-92df-fc27cd01bf40
  7 a54bfd52-5f6f-3393-9c38-913f34005b13
  8 648de907-0502-8e08-8fbe-449a01cd6fa4
  9 ce29bfaf-7204-2ece-99e9-da2d471d8676
 10 1d05afc0-4e20-4d1e-8074-854dfea53cab
 11 70e9b032-4867-5f20-9bbb-108605f8e5b1
 12 7c1bd1f3-c286-6bcd-b610-a834442b7e0e
 13 fc07b237-cf2a-27d8-b97b-45e0e1c1987d
 14 bc81241d-9103-8fd5-82df-1fac02c65fec
 15 e6c520f5-72f3-5095-a4fd-c8cb07b364b7
 16 5a2c7774-14ca-5088-a5fe-e7ca89d67625
 17 c5b0c101-b067-4e89-8df2-6ce7d69a6d82
 18 1622bc63-79da-175f-8dd8-3dffd6246b35
 19 2b5b3374-0625-2e11-b595-a304986003da
 20 0c836516-b4c6-47fc-9337-b66056e732ee
 21 f0d0312d-8d6b-01b1-9c76-844b9f609f78
 22 be3abe34-291e-7cd5-9457-6f37edb0010c
 23 f1675c6f-7b5b-6dfe-8d7e-658eb8ca48a9
 24 9043a13d-052b-16d9-a34e-1bc4b1644665
 25 a6f015e6-516f-770a-ac28-77bb086b232e
 26 6a76ba23-187f-00a9-a9e2-eb47ca672cf1
 27 c5cf0140-8e8c-327b-a1d5-919079c73b02
 28 f823cafa-1790-616b-9a6f-7b7807cdff9a
 29 724c7052-25ca-3319-98d6-1ad70409f25e
 30 d3b3d195-271e-1525-8dac-759ab8bc0f62
 31 6d3b1ff0-9322-526a-a046-60a3235dfbc4
 32 a65262c8-eaac-1f71-af0c-7411cbe66a9a
 33 36a05ad4-95cc-1be3-809f-3b1d3a043bb1
 34 e0d253a4-7a01-85e2-97aa-465422822260
 35 37fe9bd3-7f57-62bf-88af-f6a87b633bf2
 36 dedfc4f8-b31c-46bd-8ab5-e366c5276027
 37 a4c8afa6-6e57-44e3-b87a-88298d0d9e60
 38 b72f4659-8446-05b0-9f6f-73650c298203
 39 66f5954e-fb92-7e29-850a-188b7ba4b41c
 40 542f95ea-7357-484c-bf61-f37fa66acbb8

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7103743824562855412407617036315118644074. Exactly this sequence comes out of new Random(318).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 184 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs