A858DE45F56D9BC9 archive

201303062320 19tqqe

explained decrypted filler

seed 2

Metadata

Post ID
19tqqe
Title
201303062320 → 2013-03-06 23:20 on A858's clock
Posted (UTC)
2013-03-07 04:20:48
Timezone
UTC−5 · title 23:20 against posted 04:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303062320) = d17ebb31710b5ae6e2e2d321132be11e (name+title)
GUIDs
36
Filler GUID seed
new Random(2).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
226 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

BD37DB3666B40C4B 7E8DE074FA856D34 96D864C018C65F5C 124D0205AF3063DA 5BED04041FA9E0E5 DAA7B4534CEE6FFC A905FBBEF5834028 F10C0B14E00D59D6 E2518C7A4E2E267C DCFB01ED81D66473 7886F973C5E66D83 50132595BB0B5AC3 927F97559404AB40 C0F392BB95A995F8 B94048775CCE04D8 39107108F618A3DD 76AA456474148B23 2F15206E646A9F30 F47C350D7951C2AC 720395DDD68AB70F 22821AB483D1EB5C 0A450FB597790B1D 5CB6D53EE62FD405 FEC05661C8A99E7D E68E568E999DC1FE A6FEA0AB4B20D5C2 642BA32A7D87477A 54522FBCA29C5C1A A7CA28445887DBF0 6ED550CC9930F688 DA8216ED43FDFAF3 ACD7BD0DFE9E62EA 27D6DB8F9810E9E8 19FF7F475FD583ED 71D79016F24082B6 7C91F2FD73CF528D 62C35B018B69A544 06BE57A3255F6B43 B272C1970A4C689C 26104B907057CEC6 916287A0BFB21314 F1411D9E16841E0B 1D84FD9EDA7D7CBA DB6C016BA73E7EA3 1D6CCDBC63E1565F 9330F27FA98FB031 14A8CB9B0BB8F7B1 196F6B094CB763D2 F6790CF570D263A5 1E8AD8BB2E45233F AB2D2271E681EEC6 DE47B364620AF461 CCC7D48536EE19F3 3914F2D58227B129 D4B46D89D38FE9C2 E633B4257D9B16AF 575AA4C5400E4095 7AC5E1A673DC19F1 F7BAC242E9ECC058 E3C4AF4E0FBBB450 D0E620BF3C6DBCB9 16DD0CCDF336F4F8 98A3650E87646CA3 3F0E5F5C5F92BD30 B5519278370047EC 6627F3A25C5C0CFA 81B7B24512106886 AC7C61496A359975 59B78E7A87EDA453 5911AF4D2D24B913 A0421FD28AFBAFC8 40DF4A86AEE9CD67 7CA8ED85F01432FC 206745694A496776 C9B275080BB4B674 F12CF7067D85275A 437555754DE81CA4 A99C128CF3D73698 B948123B339B838B 3867578C91FDD393 E4C8346DDE272F0A BE5EC6A18DE2CAB8 FE164D6B617FE13F F89AAA5C27070CC7 AF38A4FA605D688F 0E15E876462C2AC2 9FDD133A402E7683 BA314B274DFDBA5C F0A11A8342CBB7A5 E358D4935930A55A 63F4A8929C193D68 92BA539AF7379D16 C42CAFC7E3F4E555 5B638E0DBE966DBD AB62AF2BEBABFEEF CC40911F05E8F8F5 06BBF2EB01C99D91 1E2F633FF01B45A5 2C6EED9244D5A456 8DF56F6578B1DF78 84C1C12B7A152EBE 2B9F848BAF108EDB 5E771EB6D46AF9AA AB40496FC8E090CB 1AFC79A0AB256EB2 1C690CB00A509666 EC732EFFA29CDE8B 0EB25DE5EB5D341D CE32AF183B5B7BE2 5435DC62D4471DC7 83FA974617C8E319 4070EDFF6A816DAB D877108B3EBA8009 5A5534BA035D128B D87CDF33DE7E741A F3BEECCE3531718D 980F56A8B1639392 3A1431F27155F60C 60E49CF2EB69A3E4 4FCACCAB38718B30 239002AAA0D1DC40 C2615350CEABFCC0 56E8E70778C28CDD 752F356B9651BD2E 318CC9FFBEFA3987 F3DA58E9F18E8035 709869ADDBF73CD5 F7604042705A3442 1BE1CFD1FD06F620 3AAE3948E61F70C4 AEFEE43E152A0F42 20EE9ACED6F85A8C 02B95A4937FE57D4 7C77C07A2F23B864 98ACE400C14CF02B AEB083AB1241FD0A 1C855586D6531B9A B384B6BFF21C5665 B38F4CAE674E0124 3648BCF313176554 3B68B2371BCE9E62 EEE8701802702854 A0321C62BBC10A11 5D2BD88C6768EAE0 108C58F1935E2AAD
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303062320 (name+title). Key = MD5(password) = d17ebb31710b5ae6e2e2d321132be11e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d39abbb4-ec22-63e2-ae01-95755bbe4a6e
  2 ef6cba79-4f31-3dea-b034-d4ecc06af79e
  3 5608a5a3-2bb0-1318-9ddf-f1a3ecfa67d5
  4 83110b31-4297-857e-ad9c-24dd8930402b
  5 e531f5c1-42a2-01c4-8f98-bef57600953c
  6 ed298bb6-d39f-2ab2-bfdf-7db2fcb9f6f1
  7 64a1fa38-7d84-7d33-ad3f-6d1d20773fec
  8 c4241589-0ca2-4484-9ae7-e48e36edb4b5
  9 8609e7af-ca27-2c57-a851-06087f13db50
 10 d8cfad9d-d1c4-016b-b1d0-aa81c3015945
 11 fbda42d9-a524-6edb-bde2-16ad3a8be145
 12 cf29e2d3-0c33-0fe5-a2b6-252ecddf84cb
 13 46245215-81b7-0234-bd87-e988cad766b3
 14 572d5a0b-534d-4480-a45e-c8f4c17da4a2
 15 766288ff-913d-3a5e-a4cc-1a2c1a9a7fb0
 16 315eb91a-5fd0-225d-a3fb-275801492aa8
 17 dd0f2318-113b-628a-9950-5196ea5b577d
 18 32d3efed-4315-2bdc-bf05-1371dc42e3ee
 19 a03dc648-d63f-6e00-a31e-8b6b802761dd
 20 4097508d-181f-039f-b5fe-9ed366286b72
 21 6c5cc5e6-21c7-0efe-af25-20bc9bc43590
 22 4830087a-312e-3974-b124-afc56c2bd068
 23 0901e74d-865e-2954-a08a-f1fc97a379d4
 24 0444baf8-0085-6185-897c-05d80e298704
 25 14880480-786d-8332-8b33-bf9a6490983c
 26 a958ca61-1eed-7fc0-a90b-eb7720acc0c6
 27 a211a928-c674-56fb-9b05-646c10cefd4d
 28 b45a9e8e-0e4b-835e-be79-e586228ad412
 29 70d1aa82-85ed-0fc7-993c-0e02836a3b9d
 30 6b1a9ba1-b364-6b3c-b787-72977a432dca
 31 f7c7c4b2-1c33-8c31-93c5-c74d864d1885
 32 8e1e3c65-48fe-85ff-b2fd-287942fc1a57
 33 d7e65b63-c486-068a-ab04-55f433f7c728
 34 ded270e6-8d65-0bc8-9ecc-2d70bc717c3e
 35 8e4464db-f5da-35cf-b071-3fdb4570f4f9
 36 1a85b922-3000-7249-8957-cc26319837af

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 631802742060043262600326875806880037. Exactly this sequence comes out of new Random(2).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 226 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs