A858DE45F56D9BC9 archive

201303070556 19u8ch

explained decrypted filler

seed 592

Metadata

Post ID
19u8ch
Title
201303070556 → 2013-03-07 05:56 on A858's clock
Posted (UTC)
2013-03-07 10:56:48
Timezone
UTC−5 · title 05:56 against posted 10:56 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303070556) = d1d759439134494adc818119d6d47877 (name+title)
GUIDs
36
Filler GUID seed
new Random(592).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
232 · predicted N = 36 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

DE47CBCE5B431E54 B4A2E0019D3F6E39 CB60C1E0B8F8E1A9 D828C58C533A4BE7 694B098218B3958D F82CC4E2179DC402 80396F8162760893 B051A95F046375B7 256C2A4728E8C731 297ECCFC31B3E794 A591FCF67D3C81CE 2767CBAF62429D02 F8974E922D111D1C CAD77CB2C279C427 600303BFC4956574 80D090AF1239A1EC C470FA9A1232E7C1 8ACA1CC7971F5396 51C8AC5395BBF6CF D457FA41FDABBABE 2720F890391E5D1B A8E7B7318C0F01FE F7DE0A7D2343C147 D9013C7EF119C582 7B201B3D3BD7F1ED 9413D9CE4F2E317A 0B83CA37A98AEBE3 CD57AC960A452263 00DBBF6BAAAE7631 E6E9CB9ECEA77A38 71A5C1FCF752774B C3FE1F21B8785A77 9F8D4DFE69014F54 5A4FE33B6B399BCB 57D35D187FAFCDA5 0C80C0894FEE435D 023FD9374860FAA9 DBB552F17E4A659B 5739CBE723D84835 2D361E2E1D795963 D8ACD5B04FF4DD01 A05F83E3690A5546 8DBC0B148CA2987A E32135D1DE066397 AD9A426F5A95174D 5A94346153F7C858 C54E91817965EC1C 5233D8270DC8BDE3 9F166CC742FB2779 A61836D62CFAB558 DBEBC3D518558857 19F013E7B5B679BD A0A42C711CA2669E 0595795DC8851E0F C03024019CB90300 4213FE68BAF8E9F8 ECCE147F0D3EF8B0 ED1C4DE2946A75C9 81AA3EF4469B4C5D 0B0876A8D4CC7EE3 7E1CCBC7B5770629 144097890C1AF760 1048B6CB174DBFEB EE3FE6B8B2695452 56ECE42BBEEF8860 C5EB504AEC141EB8 74FBC31E70B12735 DD7229A5829138D9 CEC399CDB3F823FC BEAC8EAFB7F0323A 55F50D404F1951C3 C604E65DB4988857 20F0B4C85E3DD771 88FF669C341490D0 834528FE3D11E378 3B17F14F3B6D589C E1F014C319EDB54B D6BA90B585B342CE DE8DE60BEF7FF3EA 04F1B69BC5458D47 293E83E1C756D8A9 E8C3AE48C0E6A212 4257120A6387C1C6 78CE92A897AA3F3E 1826773514D84D5D 1BEEA3808E85D5A8 6510B0A5A4AA6D18 199650DCAC7A802B 988D0EF090A0ABB0 A2DF8E5F4F6721E6 D1E7E3FB70AD8A06 515464006EA62BBB 3BEE6641B0895AE5 F5127B88E7061B8C 8D9E4698B1983678 5DF6FCF59F8C355B 793D74A5EFEE77A8 F3617DDE832EFAFF A6684166229A71A9 AF818D7D8DE4D841 386DA0F3E1C70008 AE0136B7E3A23F91 01CD8AB7B2DAF649 269FE70714C17C4C 05D659E2FA100B0E 444074ED5DC76EB9 83A53782F773D99C 34B18BBB6A1FFB83 02EBB06F27C9074D CC42951FE69770A6 1F65864079CB119C 440890B9D9FAE1C2 F09C4DC1A81D0198 F6E85499558A5794 40C2A1439F4DC6D8 9332D13DC92511BC E69DB9CC18663CCD 7302BE58B08C3984 5A4235BCC9506D75 0A1EBE94035909BE B5A9A8455EE24B27 E6A076483BDF1349 7A39BAB6E5443CF3 7E3A5EF79FB7FE76 E5113D9477DF58F7 5A0477F7E1D8A421 6FCE5E11376DB1F0 75DD7FCD136C1CF0 DEB05DDD9D416D12 D4ACC83349F9367F 29100FCFCA1B4A01 C8794A5C305BA8AB 2CF3834E94F47DCB FDD7C525F1B20222 DD7E62876FCDB6C3 41573E99BA14D639 8D5D558B52592E08 B46F0D8B0FCEB08F 2F2044CA3A36C376 FAAC03C630E294B3 94148D492C95D7B6 26720D5D107BBFF0 FD6135304EC4039C 51648985A8A4DBBC E91A434D0EE37C85
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303070556 (name+title). Key = MD5(password) = d1d759439134494adc818119d6d47877, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 75be50cf-31d1-0288-afe9-35c329d98f8a
  2 8a0b6efb-e0b6-401f-a6bf-76900e76ffc3
  3 cfc0371e-176d-5251-8490-f3c255bb4e6a
  4 99e8cd78-33f3-80ba-8085-7ba764cbb7c9
  5 e7b62d28-7272-4548-8023-ffa247167ec5
  6 803f0941-7e98-8e34-8bf3-06267e4fbb8d
  7 766320f3-fa55-1302-b4ef-9b3a7f3f51c2
  8 b6c2990a-ea2a-3048-bf1f-f126be73f934
  9 0f73ca59-01e1-1fb2-bb10-4c670b7aa0f3
 10 5461b8c6-8f94-5e45-be32-3eb090850ccf
 11 a74e5258-ab3d-35f3-a6a4-c7faccaa0ece
 12 109d1bb1-fb52-5a79-8f09-54063962d0f5
 13 7f6ee077-8ae3-5412-a739-86a75bbd58ae
 14 6a253d48-a053-4939-8c71-8757285a6ade
 15 19b4be0d-6773-3e83-92e1-f8ea77c02998
 16 92582a3b-2820-6933-9f6f-f55a54fb1336
 17 70495031-d047-668e-83f0-77e86a04d927
 18 c71c4438-f790-0ab1-a32f-9799061ff167
 19 c3317dd5-230e-6ce5-ab09-e50a7d5b702d
 20 6d0c004e-ce0c-4b06-b1b6-a6103a177cfe
 21 1b59ab18-52e2-42b3-9143-0ded76dd4677
 22 2bb49973-718a-0bdd-baaf-73825afcf3c0
 23 6a022507-e3a8-082f-94f9-527f976ee00a
 24 1a8822bc-4f40-7701-9d46-1737a0010a08
 25 59aaf877-dbe6-6de7-98f9-48d619d66de2
 26 61773ee8-33e8-243f-8b3f-c90be639dc64
 27 2d937062-752e-88a2-8b51-2b980070be93
 28 c244cd94-91b9-417b-9003-fee2a4ef3dbc
 29 6a2ddbb0-1667-0af8-9448-794af5070302
 30 13148f87-66ff-7885-8e88-9d15c5cdded3
 31 9f686c16-8421-6960-89bc-ff36910cd2ce
 32 f7b52b22-1748-39f1-ad7d-6d8c9aa0d88b
 33 00955b9a-34a1-33b4-b040-09631130e013
 34 ca83bc12-0970-7b60-8387-eb76ec1e3c65
 35 df8e2cdc-1a17-316e-b6ff-7b6e5ea886a8
 36 2cf14ed8-de36-38ea-acb1-8e8e6bc058f6

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 045848131535543660644007628407633733. Exactly this sequence comes out of new Random(592).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 232 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs