A858DE45F56D9BC9 archive

201303071232 19uslb

explained decrypted filler

seed 320

Metadata

Post ID
19uslb
Title
201303071232 → 2013-03-07 12:32 on A858's clock
Posted (UTC)
2013-03-07 17:32:47
Timezone
UTC−5 · title 12:32 against posted 17:32 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,344 hex characters · 1,672 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303071232) = 153b4257a5720163ff200cede4809423 (name+title)
GUIDs
52
Filler GUID seed
new Random(320).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
238 · predicted N = 52 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

6882EED0F30D840C F6F9F5682B612C30 D2E97873CAF4C61D 2896554F8C38B3F1 EEEEEEE48A0B7449 770EB9846AE7634F FA3708A99C329980 AC8F04E8A63D8742 36911C11ABC988BF CD60FB8DD3269119 4C29E2F6164432FC B049D76CF9CB0EE5 71BE6BF7121B766E B489CAA56B5982C7 ED49EA207C68F2AA 667B6BEB07455711 C9D597F34530BED7 83905E5C82B2965D 5A949CF9493FB106 E75EEB50FFAA12F0 5C639C17FD43EA5E 6E4ABA6F7883F2B6 A5CAB341C1DF7D6F C90391CD9EEE9FC8 D88279C86F15D481 FDE12F45CFDCDDDE D4CEB44A01768B19 D3024FA6FCE17FF9 58FAB1887449B2CD 47F4990212A20621 1DA8129D14642B1D B3B7AB190B191815 A9577D6569DA1684 582530FE1553DAFB 5235A382A4AF6ECB 1568C2ADDF8803AF 8538BE10E25FE479 38FB3E9F2307B4E8 CE03559F3AE1B8C8 01960C944E3EB43E 5EB081F25304CC19 99B4611A8F407FA7 98514066C46C69C9 75D475E1C51840AE 6E2D26BDBADB5DB4 3F8981AA8BC94707 B97733D019207013 B76433DEA82CE638 E7D82228CD284FB1 2BBA9E53ECE2575F 51E7B975FBE562AA 4720769BB278EB20 08E209CDA3A7BDD7 2DA79FB6AAA59DCC 62455970D728FAA8 B228F0426A221F0A 3DE2398DA963E86F 9402F0720ED41607 B1C992C19E39D5D7 D7E740E5926D2237 C8874679411FBB21 22C7274AC6379A0D F5F8CBB8187E861A 2A50B5C5F770DF89 BCE59D6ACEF8054C 7E09559E167BEC65 AE8718E97161D687 DF31D89D4ADADD5B 459D608C9A20D2DD 7743855AD0358C7D D9654F47E8813B3C 73456B40C5B500D1 EB7CD4DB2856AACE C592475063A2E5B3 DD7BDEE1F61DAD00 2FDC6FBE2DF1F29E 2BDCEB4B3C78A483 9CE47D1FEAF75757 1BEDE6C709E314F1 3FCB91689F61F253 AAD02EA16A38C391 124A0EE8F59202C3 978CAA9CC6ECFA71 523544E61F56724F 404C11BA4964409A 9C91B67C432A652E F55198FA9337333F AE2B75EB4E5D4EC8 E08A9A66C208F0F8 3A48644C33B172CD 75C3631D1D5C13A0 B0F53E3545C8C404 3EC1BD882D5C26F7 B5DC32D950169E11 5155174280A6C123 FF2BEBB846408FD1 A3A7418800E2DA6E CF8C0B2D6B8D03F4 FCC10A262EB80FE5 0131FE7C2FDA5E54 CF257808F4767EF5 96144AECAB80AABA 7FA4DA4667632CC7 77A3BBC0FA63D524 FD543E237DE78D89 2714EA8899447DE6 147DACC6CDEFD465 A54F0649E31652DD 6A160B77903FE315 B433B9D6EC547D14 4CD997A2EFF48878 6F790A63720EC824 331F0AF49A40F05C 6ACA928BC68A0386 EF9A060072D98A7E 107EFC28EE5772D1 60FCFD753D0D8F0F 2B4EFF35159B451C 653B73E38193A026 8B3D963DCB11B46F 2F7111774DD34F9C 50B9125FBCA0D013 34ED1F4E1FE7417A E679B621B09E02A4 461687472B5298DF 54C63140D21EA420 6A47CC87CA6361E6 555B49793CBDB5CD BCE2C9A9F65349D5 AD6166A9C106C31F E2219C7457BF0FB6 859B095D4648FA1F F24820E41A0E19C9 8DDF24F89753F622 68D93D8B1C65038B C6A6C2F826AA975F DED0CB1D16A8661A 6864AE3986DE4568 B92639248C672096 FE47389F24E8EE54 61860171E84DFD4C 26A310613577943D 21216DEFDB402935 13F7F135EE6760A8 B128B673BEE23787 5217D8C5792CDAFB 87CF61BD4F2B1FFB 5FC423D460D77BD0 1B0DE188894FE6E9 04A2F226EE601D6F 5F0A0492642D084D F410B4703514F0C2 519A1D116C585F82 0919EF3473D68270 127927F9FA62A991 66D99E204EC824B4 78B066D0F8038511 FCD47A7EDEDDED01 C21690F537D366FE D9B037B1ED73E3DD DF5FB61D7DB738DB EC5C2CDFC214B8AA 8EFA4B132B79264A 4A4178CF0959F0EB E30DBD9EC284A57D 6553FD7C6D69674B 7FD7CE83C24901C6 0C8F4314974BF271 2F8B561E7092B53A DD4BC566FAEA5291 3553DAF2D980CF3B 33AFD568D610F1A2 AFB24ACEC91DC25E 25F14D7560460DB7 74CDBAC17E67EFCE 533C7E18D6E10448 83EE38EB76D9D5EF 3A1A9AD17D1FF922 9B4BBA33B1F2F957 D4C9540A0D1CB793 4F4A55E560A286EE FB99F1BE71CFC9EF C044CAB24E4233BB AC9AF0F05659698E 95016F05085BEC2F D6FA1699B085C11F C36191DEC13C5AB9 D0FA9E9A1F1E3FAD 97BEA5742BC8C501 CCDD346464EE01EC 9EAF208D20F7DA87 423D0BA01C2B418E 6CCB02B6D5CCA231 FF091EB7CE2927B2 3D143774ABE362E6 759278FB6E59D54B 0A95484239EE0CC6 68095911B672D3B0 11356C90C575840D CCD25234E1CB5DB7 D02A47C77EEB6BCA 7EEBC65E6083E820 AF6E7372099D5AA6 9EC932CE7B62FE58 82201F3B6F5624B3 83F10D08A72BCDB7 F393AF5E8795D1FD CCB43C7F06E3E616 81BFDB002CCA3A81
  • Read the ciphertext. Strip whitespace: 3,344 hex characters = 1,672 bytes = 209 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303071232 (name+title). Key = MD5(password) = 153b4257a5720163ff200cede4809423, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 52 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4c8a1bd4-017f-83bf-9321-9f0691cff6c8
  2 44e4fd90-9ed4-689b-8cd6-8cd5633e7cb0
  3 25c5105d-de84-3591-8baf-9d8effb30317
  4 d07106df-7022-79ee-b588-aa82c421cd62
  5 9a88f64f-217b-6bad-b083-dc0fd447c623
  6 f6fb81af-8e7e-116a-bac1-9b0431e6d92f
  7 209607fa-374a-2630-8bda-02530edb850d
  8 8616fb98-6041-8b33-9de8-1b482fde6e95
  9 1aa8126c-3940-5227-b1dd-aa257a0dcf01
 10 57771af7-8cf2-28ba-b0b5-9a88090a799d
 11 e000827b-63de-0412-abd3-6bbad1cd1890
 12 987aab88-9855-286c-9d68-64b133565d01
 13 b965504f-4c36-5a7e-a54b-74a2b48d31e9
 14 552afe28-d207-8f8c-98aa-96208f44eb59
 15 5e8ca08a-57f5-8be8-9e9a-d3d62c944df0
 16 8787b7e7-87de-7ccb-a86f-5a7184f167be
 17 60bdcafc-2ea0-32f1-8dc6-1db523b9da62
 18 1fb5a332-85eb-3b65-9a5f-92074861af32
 19 56a9c5bf-3610-3bb5-a6c3-5bfdba3d069c
 20 94aa586c-4a97-1be7-a90f-dbdbeb035008
 21 54dc5341-8c54-3ad7-ae7e-0e303dc5670d
 22 3628096d-0e8f-3ebd-bafe-0e333a5d6814
 23 3a86ea07-b4b8-03bb-90c1-41812bd3d13e
 24 0e09b85e-0990-778e-918b-3c9ee1f85b9d
 25 a28bac48-a6da-0a4c-ac2c-db12bbda0ade
 26 33ddd139-6701-3189-b22e-022efe145198
 27 8d28c4a8-6f84-015a-92df-18795a26b801
 28 430bcf2d-c45e-825f-aa18-954bba28d68b
 29 b88695af-ea75-8640-aed0-c787dfa77833
 30 ea1d65b3-ad98-7b39-8ad7-106299a73216
 31 c8701406-41e2-2b77-a6c6-cca8515b8972
 32 0d6570ff-c229-655c-b9b6-731485deb16c
 33 ed1426c0-93eb-84d0-be23-d603a35a5670
 34 a2237214-fb24-0eb8-941d-a417b2a3c0ad
 35 61986a83-ed42-3000-83bd-5550c6b3ff3f
 36 8f3f269c-990e-5df0-a101-7cc5448c0f56
 37 e4ff18a8-6eab-07d1-addb-a04e90b8ffce
 38 ad6ddbd0-709e-486a-b45e-8c1777834e47
 39 4894f46d-3a80-1d20-b1c6-362d3a9d7f69
 40 4964f181-0b81-56bd-a690-d459a888b41e
 41 270c1db4-6694-1be2-92d0-abb50d436f7b
 42 a910c46c-8549-59f5-bb1e-e8bd7fbc39e1
 43 3ad050bd-0062-1fbf-9920-5da3cfca9670
 44 f0fb8de8-94bd-4e26-80c6-332edbe19c31
 45 342aae28-0e9f-5756-a2a0-d96c99565baf
 46 91a6ca53-dedd-530f-b311-3be4b7989ae7
 47 9bcfcace-6eab-1010-909b-52846046737a
 48 3443c9da-ebbb-402c-9fa2-3f850bd2c44f
 49 6ea9654c-87b7-300d-ba0a-16e3ea034f0b
 50 3ff9f9a2-5aef-41aa-9acc-ed6b13dcc4aa
 51 7f1b1332-b3c3-5bac-87c9-a49b9bc540ac
 52 1869719b-1bd4-8781-999f-e47bfc19a0ea

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8637612852025887333133070308872680350415151455143458. Exactly this sequence comes out of new Random(320).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 238 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 52; the post has N = 52 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs