A858DE45F56D9BC9 archive

201303071338 19uxl4

explained decrypted filler

seed 252

Metadata

Post ID
19uxl4
Title
201303071338 → 2013-03-07 13:38 on A858's clock
Posted (UTC)
2013-03-07 18:38:47
Timezone
UTC−5 · title 13:38 against posted 18:38 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303071338) = f4636397cec066a607c280f59059a28f (name+title)
GUIDs
32
Filler GUID seed
new Random(252).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
239 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

413A405E76953552 717A1B5987F2D7FB 72D300465284E9EF 5BEA5408C5482CED 10625BE0CF6E2150 C0F4C3C1B0C7336F 3BB8434E07A93046 A33C51EB47095DF1 2EE4E286F2BF56ED 08937C123821F320 B8156558973F45BD CBB64B91690E04B0 930E4A56084E23B9 F0E0835427DF5D4D C4F3A1D1320CE35E 9B3D2594F2BC91C9 5265A6F629655CF2 637BC2880A01A364 6B9A03625C9972AF 2C820BD5BDA4A285 C18A0257FA11B4C2 DCC5A39785BB6706 DB2B26F590FA2900 283A01B5A31671F9 758042B337B7691A 60D06E7AA5DD01BD D03661A0691D1ED0 BA0199217BC11E7A D70C73355380E386 4F05AA9A6356B3C9 41E0F24CD9630764 813DAD68F953B9E2 8C979324A9301E65 83DE687AC1CDBA98 F607D2C5FCC1B0AD AF889AFF1DE6D69F 39D131B0FF4B6DC3 D59899CA40609FE6 8C4FE8E6B5816051 8F27060FB7EEF9BB 389D4BE8D06721DC E0A371583D993672 6638DAAA473AED81 7042301B078F1379 425C2AEFEFA8590D FBC2437DF2D815F6 BA3767F94EF16CA0 315BB5BE4078CA63 83FE994E82EBBF0C D83208DF057A3743 5842EFE4B4665D5D 592488FF790486E0 CC6628E4113E39BD E3B1802288CF2A65 BEDE6CFEC9F3210A 2DE38625DAD0572D 7620B6514F04F5DA 65D0ECA9260E1D3F D33D956E0291CBDE 903D5BF1C7762931 F074ECA272898F46 AE4EBC92A47A8B1E DF75C240DF2E8A2E 0E890C84B9D4B4AD 88148CEA4C417316 F652C6AA42576A74 26309753F4286A38 ECD9BAB0C6129FED 9E89CD07AF2EED04 F7BDF1FC153F55A4 DD5E62BAEA859954 3B9BE4868F164ADE 56C35363299EFFC7 75BFEF37FB30097F FB93DD9018BD4ACE E77B603F2CA4095C 2849AF592DAB78D2 CA7B473B6D74151E CD4293D78EB322C1 8CD457C9D107DBA9 6E85CA32DEA45A11 784CDB9C6B67E54D 2157398DBBC53D2F 5E21F373AF338583 37FF77930F1AF24A 0CA49A157BF471F4 11F391AF09C639F6 9B91399A20875A59 DEADE7E1258F1618 9897A7211DA10815 3C2706D253CF5161 94E0A5107EF6EA31 2EF78FCBE09E8B9A C6ADD4E9C2A3000F 5B4FD7634DF6B4F1 5AFB77B00DEBE44E 5B5DAAC581299C8E CEE121FEB8FA57B8 D51AF4A58EA5FCAC 23F5EE44C2282B30 397E1964D152E375 21D67A2005879F41 4CBF3DC52D08362C EE86B9D1F6A325C8 CFD8C80D1414FA28 F52660B6962B40AF 7858358C0D83242B B63729F1526846D1 F944E1FB182F1556 7A04CCE9F9F77988 FB94A70D090FF3EC DA9FD179E3863CB5 A53FB3F6CF4A009C A2D8E7ADFC3FBC74 FF8FE2C17BE8A7DA 7F1CFB9A676D03D7 40DB3F48E2C988B6 EB1D572D52B7DEA3 BD57C8B7BF3145EF 62508217D9F6B45F AFCF87BAF0E0BB86 EF24303BCA318AFB AA2F9B85FEC636DA 3C0DEEF1C379D067 C8499171681AC2E3 920DFAD07A826B53 10625EB735D916E5 2CB09DE04C7F9071 703B8642F1AC9ADC
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303071338 (name+title). Key = MD5(password) = f4636397cec066a607c280f59059a28f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 927299ef-ef73-36ac-a1f7-1f4347e8165e
  2 b9d6d80e-f029-639e-8ec8-5a4c7cc07d45
  3 8b70674f-3997-803e-b01a-4b7c9ab68b5f
  4 4056491b-86f2-3757-b9b4-e4d7932114e6
  5 e0308caf-32ce-85be-afb7-667a97ce08d2
  6 80b3b531-ff44-7b64-b368-99c90757c253
  7 36a0b443-d614-7466-bc2e-9f9fa9f0323a
  8 f22f8c22-2a66-7794-9ffe-b9d4f2c3f76a
  9 a0198e74-e55e-1d6d-86d0-46ca797bef11
 10 3739b14f-44d5-1734-8309-b05bc678ffb6
 11 734d8fa3-c643-8c92-8768-bbd3f6746847
 12 05c5559a-0aec-1839-a75c-a88753eb2ff5
 13 995b6985-0cf0-70d2-a916-08dd2c3d9b21
 14 0c0459eb-43fe-5e03-b3d0-506e6426e260
 15 6790ecab-08fa-3df0-8329-7ea34d3bb013
 16 6f75396e-6f7a-34de-9b2a-ec50ad5d28b2
 17 3e3b557e-11d5-7bd6-b4ba-0ab8eae7bcc9
 18 209d6084-19d6-2449-83a4-5a98028b86d0
 19 815ec55e-6b0c-4669-a51d-e430cf529fe1
 20 4759db3f-d626-8440-b6a3-b87839136b67
 21 62c56c54-1202-2c02-ab6e-49618c18bd97
 22 e3bba693-bb15-6147-ba58-34c8bdaf8390
 23 d0321651-7a83-5e12-b455-459831c4860d
 24 0cfb9a7e-0f5e-07da-83ae-2a15884d2773
 25 6dce2bba-559a-3f05-9147-eafef7aec975
 26 0b048277-cb6c-5cbe-9032-baba6bbb6a7f
 27 ca4111d1-c901-54a3-9549-ab15363eb84c
 28 47b027d0-c239-7085-8fa5-b813eaf6eb36
 29 3714c9bb-ee5f-1288-a527-33554c02407e
 30 3913346e-d263-0bc4-9565-059449d20176
 31 0f2ae072-5fb9-1172-93d6-e95cd71370da
 32 0915a697-8b23-7308-b058-c19046918392

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 36838777118175337248265035571017. Exactly this sequence comes out of new Random(252).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 239 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs