A858DE45F56D9BC9 archive

201303081814 19xvz4

explained decrypted filler

seed 895

Metadata

Post ID
19xvz4
Title
201303081814 → 2013-03-08 18:14 on A858's clock
Posted (UTC)
2013-03-08 23:14:46
Timezone
UTC−5 · title 18:14 against posted 23:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303081814) = 303d70a14868dc80b75f1a9237db173d (name+title)
GUIDs
32
Filler GUID seed
new Random(895).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
265 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

C63D88470070EDEF 3D89033E7312E3B8 46446DD4534DA611 76612D951A7C101F BAF072049E6D0393 297B1ED0906B7B15 2E334F550BE7A6D8 C82E95D7978B1422 B4D431FE362C59B7 3586C536FAB31626 546A774605B8EE5F 502668B6245A8256 B2A886C693FFFD4C C8B9BAD65D4A2A8D 0C3D6355953C466D 13AA171BB325A410 D308BF48B0271240 9D084561C014F065 679470FE35471B96 E854601CAB7825B3 CD77F974309AE9A0 EDD616C0AF4F6471 91910714D3AEC8F3 77138F9BB9C830DB 8E34EC7C294C4AFA D3204C91F4A23FB2 38263F19DF776453 4D0FC4E6B0AAF075 FBA7A69C2D5ED923 187C78E46B2ACECF 76CFA4F60E9C8BAB BC1CF4DCF9518F1E 1A4818AB7AD90575 F8869BBC86918798 79AD632CBEEBD627 8680B1B320895DBD 9D528323C6CFDCDF BF9E3229E297DF6E 4A8938B07A188768 4F751140F52E1B92 6585701C119C49A2 0FB71D72E1985994 6D6CE8A51B7F4F24 4242055DEF444397 2B22354D0D56F5FB 7D7EDED9FB62B289 C27EB4578780EE78 93AC514369CCD670 40AFD58FDC22E62B EB904E13A51ED84D D04ACCCE28691AB5 35ABFC3CC1460A97 5BC3F3EC61729E38 FC25718183CEDA18 4A80961C374E369E 43BC14084448EC02 6F5F19203A698724 47AC832DEA0BAAF0 50012465620983AF 17194FA1EAB791E0 F1561F764CE60FA4 BAEE9E9248374DDA 5BEF505DF7E1D1AE FA7236543174342E 920EEE92FB208198 DB26BA4329912447 3D51B4F64514D24B 67BBCA94DA91297B 9C34CA77B552777B 875B2C1602BDA438 0EC352A964A0A4C4 860EEBAE75AE12B1 53E483052D348F9E CAE84F9D20011974 D706A56E69EAE9DB F5F67AAE73E47A69 1EA268715485032C 38FBBE0D16969234 ABC2D11A9C73F19E 4BD170C78535506E AA0BA4ACD3732439 91BE1C28E0B32DF8 E7A233B98B854847 95A32A09736E2C19 01AF6F0DAC688FA4 DA180341C7FDF98F C0B2E7BDD520D06D 7D611C34C9D6F8D5 5F563BF32DAA984D 9248711961000EB2 14EA76B59BFD5EFE 3D0770E10699C92E 350451ED3CC80844 3D14ED2935AF58D7 0F42BB62DB6A9094 6471792F4DF44985 9DF3D8B32C3E915E 241670F8CB9CE8EE 7ABEFF70F122821B 3918944F0EB91982 D41CAFB8A6134E83 1327DFCBCD554579 45F47342B6D967E2 302E0442BC78E0D0 E8CF97523716EFC2 ECC0DB8CA070512E 86FE0B7E826D8AF9 57B4D78DE50E192C F67C1AB4CC60AC5D 5E5003DD46D038FF C054030CFA5D00E7 B5B26DD3B823FD6E AE3287AEA54DAD10 CE0F462162751470 4BD3DE05E2DBF868 19A98FAA1913A03C 406C8F4D35B860CC 6AFB494340FFB89E 36E22EA35132E116 FD06028172927455 3CBA4B372142D839 B445C62883CB2BEE 62388D36CC7B3DD2 E3F59168B32132C6 BF481DDAE5B00EAD 7AA992928B1E91A5 F01112077536EBEA 89D50C5170D587DA 2C57ED2DFF412377
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303081814 (name+title). Key = MD5(password) = 303d70a14868dc80b75f1a9237db173d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 99740b9e-40d5-2744-8947-5784c32f1e27
  2 e35d8c38-7fe4-3ebf-a8bb-a1507297ef5d
  3 ccebf638-017b-3f3c-82ad-d5f7972a9f24
  4 184fa6d9-5de3-5032-8663-1361ba5410f3
  5 5af49cba-3268-2502-ae1d-65370b659032
  6 0261c996-df2c-6724-bbfd-5b7d79879abf
  7 54a5c14a-f8f5-89a0-8037-5fb7d35edba0
  8 1e9a1741-fc50-48de-80a3-94f3c90d9471
  9 f3b1e73e-81e2-6d6f-b81c-fb6aeafcea27
 10 466c9cad-1193-28ca-8f77-d572ada60f1a
 11 a94e226e-7e58-5f9c-95e8-e0877f993a82
 12 199d4f71-2afc-148e-93cb-c401a1674ce4
 13 39427494-e271-8b17-9a50-dba10d013518
 14 ccf3ad7b-d725-0c0d-b581-3317ef4e5951
 15 cf791d40-c288-4b6e-af42-f107422d2b91
 16 6c495bf0-9021-8732-a0b6-e20c2c7f6d65
 17 a1178711-f84c-081b-8685-812e64f2b4ab
 18 60200d86-88f0-80e7-ab58-704c65507ff8
 19 a9f1fa86-768b-8ae9-88d7-308b3dc8c839
 20 4f5ea057-c261-75c3-a356-1db27bf7baa9
 21 8ab49d75-c940-6274-b7cf-a573e3c3b65b
 22 9344fc06-a9c5-33f5-831e-79402dcebac8
 23 4699052a-1d10-2fa3-8b22-b88fa0b0c5a6
 24 670c748e-fc53-6eec-87f1-1a5fe14872eb
 25 430b461d-d580-31c4-90c2-43d05c35f29e
 26 348d92c5-3b60-15cc-aae9-9000ce49409e
 27 44f2dcef-6d1b-3660-8993-431e55fb1b5f
 28 e5304176-781d-29f2-b710-d603f0ee4130
 29 79c144de-c12a-6646-a5cf-c38ec020eec0
 30 70d5f5fb-1ea2-7e48-8947-c37282a0bbd7
 31 87b904b4-8d89-5572-b83d-32cf1c6911da
 32 890e584e-905a-13bf-8faa-eeaa570270c8

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 23352684625180480887632631326751. Exactly this sequence comes out of new Random(895).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 265 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs