A858DE45F56D9BC9 archive

201303280059 1b42c5

explained decrypted filler

seed 607

Metadata

Post ID
1b42c5
Title
201303280059 → 2013-03-28 00:59 on A858's clock
Posted (UTC)
2013-03-27 14:59:55
Timezone
UTC+10 · title 00:59 against posted 14:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303280059) = b036b3fe2d7c4bc794e08d1101c300eb (name+title)
GUIDs
32
Filler GUID seed
new Random(607).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
24 · predicted N = 32 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
10 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

9C0FCBE688E9A1C9 30AEFAF255F996FE F3CD44D2D5E32977 3B3B925AD2D07A1B 85FC9219C99DEDBF 55EA4BADD7639869 0A209AB11232DE2A 88F47FC83BBF10F2 59272F2E61F64B28 B4000D012EBCF815 117F4F7035683D75 74586965B4DC71EC 8E49A9D120A97CC7 F62CC731E463E8D7 F39D52D73A7F2661 E726AC06924177F4 C7BDAF5A81289089 BFFD723D2BAF6C00 D985352B40569024 3CBC9135261380E8 D2AE6FCE5D653A56 7B6BF3AE8F44E962 2D615C4EE5A8351C 4A0325DC01D74F7D A1EB851EA1683EF7 32DDA7414C2D8CD2 DCA9F7DEA2B07230 A113D60E6E5589AC 917DBDEC10B8D825 FF36728ACCEB5123 4EAC434037B9AA29 A37A74209F8472FA DA7B20CA9994BC7D 6B8CEC8B003C1829 38B3501AE3F0856C 36F1AE0D31D0C2F7 0FD5BE1152ADEC07 6197C72D333B426C A66E253C5FC22ADD 021BB647B99C4393 B3C45192E53A750D 59C8BF3D552BCA57 B887090C56D7418D 160279021BE35CF3 491905F70474A978 AF308B69287924C8 8F520E5FCD4ADB05 8CCBA5D834C46D84 57AEE07F19DD3012 FF282E5954EDBB83 1DBE0A27A981CC09 5C97F08D1C411E51 CEF15CC671D87465 EEC7FBDBEFD4D09D 0C0988675D2D2A45 61669F8747451924 8A216142949784D7 1AD44870B7EF55E6 49E8C8B3DF3B4BEC BD68E89C2A94CD41 B2313D02B3B46BE3 171B61169C7E9BBA DB8371887CC69BCD F7C25B9819153818 EC0E6E13595E4677 6CA5FCB2438B71A3 5BB7BA5E706BD4CB AE53C7DC474C59E4 6822B67C24CAB788 9A35E979B474C7D4 EAD8075B28C40EC4 009F7425C6CE547C 67157F842B743068 1786F07B2FE90519 89858C908054B65F 36C5122A1D54D55B 991BA9DA5C437CA2 08D4F653DD614BCF 9CC0DC1FD70BC209 CC5A4F927C4985DC 082F162DFD5FA659 0FC6EAC1553875B5 B00A2EEF91CF4065 EDED4211E32CA4C6 882147935ED64325 BFCDB07DEE7F6831 83D6C42D0A9AA3E4 979B1369B591B0E7 7083A62C90AEAE07 37B033AE9764CE2D B06C4B188E51DC8B 27D960ABEFB47E76 C2D9CF9DA8FE9B07 7E7F95C4F4239E00 21C76E1A07BD56EF 6B42A49875EBAFC2 4B1427E978DEEA91 35460C817E18DCDC 5D25D78DEC4F3087 E168794D4A8ED383 F3CD27FB9C0D2479 B50EB2872EC57731 64A15E73B7892B3A 6CEF2DC0B75AB696 4639CB698C159057 AC01DA74931D5D47 7CC2437BA9180EFF 231E2AD8FDB0131D A249618599EF41F0 D34EC15A29447A29 5B4B21090BB53F4E 4708984868A2D8AC D1EAC836CB68E900 B62B0A764BDB12A6 831D5ADD12D0728A 76C97FC017636674 B189973635D2117E AA61E7ED24945FC7 B0AEE354A790BE5A 6FD8E17B746B44DC 8F632A396A8A0832 1DD518FD0092D472 EAFE05AEFDAEA3C1 1F49A8406C566E78 54E3979C78A5AFB3 8787B632EFD1A8F9 810146E5EF22A301 369A8AA54234AC90 A02645A79BC88A52
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303280059 (name+title). Key = MD5(password) = b036b3fe2d7c4bc794e08d1101c300eb, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e909dae8-564d-78d8-a879-46f297ef0d3e
  2 ad415c68-8c77-83f7-9042-29c0a8b4f138
  3 8b03bc80-f53a-038b-b108-54188d0d66c8
  4 10e2b4ab-c098-110b-8a41-ebd2df304a68
  5 41ffc26c-7f34-2275-b6b0-c2066108def4
  6 49701176-ffa1-05ab-bed7-ba19c7beec75
  7 f5f2682f-f9fb-7b24-9237-e2e8627bc74a
  8 d7483ced-1176-8f58-acbe-eb054e349197
  9 9c21e464-c5ac-0343-8242-98f915cf3058
 10 ba7079f9-6965-0777-9382-9ed5f06421fb
 11 38507e6a-319a-4977-ab07-37277efd74e4
 12 dbcf7cab-7ffa-3746-ac2c-411be16164fc
 13 d3571c26-e956-8e62-8828-e3911116605b
 14 2ae41532-b12e-2983-98ff-c5fd8cc93993
 15 ddf273f5-3933-7c87-a72f-5ee6e4c05d52
 16 e6e91853-8867-1d99-bbe6-0a029cade2c7
 17 2ee9a719-798e-0c2d-8615-635c21055f78
 18 79529e67-f56c-3fe1-99b5-541636fdea8d
 19 3641e1b1-5096-0799-9b3e-8ea14a3581d1
 20 ce63efe6-2c19-3ab4-bd7f-6e57634b7736
 21 589b90c0-cdaf-4ace-9e9c-6d1a718dc36b
 22 23f55b7c-0cdd-6224-bd33-12c214b902de
 23 6b218fda-33cd-5523-ae7a-95981ea04eff
 24 04fcb54e-7997-07cf-8ab2-ea0de6059917
 25 6cb7fcfd-817e-1ecd-b9f1-e7754a364e06
 26 b7688f2e-0dc4-8278-bd50-8d1314650bac
 27 839306aa-ec2c-7373-a818-fad1605abeb4
 28 cf1faf4d-a02b-7ad8-ab72-49f6d47d9242
 29 611109c7-ff7f-168e-ab62-08828c72e501
 30 869675d0-d5b5-8899-874d-39111790733e
 31 8204d2f0-f2f9-2a14-b07a-8257c13e8605
 32 96f81d65-5617-38c9-9153-877d664b4fd3

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 78012078004382710303465018771823. Exactly this sequence comes out of new Random(607).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 24 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs