A858DE45F56D9BC9 archive

201303281159 1b5gyp

explained decrypted filler

seed 961

Metadata

Post ID
1b5gyp
Title
201303281159 → 2013-03-28 11:59 on A858's clock
Posted (UTC)
2013-03-28 02:00:00
Timezone
UTC+10 · title 11:59 against posted 02:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303281159) = cfa793a8b58bb05fbe824f0ab56a59d5 (name+title)
GUIDs
40
Filler GUID seed
new Random(961).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
28 · predicted N = 40 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

014FADA136AEED4F 0EEE51BBD85E9665 C6D0DB60C4498BF2 6DCA4229E1948733 5B40862840AEDFFE 1F65642392C7C1D7 68C6BD7178EC9AAB 8A5133F87D2AA346 B832CA7CBF687AFB 0E78F636A0C99923 07879B6E60DDBF93 1588479661748B92 E0C907328A6E7E71 F55B170AA15D22FF 85E0B7B26D877F89 79E8EC3829706079 63D175ED42F84C0E 23228031E698A8F4 6326A5301C0C95B6 20173070B236778B 286FDD959A2B1A2D 8D6AD54F0741E90F 6EA0CB757F48867E 17D0CC4B03E2649B D118F6E0FC3A3FE2 BDB50921988D1701 950FFE6A0B60E33A 607C41958DF56A64 C6795B9E5DA6F66F DE9EA0348EC6A2CA D1FD938F130FDAD2 6296543A9BB64769 4E533E5E22FEE817 23A311A36050EDC8 BE9598250BC39544 F0BBD3E0335A9F24 16DE9FE328D75C83 3EE9E8E496384905 688B2BA3D90DACF7 DFF60B943BE025DD 154CFECA58412A3F 782C4D2D39CE740C B6F28C8A609166F6 B97D156717D8696A FA06C6B34A7646F1 F85E06AC77E5ABB4 23603C88C5D3DD10 61A64A16DAE0FA96 EC9C03BA771CB3E1 348F323908AC2975 E8586413F9F6CD28 EDC247BA8AD8F426 8FC592B8BFAD5313 15A55EF6EB40AA5B 8CC805604D508B2E 31A8BEEBE678C8FE 95C720C40FD1DDF1 71819B2E746ABA0E 50D7690CF112A864 B22AD9ABF1469F1A 1412D4AA6978F61E 81B79DB9EAB8CF3D A48AA33BA073EF83 D3E5301D81A68747 64871C1B2854279D D3F188A297E85C50 4EBFC48B7E079614 B9413058F369EABB FDAF71443FEEFF60 1DDE7E5386299109 B55230FBEBFCD513 7A3FFA2425D14C9A DCBBB38376F1A868 95EF2EFAAC543382 FB77663BA7D29584 2D2ECAEDC7A28A7D 42F124D0C90750B5 4EC680BD60A3B85D 224A39CB18441EAF E3809FCC12558CBF D1F6761592A41C76 300BDAA66EB53044 3824747EB35220AA 4B9F7952E2E8398B 5BF42351066707CE CC11B5F28A14884C 168D0F09D88F0E0C FB2B7DC0FB7E0720 87590CEC8F0B8924 1D26A6825D5E661D 695ACCC70B03092C 46704245512B6FA2 F1273142FE901EEC E27FDA4A75B55243 E77F03A1F6B9DFDF C4D33155DB3A6AB0 76732907E241947F 341DF3A33EC80E50 B9AE665BA87EE3CB 14B66825544FAC10 5A487C41586FA197 929C17412B4C9B41 F2BAF20092E44C07 F7B430A26C5F4D3E 5E48267EC00FF9BA FC5E1CF362DAB9A9 7298C5E2F723A16B 4468B4EBB6144DA6 92D4D1F61134DCCA 9D8474C091C99B12 476DF88B9EEC7450 CA6DE5960ACCAFF1 4342FBD3DE5C5744 237C0D7524E1CE4E 4D98E250D9E0F210 ABFA68E2784BCAFA 33220ABF2D290448 E9F0CFDF95B2821F 5FB7752221FD8F39 4FD07CA27D8FA3F6 29A7BB550A0C55CF 5D0F06741BEA4F87 2A1B5D72F4ED559A F7204547EDBD0BF3 0CCEB1E87E6AA4B4 C873A6A41B35831D C4ADF755AFF6940E 6F54F2E9366CEDD2 C691AA24E95F022E F7D1FA7BA8527330 C0D56D57BA0BF71F 38950C67AF8CE010 9D3CA0D46DB1AB0D DEA776B2431DD0E9 05F1915D7D11430E E90E527344527998 796CDF7624B52E15 64A64F14C8DA8485 5B9D4AE0614E9C9B 0EEC3901C48AA94F A88C66A1D037D009 29B9A279B568F328 E4B4C57793D70B07 5BA454B78DE238AA C5DB2A5656EEAAD0 2B0DFC7AD614D10F 4612BA1A83D772B2 E1E8879067C427EA 7FAED8BAF13D461F E1A0969352411593 705601D847E4D01B BEF1730CC003B362 7D22FE358C1CFAB7 F33033AA1CF1F987 387FC739EFC6E676 DD70F7E729F51434 60937175077C0E9A 3D10F70D030949AD A09FD2C79AE811C0 89EC1F219B06AB9E 388B524D47B682FE
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303281159 (name+title). Key = MD5(password) = cfa793a8b58bb05fbe824f0ab56a59d5, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 21413191-4387-6dca-93f5-84af91874049
  2 838e40a1-6c69-7fa1-b4be-57804e32123d
  3 0916ac3f-50d5-4710-bff2-10bedbb493d9
  4 35aea17b-8667-6912-93e0-c0fbf7a3de78
  5 85d0c047-bd92-0c1e-a8b9-258c5fccb01a
  6 0e0629a3-d955-33ca-9605-33b8c73b97c0
  7 e2390881-fd79-468e-8b85-1d681fe58d25
  8 f772a07f-d083-5f5b-a45c-6d9b614450e4
  9 85c9d068-d5f7-7059-bbcd-ab0c743b2cee
 10 bccd0db3-c55b-5053-9e76-a91229a96599
 11 b15f5561-7a58-21b5-a103-94bd42b04b06
 12 65573739-9602-6fe1-ba3f-df19563dadef
 13 1833f72c-6a03-28b4-919f-50775e45124a
 14 22abf79f-89c4-35eb-8e7f-c658b65dbc10
 15 bdab5bdc-62d3-59a9-ad3f-8d1d52750926
 16 f91183e7-f089-106b-a2ae-8615e52ec5d6
 17 84598ac8-f82a-7b80-b32e-b70142dbeb23
 18 8168fb5e-14d5-7652-9ef5-36faac59b0cc
 19 1adeff01-7e86-61e1-a0cd-14d9515cbf2a
 20 d5e4525e-d551-3d6b-b04c-3bdd305e0e47
 21 842127bc-9cc9-4026-bef2-53ce6ddac18f
 22 b6575227-de59-5334-a048-4aa712c859fa
 23 a5e678c3-99a9-3ee7-bfe3-ab31649fcff5
 24 bb649b73-3df5-6553-9c49-7035e2b0d55e
 25 b58ed489-b725-7afd-a040-6536cdcf954e
 26 337013f5-59c3-5368-8d25-03811a533f59
 27 f54efd2d-b42d-1ec0-8052-0a9c8e9b0a70
 28 88db1b93-b4cc-1086-abcd-ed1cdb86b0f4
 29 3826ecf6-3870-862c-84f1-9952f2803510
 30 0f090f61-d99a-0302-a8cb-abac16b9ce14
 31 ba7c367a-fb71-8ab6-9484-1975f346b8e1
 32 1ea2cf17-7186-5433-98bb-ea163cb758d9
 33 9aecafef-511a-641b-af13-8bbe1cfbccba
 34 9d52a151-4030-0af8-bf0b-0231fa818785
 35 fb1d6a5f-78da-1bfd-a23b-4da9c8941a81
 36 bcfb4eaa-223d-36fa-ba0a-690fa86c28ed
 37 bd37100c-a302-0336-a3fc-eb57e5739af6
 38 292a2431-b7a5-2ee6-b152-c92a88f84edd
 39 02dfbf27-4159-831b-b8e8-d0d4bed59cdd
 40 af9091fa-7ef3-529a-a45c-1e3c01ac7d68

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6746034575262351776345367511808560130285. Exactly this sequence comes out of new Random(961).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 28 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs