A858DE45F56D9BC9 archive

201304031213 1bk6rg

explained decrypted filler

seed 817

Metadata

Post ID
1bk6rg
Title
201304031213 → 2013-04-03 12:13 on A858's clock
Posted (UTC)
2013-04-03 02:14:00
Timezone
UTC+10 · title 12:13 against posted 02:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304031213) = 50d5a4be6691c0e4ef7e8c36ec34ab90 (name+title)
GUIDs
40
Filler GUID seed
new Random(817).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
5 · predicted N = 40 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

1EFA1E5015BE4310 653CEBCE12FA8AA9 794314BBD760E69C BDFE13D5219FF9FD D12F604AF306FEBD 11787F16E6855B6F 3BD3615833688F18 38E5CB6D18114ECC 111F5227CCDB4BF4 2A90F45630A56131 83361ACB9B201D3B 7C42AFC9D8870302 337EF4DFBAD1CBDF 927D1BDAAA3AB9B5 C201254DB15D32FF 83667A2E997A440C FBCD3E6A9BE8459F 71330ABB9D8F0375 9B73CBFAB627B8D4 6BD0237F03B30A93 3288BCAFBE1FF0BC 7F7170674244AD19 61816C9491FA01E6 49D9C36FABE95096 523E41BCB11CBD19 B24237F18B0A098E 65851420BF579C5B 966F2A41BFC2949A 3202EB93445BB933 1ABCAD0CFF6BD135 47403C4A79980C20 7065822A53BB52B7 F9D6F4730FF89133 6868A9ED1FBCB233 361F4E76895E07A2 9574FB6DAEF8D09F E110D3E5352033E5 5E5ABF8AF8AD9556 A0B22385389D52B9 49A06D338AC06717 4C129318C5B15E0B 63C204EF4D573728 64213B6E952F876E 36D52B73A16AE659 F950AA282B67289D DD087109D361D357 B9A00D10132942ED 2C0290A5CE5819C4 98F85421647E4249 1B9A3B1DD14C4B4C 887BE217713164C0 4518934FD72D7C18 82CE7F1EAFDEC46C BAED5C35179B43CD DB0CE332DE118F86 FA288D0AF8EF04B1 2C471A8AD72C4890 DA96FFA341276217 AE2144D992534538 58F22C4F68EDAD83 CD771826F15CD0CB 76BB4D01FE48E743 90D84DFF60A4F944 6A4DA84DD9F4E3D1 F9751F1D9B10A23F 4C3E6D558E466525 7B1EECB3E6C3116A 67F1708E1E5E8BFE 3CEE896BFB4F9146 7E10CB7F1AA58805 33ACA72F83E7D77B 223583F92C3FA136 FCABA5CE7079B993 74E13585017E7402 61219EF52BD64A8B E8EB720D3BC6E7B4 71AF407BD223D96E B3C1064684C7E118 BC4F057EBDBCA160 2285C582460789C2 3224EFEE0E29B14D F4277297463412F7 F8B61C64D43B3445 3BBB8B55B07062ED 7722DED03428AEDF 3DCDB08F3335E4BF C2F72D97B90FDDD0 54BB72E133FC1E63 5CCDF5089CA5CB04 D5E3645A16A6DEB1 AF58B04F32080429 F0FCE48E5E7E07CB 9EB9FA649E969407 FA160BE776B096E0 D7E9E551FAD543CE 84FC15A31EF60D4A 7477A82C8800774E E62389BA1C1D29A4 F8BC9C9BC70374AD 0F643A9D973CA3CE 9AD7BE2663A1ECB5 CB047B3925A22957 E3604E498E1F43A3 A809E0CD0A18C1F6 D0151EB9B1B15098 DA651E5849F2B0AF 9B4662D6AD1A85C5 7DBBC4479D984A75 187CC1F239BCA8C6 5B7946EF8E8AEE8F 32F01AA846A2C82F 3EA982E4F4A2366E E60BCFBC3A80A4B9 7A2EA41075F8AEC1 AFD037244A713C8C B2CC13E0FB8C4E70 E1EFD841006CEAEB 5F60DAC0FD7E4C07 A872182961FB40E5 57A97B3C4D27D937 AB5E24B1B3AFAF85 A56A622944326CA5 91769034DB790936 F42B3E9BA5D10755 15FA831B07D6070F FE9A5C312A8E8F11 E15BFC2DC1FF43BE 2CFED3FD1C2A4814 E2A2252200EFAA6F 6553F3001563D6DD DC748DCC3C049B26 875B2824A9F0FB11 AE68E699A59CA9C5 496A7521FC31386B 2EE93AE502A0FE7B 06F7D7908C17782E 8ADA56E19E620D66 09C8D39A22456178 32432DE9F30978F0 4D8BBEA5CBF93BAD D89CB9A3CF064FF4 2D162312E041D389 F37A09FA477A3542 4AE72049B32B5794 C44125DC299FF3FB 0B4D87FFFFDDCD43 C4B42D8353D9DE59 C3CDBB7447B2980B BBF9FC979C9D7D1D ED944982CD601BAF 7E72E2A203ABECA0 19E87194E784B6A0 86F5D4F2162D536A 2EEF9D84A9717497 DAC1EF5A35BB607E 3451390AB70E4E7C 4DE7DA1771CA956C 61B7CB71BF3F9520 5DD451E19610710D 6FE7D65CEA9152D2 7091C0FAAB406027
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304031213 (name+title). Key = MD5(password) = 50d5a4be6691c0e4ef7e8c36ec34ab90, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3bcce38b-52f8-46d6-ac53-13c331be313d
  2 aa119854-5dec-41b8-af1d-8833aaf51925
  3 988960ad-47fe-7431-bdbf-6db3173539a9
  4 c953c5cd-6c7f-8b1d-ad0a-044ea792e199
  5 f5eaa134-188a-08a5-a98c-b6457efd8b62
  6 c99afb6b-cdbc-47c6-8b74-54be0624f903
  7 f07a4354-613d-804b-86bc-1ee8663db704
  8 e4a69dc5-fe35-26c4-babd-6fbcbe3c9cce
  9 c07cda96-dacb-01ba-8298-4738e56cde5c
 10 6c324920-7b0e-484c-9741-acfdb4b86598
 11 14c56400-ad7a-11a9-82bc-fa56a58a0e22
 12 429b8279-ddf8-2cbc-b171-4edada45a8c4
 13 4f1f019c-406f-2633-92c2-54520f851855
 14 d83c0afa-9e18-4b1a-a5a3-db8086f13f64
 15 fed68c24-1e2e-71d7-a0ba-500bfd40cebb
 16 64728210-d28c-2045-ab1a-c9a49bca636b
 17 fecfa3df-895d-27ce-9d09-a5b7cc8ff506
 18 b3302a47-12d3-4d2e-97b3-3eec37e1f586
 19 8e9653be-65d9-7bed-9560-04aef6115b66
 20 5ee421a9-589f-55f5-ba7b-5604c51d1d38
 21 79c0ad1b-d312-32c4-a005-4c4f8d76ee75
 22 5921d2ef-1849-2ea8-a27a-33b39d3ed392
 23 b1043583-5370-002d-a14a-1aca812087ab
 24 2978e1b7-d288-46bc-8b49-4558f83a1a14
 25 0bc3dbec-0cad-6310-b4c2-ea90c32de4f8
 26 7e25799a-9248-0416-a4e7-6a4651b76e9c
 27 241c8e4f-3091-343c-931b-09cc379436e5
 28 2d8785f1-51a2-8f33-9adf-e9a795b41350
 29 dbac8e67-ae53-13a4-b2de-03bace360191
 30 5f7f9a51-f950-0bd9-b2a6-d9e1fdb0b648
 31 156d16a9-eafe-7e9a-aa61-203bbde6176d
 32 4c146508-83c6-54d5-b2e5-95eee36ad4d4
 33 e862a8ed-becc-72cb-a1a9-b5a50d3c5028
 34 a4286075-2dd2-4ab2-8bcf-e294ce09d4b7
 35 77c6ff96-0864-8053-9060-7a98eba1e7bb
 36 43ded406-a673-1087-bde4-c214f7e71e35
 37 f93f894d-3b66-7059-9896-d9de096e4630
 38 8f3b380c-55a1-1ad3-830a-6c81111a930f
 39 39018b8a-fec4-2fe3-bfb0-a309c6a931d5
 40 23ecf27b-d0ac-74fd-a49c-927b2de75ba5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4478048204122472247532046038107574817127. Exactly this sequence comes out of new Random(817).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 5 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs