A858DE45F56D9BC9 archive

201304131449 1ca5k6

explained decrypted filler

seed 654

Metadata

Post ID
1ca5k6
Title
201304131449 → 2013-04-13 14:49 on A858's clock
Posted (UTC)
2013-04-13 18:49:58
Timezone
UTC−4 · title 14:49 against posted 18:49 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304131449) = bafbd45f35fa14de2d2f82dcebe4344c (name+title)
GUIDs
40
Filler GUID seed
new Random(654).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
11 · predicted N = 40 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

CC546980CC9B3D40 F408E3B833A26B6A 424E1D5A6C5403CD 2C3B7F814EA8DEC6 E3FD8E9C85DF7EC7 6E98F41A520B4543 FC785AD324F38A4D AB639F12AFE5BEDE 3E9167498EA77630 0B0B54533465A20E 33CC403BAC4633D8 46CEB23F8E005D74 76145B91767548B6 10990D1F4E52D608 D50C7411AD8A206A F7CB9C97E5532519 2ADEBAA827F9293A 2A48A454887D3EE8 6E28ED4416831531 2706DC2BCC26CF96 589ED907A73DD1AB 2BE1D0154BAC93BE 3D638AA0B9E28C3A 4DC62D9603D7A367 4B023887B41483B3 DEDCE9CD6E891223 9DC1506622565E94 7E33503093A3D2A5 D0C7226B9FA76A13 4A9870AB378C9C14 406383936EF58B77 5772B39220BF3A63 74869E8AFBB6AC5A 7BD744F202605CF6 A15DFBFB4E65ECC1 6EB5A3EC4D111BF9 70962BC5815D54FF 7B3D69DC03C1FD20 AF253CECF7DD9469 EDE4748180C0CDB4 9D9ACC557B1A5289 33F299E948B904AA 90E93B0B860B4318 AF15137A213B74FF 2DD1104AC6FDEAB5 C806794831A9CF5D A873B686BA3F4B1E 9D62830B8A482037 3CDC9387341F5939 6754BB5E59FE33BE 7C7E394FB716F1AE 76CDAE4F0BE876B3 7DB0E29BFBF11D5A 23BBF77DFDB84A43 C0839F9846066BC0 729FA1515B8B5736 79A1E234A732C612 FB427A436A83F95F 518DDC5045ECB484 67302343F4E7FB2D 7B755312F29118A9 880CCFF910274EA4 6BD4FF0CB1FDBB0E B52F6BAF296AEF85 C61293424DFBEE7F 2FD84044179810E2 BE5D069D59BCBD08 0A9ED804AC4970FF 8529845707CDC501 EF75A86FC38EB82C 20987B343310069B 8AE897AA6DDD3844 C24F6662427C40CF 7CB693564251FD86 E4751EEFC261C4B1 014A049C21D34361 E9A2F7ED790398F1 D1726639947FE656 64A7E0676039B913 A4CCFFFCAE5886AA D75337DFF61587DA E2353695A2B6B174 3AC58035AAE78931 196C142545DA07AF D463BA2DCE7A1DCC 933F14C426BF8CDE A3BED3DDD4FBCC97 09A7F3415C8E53C4 0A17A3D2A0C84F13 7142F29934BA8ACD 8C69FAB2E5879EFD AA72F5A90108EBCC D3B4C3380858F647 CB09DFE4183D8CAD 99FA60E6CEB98520 9786375BCBF53CFE EBC77D8D00F5C06E 16D9F325F0FF30B8 EED841272DDF80A0 3060C57330E6E0E6 D5F4C0A590F146C3 8D3F27BDD3AA6D24 ECAD2E9AE051E97B 523BBA2513473CC3 6CE84CF82BDD356E 568AF2BF3E52BC60 EF11D75AC570147F A29913D2B080845C EF4CB25F319E0FB0 6E9C4585F41DF5C6 5C2BF186EE8547A7 233E7F2357A75BAA 85D5CD872CAA4C9D F48087A57159AD7D EF6C368366D9E6A9 851BA54A9E69E765 D71A108814CC4982 C6C4699E311FAF27 CF6F49589DCC45F0 30FCDCFFB1994E43 F35EA6349B34DB01 1FCFCA54D1C8DA20 70B08A111644CE37 8F0BA76C21B2C90B E5907D1EE044B159 83C0E11AF97F2FAB 8043E27B1A02B497 1550684BB66D9FEA 413B7BDE2CC0A2A6 D0A9C1394C9420C2 AAA0F3A5477D16C2 23BAE802CFB02073 7AE0E6CB34461415 22A465722FB45054 D4EC9F7D6EBDA50F FA003ED659EA8E1B 9C0787A77A49345F 091E6953192E0080 6805F8AD16AE5250 C658AB508259ECAA FF5CE412A800EC21 0F44F38F5FF37F7B A9F2EC8134BF3902 0D2F579E4E3D0FE2 E247E0DDAB323A1E EFB75948F271A234 2284911C3DA28680 37D705D31B51C371 7E0A45FBBC105EB9 50C2188D225673C6 4F937068752A5A5F 0203F9BC7CA0F59F F9675388740239CD C8F3152E79CDC835 35431CC53D73D67E 3FBC7D9FE2B94B38 3FD846F73EFD69D8 382427EC52AD64F9 E8C43E4461ECBFBD BB489447BF3273E1 E6F5D47DA062CF87
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304131449 (name+title). Key = MD5(password) = bafbd45f35fa14de2d2f82dcebe4344c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6c4d2b7e-4268-363f-8efc-c01687b84f48
  2 36446a49-0830-6413-8084-1630acdcad01
  3 2d0260f4-6d2c-8da8-a0f4-fe942018eebb
  4 06060c15-2ef6-1d00-9926-84f997d0be66
  5 3f259598-6866-4e6a-8796-03dfde5dc1a3
  6 26aa0773-e6d6-0fc4-8d29-142fcbb62160
  7 4e96d08e-dbd0-8d7c-934c-86f887c37457
  8 33237232-7319-407e-9ab2-712f2ecc39e7
  9 c09cde84-f6be-7a78-9917-7f5e9fa5183c
 10 b0e6770e-85f3-3cdf-bd5d-10007bb9513b
 11 3934e597-7392-1685-a0d6-1126f3c24162
 12 fe325602-1b60-05ed-a753-2208d5863d1e
 13 5ce6b9ed-9804-2c92-9c8e-2cfbe06eaabe
 14 474f863e-c1a2-671e-ad26-0f0ab94639f7
 15 1d4baa53-4ad6-6fac-8fc0-843ff5672bbe
 16 26a953d0-7370-407b-b1e8-7d7feeba1067
 17 3502d437-b6d5-6d60-ab4e-f23aadaf0281
 18 2f4815be-93e5-4c48-988b-a160da214b9f
 19 2fb7acb4-de71-3500-8b54-c878cde08f2a
 20 6003fa88-5d75-441e-ac74-16fe4d2fec02
 21 3098b251-575f-6f7a-9723-953f3d69a440
 22 684b7a62-3d95-2db8-aa08-23ee0f05dacb
 23 26b3b42c-73df-4e96-ad81-da40e5043984
 24 9f534cfe-bf71-4904-b4a7-86fcbe2c8347
 25 5eebff98-cefa-702e-8cdb-fb2ad3292524
 26 62fb3a8e-f1c4-1a04-a8aa-5ad1372d6601
 27 b26f6f1e-aa2c-18c9-891b-00bf7453fddf
 28 87874e01-fb3d-8ad6-b349-78b91a714b42
 29 6227d7b4-4fd3-1f79-ba25-ccd733c8c24d
 30 1a85bf75-694e-7590-b14c-a73e5c780756
 31 5f83bfd1-1717-5734-ba0a-440f691837b7
 32 73cb6133-8643-6554-bb39-1a96e0a8b269
 33 c75d519c-193d-2e60-abdd-03fdaedc8e8f
 34 a64deceb-e83c-365e-81dd-ba07d179e107
 35 7636f826-3888-0b3d-9d68-1c793577342b
 36 95b0af46-b908-0fd4-9ab9-e94bfee7f7b6
 37 abea5db1-9644-6eaa-882c-a7b5211cf2ba
 38 bc05de3d-2d22-014d-a6ec-1f7d54355c2c
 39 393f90e8-7719-3fb8-a320-80e3882ae0e6
 40 f3fc931e-1c17-2f89-a3db-4dc619588ed3

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3681408473102664643462447118175623006032. Exactly this sequence comes out of new Random(654).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 11 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs