A858DE45F56D9BC9 archive

201304191037 1cof5w

explained decrypted filler

seed 831

Metadata

Post ID
1cof5w
Title
201304191037 → 2013-04-19 10:37 on A858's clock
Posted (UTC)
2013-04-19 14:37:50
Timezone
UTC−4 · title 10:37 against posted 14:37 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304191037) = 9ba84cafc5a57ff0dfe9645b254111ce (name+title)
GUIDs
36
Filler GUID seed
new Random(831).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
47 · predicted N = 36 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

445526726FCB4393 8C51757B9AA05637 FD5888C0CE915FCE ED31E89C308205E3 6660A78D425E8A4E 87FE8F9C8B5C80AB BD28E23626964A36 57F0F83A36280223 FBC560717379CD27 224A42CA6CD1140D 820602B9A42C8D66 01E97BF5CC7A1CC8 13084C8D7F2451CE 4B309F117EE0BC47 395CAD5C4B9CDA10 C183E5CE7B400AA9 FBB8AE0110326401 5F48B6ED1F36EDB7 A20E0BC51C4F9A07 059564E3F89F664D 13EF1ADA21FFFBA3 157CE6DC9D2885CE 9CAFB9A033E65B0F DE612C3C69B39298 72C82684E7527864 7E89DDCBA2769462 2501DDEC0FE27FEF D97DBDC953DF7290 5CFFE6F1D3BCB001 417C1161748BF6FC CDC9B2921F864AD6 C8A6034F3AEE8419 372E5CCF006CF9A5 3E0E6ADAAA2C66FE 27319F6864DD1415 95201DF712270BB3 19456813BEE109E4 AA2BF064630C2C4D 63E930421AE3720B 63ADA49AEE183302 7189B14DACA8EE05 650AA915299527D2 E717F582C4239773 8BC6FFF57508FE42 03ED368ABA531780 A6AFEE22D82A22D2 8ACD28C733244112 004DE87628FF72B5 9A4353F4B2AAF60D F8EB35740E06B398 57D974B70D7B78B0 B6DA1448B1005A87 1992EE2F83FCB293 6689167C47D29C11 A5F765FF2F66281E C65C3F6493D099DD 772CA68E94BF2544 425CD77D8C682D1D 04A7AD96F39FD6B7 BDB7A4481912B8CC 197A6BAB641E795A C3F7FBDB1946A19A 9E49BBB85428D771 EDB6DDCD02856316 C777BC5A76218567 0569EF3F8D43BFE2 161F4D78B90C960A 19C5C1FDE9139975 1A7B01D5AA71809C 0E139D4BCABE65E9 A4266457F585415F FE67E88997E3F6A7 13DE4BDC73917149 165B0F3993108CE7 49AC8BDD55D11E6B 9EAF2D036D0E69BD 0CFD283FD3D5592B 333F4E4659C665B3 A207C33045FC1DCA FF39DDD509347252 50C97F4E89724D7D 111890DE76EB34EA EA0FB94FF35BDB2C 992E9EE6F8AA6B49 950730CFF7F60E80 5DFB81CB59218A68 86E8284F62B39DCB 81693510691EBF7D 597BAC26256AF07A 2A1600FB1D363ED1 48486E96BEECF4C2 7A370C2A63CE0732 72915441B871D752 C0DDDAA14C2286B0 B79627E5B271DEE7 E3531F2EFD4A0727 040E91A9C507A5B9 3609586461ED718D 94BAC6ECA42A6412 1BAD2AFC302BB4AB 564867893C0F7CDA 5CCE97E06AD24346 F3E7558885846967 0682038635DA96CC 0F180343077AEB51 64D0B8353A812801 22D72F5483B9443C 3AACF5FF924BFBD8 86B61A2FA1F3124E 3AB4507287F2CCD3 0EF8615B9262DFE5 D6F77510FD95A546 5D5AA03B48A0DDA6 9AF5EC8614D7A73F 9A5AD57EF80EAAB3 BA1E04DA243FF87D 83152FCF8B79EA24 E5257F515F8BB7EB 311B3D7328FF3770 23180B165F5E032F EB9EB47B6D88D346 9DBDD86A21D150B2 27AB3D9ECA17E3EC F9A897FD51D71B08 4A485B4E4E6DF78E 6A0DE5ACA7AA06CD BE3732DF3A8088BA 4E46F62D089DE7F6 D41630BE95F39E9C 802764DB42081488 96545E537148DBBF 38C47B994BCCBACA 5B0A739ADF3F91CA 790277D673F5745B 2FCC5C78F1383380 43B3A04BB8F428B2 01830EE10250E4E0 A6E1F50BB21E6982 C03B2A4DCF7C1C2E B6D4BF93E9038E06 B9208E2FC2B2C994 EC23C756FCC7BA67 024B6BBAF0BA6798 7CD23D9E570A7433 8371B6B01E81BCA6
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304191037 (name+title). Key = MD5(password) = 9ba84cafc5a57ff0dfe9645b254111ce, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 30cc234f-71fc-7b53-b36a-d7738b3da159
  2 664bfc52-b3bc-5cb3-9b3a-24af4016cfa4
  3 24126175-d7e3-5038-ab24-c741b1c78895
  4 dd1ce7b5-44f2-850c-b916-b9f97a563dd7
  5 5675411a-6aac-3672-a851-25aaf2ea584e
  6 41230a6b-7837-6bdb-836d-51a04094069d
  7 e9955843-8e7b-2c5e-bcf8-8ce75db18b7f
  8 c1283ec3-3bde-31c7-b79b-c3d6690e285f
  9 ccfad722-3464-7de8-acb9-217c4e86d0b8
 10 b316dda9-d214-6a8f-bdad-822986745418
 11 89e14fcb-5a1b-4687-af04-96971052d13c
 12 445525d7-9707-2b52-8c2e-fef6cfbda231
 13 d7a2a186-899c-846e-9503-bba74927b377
 14 a00141f0-958f-7570-a0d1-831531ee953b
 15 55f8803d-2221-5b87-a161-c8b1e2a64203
 16 533bf29a-74ba-0f8b-8116-b1caffa92fe0
 17 df947d86-a0ba-1e73-a7fc-e5adc6a73117
 18 f9a30ca7-4099-10bb-a374-c13ceb41628f
 19 87bb2774-f060-10bf-9efd-9a7ef6010605
 20 af36229a-3b72-0341-95fd-d544915d20ae
 21 359fa532-9d59-2d3e-a824-3b64f3b3e35e
 22 c1b42d35-ff0f-6c5c-b581-0cf5365a9ff3
 23 97ba1797-17f1-334c-bc61-464451fbbf43
 24 f35798ec-8c9d-389e-91f3-e79ca5a2931a
 25 cea516a3-62c6-103e-95aa-188685d72671
 26 af2dfbe8-e5e2-0ba5-b1f0-744ddb6f614f
 27 0699c88c-5c71-3772-b221-c52c8d857eb6
 28 785c195a-e27e-50ef-9b11-8b5fc37bc0cd
 29 79e1fa1d-74f4-052b-9753-57dbca5bc6f5
 30 3d3c2875-b229-3c58-ae8c-d692c177332b
 31 49963358-5f20-8c7e-ace8-1b4ff4310401
 32 9841f54a-175d-32fc-97a6-29a1f75df0ea
 33 4ef206e0-3b1d-4086-87b4-7faeacb15d3f
 34 8cce013e-c3cd-7cbb-b78c-3c4c993e2e47
 35 fb157d68-ad7f-7ef5-9ec0-b2a692454abd
 36 bde90397-c53c-6cc4-8a86-19231a99f285

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 755836237642875011102633103503834776. Exactly this sequence comes out of new Random(831).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 47 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs