A858DE45F56D9BC9 archive

201304222010 1cwfhw

explained decrypted filler

seed 879

Metadata

Post ID
1cwfhw
Title
201304222010 → 2013-04-22 20:10 on A858's clock
Posted (UTC)
2013-04-23 00:10:46
Timezone
UTC−4 · title 20:10 against posted 00:10 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304222010) = 9a4ef78cf59e8d5766ea32cfce91f259 (name+title)
GUIDs
36
Filler GUID seed
new Random(879).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
68 · predicted N = 36 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

348268CDA549D33D 1D58EA4C19750CE4 7B40899822EC5057 6132296C7694C8AE C9C35855A8C02351 9DFC1FA0EE79479D 3901FCD85740FFA7 175222868952D412 1FBCBE19268638AB 541ADE11E5B38066 B0557752D0FE796B B3995229D69C168B 45F4A3019E4D7CD8 08882ADFE9DB861B DBCB79016DE00670 129B11FE6A3B5D09 8AEDE45EA281B1A6 1FEE4396A71027B3 49429FA4DBBFCEFB 54EB0501280D05A2 02A0E5D89900B8B3 A81D245E18993A15 F7F4B9C6134EBBC1 B10810153CC530F0 69342F6DF21AEBFB 450585F454E6A854 A645B1126607E811 F42C511D87C3FF1C 716A5FB0FFCE3F92 7C77003A854A8282 2361CF9F783F5170 F216A8017D786762 1A912357CF1A7036 29105D917314417A FB94E5F61EBFA6FC 6BED0298AFAAAAC6 E8A36A465950BDBC 23C27C67D95F769A 86611C3615127B21 94ACD5737B269C28 AE1B094666C2D035 C18F928791FE84C6 2BC76736ACB14DE0 41D6A88A85801994 B578AECCDE090BF1 3C3E41AB95374573 B789C88976BF2B8D AEC56430CFBD8375 CEA07F3928C347AE 53B592FE502FE2EE 5A9F16A25479CF2D A77DF0B6CEB12551 2FCD75B5B8D6CF8E 4BA99167C15B1071 4B28088FCEE8BD8E EB3F694ED0881DD7 7214D37470F3CBAA 5E4F5FA4A2767300 CBA7854FDDE668A7 4D732AE47DE9639E 5606B34EBBD41390 0C0EB4E19DFDB566 E269A104BC6CB3D7 90EA97F7716AC4B8 F7F1309AB4947855 A22053E4656182A9 14FD3C30928CE401 9E53DC53F9100EBB 7702B493DFFF6DF5 F4E1643618BED48D E2B6C5D87A868377 9D6BE388849C8CF6 43DF9828A223E791 ABB33F356866D327 CECA1DB1C7F9CE17 056ECFB7A483BF22 C80FC64690F96558 402CDD6F3E9A8B3D 213AF2BF7A027B09 9B52E8BEC4EB5DCB C52E4F2DA50B1D9E 489B3464ADCCE9AC 36C78241EB3E3EF7 9C52D0D95DB2FFE5 CD4D08EB8ABAB4F4 5CD73B812B895E3A 1CA5CB86E8A75E3F C2E309EFAFAA5BE7 931606842A3B124E 695E5E30F89D6BC2 6BBA0179AC26E0C3 271D1D407E6B3E85 A8F7446E3A51EE40 477E3D4BEEA46F5A 918A41B6304F2A1A 9BC9C173C3D04299 E0D694926449A687 35A48C6FD2C53C6E 4E48A1C491AD7143 E610164FD68ABDFF 654E450DB9119872 FAD3A621F647AAE9 D33414EC0CC0DD72 2A0F3BFCD718B03C 76FA9971CA767AFF 707EC0C398EFA068 43A48D9B00691A2E 181BF56D9D8BB8BB 0EC0CB8FA995983D 8BA349056F90FF1F 4021ACC795BC06B3 0262E82612C7C019 C3808BED495A6098 CC0AD9CE3D2F02DF 26BD15A5E35ACBDE 51562F247A9DC35F 5DFCE046205DBE5C DA960FEE287F5E18 03CF5C176182D06E B931410C9A28DCC2 B89BB5893515E496 1FFE7C15C7E893E9 A895802BB66EAC1B 3890E9E78EB3BF8A F6B4248BC27C1C80 381C599153F53BD0 ED88A7EEE4C16864 C77F3BE2EB0EA325 7D3D1194AD96ADCF 96F7843167D3929E 5883F23A70959B3A A9C10C3DEDB22580 4A89838AF868A90E 76B6009AE075A35A FC83127279117742 7EF31E80679ABBB3 DD1185390CEF7DD7 4E4F706DBCD72D6D 5924C407BE33B556 6DCD235FAE091BA9 31226AE7014CE2B2 606B1972ED59BF70 E5CC023AAF23E698 38480E42BAB97E7E 6ABC2362F07BBE0A
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304222010 (name+title). Key = MD5(password) = 9a4ef78cf59e8d5766ea32cfce91f259, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4008752f-74d9-8949-a224-f3e1dac6b381
  2 bc6c3e0c-a15e-6745-b911-6e9abff63323
  3 ffff189c-4f4a-15b1-bd35-6c567a2d6294
  4 11334daa-1e6d-1aad-badc-12eda138706d
  5 59caf61e-70e3-0798-9b98-29976fdc04d1
  6 c1ca1301-7437-6d4d-9502-383f75b28f96
  7 159c3b4b-7e2d-686a-8e6d-3acde53ccd7e
  8 b7da03de-5225-37db-be02-9043a756d8e0
  9 6c13936c-50a9-677d-80db-a30ff31ad3f0
 10 af5a9742-5403-3e0d-be52-9fb07cfb0e7a
 11 c328f124-be67-7cce-81e2-570d9038005e
 12 837c749a-1776-6e8f-8c06-8f83762ca501
 13 91b47ce1-6665-83e4-8b5e-b226765dcc78
 14 4801de89-90fe-657a-bd2c-a0cf5de6df8f
 15 3ef9b948-f5d2-2aa0-ae92-b6dbcfd41a3b
 16 ef13c310-e28a-8e75-8a62-03d635294c8e
 17 c227193c-da91-37bb-a21a-659f7afff31a
 18 d8508c48-7696-8089-8ae0-3049a27e63d0
 19 d8b31498-91bd-4438-8cb6-923bb56409ae
 20 be8ec535-7c65-6c11-839a-9799eb706fc7
 21 931e07b2-fa2d-5906-930d-a85d21841733
 22 04ef4349-3ee0-4c15-850c-0de6e21696c2
 23 58dbf094-cbc4-4613-961a-686c1c4ed9b1
 24 ba2f5a99-ef9b-0c7c-9ea6-e01cc99da7bf
 25 47d6bf01-5299-7529-8059-147c3aef4536
 26 087fa032-b29f-7de9-99ce-f89f320ae0af
 27 635d3807-c135-6aec-b2a8-c676bae83c61
 28 75291ae1-58c1-2b2b-b9a0-716572d71ee8
 29 23ef0cbb-a492-3cdf-9b30-36e35fb8ac31
 30 81b18072-aae1-8c1d-8d28-a1c4c84a675d
 31 09c947fa-74a4-65f7-bc7b-39ed49876fa1
 32 1eb0da1b-82f4-8ac1-be1c-bcea5013c3dc
 33 a207b1a4-ea33-6ba5-bff6-a0bb4b9b3f80
 34 da03d1cc-dd4c-0330-83e2-164afe35941f
 35 34a602cb-7f10-5467-97e7-38cebd904a82
 36 f12f6019-2e98-7a97-b0ac-0bde34cb72f4

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 861106636376862838465440776238686057. Exactly this sequence comes out of new Random(879).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 68 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs