A858DE45F56D9BC9 archive

201305150059 1ed6l4

explained decrypted filler

seed 673

Metadata

Post ID
1ed6l4
Title
201305150059 → 2013-05-15 00:59 on A858's clock
Posted (UTC)
2013-05-15 05:00:00
Timezone
UTC−4 · title 00:59 against posted 05:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
40
Filler GUID seed
new Random(673).Next(9) ✓ verified
Run
1ec2zo (short)
Draw
4 (assumed: numbered from the first post)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: namerun: short

From the post to its content

As posted (encrypted)

3DA5BD2C6686E112 0E82221FBA9290D7 947CB43DDE5DCE96 FA8272C0448953F1 7B4237A6D63C1643 3724EA5638DA1AAF 858E5E7058410211 4F0B0BC70910640F 9A779F672984FFC0 4604063E778E0888 0AB9BA60FB12797A 9AE828FF0BFC2276 FB7BCE7FF8F9CFC1 308C9C9E3FC2DEAA 7509A96ABB2D4FEE 4348273540ABB5A4 79854E712769F763 E7F1118451D2A236 FB37113CAD220DF6 D0CE1AE1991A3F36 25D1C6A2BEA8F3C0 EAC6D6AC29318962 08583CD669370680 F041F50CB1151CB0 CA6C5BC0C4DF7B28 2D42429E8D3D64FD 43A07104E1258AC0 318B47671E89B11A CBFBF5AE12984B44 179CED36905DE9AB 4CC253DC20BC6A1E 7BFDD7AF09D88988 B4BB739CDE730458 DFC0E2644CAF4948 933F2B331475722E 09C158069DE24387 C5B420737F5F7560 D796F3998DC7D0C9 2A911843E6261FB1 9E31B8C6FEA68473 592C248EB52D93F7 B889CBB7204C9037 729BF57BB2753339 16E8C2FE6FEBEF36 188F0AAB5E112602 AE95A2CCBF3F9BC6 758518A2F3D37AF6 168F277E2D9E4FFE EC366313D01D5589 0ED71E176AA1D75D 3BB1739504A1FAE2 69B1B837D3C393AC 6DE4307F9056A5D2 74CBB91446B9F06C D8E422FF9DCD6F9D 8AC866B249B63F9E 6371B66F3BAEC9B0 CDD24A02FF33D546 3DA3AA1AD2E39491 5D1E0E0CF2E06B8F BE647B3250B23721 EBDE2190F9213DCC 690C70504813C7FB B9F4E0A9C4AE80B9 D1EFBC2566B4C550 288789302D6CF19B FE38D88D0A816CFE 2F0595DB89322B8D 2035FEB7E8A110A4 55344437FA90012C D2D9FDA3D0C90FAC 0F8E4F36049DD73A FBB4E3A59736DB74 160D0A32710BFCFF 54385A84C442ADE4 E9E9292DE7CE6E0A 29AB53B48F9EC0D8 AB2D1298E746A201 AB439EDCF1BFBCD9 B4A939AD19EC1269 DBDD66DED24640E0 8D458F7C9B3EEE37 1E2F1C34D256DD6F 6B913276933EC512 B0FB22FF7751453E 570886D9186D6E65 A55FB41516B6E3F2 941A8B5C63F296A4 CB4EF898A18E185A 9468C338FF21DE21 DC3329ADFAB3326B 48F96D460AEBD43F 7E0B1B1DF89DB9CF 233CA3691102BD49 084F72FF355BA217 6069152ADF171362 5E7DE81FB511B8B6 A9A3FE0223D6AA82 2F4129E9B4600842 9461C012C1DA9CE4 F3AB1AF2963CE703 466CACBFCA406106 690076A4CCD79548 3B9D1D354C5C78F9 1142CEADFD1A17B9 304ECBC40279300F 9BC2BF497B216787 43399AA9CCEE6854 B60E6FE3A042D282 480ADB5195DBED80 8CDF03E34D37D7DC C354AB7CEB699BEA 7DF3817C99E62743 E963EA0585FF14DC 7071721D121BDC61 7392C2938E233144 28BE4D8E88BB70C9 518EA49DE7DF9197 D2E8001D95B09988 425571716DD20AD2 9B5160B8A9B26A47 406E4D7F8EE53453 CF13F47169567C8B 4BED5212D302C5AE 077AC8D9E46E67D3 D6700461032D2B42 AF6ABF57319BB161 4DBCA4DAD51ADA76 3F48372CA8544B68 A2BC25BE86BE72F7 8A76CF57D4DC1F21 47C2DCAFD3922740 F47C3B29922CDF06 34D22A787F22A4D5 CC4986A9FD5569F8 E22827A1B979569A 57CEB0C2CEC0E6A9 14EE17B3A10A5441 2F931971CC5CC6E4 B1276E71F8D3D406 82E5F2A13EB7FC09 BEBFF7F9FA80D7CF 1DC2CFD127973E86 B21B8EB3250F6D9D 66F3F514B2EEA32C 5CA1EFE81CE52BA3 501BB97FE6C76948 8F7A20ACFF47C0AB 930FB7B7BCAF3897 1F5FDA963264A19D 5FB577CB34F71653 97E954D068AFADA7 28B343AA61A07E2B 5BFC9BCD0AAA8C5C A369CFA702EFB0A7 16828139FEFAD872 2DE0DB4FF871831C C997A9729543215C 0E26D232252375CC 95BF97583F8F66E1 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 49c2c8b5-02dc-2c6b-8cc9-db3ad12ad407
  2 df59d3d0-4bc2-2b44-a787-6a534fc10e55
  3 b64eea99-0e66-154a-9ca8-4228150bf8ad
  4 a51cd055-9db2-131e-9396-92f71d151c34
  5 a8ec42fb-d910-08b3-a3c8-57956160eeda
  6 89409dd7-5bda-6604-89e8-dc8ea4ea763d
  7 8d4a70e2-1a5e-4a4a-bcd3-990b37291bae
  8 2ec5b1e7-c946-0bb1-8de0-66dc4d4e8684
  9 613baa1c-bf3f-2d36-8fe6-546aa651e9c7
 10 34c362fb-9637-332d-9f64-ab39d2fb9770
 11 f1f0393e-af72-15ff-ab71-2f1d31d797a2
 12 839bd768-f517-700d-955a-0fc5f17bc312
 13 abe87c51-ff55-2b1f-998b-2e02d4194ea9
 14 09bfb4b5-dccc-5375-9086-d7d1db382bc2
 15 2a17ba91-12fb-069d-9858-aaee11d9e4e2
 16 6619d6a0-9cc7-217e-9d58-891ea11cb35a
 17 3b993a5f-ec06-654c-978d-a9c2cf09b33a
 18 4791308e-feeb-2fa5-87f2-43c1ee2f587c
 19 00889e48-f7a8-81ab-be35-f5ec2214fa0c
 20 69e8829d-656e-872a-95c4-32fba6e027e8
 21 c5de8213-d2ff-2bca-a087-227601cdf10d
 22 d3f0b1c8-66a7-866a-aa11-62e7a424d620
 23 d7f0908b-3683-62b5-afbb-c7db980d3f54
 24 50fa29aa-8d28-1b8b-a669-328855a827c3
 25 eb3ee8f3-b166-5612-8ca2-5ac05785119f
 26 c12af286-daf9-3833-be6d-d2ad775a1163
 27 a863dbb0-ce3f-588f-a231-1c0cc550931d
 28 c08e07ae-3f95-69ee-bf70-c454aa533505
 29 494b0fa7-030c-30e3-bf26-92a383be908f
 30 f1bc62a1-51a2-062d-a770-85207bf56aa0
 31 1947ec65-2002-55e6-a34f-1e7dc3da71ec
 32 5e8c63c5-4253-643f-92e9-1fcc23d86797
 33 f3a4d7a2-92b9-8a3d-aacf-2a4b5adaed62
 34 ed7361b1-a6bd-775a-94e4-59dd423f8569
 35 57e67e29-e0b0-5686-841b-d7271a3966d3
 36 c2e34e72-d099-84be-b1ea-543b98faffa3
 37 abacc559-758c-4349-a0eb-0334129330c0
 38 5179e037-9b33-0bfc-94b3-9f8c8eec2bf7
 39 375f06b9-b6ad-5ba3-ba17-2bc4ad8b0a8e
 40 c150cc8d-a182-07de-bfa5-9ee6af49a15a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2211064023172502628828615356305687584050. Exactly this sequence comes out of new Random(673).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. Grouped in 1ec2zo: range-8 piece (5 posts, 15 bits): undecidable even with an exact boot
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs