A858DE45F56D9BC9 archive

201306122059 1g8j1m

explained decrypted filler

seed 386

Metadata

Post ID
1g8j1m
Title
201306122059 → 2013-06-12 20:59 on A858's clock
Posted (UTC)
2013-06-13 00:59:50
Timezone
UTC−4 · title 20:59 against posted 00:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201306122059) = cdd1df96360c799e956376f7b4003ced (name+title)
GUIDs
40
Filler GUID seed
new Random(386).Next(9) ✓ verified
Run
Run 47 (seed 1,776,839,421) (seed)
Draw
17 · predicted N = 40 ✓
Machine boot
2013-05-14 23:26–11:26 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
10 · 3
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

4AEDB08EF063939F 87B020E4D7E49A13 E5ACC123E1C9C772 27B0A72B51DE1513 1129D7A7649B7A76 A34384AFC3C9AAF7 7A77BE4ABCFC50A3 7C7F3753361CE69F A45C520B7711A986 85A71CF6232E25FA DEC7F43BC04DE7F2 B8008C2ED2978A37 C476E5BC712FE62C 1A5C21326B38E74B CF2C291077611C72 B360FE404C6CDDC4 43698D1285804D10 C4CBF1ABDB4F2F1E A12DEAF54139320A AB5528ED4C6E99A1 6F64D78AD48587CB 04AAFD889324A295 113771C3A4BC8255 4EA9735730405DDA A914C3537097051F A232913A56CADE76 AB3542F49D5A2864 1DFC7433295E747E 6C4D0DDE53C0F25E 5736587E0AECAD0A F8B77095480C422D 9E71E3B5674A4F64 AAD6F5782468F088 A146E9D16C588B9A E7E936A7EFE00934 218467AE8E01011D F551756FA432A80E 1E2206C3BA255B81 B27512BBFAF30BF4 3DB543D23DBFA8E4 87279B06C5EC40A1 BE338E67C1D0DE1F C66583D319D1928B CC9DF9AF69F17A6F BD20D302ACF96502 CC0FE91F86954024 6B694C19ED27C6A4 9358D848F68B1107 A920350EB20902B4 56AFB3AB864D5BD5 FF78BAA7B21D08B1 F7B7407651852F75 06C1C068FF5827EC 27532E57F86E42CA 273396DF49BC65B3 B2B4865844241BE9 A610BE3AB4361DC5 BC70EFB681246E9A F3D0372ACBD42B82 599FFB3271A83008 383B305BB21319ED A067FFE89CCC335B F8E41F217603425F E5150E9C01141CAD EA393EE01D4AA6B0 3C118B9CF6E63DDE 32E4C0D7B375A740 F2A13DA6B90B8EA9 FD797A5D5DD9E675 A534CE619CFEB4F8 B542FC7E97E9D49A B5108D2C8B49AAA9 67A76056E7ABBD4D E2E5139C0D9868A8 1A7E4820BAF19B79 DDA87E8AA2BAADC8 ED8BF07062732A57 EE9E111F41F5A981 CC44302C49149E1A 239FF41A59EC7B04 82C9167B894BA536 83561CACF857BCB1 6892AB85B3E19EB1 44301C456EF29508 8AC39652E0E8F3DD DD7A26423744B89A E14990CA1D567630 E16E282DD026D542 F62D6C341CFA2A73 260D8E2B77B7C543 3EF9912C75E89922 4AA6CD55DEFC9F16 269BD882D2C33966 68D3C01429930510 625C7770F5DE9499 B19BD3A1E91287C9 A239D3BCD912948E 22F3FC85419CD145 85EAECFD11816951 46A54014024AEE34 4D395F1F17B4A596 6AB2C79DB17AB46E 3F65A3C6E675003D 0CDE6FBE034E5BD0 46D50C360FA78225 84D33EF6025F0BAB A258463CF54592D4 6C7800B0D137E8E2 52B92EB57FC70168 B31822513EBBF1F0 BC788D5F12597B8A 953DEDED99FEBACB 8C189B1DEA65B38C D5F91B1833517D27 CD81FBF7CC432FD4 B3E7722ACD41DBFC 8F2C3C33B1181782 6060FEE7597B5F28 8D7DBEA92426AE08 5E93E6A044D27EBA 83867A9A61418C04 89D135DB93CAF0F8 6D2018B709F70AD8 FEEC4348E35543BB 29BCB5012849F6FA 4FBEA73AB73339FA 93EA7A705F0A6AE0 1C5711ABC560D213 6318CA192C090DE6 3D8976FD1C437587 D6BB14C68DE3AE08 3D89697A5B466561 9B99522D2D119D12 8CC8795B6BAC1690 524BF57F7A7C4C98 9018D06B24934DC8 87655328BAD838C9 5B351B425676C5B8 C42D6A5F403BDDC6 106E4901CF263395 9309A2C43050F653 0567E12B99E6EFF5 4C8D6BF06ADCF627 611DC52CC4A5601F 26E48FFB1E7AD700 89FD08B2BF79288E 1F491A3A175B6AF4 FB256462B1DEDEEF F138D3ADF979FE40 B28446E6590BF983 79EC67F43D4423A5 AAA00029BC4EDC68 33202C932881FBC6 33734C1942B050AB 93A966D3673519B3 54B21D5D0C952EB9 F7207707D13E21FB 29A2B4A227040FD2 4597B80C10841B53 537869280E0B480A 69BEFFF812C47F23
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201306122059 (name+title). Key = MD5(password) = cdd1df96360c799e956376f7b4003ced, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 687df85c-64cd-3a0b-b6f5-0022b10ed913
  2 86c17052-c8ae-0985-8619-61df24cae713
  3 c9baf413-baa1-5521-aa48-9ca2d724a614
  4 5a35e3de-7289-849e-8378-477cd58e39f6
  5 a9a14f04-b3b7-4c14-8ee2-1b58681f2b26
  6 1a6c475d-e165-745f-a038-9a4fe42cc0bd
  7 2e5eb754-3e05-7c37-9354-30298e08468c
  8 2a9595ec-59dd-0fd0-b2d8-c69e3046c642
  9 398abf50-255f-67a1-ab06-5257a1684df1
 10 25f1f184-5964-58b7-8748-5030cd5d3a5e
 11 0093fbce-d51d-6a8a-9aca-b1ca5524244e
 12 0014c9ed-7802-7136-8aed-762cb2b6cd19
 13 f8de2277-3838-80fa-9444-f7bbfe55126a
 14 b2aa403b-ff96-2c3d-bd09-66c5833c167e
 15 32b99157-f378-1fc1-a3fc-3ce7b64f2e81
 16 fa87641c-39c9-062f-94f8-9e4dd82e4cd9
 17 0295f6b2-4691-11b5-9bbc-6d328ab381fe
 18 c3282452-8f42-224f-b185-6e49a9eb1769
 19 59370160-333d-1d21-8256-7ede604638b1
 20 2b2823d3-c6d6-6daf-bb92-54cca2b98928
 21 9df3b906-785b-0bee-9dc0-fb8cc3808e24
 22 7bbd5e34-73c5-4283-bda2-cbfe51f72572
 23 b79e2a2d-035d-242f-a417-a8347fb29474
 24 4857a89a-0a2e-79b6-b841-0aea04b2403f
 25 ade01162-fd4b-418e-81dd-c44c1ba2f5a5
 26 cc88eb00-1d0d-7721-9b2b-77968057ca6e
 27 d4005e23-470b-71b7-a957-2065e94b25e2
 28 39d8c9f6-99c0-793b-b80a-cd34b9b809b0
 29 a34c4861-1fff-18a4-9d7d-5a906a424bd3
 30 bd44b7d5-6501-862b-bded-55bb279850c4
 31 0ec71b63-82a8-638e-8d2c-740b8121f41d
 32 e859e580-0350-1317-b6c4-4cba15bf0064
 33 a4a7ff36-1ba2-43ad-bb8d-fd661061e1f2
 34 6e8645ff-3984-5e0a-822c-2a96e4f773c3
 35 6a032257-ca43-3a3d-affa-ed0a311e18c0
 36 1853e454-c6f1-482b-b0ed-dfee98581c91
 37 aaaf8c37-6ea8-66e2-97a0-6ba7e51b968d
 38 1ec17c91-ff82-3cb8-9a74-8164330a54c2
 39 4903c135-e809-4aa3-8ec9-dff761551ba7
 40 6d9d8cd7-5180-1813-ac50-3caed3b6f866

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3058477065678210121604274777186145346341. Exactly this sequence comes out of new Random(386).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 17 of Run 47 (seed 1,776,839,421): new Random(1776839421), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-14 23:26–11:26).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs