A858DE45F56D9BC9 archive

201306301759 1hdyod

explained decrypted filler

seed 686

Metadata

Post ID
1hdyod
Title
201306301759 → 2013-06-30 17:59 on A858's clock
Posted (UTC)
2013-06-30 21:59:46
Timezone
UTC−4 · title 17:59 against posted 21:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201306301759) = 67a7db89111966c96d93679e7a9a1364 (name+title)
GUIDs
40
Filler GUID seed
new Random(686).Next(9) ✓ verified
Run
Run 48 (seed 387,048,281) (seed)
Draw
14 · predicted N = 40 ✓
Machine boot
2013-06-12 10:29–10:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 2
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

F4C4B8075E7E76BA 8E3804F11187AF3C 5179A45BF2CE34E5 CE54817E76B2534A EAD758882412A1C9 73954839E965E161 19D2590838A147E1 C869A5EDC110BE8C 35D60EA4C2756852 D2C35D7D0CE3B900 F0642AA9DA8D3E60 EDCE3801354BBDAD D9D342CF3941A9D5 20E0DF516FF193BE A0715B4EF8B7CB28 0BA600C6CDD41C45 C806F3574AA388CF 284C73EB0BCB2453 5B7F1305BFE6A1EE B43E4C38139B3A87 8F381D5B44234180 6C96079A668704BE 9B7F4FCA178A6BB5 D8C9ABA7935B3B60 53A447E4AAFE7B28 50B51EF0B79425A4 8FE8BED11D8EABB5 29AEEAF55714223B CA40F9D07F703961 D6AD624463BC517E BF0D3688BA98531C 54C37D4FA0AD13C4 9C9D2F7A9AC5B6B2 7319963FC6A2FC7D 61BFC0C80783DE80 C38761452FF8377A 6AEF28A8D8F87B08 6D70189AD413D768 F8D349D499E989ED 1CA3DFF3AB74D685 72BFC414B5511670 4C3795E04792BCD5 E292C14517DA785F 2EC1DD739A073A75 B74502C48350D75C ECF0E9776DDAC231 01ED71BCE3AADAC2 C71163DB43D13402 E6360BDCA3226301 AD91D669ED2F8043 99F19B0661C05D96 751E370701454E0C 2659DFEACFD86121 95A4D57233A4AE66 735EE157B073A771 03144133A2199BE7 9D02DF8137834467 FEA002BBE69B0EC0 3AC3643722E647E5 A5101370B77B90B2 4B91442255B5463A FA36B99CB3D5B7A9 79D1178A27FC8FAB 28241B7C295B9851 233E1461CE1A31D5 0AC777903FE9158E C29C75326E26E66A BEAB578AFA8923DC 62ECE7F635DCA9E3 9C48519D10F349E2 46A9384AD3D7C99C 7792DB2E5EED0D6C 85A464C826B8EB64 33AB4D74551029D1 FA4E1EB729ADF41F 6B48F526CB50165C 2D452103CE211865 597F1F57196ACBC7 96CDF11DEB9EA903 A779497BDDD0DDDE B4E848DA28B8D9CE 21F1504528E3AE5B 7A0F207627D10FEF F0BF9E6600D502A3 27841ED669B7D0AE B99F40855F18CD97 C60D1D86FEA11F28 5478D3692C3854CF 8B66F2E4E762749B 6F6C511EDF0F61F4 D0440F590B1FDBAD 9707ABA0EA3377AC 04FCE9BA6045BA45 A645D250879E7798 83BFC35FFBD7C633 845A481B4407E170 FFE0A40049E9170E 43DFC7EB1C8AE160 3238CBEFAFBD826E 57E5D0780DF6AF5E 260F3B49AE752B20 28C7D15736FB3708 16CDF7C245F59EF0 A521305B7759C588 C13A68BA2B58CF2F EB3D8971F4E78077 357C72CFA195761C 4A7744C19A9D9573 AF723217429ED337 712E8E062021BD09 CAA2B6CE1F432EFA DE5AF40BA03D707D 1ECC14D4C4312054 2D601568DAB8CD14 A7B6C608EE1603D5 8727A86EBFBD757C 5C3378214E247052 BE03BEAF227C23AB C547DC8997842F09 E48D41F81FED4931 FD2D6736656789DC CAA22FEBD3CAA1C6 92BAA560087A95C7 06EF6CD74EABBC5B ED3F175A3C4B65DA EEB5E423A78929D2 0ACC2610CA60AF0F BBF1953B81B65DCA 64D2332F725D4975 87AE03DF154E792C 88FC9F76BD3CBEAA A802BBA3771FF102 943975612E1F385B 658F5D50440E91C1 683DA8ADA6444923 E5397B12846A27BF C7C26119A566FBF9 F1FBA6C3D936EF78 61C72BC67D747BEC CAFEB1221298377C 1EF9BD4AE19D232A 90AFF29394E077F6 56CE076468536A2C 621D2AD99C2493D6 78403EA1E3DC480E 4297CD020FCF2A2F A13040CAE11B8BF3 A5115A3D1EF04810 B12FB2C04A1AB2B1 0D3F04CE28E95B9F 330FAED4A084B188 ED7559113ACB056F 7762B8C1037C75B1 C85B05DEF40434CF A8F334BB99F2BC6C EDDF49972FE0AB71 E35B25C6FA5CFF79 C2723165B3E9EFEE CC39B6BAEAE25A4A D86D084F85E4B920 97A3B5CC296D99B1
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201306301759 (name+title). Key = MD5(password) = 67a7db89111966c96d93679e7a9a1364, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b516f7e4-3f7b-0450-b282-25b2c5a73bb9
  2 6b1c2c12-ff78-0306-b64a-65b874f9a56b
  3 0e7d4f12-a4c1-2290-8162-110fb6e2645a
  4 421b032b-5d59-8496-a547-c8e1993c882b
  5 4d562acb-2ded-899e-8c01-fd601834f058
  6 9ac332e1-7481-0412-83da-fd8641b9f0e0
  7 c7a5bf89-ca88-2e54-821d-179732e82ad1
  8 566207f7-bc2f-5405-89d6-f90be2793443
  9 b42343ca-4951-7d5c-9682-0605d13b9bf4
 10 c8bdd564-d57a-257b-9509-ea6405aec56d
 11 e26d9b6a-087b-670e-b520-fd5c2b37d394
 12 45ee9b81-fe2d-0ed2-af6d-85c4ca93a0f6
 13 4fe7e618-cde9-21f1-baa4-fcff138b0a06
 14 c3fb789e-90ac-3dd1-b974-6646ca89ddd5
 15 b0238053-d44b-1465-b786-2004a64f13b4
 16 a76b31f2-d041-41a4-b9e3-6a9070890908
 17 ceea0aa9-6537-20f6-a910-d3c9f9714506
 18 8eb5db31-904e-2188-8908-d4b6080cf321
 19 428fc022-e191-2a45-883b-e4152ad672ef
 20 1a711396-b73a-8a25-b3c0-450afab15956
 21 c2bc7873-e205-87fd-80bf-859ecbce1e86
 22 c92a96ff-e07c-15a3-ae8f-dbefc360d455
 23 7a8e3563-0d8d-8808-988f-14d66684c7ef
 24 3efccfe3-04c1-6005-9d09-1b2edc3e8eef
 25 14903ff3-c39d-8b20-9d48-e3189d74381a
 26 aee02959-9517-66fe-8e4e-bf8329ecb680
 27 5f98ab44-2dfb-6ca8-b8e3-2ebe343def03
 28 b48f4797-59ad-6546-8f10-992dd45583cd
 29 79c7a805-403f-08a6-b7f6-acfaa6718d74
 30 dbf58765-2f77-50c4-90a0-932f1244ed0f
 31 5e297447-7c1a-34c2-b2af-7734acae4f61
 32 d9193824-6f06-1be2-b4b9-9ee77e45a5e4
 33 700c7bdf-9559-1b30-ad33-0c94803e4e14
 34 05a17b14-6a32-1bf6-a3b6-a78a3e6ab3cd
 35 5a987624-a211-11a9-bd3f-40be520aca39
 36 fbcefd17-969d-4c83-be9d-930477f290a0
 37 9db5970e-7557-2113-a3ec-da9fc0c80899
 38 bca4ea7e-2af3-86f8-9303-5eb475114967
 39 50025a36-42ac-79d1-9295-8171f333104a
 40 be851cfd-70c3-4e18-a67a-288d98699a39

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0028802572602314222881868666053111142874. Exactly this sequence comes out of new Random(686).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 14 of Run 48 (seed 387,048,281): new Random(387048281), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-06-12 10:29–10:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs