A858DE45F56D9BC9 archive

201307021759 1hiy11

explained decrypted filler

seed 706

Metadata

Post ID
1hiy11
Title
201307021759 → 2013-07-02 17:59 on A858's clock
Posted (UTC)
2013-07-02 21:59:46
Timezone
UTC−4 · title 17:59 against posted 21:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307021759) = 5282c7e885f473902ce57756e3f96743 (name+title)
GUIDs
40
Filler GUID seed
new Random(706).Next(9) ✓ verified
Run
Run 48 (seed 387,048,281) (seed)
Draw
16 · predicted N = 40 ✓
Machine boot
2013-06-12 10:29–10:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 5
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

6985CFBE30CF2531 4BA83CA0DFD6CF3C 23022694E04B17B8 71081EBF49C5EDA2 5CC25B0C3C0DDC59 F2BFD2A6FE53FFFC 0030874EA100E7A1 4C76ACD6505D54CE 922B17572D0A30D1 F1B20EE20AED9A54 CD409ABC65AB8098 FC5380F12CF09EC2 37FA6642207EC1C2 2321F09F0A2B10B9 E44135BF8C0E605A 850299F8B3F95B1C 2B4AE4D9EB9D10DB BC2490773C2C49FC 17FF4DF5BBF2BDB5 E9D734B4FF6FAF87 118E1782136273C4 41C5AC0AFFD3FC20 375221C9A0AA1AF6 A0416E5C1004C61D 40C32AF425B595FC 7C933EF6006C93BE CC5921CA0F5192AC 02B35CB15B733C89 7310D83B0FD6FD7B 8C0814EF0B76073C 645D5423F9293185 EC4947E1F6D760AA 997F09B9B70020E8 600E1860F84439B7 1C19CB323DFFFFCF E49D2FECB160ECA3 D2BC5A7ECFE91E8D 7BC82FDAE3CAAC54 DEBF305B5D6B34DD 7455FADEBE96D6E5 1961510A348BF624 A6575AB324A1325F 1DD54661EDAB7ADF 7656264227413166 F745C29DE1A216C5 BDEF3CFC41B310BA 2E48B8CE99AE1509 0AF7DFADFCBFE64B 6DC31E5288F05497 638B5AD4B08D5F7C 2DCF20AB1D657240 0D05D319D134D7C5 D30E877C70C9D349 2BEC8143BB77C83F D7916F6B08D53227 C24ED82788102D23 7CDC10C9F90AD5E9 BFA37A54C3F79A9A C5CD1180D13374F9 DEAA5D7A84A91B8E 42ECFCE5A8A6EE9A 5C90C4B1BF26D33C EE9BA030A028BC35 C5143611FC7F49A3 82814C5CE8ACB7E3 3600830AE10871D3 EC4FCB7610A71B72 A8ECD1974DCA1B5A 409E498991AC79F1 59E044E5330A4AA4 FDCCDF65C5941919 920F2120222857EE 60A3626B75CFCAFF 4A912F0E76178AE4 9D82997B1D895068 98B9FC2F222EAE82 97BD07C34D138169 AD6FE7EFE79BFDF1 EED908A1390F8EBC 625CA3085ACC7DA1 32C66A5C66924D2A E99879463E5C1C6B 70A1F97415269CE0 FF181BF1463739D2 9678A16C6AB9DBA9 922D64480A549522 86525F3035F79458 4FF29D2ABC3E0750 B387FDCB63D73917 3FFBB0DC200F4BA0 448C604B2C502958 1F74C5D16C2478A8 E35ABC32DE1757CB BBB4D739EDEEA8BB 23CF47344F4E3D7E DA429F0D3B75BA81 86C63FE9C3A455DC 60BD02BD864BD78E 36D4CF69ABC01C92 61E250B36CF90FAB E5C504114B2169F0 684EDF01F00CA6A1 9C8851F444F3BAE1 C3BDA099BFC94B5A B84A62E566255565 E8283D7468E1301E 3321AAA9A16FC81F A2406340991A6FFC B71910E4ED920CCB 40C628F78FCC9C8E 0687CD41DC3C7C40 AE7FEE5A954784ED EF2B44E31356E890 9088F9935B328FF0 C37752EB10A1EA83 DEE6861DF2742E25 EE619A58C46B7545 AB670F750209B69D 532E5335E766B802 849DA097C925D241 194D38E42C6C0602 8828AA62F5A4F857 2A02A50ADB81BC6C 45C9D74932F9E180 14A85E740B23168C 6DD6864AD64958B0 85E00226A9B91D7E 45E2113A7A9EBBBD F2666462D3A6429E 56B536115657B4C4 6166B194AC6C70C6 1241E21CECFC0D01 4904EA60734BADEF 0A68A61E1606DACF 0D57FA69A5980657 11C152C011D24A80 75B91531969501D1 EDBA1812663EE8A2 C8C0B497137C0924 B09ADCA8B0FA2B4E FB2F81A835BE9896 88442E721A26DC73 5DD6406DDC087443 E9F71EF71B7CD300 D1DB3739042282C8 5C168A7D16518B21 D4194A8EEA796960 60F13FD1A859D222 572DDD054F00D4D1 BE2242D90C8D4C3C 5EFE41BB07D047DF 1880B9DF6BB6E22B 03897AC29DAE7C0D 954E58D462976036 541FF86C8B646C26 F2EB243CAA8F5DBB 46C8FF96BFC8E2D7 1F2EEDEE7F804A8E D7596B3097A1C060 2A1189F7B09F710A 2396987AB490C06F
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307021759 (name+title). Key = MD5(password) = 5282c7e885f473902ce57756e3f96743, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ba201d7e-c2b1-5393-ae3e-b91e804bfb16
  2 707c3000-b37b-8103-b7f8-a78fb355ea5c
  3 9635b733-59f0-2692-b46e-4632a3905c0c
  4 43d1320e-c295-2f5a-8e96-b401a8f7d2df
  5 c7b33804-3f78-831c-a016-d9487e320c63
  6 96ba5c0c-fe5c-43a2-89af-e8ce9e890f75
  7 34885cd8-e562-2daa-9d2b-a7bdd81440fc
  8 c3b41fb3-95b4-57a6-8118-44c730eb63f3
  9 54f79ab2-4a8c-2402-992d-4768ae3d4655
 10 c25186f7-59f2-5f52-8584-81b053a110d5
 11 2923404f-9479-3fdf-b43f-2bb317672558
 12 b50d7306-0444-5345-923f-f601cdd16e5d
 13 9745f739-1972-82a9-bd6e-87c5eed197e8
 14 9c84e887-7dd1-6f0d-b0cb-e9c8fe982a3c
 15 1e4af8b9-8218-18be-a00a-48048f36f088
 16 48389373-4c4d-8f59-8beb-fc4638efb24e
 17 bdf8a0fc-a48f-5266-b33b-1184860aa7e3
 18 68dcbdcd-0be4-69f3-8956-eef770ae3114
 19 07f0dfea-e3a9-70f9-bc2c-dd484d7c012b
 20 5eb8e6d8-1703-6809-8d17-3b9110333ada
 21 43afafb6-2e31-5804-9ae0-4e606ae30251
 22 f7524c4c-ed25-0888-ac2c-f959f5607e41
 23 e5b92b28-4766-2f16-9e09-efa6faa0775a
 24 107ef99a-1f41-6252-8d83-5f17da3144d5
 25 67c32bd9-f5e4-842d-9aac-2a3937bdd4ad
 26 6c766b85-33f3-5628-a275-f7ec7555f78b
 27 6a73152e-cb13-8f79-9d54-9cf7aeb41671
 28 f6af2221-1fa5-1434-b221-a75cbbf9f696
 29 ce291a68-f31e-4186-8617-256d04af54ed
 30 5b38f43e-6327-5dc8-8995-09c58566a0e4
 31 263c8356-a0f8-70e6-8129-0cc3f60d88d6
 32 52f0822f-f106-30db-bd5a-3a79c9adfe00
 33 03e4ccbf-7d61-1690-bc7a-fc4b27ea619a
 34 0ab6135a-d5b9-614a-b2e8-9adde446abff
 35 6e2b39e3-574a-10d5-bd36-8ef569ad37cc
 36 1c3b7dd0-2f02-3b13-8fe0-f1c5d7e7ba04
 37 dde91c8d-72c0-71c3-aca9-af5bb723f46d
 38 6dac93fb-2598-477b-91c8-2ac022dda8ee
 39 16da7d59-a651-29f2-a40f-d726e922d0d5
 40 8667d450-a379-7d44-a3ba-cafc27f62efa

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5822842525358618567650268581457316137427. Exactly this sequence comes out of new Random(706).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 16 of Run 48 (seed 387,048,281): new Random(387048281), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-06-12 10:29–10:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs