A858DE45F56D9BC9 archive

201308231929 1ky1kc

explained decrypted filler

seed 887

Metadata

Post ID
1ky1kc
Title
201308231929 → 2013-08-23 19:29 on A858's clock
Posted (UTC)
2013-08-23 14:59:59
Timezone
UTC+4:30 · title 19:29 against posted 14:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308231929) = 42d48e5eedb5c3f7180cb88a46beb1dc (name+title)
GUIDs
40
Filler GUID seed
new Random(887).Next(9) ✓ verified
Run
Run 51 (seed 714,271,718) (seed)
Draw
3 · predicted N = 40 ✓
Machine boot
2013-08-13 23:35–10:35 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

093D99635D63F150 95782F93628F831C 61293A5A2495C956 FB48A9E62FCA6591 2763C832DC68E3E9 8FAE63B280D5CCE7 15F18D5C47310420 7E148015B0A4B8EA 9F8B66950C1EFA28 95D737459D7162E4 B67477DAFADEC794 CDBEFE3A6520F390 532C3851D51FD3F2 87FDF2703BB77875 1C85DFE1A187E047 0FAE5CFDBBDE1E68 7B03ED8118AC45DE 374738C3841ED48C B1C6FC2B2CAC5ED8 EA23B6E8715D16BB A59EBFA0EA0D79EB 00303CF7346076CC 12B19614B839B2B9 93FD0C9A772B199F A7869377C458912F A9BE1F903C313DF7 ACBF7B71733EDC04 C474E6476DDC9043 BA489B7A4FDEAB8D AC27A056701D3AB9 BC3C4FD0ADC03717 67D0C0E3B2CA44FC 7F598B4B416CDCFB 5354FF4F5DD4A6BD 0DC2145C71FC2BD8 09FEF902269C159E 242A91767BA0955E 9965D9C87BB2F582 BF632A99A91CE8D0 3193B4C9889A55E1 6396131426B04040 704A8A0B1A103F41 5AB60690284C6331 8B676935C4E65C58 EE4F400D11EB4216 158B7662BF32C1DB B44251CF18B7D383 95698D90FCCC28E6 6AF5A42196075119 50BC17B4F2BFEBA1 250C5E435CC615A8 796C9D1D9BB60F15 B9AE72F1C3C86B43 A75F00C3EF114E76 5D3DE6D52521991C F0A64DD791E3A8EA AF9EFD8BEDBF607E 9E283444AAD4232C C40B5F1D54C40A09 F1686F114420B1ED 463A496A443E474F 120116852FAF2872 52527787A5ED4728 4FE983ED08743D9F 92BB5CEF2EB10360 BF5456267F6B6899 72B57B4E91DEF98F B18DC5B05C710DF8 2CB3FA4D9671E089 54A05CD3B16BF0F8 79F2637ABD02F6FB 139A0F665E978223 AEB9B092BED9ACF2 EA9271545CBA4F66 B7814051BE32B6D9 4E726F3CB71C88C1 09BBF8B70C972F66 FA6E04F024625360 C355F7D7A6774E9F 8D7EEE0B54F7062B 3D9456E424025594 8CFC9E053D814AFB C2A87DF66C86C6B9 7D41680BDCC1AC2F C0EEE868EFCB9C68 8561CF4F656E5C59 9CEAB18A98BFB203 C6509DD35E2DC6DF 6DEA584D189FAB7A 66FD19FC68A7DECC CAE4CE777155611B D84413E2807CCA9C B4443D17F5BAAB47 8F393A61039253F3 EC8B1B347B22AD72 B56A278E3317CD2C 306519DBF5EED3A3 E76FB3761B2FC6FD 0C33CF0F34D386E5 309374F8D81D2515 FE92B0EAF7FC8402 BE04A2480ABCAF8E 30C0C95ABCFD873D BE71AB5FE7D9D0FB ED2AA1FC51CA94D3 BBA2EE9017E0CA0F 3F34DA0B395835B6 795D07861210DF6C D33DC69679D8844F 752B06D83AF0F34A C53A630759CD424D 065C39A43BEEE47F D4A7708E2DE56EC9 5CD5A0C80794608E 9D346A3826C2CB8F A1A5CE3CC08C60E2 6BAD2DD5C54C3B54 B5FA037D19BFB6F9 A9062213CA85B8AA 6F7AD863A751AF1B 64DFB1151EB7D0AB 2A0E0997F7221339 BC7861F6A30979E8 E3BB9F81E4413723 00531D013AE486A6 EB8573585BE3A2F4 9758FC60EBA9F8C1 9F6ECF6CF50E72B2 6653186D5126EB62 FE368873E05BF444 691077389125A9DF 023F3247D735D9DC 568030260CB8979B 26C8FF3652A0BA51 854C5832825BAA21 9B95F3F527792C27 D40F064CA81F423A AFB99B8C8737B3C1 EB6ADD0553B1AC63 4096361E986FB7A4 7FB96751FD1BF42D 7C570F83F0BA8076 4839C80DC9B69E79 A993CC22946412E0 B15B275B2AC5B9D1 9145047530C4A74F 706B5CD63F0A4FEB 5D5E8E0133AA40A6 A0023B32307BB295 CCC479053CF717A9 DB2645277E151F42 881719534FBB1A21 F21C29436C6AEAB5 83839C8B014BB3E4 857DFDD05FA3D30A E50670C536B4700A 0774FACA222638FB 29CE24923C36AFEF 8ED3B883EEF142E4 EDE427B3C10D2181 4B149CD0C23AA27F
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308231929 (name+title). Key = MD5(password) = 42d48e5eedb5c3f7180cb88a46beb1dc, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 477666d6-f161-17df-a7d4-025daa4d793e
  2 484e99ca-1b45-0e76-87a0-217a4fd4c145
  3 c496e8ba-60c7-6c46-8368-1fef92fc5878
  4 b7d70b59-bfc0-7f92-95fc-586bcd05b6f0
  5 e81544dd-ed71-6d1a-9c3c-0f2c9812d39e
  6 2c3ac360-ddc8-6898-b4aa-92063ade6af3
  7 1a71270e-c56b-2524-96b8-0f50d04058a4
  8 e944bb53-08d7-38a7-ac00-2685ae16ad45
  9 fbc929c5-a2d0-69df-bffd-f75528ffe9c4
 10 3d39bfb0-7e1b-39a5-ac6f-b0232998b153
 11 41ad52c6-2b4f-6491-9c18-2ab96825a47b
 12 41f2fc3f-1e12-80f8-84a8-91d6c744ec7d
 13 7190ba80-d67e-3ec5-95a0-c6d3a3b99b68
 14 dc3656b0-1d84-8b3c-a147-fc8b881e291f
 15 73fed8a3-9fc5-7286-bd01-0c65af9ab55b
 16 eccfad12-5a24-8a99-be03-7548fbf9b862
 17 da4d64a3-f694-6ca3-8fb9-b623d6290d8e
 18 b10b13be-5c6e-8190-b184-0e84004ac268
 19 6dfb84c8-2bb8-6bbf-affe-6a3f9ccc174d
 20 df25d0c6-d176-61fd-aa19-f5f76abaa277
 21 d3b66459-600b-62ec-a8dd-eda761ab2d80
 22 16012f33-ae5f-4bf1-b1ff-d5ecd999a509
 23 f8407a1b-312f-8391-8fa3-836c125e9639
 24 2d065c4f-1182-85c1-a161-9cbdc281252b
 25 e9e04168-f954-51b0-8e63-cc33c664f6be
 26 0535955c-3f64-067a-b0ea-8d0865e068b8
 27 0dea2aef-2360-477c-939e-b6fe7bb6131f
 28 3bae7af8-16f4-22bb-9869-a5be1a04c930
 29 85babac7-d103-4355-a065-8653833e32e5
 30 8681e151-308c-391f-b80c-893ce21b8fcc
 31 a0cced1d-05b7-56f9-89dc-6e432b6ae10d
 32 a713dba0-2e27-0a0b-98a0-2bbc9ba7f6f2
 33 240a32a3-c279-8260-808c-bbef842bb3b0
 34 aeb9f28d-9274-24f6-93ba-15e26d6a5032
 35 f16efad2-17a6-349f-a901-68ffea07c2f9
 36 1a9ea425-c9ff-1722-b90b-5a80f3f22b3a
 37 f13f8b55-88a9-677d-bbca-b890f83cf959
 38 545cd8e1-2667-737f-a978-828063b08bb8
 39 92040ed8-2706-2dbd-8d6a-747abe7fb272
 40 afa2091e-59f9-5382-b10d-bc24a205c873

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1067662363683878686664885042435082316725. Exactly this sequence comes out of new Random(887).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 3 of Run 51 (seed 714,271,718): new Random(714271718), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-13 23:35–10:35).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs