A858DE45F56D9BC9 archive

201309130459 1mb08q

explained decrypted filler

seed 243

Metadata

Post ID
1mb08q
Title
201309130459 → 2013-09-13 04:59 on A858's clock
Posted (UTC)
2013-09-13 08:59:59
Timezone
UTC−4 · title 04:59 against posted 08:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309130459) = 835115aef817231f30333153351119b8 (name+title)
GUIDs
36
Filler GUID seed
new Random(243).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
16 · predicted N = 36 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

274C6B32C0DA6BF3 27465C718B6B3D44 BF5D5A7FB39CE27F 6B39AEBB9FF198BC 98E7465519310F2A DD2E4471A5C1A3F0 2D680351049BD144 AFE9BB91B8C209BB 0CAA36C3854B9D0E DFCCD059238431CD AAF1211975BB05C2 38CA64493E56A108 F74EE1467B38EFF3 1754FAC7EC8B9888 5E6A7250AF12FEE7 2C5EF41902A84C8B F30A228D8D0B37E9 162AB4E35C73241B CE4517D73B2E8010 A1E2B417881631BD 39A60012EBC0E146 B997B6D38A2B558B BEABE45AE709BE88 2DA64EBC3ACB9DF1 C15F918DF229D194 D23D354B0AC4DE51 4C3155757C6F6BD5 C445FA593836065F 0ABB42C1ACBCBA20 42A543FD6C92A571 58F00F480B1B45E8 86BC605AEE36C256 3E27A3AD4DEAD0F7 3225477DDC25D081 FC73DFFAE794AD60 AE7B1A310AF3AA84 A2255BD878C430FD 8FDEF6D990820129 CD9C82D0B48AFAC7 6A06AA4DDDB0E18E 8BC33E71867271FA B71B996B9FAC4775 6362491886809598 CCF2A8A7060378A0 D367270CE079E0A3 419707C297429358 E38AFAE7523E7718 0260B73CDC71701D 710733DAA8C4F0A0 7C23A7D365960816 721ACFF9536EA346 24BDC3C79955AF18 316C0FF53070D8B0 51A84D90840E92A5 798722713AA66797 120A438A4042F9E7 E2A777E50E86429D B2B00AC5B13E2D57 771A22CB696D4FAC 374C39B1CD5CE9F5 C3571DB1CC484969 67766AA46455F8C0 A9E94B95678F89D4 6DD4CC12EACB337A 9C6689050401F2BA AFA13540868BE806 1EC25121FB5F5091 C86F71262CFC0086 9A7E64EEB3A41EF7 EFE36830E9FD70B2 B61267AD5720C417 0284531275CEB7A8 AC0BA512D90AAD84 45C8CC22EFC75CE5 56EF93BB3D074AA9 6728EDC9AF040177 0BB42EA50BB1FCBE D03106FD9D423303 A30CECFA4E03EE85 16B3BB508B2E75EC D0BE34E770A51E34 733FC8B3DBA1E2D6 D3344D2ED9752129 77A3732475633FBF F8C32EA65CB12E83 52F779F6F96DBAEE 9E8494FD64656751 7EFE7AC1BEAD556C 6DD7A8A5042BB593 E5F692DE040FF273 3BA91A34220C467F 8820AF5E44C2A4AF 47072AC4E2F0ADB2 C64117D90BC94E5B 390BEA45BFAAB725 5DE23EFFFC517835 47994293E1F6C400 8D012DA8783526C9 C8399C75E563C6E3 4896CDEB91B61EC2 3E856BFA75FC9D92 B7ECBDF92BF9907E D00332569DF2538C EDE5A981449AD245 20376160758CA75C 7A11D5BBEBB015F0 3B515D45A2E2895C 34B8D657364769D9 F26CB0A4950A672E B8D0B146E03D196C 76C7E1D32B7D9B1C DA84D7B7B73DF904 BC5AB7C16A5329BC CBD059545FE4F181 D272B0EC665CE7B2 B6DFBBFF47A64419 13E00EA522975796 754F1DB364EA0A64 1D3A52649E0BE130 CBF0327DE7EB6AF4 74BECC4082F00ABC DA6CCBA143A8917A B9E584D72A08717D 90206F1E5FE0DD58 DFD41E8856D83AB6 84EA9B505EDD7C95 7AD851EEA9CF2240 6CBC75401E8C0A7A A3C5B0829650E238 AEAFA4E96CB4C5E6 E9037F462261A87B 2897DCAD99DEF3FE AB02C01C50E76A45 AFB955E893ABEBB1 EAF1850A2597ACE2 98473B12882167E1 2DE229861E2344AE D705FB10420C66C4 4DA076E74792F24E 3F1C92458D0582BE 2BE702E1A397F120 470D44C253D4A966 174A967F4C8194B4 2751A9266F382CD1 CE68060553DBEF44
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309130459 (name+title). Key = MD5(password) = 835115aef817231f30333153351119b8, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d66912b3-771d-667c-9e3f-71500a791b4a
  2 a4aa9410-6007-1482-bfc9-7e864f488871
  3 b9a7f856-0e0d-51ed-8814-ec9767c20179
  4 eb095240-5b0b-300f-839c-b3be5e3812f0
  5 a1ffd0c7-1868-8488-991f-781b2f81edb7
  6 a229b985-8e74-88b9-ac4b-07ec314dca66
  7 ef8e4a7d-11c0-7f17-9bef-6a73b98538c3
  8 f2267937-2b53-368f-824b-cb40336c2c95
  9 a78c5b68-8710-07b8-ab88-e743712806c2
 10 ecd7b6b5-7495-7c71-a253-9b954be247c2
 11 cdbd4e6c-dbc9-2683-b057-8370325523e4
 12 2b4f6508-83b4-1970-a242-5c2c372f94d3
 13 5449065b-412f-6291-bf86-78d06f9ca136
 14 2d048614-3fd8-8550-904a-f1614d1dc288
 15 3a186f82-3966-0696-a592-7877cff764ed
 16 a7ffe7b0-7026-7e53-a6e8-639713bda543
 17 ee2db400-5cec-0a7d-9a84-7d601cfdd1b5
 18 b359ba95-4c97-58e4-870f-021ce86ae2f8
 19 d0071b8d-a6b2-21b4-8a3e-c3fa95645a68
 20 b77c6844-0e41-3c8d-9501-5cd4620e8696
 21 7f9e7729-b284-06e4-8e8a-2da7de197e64
 22 2b6b589b-2545-4fb7-9790-e123a62ea1d5
 23 01cb2f4d-46bb-04a1-9bde-0a617ef7b8d6
 24 ce290790-2b13-8d8a-adb8-ed36d01a2d62
 25 79327ce0-d5db-4f4f-a54c-961f6193d40b
 26 818a43c1-e9ab-7e12-9448-bbd85efe9377
 27 f55b5c92-1c4b-735b-950c-e2fb50370a70
 28 8d27de52-61b8-2610-bfca-680a2570653b
 29 036fd497-9605-5f55-9882-af1938a7676a
 30 f4683e99-4139-7a44-94fd-e53830402a41
 31 da7732d9-01e3-866c-8560-02d8757aeede
 32 9e01a501-5515-4f70-bec0-ef024a5a90c0
 33 76f1752c-32a8-000d-a169-95567656cdc4
 34 270e24d6-0683-03a4-9757-09b19cd71d3d
 35 6539ef8f-6ec3-4519-aae2-5a512f471a39
 36 59e79c49-04df-2098-99a2-c107ffe1989b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 615388730721680705230408477257840042. Exactly this sequence comes out of new Random(243).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 16 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs