A858DE45F56D9BC9 archive

201309131559 1mc2v3

explained decrypted filler

seed 670

Metadata

Post ID
1mc2v3
Title
201309131559 → 2013-09-13 15:59 on A858's clock
Posted (UTC)
2013-09-13 19:59:59
Timezone
UTC−4 · title 15:59 against posted 19:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309131559) = f43a4f3a38fd36f9a0b8092f52e6112a (name+title)
GUIDs
40
Filler GUID seed
new Random(670).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
27 · predicted N = 40 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

2CD7B8F357641412 0B02329F82F5FB47 A93513C2F548ABDF B592B931297D0500 6F32AC8335073BAD A764FC001073957B 1B0219969995AAB8 3F2D082E6FEAFF31 7C54DE5E20E22CA6 E77339D77FECA7A9 9FF6F1E4C00394A2 0B067C0BFF94F651 686DBDEAF372D020 19C15E39F250E571 8A682CACE53C28B9 C5C3E11CF682D962 3ED395AF209C2EE2 49791CC98CA678A4 08A33B78DA4090F6 371398617C20768D 32218CF6FE3DAA94 DA8D7E3A40EE2756 31831938522D8C60 B3E470D4CAD0072C 47DE87E5334BADCF 1BB4D85453F327B9 10A6EC260EE85634 7B4804FE80B2394E 1E75ED1A6CD767C2 39AF726A63712A5E 1C8CDA7D13B477D6 9877788FBC3DA95D CC5ECF2E7E7D0CDC 7700B1DDA5990FF8 FA01C3AFB0087A1B D871FF24BD6A4379 9A3E4318BC63D03E 37B282BA5E208C50 D37436AD3A03D21C 14683FF105CCAF79 38844BF9AA52F0DE C121DF94D44213E7 AD9105D00832A980 98EDFE952AE37C66 F7B95EF0E361F397 5FDA7CF89E79C64D 0C9384508584D538 287F512D43B3C70B 12B73F02D458E0AA DA317FE69EB44CCB CF141EE72082CCFB DB0CE3ABD954E213 F3670ED407F3CC89 3043D370C3644B30 1748D406E0F9AF08 8F75FEC38B8564B7 5AC3937CE9939E9D 5B24F39077067F0C 39AE4DD5987CA11D FE908140DAC6226F 131A239874A993FF 1CFC1AEDC9DC2C3A F7B4A59D74F520AA 17035F0AB92F2363 89B304CAAFFF3866 0DB2A351AAF72F4F FDFB988E98E7B43A F0CCB1401ED04A3E E16BB62F827E3BE7 B17951D76DD1116D 842F9FD71D405DBD CBB6DEB04464E52A AB2BA5676EA8F7A8 87017C0AAB8A1A0E D044E5538247C191 0B47DFC323F4A473 3CC38FF4367607F9 F65AA8FF882DCF8D 2904F70D0CD52AD3 DDE1DB1329C72BCD 3CB9E047D4CAA99D 8DC26952B65AE22F EEE472AD6DE1158E 538012B175DE194A 278532510BCD67FB B3DC6A3E526EB306 A22AE1E552D4987B 095787EF7DAF74C0 1CB7E37ACAD87184 D7ACDE9CD0056336 3E1727755761781A D502315475247E92 B829C90F7F823FCD 2BCD2CBB23624CE0 62794D49C68B5316 56794042B374EC2D E5A510AF2DA003AB 1CB3D1733F49B40C E3DABF7C3AB83B26 A12CD534A5305115 1B09CFEABCB8D579 55698FE27B326094 EB79A0475AF1994F DC66F3EE2BA74BB2 8F22DB9A8904999E 4BF3410EF83CB62A 7D52B9B733C28A20 B6C7474824F601EB 43850A88CC8CE3DC 23A16099278110AD 14B69C7A090060E2 2B54763E1C2B5FCA 32B44C374BA63B30 26E0C255B752F316 EB57171E3CC00CF3 266CCA696DC2F678 D279D8303539B64E EE849BB2347B5511 D299FD0FB098DC01 DAB4B3982BE25CCF 45FAA1D2DD8C1224 CE2E04EA59B74186 FB3DE2BCD0B7FCD7 BD17BF39DBE88D1C 876CAFF511005A09 DA0BBA04EEDE8073 C286CB7075DAE9F0 C7CA30C14FD31C69 FF2B4369CCE29C7E 1FA5A2FF81819E3A F3CB2FC7371B7A2E E269843FFAB6E717 E400E317053C98EA DB4B3121A7A03CDB 5D67B44848D306A9 3A5BABD399E5C365 E7E36A1069DDE35B E1014D7DC2D73749 8AA5779A4ED837D4 A8B44530784926B7 DCFADB2F0DB81D2D D671BEE2B1542BE6 AC601CA24D177825 51033D20DAEEB9CC 8B995A31FC4F67C3 5EE7FA276134DDDE 88B346C7B60A4F07 DD725D0E7CEE56DA EF84458E4603E4E6 6413737F054A5CF9 F1A5CB6818A3489F EB6AA813CEF82BEE 8F564E85C2EDBF6F AC999B1B8206CDEB 8457E04862535509 82D9AC624F5A23B5 AAB97C8CB9DC1A21 7CA20BC9F0924621 4EC0A4DA63D86A96 DED8D85B1E587761 61E631412D970DDB
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309131559 (name+title). Key = MD5(password) = f43a4f3a38fd36f9a0b8092f52e6112a, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 39d09b84-2937-616e-af0c-c470ad657a24
  2 7b1d734d-e9dc-3ad5-abd7-3608e30fa827
  3 c2d39860-0d40-002c-b08e-d10368af3402
  4 ccdc3511-d110-5c01-8b74-c06336799ea7
  5 d6748996-01ad-6bc2-99af-8e36f44a4177
  6 b7bfafb6-b53d-0a8a-81d8-367bd864539a
  7 e51289fb-bd49-03e5-bbd6-753fbada79f3
  8 9bec2bbf-bd0c-5afb-9ec8-435b3a6cf9f1
  9 b48ebc35-6a33-7fe7-9ddf-3926d2e9e524
 10 8cf8ebb3-9873-3d66-ac6f-11d2068c08ee
 11 a07ffd4b-f8e9-88de-a3ed-486ad51f4d6c
 12 179201ee-0fb1-4ed2-ac1a-ff4ece70fbe5
 13 7145587c-edd1-27b1-8e2d-ac00636830fc
 14 f1e58f0d-4d44-0092-8c8f-36a6c6fc3460
 15 132128ef-2dc9-86dd-b09e-b1e7cbf755d4
 16 6a535764-4f48-472c-8d89-b1e755438df2
 17 bf3cdaf2-550a-4ded-b576-2a356b5f329a
 18 0761ac5a-c74c-331c-9d63-48bddbe23d2c
 19 bc60e5e4-0faf-7dc8-8767-30f2a62d2141
 20 3959cc56-d42a-6db9-9eea-5442c8d7fece
 21 69f3d910-082b-7079-80d3-78817c9eb8f1
 22 033d1174-97d7-29a4-856b-c6c84432add1
 23 5847d9ca-b696-2c51-bc9d-1b4cad6113c1
 24 4c633a97-9f6d-075a-bcbb-faf60817440b
 25 b3d917c5-0e8e-3198-9842-a6dbdbbda827
 26 6af55890-709f-4166-b232-c157b6236ef4
 27 3ac39e16-1c84-852e-b4b7-ec2f467b670e
 28 4492670a-cd23-7c0a-a151-b49973034f9a
 29 db379bc9-f8b4-586d-a997-dfaa9ca7c5a6
 30 67230f50-1ec6-684e-bbd6-b45db3958a29
 31 6e542f22-3d9c-4e63-830c-09f5623ab24a
 32 cd63c9ce-e66c-8f17-b55f-ee42db922520
 33 6dd40792-b3f3-66c1-a3a4-53af8a086b9e
 34 f0bcc893-592f-7d78-a757-ac42fa5e8b9f
 35 e7c0650f-a231-52af-9726-ea52ed1870e1
 36 7e7b5c6a-bce6-747a-9d39-15e36781f555
 37 894608f0-98fb-0996-b584-89977581f9c5
 38 733edee0-d6bc-8ef8-be7b-fc5ac9c9ca72
 39 be8db481-c965-0a44-88f0-84392d210d5f
 40 439bafef-dd77-3322-8889-db0ad82626f8

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6305600573842084437672203487564867570803. Exactly this sequence comes out of new Random(670).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 27 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs