A858DE45F56D9BC9 archive

201309140059 1md1fx

explained decrypted filler

seed 216

Metadata

Post ID
1md1fx
Title
201309140059 → 2013-09-14 00:59 on A858's clock
Posted (UTC)
2013-09-14 04:59:58
Timezone
UTC−4 · title 00:59 against posted 04:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309140059) = 764ce762793b62c469af9c4473954358 (name+title)
GUIDs
40
Filler GUID seed
new Random(216).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
36 · predicted N = 40 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

F4A89AA6A30D0C0C 6D396E1EA21B8974 1DD6A9557552696C 4DC9DD5A09FA5EC4 B90313135EC4E4F8 B5C21B6FD947C42B D871770F46530D1F 284D6239F9FA0A0B 6CF25817E8072804 6EB82279062FF404 B0969F58B5803526 DC63DE2AAB55A57E 29D213E9C3334A2E 822D202950C95378 E54F9393BC952B0E 0612D9BF067CD82D 91857F6D9ACA0A70 5A29CB4606A59AFD 0BB2014768EA72A7 37089091BAB1586B 3F88A3472F602171 A22654A28EF2CDC6 DE9C65173514937D 9CF48F9E56F1F978 120ACFFEF23AD94E A0AED86CCB9CC026 420A2EE6F5A7F390 64261814A27E2278 691334FC77C8A4D4 1B0B1658E8CCC011 E1591906FE0B152C ADBA0C8FA6F03CAF 4585FC053CFF140F 06529FD8DAE2FFE4 6FB2702A413834F8 9808A5CE3F9742A5 2DBE0BE6B210FB1F 669822F01487470C 634F58C70F5AACA7 D84BB5092749E281 F009D0B335672BAD 87E8B21097C35671 E155AAAED3C3AADB 993F23AC9ACE7A25 C7A79ADE941C75EB 53BFB65CD036F254 E25EAB9DDD93628B F93CA9F713149AD0 255E683327023CD0 20594A693956E42E 1FA3F83C05C437C2 F8BD5AECF293F5BF A7D486F3F4928F40 E01A8E91BCB9D177 781E29ECF4E8253A 9922499FCA7B9205 19688D36A272F127 0F4D801F167BAF1D E0185320647BE7F5 C73491A365102B32 650A1656AF910E5B 8BDBB51ACADA0177 31E9E99DA012A1C2 5C96196B862BA26C 1AE7AE68785FDD9C 1AA7C6A5D157EB2F 44733FC42B648109 6044B8EDD4C364F8 616F69010CB47F7A 6DCEAE4B643F4230 05F74D924DDD1EEE 84E222154C4B3EB2 DC333683D1E126A2 4AD2151C5F6A0639 30C52CF82F53F0FB 398A43FD49B82136 0BAB089ADBCFD7DB 5D0376C45958211D 3384784078AA9A1C 2598C9BA7E486BD3 719FE02F8AF98484 8B0A8009C6E45116 DAD384302F969B04 10831912FF25F0F3 95DFEAA7D5DF34C1 E191FD4E6D128B74 7C07EAE3DE5F5BFA 08B4235C5F098A8D 92E436088A81E3EB 60E14E28AFE2E702 3B8C88DEE4BB59F5 B0E01C183904E216 82B46D73DCCFFD83 08CF3FCDD1720812 127D1B8940CBE42E A219CBD153239A68 31C63946E3C7732F 383AFBB5D0CD6026 D6F159E5CF820045 7688674CF2C4D965 4715ECAFD48B918F D485AA9BD93D3A9B 3F0F5BEB014305CD 8D4792DA6950C99C 65EA792216CF1227 81BE359DD10B1498 616BB507DC70E44C 421F5F44BFE1C97B B1219270587BA100 88A2B76798257319 4FC3B867E1188B21 BF2DBA63DB222859 BCEFC499BCCC3CDF 609D2657EBDDDB1B E9D1934EDBACF0DA 8D287F9C96AC4B7B EE03CA3128D1CF23 524053B69A672025 D02E602E70EA3B53 635DDC1831F8C76D EBAC5534CF1D5C3C EE4ED0F8EB878FC5 5CA6D30AE573ED7B 50FC032C1595C900 E802E7CC371C7988 B0EC233AF3223A70 412C3354965350B2 98FED867E5EB1223 4EC5219940E5EBA7 D21D9A4185C13F8B CA5D03B937581BDB 5CCF64B2531F7DEC 32EB6033B0744B5C 5F19BE7914479EE0 BFCC97F31B07E13C A31A3514A31029DD 4E2137548AA6FE61 CDE119F661DC9E53 2BAD86B19442C91E 4CCEE1AB1EE3B932 92E9161CAE640D02 241D4FD2AC959885 AC1712856F931AFF 5972101CBC0CBFDB 1D1611205942BFEA F0932124B2AC83DD CC6A18F8AFCC4E9A 98E576CFB20A2BE0 7B21A266F58145AE 31F1A6BE6E6FCA3D 623E303F01B4231F 28F72E9C2D915EE8 F89AA410E3E6790F EB373AEC2B312AA5 37DC000E5F861B52 36D470F46E501841 C6F517A79BF9854A 27C34486DDF04F40 C0C183EC618AEA6B 6353D58F1F57F097 BD2BA27E8AEF7071
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309140059 (name+title). Key = MD5(password) = 764ce762793b62c469af9c4473954358, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0a9e8d8c-0ad2-55f8-a75c-ac4d0185e11a
  2 5baf5c50-08a4-1f9c-838c-81bd39d6b2a6
  3 58976f0d-28c7-68ac-9bed-957129f8413a
  4 8c3b9e15-3e2e-5d07-af18-1f8b4e58ae16
  5 c296ef2e-156b-6728-8085-46abc6c01f17
  6 c3682761-6903-2f73-9caa-ad6fef04b585
  7 b535a4e9-446b-6a97-b843-fd5491b518d8
  8 03f55089-732c-7475-a9cd-ac5513285021
  9 21cd0765-e58a-6348-bc8a-7d15fda3b885
 10 0928fb00-dee5-8798-bbcc-60b0e2c78bc3
 11 08dd6494-d165-3b4c-b684-48e84ae50133
 12 47d9ef74-9919-0a5c-8081-5d6f24528903
 13 73236cce-921b-19a4-b00f-da9df6ac7fbb
 14 2d5bf3ec-e8a9-76fe-ad65-21c2a777b212
 15 d58402e1-7ac2-1682-adf5-f8fb0b640905
 16 77c16095-8cb0-883b-abdc-aa2820aba927
 17 9fafdec3-08b3-5633-98ee-4da04e6f0c21
 18 5fb81a8b-5c54-8b76-aef7-1ba04d6daf37
 19 994b3528-be87-4381-84ee-5bad89e80fe1
 20 c0297780-4b6c-8545-8ed5-f3712959d3f2
 21 c1845f05-6341-4bc4-8051-252eee6a77dd
 22 34a62f13-f53d-73d9-97b8-cfa48ef2a402
 23 6de2f8f2-0986-4a32-bf26-299b0dabae2f
 24 7a3ee6c4-c4bd-4a3a-a145-81eaf4eeb5a9
 25 92456a50-ffe1-78a9-8e9d-6fda3cd0d412
 26 f8c1a50d-8948-4f42-9c8e-cc511b09041f
 27 48c78abc-4dfb-5809-97f6-f5125407df06
 28 87f11986-a078-4cc8-a637-1e6dadb09c18
 29 6bf743d9-65e5-152c-91e7-d059d913fe61
 30 3b708244-8a59-0c8e-91c0-46f8c45b67fd
 31 31f770e0-4b66-820c-a60a-6d24c5938393
 32 a855f6f8-7615-3f7a-b546-30fa4cee94fc
 33 db196203-e53d-10c8-81ca-ba71b4cc9c11
 34 af13cdea-a618-392d-8f7c-f3a5ec63a715
 35 f3b66c4e-7aac-0ab3-ba5e-60a919637a15
 36 5dcdb051-21c9-1078-b928-d037aa804c8e
 37 39a9f289-6f74-89af-96fe-c26f106e992f
 38 3da9c4d8-e00c-5947-b589-711ae97a876e
 39 442d5191-a4b4-3d58-ae48-ff5d10a1c8c6
 40 94db27a2-4513-57b3-8dbb-209fa7859ebc

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5165626768301718584847447454108313018535. Exactly this sequence comes out of new Random(216).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 36 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs