A858DE45F56D9BC9 archive

201309140659 1mdd0o

explained decrypted filler

seed 835

Metadata

Post ID
1mdd0o
Title
201309140659 → 2013-09-14 06:59 on A858's clock
Posted (UTC)
2013-09-14 10:59:58
Timezone
UTC−4 · title 06:59 against posted 10:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309140659) = 7bf06f53051ae50576d85b7b5abf1812 (name+title)
GUIDs
36
Filler GUID seed
new Random(835).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
42 · predicted N = 36 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

7D90CB81270FA0E2 497E329730F6BBD9 A5F54C06FCB5FA66 7B5E164BE0D25E0F 654431356ECDC814 A6CB21858077BA06 8B02F5A58B42AD6E 0E3D8BEB7796B87D 1B50A6680CE1D7C6 013751474EBA640C 7959DA44C68E6CF2 59B52D0249AF2E6F 4493B668828427F5 DAAAAC31CE3A3172 A6B2376239A93237 BCFB835C888370BF 816195BB1A7B0C23 EBBE27021811B3E9 E9F2DAD9C1AC951D 3791A5B8D7C614CA 8430E08EAD1A5699 F9BD1ED5B490C278 72DABE1E861FEB9F 9816362016048D65 480D10801AE11A15 1F5E1317B4452209 5ACF4B31E0B380C4 3B19BFD9DCA0AC7A 500BAAE5F67C0939 550D3410D702FE2A E1C5C371FAFC88FF 5837713A9FC2D960 7DF900526074BCE8 5B75268F205C8A98 E13F92195E492180 5D8B7DEE4999252D 1E745EC252070A9F E4B196FCF8765B2D D2A8D66D362AAF3C 999CFF29A32323B6 9B8617C34BE046D5 4CA38F8D3F335439 7B206C37697550F2 A3D1B51AF528D049 246F1E4DC8C2EB85 610A45E8307B0BD2 B6BF072BF964A075 769A1BF7CD0CC09D 52BC08922086A981 237AB34D7FDC12CC 4FD823364F73D6C3 B187862C05FE20B1 AE4DDD54EF7FF960 928C1DC852AE3691 2658F563C3477C4B 5104588FC2F0FC0E 5D209F607282AFCC D4633C384574C9CC F1A18CB566FCDFBE C7DE6114EB88CBAC 70E2A98A3D57488F 811EB996E5BC2744 E231204245938B34 5E0AF1F2765E5ADD 1E226E5EE70F5FE2 D8EBCFB383A3A76F 3E509B2F04CD4B66 104EB817FCC1504A 95021947870D1D0D 7F87328F418DD893 FFDAADCE06E2EB62 B38D05CAF82B6390 6665702F8D657148 8EC537DEB25FB534 7C7EA7881EF54C42 3DCED133F0270D88 EA0F7723AAA1CF12 7B7D11A83C18C085 2F180CAA576CA21A 38EF1E4971414B58 9000BD3F8B4A2B8C 113624138068FFFE AC492B701D8ACF84 6EE921C038F3DEE9 6F87542673EBD0B0 E6EB6E99A5EEA9AB 0791D97CFEF55304 99B13D87087826D5 EB06172AE9E2093D 690F4F3C607747FD 5032E023098C5AEC C71D3E09BEB4490E 89A954D6EAD54BB1 2903D3EC87D64C6D 8392D30C8578120C 1CDE8E6A0BA05949 4D188E48525EDC3F F453D05BE32614B5 4C2CC766AE7F9CE6 3082F4F61BE3F5AF 2D4775E2B357DD80 A23B14F6E61B9299 54640ECFFB1EE329 26F36230F86239F8 EC7FD47C6CD3D036 42792C8F5A6B840A 1D05A4858E371917 0E7880A05E2A01E2 7BF6199D00DE35CE 91AEC698B9DA7FF6 126AC9CCEC4DA7C3 7B68F940F0D53233 FF9B8233655C2D06 C6C4E0784F1FBD52 986D1034D7FD64D4 4FF55453B072ADD9 0EA336534E7C12B0 508BB8A6A111035B 4ECF2A9BD0448667 BFF8159D7FFBB672 45A24E34F6A07FFC 7DDEAEAAC9560C2C 2A98672DB45F365C 8FC5836713160B2A 108F0D150A749631 87FE956CFE8CC830 81A97DDCD0985C01 DE6288CBA399E5BF 76C4F4FFDE637518 8F7EBEB3E2FEB1EE E87B7FF5D903082C 6694D475B76F9305 6E5624848D3A8DB5 ED7B9C919A4940E5 7382CCA9FF7FC72C E3C5D91C6D7FA69C 748D0278CF9B5CFA 5544EDB6F972911E EE3378F125B47FB5 68DC237F5D301714 898332F7EA9FEEDE CAB4EDF2C05810F1 6983E10AA939AB36 0AAAFB221755B830 3C7254F8F7AD6A98
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309140659 (name+title). Key = MD5(password) = 7bf06f53051ae50576d85b7b5abf1812, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 22b01db1-79d7-8b31-a965-3f301fb14f48
  2 a7e7f3c7-88ad-740b-8cfb-f8a31757cf6a
  3 10e49317-478f-3398-a979-6f3d8e306132
  4 849e8d68-baf8-790c-a719-d74156620fbd
  5 5d00c4ad-6a5f-1394-be2b-ae716e7566b8
  6 35223f8d-7225-23c1-ab8c-87d39bfd4f66
  7 b87579c9-6134-0e03-a018-30d231b07989
  8 79d4447f-c846-3887-abd4-1bd06f99380a
  9 d9de2fc6-939f-295d-b088-db32baa90af0
 10 601f3381-fcad-13c4-bee5-639bbc4086b1
 11 c1797dab-5d87-4ce8-9096-eb2bf0c22bec
 12 32e72fca-eb31-3603-867a-5c04af877b6c
 13 9d454ff5-dba0-5f5c-9277-af2159862590
 14 19b155ca-c8e9-7b09-af13-37beea60300d
 15 bf6900d7-45b9-44fc-a1ec-19b8d125f311
 16 24effce1-5448-4c8b-88f6-aed7128574db
 17 0fcb649a-fe06-7625-822d-5c2983d0fd24
 18 b650aa2f-d192-6be7-ad20-27f5d51de54e
 19 f7cc994a-8137-2670-a4e5-e5cbb47bc74b
 20 52970a72-c0ba-5619-bd48-e4e96e7b1298
 21 685512f6-1f64-6754-a30c-009ccf7fc300
 22 8bb71c4a-79db-6a3a-8590-d2422e39b683
 23 4765233b-8f73-053c-9357-47cdca5ecabf
 24 3eb086f6-a807-6154-aedb-970d99c5e268
 25 99e679f9-2d6a-41b3-9aab-cc71f260a46b
 26 f7400da5-eaac-5518-93c3-c0779962dd2d
 27 69bcd41d-e39a-7f5b-ad7a-3e2bca08e60c
 28 d8e046cb-a879-027b-a8c8-f233bc2baa5d
 29 a13eb561-0eeb-1f67-8f24-13fde7e21ce8
 30 ee6bbd48-31bc-59f1-992e-ce9dfaba5c02
 31 cf7af5b3-4759-4181-9d21-0c1674711ee3
 32 afc60465-cdbc-3d3a-947f-e507fad9be44
 33 51bb42a6-42f2-05de-916e-45ac42763912
 34 0d1262f5-7aff-8b2b-9a8e-1e0fbd2aa168
 35 0905ac58-b612-1121-bd33-4579e1b8ae10
 36 c008adb6-a6c0-860d-90ad-9e0a5f870a18

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 873712032143574476256606457015430818. Exactly this sequence comes out of new Random(835).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 42 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs