A858DE45F56D9BC9 archive

201309150759 1mfg5n

explained decrypted filler

seed 556

Metadata

Post ID
1mfg5n
Title
201309150759 → 2013-09-15 07:59 on A858's clock
Posted (UTC)
2013-09-15 11:59:57
Timezone
UTC−4 · title 07:59 against posted 11:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309150759) = ddbfb4e0f362b16f501caa068237ee48 (name+title)
GUIDs
32
Filler GUID seed
new Random(556).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
67 · predicted N = 32 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

E77A62F4A8A37276 90478616F25463F5 4EFB8F0345E53561 C273F9F54819D053 E28AEA4E65314F97 F5A96625F29657A7 02F056A180D0158A 3FF24C06CFFCAEF2 587FF3CD2EAC25BD 4D791F4B99704C53 1818A74811D9965D 32F6276A7F044027 D02812E4BEF3733C B0F43177BBC18B78 FB3601455A9AAF12 BFF17D0FE1D85F4B E70F03ADCA87FAE2 3D9DB48A79183F58 6EFCF634EDFAA030 9487B3B866A0900A 51ECB8B136329023 2A5B649001559E69 43338B44001FAD7C B999EA3706B698D2 38CDDE4325A8400C 93FC6A30035684D1 6EDD14B55E73994A AF2A6B8DB685445C FE16E3BAA4B462ED EECA393962701479 F3D558ED99223A6B 05A9A7659B2EE956 925B84053C5D583A 330E39C56567CCAE DCA349FB7B61C0A9 D21116439CB45EE4 D5F5454870966500 C90BD41F11BCCCD8 DEBEE4FD6F3D8263 7236A0CA4D1E87C5 4BCF1EE2B8AAE35F 58557BB9FC0663DC 7DD3B8C3BC174A12 21AE1B1A5F9FEDCC E433B80062362EE1 8FEDA0EEFA392D7D 44CBA7435F7DFA66 FBFE944578FE5F10 6110067798A55FAF 7252474F57FE6130 70DF09DE814468EA CC184031D5F07F4A 590318FA237D3895 EDCC2A0F1BFDFD24 19C1484400ACEF36 EEE7FC3ED9EC247A 1E403E669F170DEB C01D984EC5976A82 D341FE153B5F08A4 5A8A768B6E4EE472 A849A301EF4A613D 1CB6EC148666CDF4 34B137ED381B8706 1036AE665DF392DB 48F2D95D11B620BD 20E72AC8855E0D29 58A226C98070D97F 393B698777D9C243 7BD59F5A8180FF63 0985997D6CA59383 FC477B66073DF1CA 9427ABA96F3E4ACC C3A648EEF5D40373 309987FC362156A2 88D04D12B5CA0248 F36F02891C864C25 9C55D0AEC989C674 2F805CA7A2AABB32 231115083094F3DE 1283E216206302CC 37DEDD448813EBFE B7B2538A68427462 8DF9C8647AE0146A 38D592ADF37CB52A 92D0632C7DD5199F 2EA8753B64179469 FEF01A4594145130 26430E4AA7C6F4B6 FD0057E76BABD6A8 933A701FA7F3E745 8D134CD4B8833125 8BE6CFA3DA73D2D9 25CCE9C3D4BF597F E597682214B9CB68 11136A2FFD95DD74 7C2884A278B59128 F94523ECF5462DE0 D48B03C10143A24B DC6EA45E494ED0F5 A79ED498846765EF E8C633F286520B95 8853CC378C04BEC6 1EA4FB35BCBE9290 D301EE3A55AA1C2C 03D9ABD997A0A921 936663A65AA9AB35 76C7EC68C020093D 34671D6DABD42B08 8D7BCA25B8ED8D65 6DE43D3D8CC89206 8A7973E9C7B05298 FC23DF5C12B2DE39 398AF9D595D01582 E739686871F090A8 A54A40A1469FAE33 95180BDF6DD45A4C D7B4E45FA495C25D 1926C137ACF569E9 FC5DFD2EC9C1AECF 08B087E1C9DFF05C A11B1718F9760A4A 6DD592878094AB48 C4E22276C1715153 89C16FBB184FDC45 4FA226E743DA4F22 E19B95EF5FF26FC7 BA1733C8AF2EA9C0 A06776616CFC73C9 EE2B876DF4E89654
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309150759 (name+title). Key = MD5(password) = ddbfb4e0f362b16f501caa068237ee48, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9bd5bad7-95d5-1a7a-9ca3-01ce3b9776de
  2 370ed176-b79b-8b02-9ac5-74ccc7722fa8
  3 cf964b4f-5daa-33cb-9efe-95fdbcb2a5b5
  4 e9b3a1d1-0449-2a8e-a479-092269141643
  5 b11b14d2-a18c-26fd-a16a-992a74d033d0
  6 bdf05b7a-c556-41ea-96c1-67406fc44bb6
  7 46dbf341-5aaf-08f6-802c-99b4f68097e8
  8 da09bef1-b4d4-36a6-8c39-b6a1c5b0fb7a
  9 a6a38ffe-e273-6f9e-ac1b-3cd3d49512b2
 10 fff00e06-6ddf-21dc-a2fd-aa25753d6840
 11 7067792e-cd40-8100-965c-07106438b187
 12 0d13f205-51a6-4cfe-89e1-c7614a325f18
 13 40f201ba-dcc3-707f-97f8-c484e1dc37b0
 14 2bcd2cb4-206e-617c-b168-6b13321e577a
 15 256cba11-f79a-1d15-998f-461ce81c8752
 16 cf87ca49-2a3f-2637-8774-bebdcecbf5ea
 17 83d98973-126a-5489-85ea-371399b40236
 18 973a3917-9597-6ced-b9f9-42342bde37ba
 19 1e22bd49-774e-6cfb-a651-0fb1a4dc50d8
 20 8d6ec5c3-8d5f-5686-99c6-a6dc8827258c
 21 e244582f-bb37-64af-b3a6-61cead225717
 22 b50704c3-fc5c-295e-98ef-b780cb19b6be
 23 6bd95be5-52d1-80d8-bbd7-fcbcc8583e5f
 24 3b18fc22-4ba9-2332-9498-96bacf0d4d6a
 25 84e5bcbb-bdb0-1db6-90e0-bff88c7818b5
 26 7b66635d-3630-19f3-9ec4-0e2041cd7849
 27 42856c63-dbb9-8f67-8cc1-f2b1a97af292
 28 6578f3cf-3c42-1268-a410-080fea0c583d
 29 bca3df90-7107-1dd3-a32f-06b47092ffaf
 30 4c641903-c4ca-7a32-8bc1-929dd1a4ac77
 31 7728821c-f8e1-448f-b5b2-e47ed4c6ad1d
 32 7333c22e-fca9-8f47-9554-3671fbfdb303

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 18322403628476125665628211811748. Exactly this sequence comes out of new Random(556).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 67 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs