A858DE45F56D9BC9 archive

201309151059 1mfnpq

explained decrypted filler

seed 291

Metadata

Post ID
1mfnpq
Title
201309151059 → 2013-09-15 10:59 on A858's clock
Posted (UTC)
2013-09-15 14:59:56
Timezone
UTC−4 · title 10:59 against posted 14:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309151059) = 014886f6f9e88911ff93bcdb5fcbd075 (name+title)
GUIDs
40
Filler GUID seed
new Random(291).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
70 · predicted N = 40 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

1A00DCC56DD8F073 FD2F6124F0C720F3 EC544AD66159448A 17FE0B48ED8789CB 27FCACCD012067EC C5A374B48C25615E 26567CAB3A97343E D872E6505D56B0E4 DF3AD533FEBAB597 88CF1DF333D53DA0 CB07FA4EC3921682 64C4FDF264314B91 36D5C48F09812F3E 9979EA285CEFA260 60EC2B5D2835197B 89541EEB70EE9B8D 2EE26F67FC34921C 2D2D8389A8A09C98 3E923CDE6649E011 F489B7678560403C C0186133910A06E9 D0D3661341CCF360 E7587BBEF6699CFC A5B32D6C090C639C E61DDB1B6A008684 799B68F9B3D3CEFF 1CE84B7D653861E7 CD1ED280EB3BF5BD 0407AA2219413E4C 88BA1225C4FF0C12 9A7CF571C2D969B6 6836DBFBB4121A5A 00292B6CC9BA25A3 F27E0D578A75E787 018C3FE3E95BC415 AFEA3DAFFE081470 700E639F42B97D10 90E950F6CFB6F99B 43BC84BD8E571276 F3237546EFFF0020 500A2D96DE2B1108 BCEFD9CB97B395C3 5AAD2D467EA21225 5034A991591AA691 7FE145B161143966 E5115B02CC80A38C 4D143FC206D39B76 04010059A0BCFC28 E8651298958F892F B06F3538EA9AD888 3B2253D4F192546D CCF37BCCB713EC34 9807307F907F63FB BB65DFF18EBA18C6 3126028192ED8EB8 DEE53799E8EC1917 FDE67776F7B64AC0 53675598522DB872 396B2D1EE672E87E 763AA16961734558 0DA52C4628D0CD78 6A5C12B742BB2644 D04479DF68CBE45B 5A588ACD375E7433 2BCAF410B4131B3A 60D1952C40A02DB5 8C64CDB0A8A1DAFF 2A99EFDF5DA13464 D65E4FA7803DFB14 087BCE2C93C7E844 205B51FCD1BF8A83 53D884C18672DE51 A7317043A07BF4B0 9B34D7BD9A81F161 285423D96347B414 DA52BE132247FFC1 70FC72852C1921C4 C5B8500D13AD68C1 8F46B072896ED2A1 D97CCDD5B81E7C3F D431390CF053A64E C3D01BEC6D537C84 D7618FC8E8CC2BA9 A1E0C4C492876DF0 29458D62E21E5D39 A020AD9EE69FC195 B5CB08458EE48722 B37F87E1F76ECBBF 8F82211D3463ED94 C2A79EF26FCD63EF 4E6028F83E852022 7D10D5B2238DFC74 2FD6977761E47215 6C8624A17B2793DD 4250402D9220F685 04954C5195647946 F9219B60707A688B ECA967AE5D47F543 AAF0E780B9BD861D 0BA1E39249F0CD41 76A9F613D4909C76 7A2183CCD88E4893 32D8C716BE225FAA D5AAAF7181F7A9D8 DF3C601C59F9154B B79767D385C4EFA6 57664C4A82485A60 CA9BFE19B6B3E0AE 067340D8F2A772E0 37A5203E78460FF3 4446E9949C7B02B0 DCCBB534BAF18E94 AA056C44940E8CF9 8B9ECAA56C57C12A BE15AC082C88FE2D 237C4BF3D1E4C103 E54115194A0A4296 F92B9B43F22B9B96 DB4179172ADDA452 2DB3B140B41BFEEC 632C42F84AFECA58 FFDB24D0BBE07C2D 7B69A5643E9E053A 97402C0599928BCB 864D3EB4244DC4B4 957D23317A870F5D 1646AE4B52DA90BF 492B0DAF1E8087D3 C0CFE512D4458473 A8AA1B9224A49FEC 9547662882BA23F4 925B710B42176E84 EBCCE63B59D9F88C 36BD8123652B21C8 49D3C29AE41C8C22 B939380A6BA183B4 410A8398178BBC4D A659BF79DC6A5DD2 37489FDC66F7A287 63FA38BBF7BB29D5 8E580FA7CE14A364 7E9572FAA242A627 0CE06531DCEEC488 C82D433912099A03 44A117B9A3BFC6A6 559FEE0CB22DEC71 0C6DF6E6B6889668 E998FA80663097C6 AD9315821B9D0C55 F8C74557CB79285B 027771C1B03A5FCE 9CF3B7C4C9A21DAF 1CC36F01026BACD1 D3F4659112879C9F CB50094A89ED4BDC D114D13B964DF106 D166EB69D761508D CA1D5AF8D116CF87 AE5208AB08B8988E BFFD1DCBAE610AB4 10ABD2534D498E55
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309151059 (name+title). Key = MD5(password) = 014886f6f9e88911ff93bcdb5fcbd075, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b6705ee5-eee7-6498-8b17-43c5a44b870f
  2 6e9001d6-c9bb-154b-8a2d-d08f60793bf6
  3 87fba661-502b-103d-af34-24b3dc73d24d
  4 1f9e13c3-3205-6933-81c9-ecb76d0f41d5
  5 b6eab326-ccc6-5bdd-956c-0128a2ec418c
  6 20c2faea-b429-70bf-9182-08592484814c
  7 c83d0fe0-607f-2cda-9e51-816c85a80ff4
  8 92d1e697-9f95-3121-a3dc-38931cd7c015
  9 043a3721-fc0c-8e05-ab3c-d1cf807efe15
 10 585ff954-9845-5cf9-afe3-5f16669338b3
 11 126a3453-28d5-623e-8ea0-c1eacd24ebae
 12 c72c7e08-0830-54c8-bf00-f03dcf3af863
 13 470eb357-e179-6409-a31a-4634baf10eac
 14 6970bcb8-4a0d-7ce0-8d28-c6f2e608c8f9
 15 ec8c6226-6693-6fcb-baa2-9a858b8c8c05
 16 f5428877-f460-6b57-b235-c2fb6b2916b8
 17 72b056a8-bf7b-1ff5-9c99-782ff221445b
 18 429b1005-b6df-30a8-a578-439836014508
 19 4b3cfaa7-6d43-4a06-b07d-360030cf3d5a
 20 77963ceb-eff6-8557-9e0e-fb86f4568e22
 21 52119942-d76b-429d-905c-20f019af47f2
 22 38af14bc-de80-21af-8c39-4d9e684d30a3
 23 ddd775c9-07e5-1b13-b7fe-aa2f2da735a0
 24 1eb70fbe-d1d2-6380-931a-908654df839e
 25 4845815c-231a-1cc2-b0e3-1a926b3fa9ee
 26 62d40b03-6a01-6aaf-b3f9-8281f1e626fc
 27 6bfa5343-7fc5-1115-bc4c-f9dc4df7a706
 28 de3446bc-dac6-839d-b98f-481d73ed0497
 29 4484c297-a70c-8dc2-b33a-2ed4a26917a8
 30 9ac29176-aa0d-34d8-87d3-ebc1cbbb3d74
 31 d705f2b8-ed7f-5958-9613-84fff8d9ac0d
 32 34460ec7-1429-08f8-b0d4-48a8383c480b
 33 a52d7e4e-b9b7-2798-97c5-208fa003a8ef
 34 d70c35bb-180a-2489-a8b5-1af5daf64b7a
 35 db3b7a5a-1596-2a7f-b933-9cd9778bcdca
 36 1c8cae1c-6503-3397-9190-758ce0b22a09
 37 6cf90c12-939f-0c3f-abac-c8113a3f4116
 38 a4d040bc-1822-66db-b6de-4ec25ac2fad1
 39 f58c9cb2-c77d-1132-b1ae-84ff7e1a5231
 40 c7d03456-f42a-1456-8855-14cdf9f9f7de

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6116572385656766134842161618835022230611. Exactly this sequence comes out of new Random(291).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 70 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs