A858DE45F56D9BC9 archive

201309151259 1mfveg

explained decrypted filler

seed 376

Metadata

Post ID
1mfveg
Title
201309151259 → 2013-09-15 12:59 on A858's clock
Posted (UTC)
2013-09-15 16:59:56
Timezone
UTC−4 · title 12:59 against posted 16:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309151259) = f3407217cb5bfe57483ffbbe07e7584e (name+title)
GUIDs
28
Filler GUID seed
new Random(376).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
72 · predicted N = 28 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

301944379370B26D 62C0F8241BA295C9 A87610244827B439 FF5945420A370B0E E9DA47250165133C 50F1C9D8D5868B06 B4C19D78DF0C7C26 52FD78BED296B433 2A7899FBE1771D1B EEC3C1C22E979525 B926E097AB4F914A C32BAE3D848C75E5 EBF1B0A3B7B09E2E 6CD5540177EC88FA 3CBC3A796461DCE4 6465B038F0C179D8 DEE7B64B7E221DFF 07D5AEB1949CE94F D88A1B6B9577EB4F 722B5017559686F6 F4A4E80470544C1F 3770BF333B964171 721F1920CD4F3C1B 31DE4269945EFC40 37C006DA5F913A31 40CF6FD40581FF0B 19F56C30D9A48E51 14A27426ECE12BB1 91DF2895CE5D6F79 9AA1153E4BD86872 FD3870D85D92256D F157BB125DD30613 B97C37EDCFE3D67B DCA7B5A4C654E438 B83DFB511187BD51 7B4D8DECFD98FCE1 475D2E0B15BAAF27 7CCA203D51FD15D5 F3E7F6CD97F45722 700E60005730C62C 84EB4F134C6E0580 384408E04749C4EC 5C552AF70ABABF31 E75C7BC632EF3447 ED48A3A01FEAAECA 74ED2DF946C1C144 2B7737F40F7D5B87 6D90B6E39C8C762B F450667AF73E873F AA4190727B22A151 97FB9102F5F0210D 8B9A6209D2A1D794 C6A366C7A07D691C C7FFE7DEDB3A80FE E8E4BE1C327CAAC5 364B2D2C625E1F8E 8AFDBB0873AB207B 3B4CF43532483DED 1AB6A22A78C66F8D 9646DA5295C9AC0E 5B54B4B1DF625CDE 45660CE69E3DA764 12968BA99F8ED7C1 CF2E3461EAA535F3 6DACA4B46E1DF4E1 8F80E5E1ACA923BA DB5A6E1EF473BE09 BB5316C89D50B970 85D4BD5A448FDBD8 1A00DAFE9C886A48 B17192E5F7DAF4B0 AD2B9E852D757EE5 DB2A1FB6C4EC26BF DF41972BD289237E B0113D8F9D8ECBFB E43996CD36F64DFF 2D57015CAC1D574A 311D49AA88D29D9A 7A63A544A7A5D2DA BFD96C98654F4B5C 974434BBCBE02247 27A7A8B58F3DBA6A 240AF9FC05429C19 17725CF7908F17A3 CB51B0B30CE4F824 B9D1D5B0502E315B DD003A8C48373270 3CDFC18CBB8A3937 AA49E074BDB2FF02 355D5FFD41A0DE06 B98DF8CBBBCFED3B 6ECC6CA388A42E6F B4BB82EE7C26FE89 22F8425F033AB0A6 CEE78136EAB65814 42942860AF0CAF16 7E9033939E95F3DE CA6D4B69B2196F50 0586EAC7D58D2861 7EFF3DB154EC05C9 B920E5E6B7A6ACDE 4D1D3523C599E271 92CCAFB71F836678 B6869C4BF4FF7A42 FC940AEC1B6CE04B EA8CB2825C144955 F264308876FACD73 8DF75137E643E016 0180B8CD1A22D2AB FAA30A383565FB93 FFECC31EBC476663 EAA4077AED437CB4 A2ADB7AB31BB7248
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309151259 (name+title). Key = MD5(password) = f3407217cb5bfe57483ffbbe07e7584e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 966a5732-95af-1339-ad07-2900b0cd491a
  2 ee86b172-5b07-1e7a-aab2-7238d929458d
  3 02f49544-1729-55c0-b793-3b260b9a9cb2
  4 679278f4-1ae9-7c38-8e30-42649955aefd
  5 fd1e509d-c81e-8e36-b70d-7e53ed738384
  6 ea229277-f09d-1fb7-9dc7-a606f69e5332
  7 663a6586-824b-3007-9037-f630a27d0317
  8 6b84b068-14de-03f2-badd-2da5a365c02c
  9 5c0d759a-f777-44c6-8ac0-c0cb799f0e3e
 10 856a238f-3475-80ca-a23d-1541e364c81c
 11 91f0e15d-a7d0-23b5-a932-729b3a3ddf1d
 12 3433e4c9-d2c5-0071-851b-9913888f5781
 13 bd75c217-8f29-12ce-9c3c-105d7f6b8fb1
 14 9aacfbde-1527-05ec-9902-0944a3bea917
 15 0dac2c9a-60ad-1a9f-83b8-cd60eb50f28b
 16 9342b9ad-4e3c-7789-8140-e6cf075f0b04
 17 f02b2e76-75ec-838f-9735-4da3986b5210
 18 d94c3c7f-a2c4-14b0-8c25-0d57a36e1a9e
 19 ba43e67e-601f-7037-a482-d6c288eccfb6
 20 ad9a6612-ac7a-8999-82fb-a1776475a77d
 21 0102bfa9-a173-6fc6-8dbd-7942bf97f578
 22 498e670d-d9e7-0e59-8e62-dd977c0a43f8
 23 6096bdf7-9558-4713-95a4-92ae68ffb724
 24 2a26a97a-43cf-379f-ab01-4df0dab9baf0
 25 0b73468b-e3b9-46f0-b17a-7de2447108c4
 26 67062ad1-f47b-315e-b583-1125c80281ee
 27 fba89b94-eb64-144a-9802-683b3c6ed2ae
 28 2a5e6981-3c63-52ab-8782-04aae537468f

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1157813048201017817860434315. Exactly this sequence comes out of new Random(376).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 72 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs