A858DE45F56D9BC9 archive

201309151359 1mfznh

explained decrypted filler

seed 172

Metadata

Post ID
1mfznh
Title
201309151359 → 2013-09-15 13:59 on A858's clock
Posted (UTC)
2013-09-15 17:59:56
Timezone
UTC−4 · title 13:59 against posted 17:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309151359) = 42633a934f587a348fd8a3c050539c30 (name+title)
GUIDs
36
Filler GUID seed
new Random(172).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
73 · predicted N = 36 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

A5F947177E3CBD97 FE4A88A2F3F95AE0 5F765132886123A2 FA69F04377A42D3A 858626117122AC75 D9A945CAA4A33EB8 CFACFD5DAD883EA2 494B45AE29DB8182 7F03D100F8C1867E C71A29A76E3D184F 1BCA57E30404E87B 0B3DE029BAD5D035 7B5B1EA1C9A0BE2C 551755E7F7BA2ABE E5D5DFEFE4AE58FD D38375C108A21D15 B59817C246F63E54 3669FB831E2C55CD 848A3DE52CB012C3 F0AA3FC92169C9CC 4356BDE94933B50B BCA8A1444BC268B3 306C5FFB4460E4F7 5556F5D6454C9F92 885CAFD08447F6E4 A7DEBC501D8AE7E1 CA7C65C35227B4A8 6EC5463667F27DB3 095BB6B95350650F 0E9ED2741509789A 09BA88022809114F 5BB9150906AF38AC 82AEC4E0C948E068 F7FCBC63BDC8E799 46EE3AA34284402A 779E5EA34132D4B3 EDA6AB5DD4D13425 F34D9A95A3EA1072 76140085823B7F70 2602950426AA5D72 8B75AF22B7E2A160 88A12EF0EABDBC90 A26AE63FD6DC2098 D6364156A3979198 370210FE77D9358C C0F2559FE49FFB40 18B24AD3F52CE6DA 4EBE620DE3891EB3 937FD76226091453 3EE2E1C62A9106F5 CB0AE217E78C3C68 263641680F3D1741 D6D10C218C9262A7 C68CAE89142BA9EB E4EE7245614E84E1 B8BE26DA5A1A512D CE8B0D68FFED799E 18ED6D9C4BF10CDB 0FBD6ECA67160B43 BBB00BB50A9D57AA 961537CDCA1E029B DEA83175AD6D76C0 958944D5EABC337E 259D32DB08315547 434A05C9B530F87B EDD6F3EA4BCCC4A1 F689109E735C5DBD C7BE7CE9348B48F1 4C50941F816E2524 D7FD77463533C69E A12EEEB5D1A0969A 5F15A2CA76590A0D 51F8727238093ACF 1AB32056E1A50C25 7888DE30E5984C57 2267A5DDE6D80507 6D0087C80FC70519 3960199B1BCC9FA1 046B9A5300429412 F4D499A0EC4D7F1B E5A4BE5FBCBDA6A0 A9DE8BD436350931 803CB845588C4E86 617862501200D33B 104E19BD51FFDD6D 4A85AEFEBBE42C5A ADFBC29770FE194B F4CA51CEFD27A12B 646D0796D5A462F9 E4DE52CBA269DE78 47D9E3B223859999 1F55FFCB83A1A07D DD4E49438DEE638D CEEF2E8E05FA384D 7279BC464734F693 F8D15BD9E6E4C94F 879517FEBC891D76 34EE754B1B1CF44C 7815779C82CE42DC 090F2BD8E0E1CE6C 09140D8D8A2B44CB 2E9E70648C93549A 8789736AA5762C15 1691EB295D311ED0 9EF7A33EA7E75688 47F89C58B7997A1F 8D5F31ADD7EA58DB 34FE24E28FE5B845 1CEB8BC3A4028C40 FEBC3F1B4333FEDF 0635835F2381AF03 9ACD7F26318E49E5 E915BAB4579C516B 5397BB172D95B02C DC631AEA88F3E1E9 BE04EBDF9FCC4CFB 2761434454A951BE C3936409574B2089 9410355E1E20A252 5BE46980EFAE0E21 560CE3C2377EDD4B 5F68EEC8978DE02C CADC26F0E6EBB1E7 8BC3CAADFCC0FBBB 94B802E05E92B715 BF69C8B371FE357A 8B02211815E072D1 6D5096B322B8AB3B B0517F352C51DBF4 764FD3E5CCD86BC6 8760DF2A471B562E D9373ED9AD84D708 2EB03198F21E4B14 22EFC2B98CB4721D DD161E05FF336FE4 B9A6319A6390B0A8 720D7891BC99838B 86AC0E4D3554345B B6DD4D34C4E8A285 C7CBD5B7ADF09BAE 191408D0C9898F32 49D764DB2BAE8EAD C74B5FEEBAA4360D E5713AF7672B8491 4D3C049E11CF0214
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309151359 (name+title). Key = MD5(password) = 42633a934f587a348fd8a3c050539c30, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 885913f0-b89c-5b30-a2ec-c1cd6bdaf552
  2 5b4a404c-3423-2a10-a7ae-360c95be378f
  3 96aa1f90-b558-8695-8546-14573f278d3f
  4 d5baf8ca-df78-2de6-b20f-ec82ee094f7b
  5 898efa86-1051-7d8a-958f-1d07382a9928
  6 0b416fa7-63d6-7b44-80ca-c139fa8b65fc
  7 38d989db-884a-8dab-8bb4-7b97a2ea192e
  8 f2f43dbb-fc41-6eb5-ad61-18821bf5a27b
  9 2a2244c5-6f42-2a86-9203-55ae27cce590
 10 a4b287a9-811b-64a4-a4d3-6f4c07135406
 11 a80d3069-69ae-091e-a9fe-960350c67176
 12 90294383-e4e3-68bc-86f6-8c264835c0c4
 13 8d32de67-c181-757f-bd15-791d1e3b6942
 14 2363f38c-0bea-87ab-9449-5b85e8ef1934
 15 279766be-be63-338d-a5fa-93cea4403ca9
 16 281663e4-c298-41ff-bc1a-3828f7b260fd
 17 3224accd-f74e-126d-a640-70b6d136d343
 18 22c9d20f-8502-5038-b6ed-e9dc3187538e
 19 8292e78c-68c1-2b09-9a1c-bb2a20cb1028
 20 0cab2252-443e-85eb-a2bf-2a605fd82ab6
 21 7825d802-ddd8-6ba9-900b-d434c36cd53e
 22 7dfe6083-e1f1-0bf0-b2d8-df6bbbd97ce5
 23 dc5858bf-2d10-0676-aa79-16b7221c129a
 24 e7ee2d54-9890-1e60-9334-e33cacc4198a
 25 aa510df7-9fbb-5a1d-a93b-832f2f285f33
 26 417de05f-988f-17cb-aa32-3263c3f42137
 27 e2b2c68b-71c6-7ecb-8116-14debbd47261
 28 fe43a2b2-c74b-28c9-80ce-295ebcc37c00
 29 3f37bfe0-1194-06d4-9c1b-17e8f6b91719
 30 5e2df6aa-9839-59e8-8acc-472422d5a857
 31 13751bc9-b1c2-6c59-9530-dcea70adcfde
 32 89af8789-9a2a-6e67-87b0-7770570cb38e
 33 6f49c702-1877-497b-bf6b-9de234e63d6c
 34 f751afeb-1a9f-2df5-ac87-2e221148c3e4
 35 eec8f9ea-01a2-6de7-8988-5d70fb16849b
 36 b679727c-0fe4-1261-8a2f-5b571a096448

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 528277862606783415286001517205664261. Exactly this sequence comes out of new Random(172).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 73 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs