A858DE45F56D9BC9 archive

201309151759 1mghh0

explained decrypted filler

seed 976

Metadata

Post ID
1mghh0
Title
201309151759 → 2013-09-15 17:59 on A858's clock
Posted (UTC)
2013-09-15 21:59:56
Timezone
UTC−4 · title 17:59 against posted 21:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309151759) = bd4c69339502867bf6578e84d7a3cf4c (name+title)
GUIDs
32
Filler GUID seed
new Random(976).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
77 · predicted N = 32 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

79D211528B8FFE0D B942D3AFD5F7637C 6F225688EF90D26F 86D5EB4CF2842537 FCAB4070A3A940B9 DCF1E062D2040BD9 4BE17C8369C40147 0D123ADCDE032F50 1D91535DEDC7A583 71FF973F21237587 4C75AF2A536307ED DCE8EB5BBC3518E5 8769EFBF3810BD42 0AE55DFE6B8D1249 95F70AA85E96B079 666516CAE06813D7 0DBE2C997B615928 A228EBC62B25EFA9 AEBA550DA9CABF72 1739496F80C4B1BD C88C3E501FE829F5 65E79C0FA3C13DB9 93323C88E8384567 C0A27A9D6C04B1D7 F9C3384A0E341EF7 B4C13298A9EDB247 1F5E6B7BF22A33CA 0AAF474CD2E6CE8B EE8D58582EEBB35A 01413185796A4F03 CE123662C5A86ADB 6E4AD05CACFB9ED2 CE987AD5CD70F145 3F3F2DF14B163E7A 874421B5E6BF29B3 41CF7F46B9CD744D 720AE9F0516AB525 71D5F8E26EDDAD52 97A5618004145E3C 5D29C746AD725AEE 0E0330F8A56D84E9 60E51C798C995C0D CEC0B6A08DF02E4B EEB06830BEC4A43E 75BE1C8E8BA7D9BA 398CFE4C47768CE3 ED4FB96CD4764D60 956A37A96EACBBE5 DAA6AB9B0A6C3C3E 393D2FCCB0BDD42F 4D5E2EA1FE8D0741 789CF46FC3979140 DD805C8A83791D12 5E91E0DF4B98B86B 11A141EBB949CB00 1D3731795AEEF9AC 343E395F6187EA3C F2556F0E38349924 7A5E8CC2C59B1AAE 41274C5D555217DF DD7246E223F0E738 F61A5F1CB93F7E1B 59ED06706A014112 53DAE5076AAC7ACE 4B40B25263A318DA 563ABD6AC15EBDEE 66EDE344E6D88981 5C73A9298BCDFBC6 1FCA6F0160A9FEF1 9F9A9FA7D09848FF 4C29924B4BEBDB82 7340A529802BE99D 3806F5EB6F739998 838A00B4F4C96DF1 3B96FEDF1F6E5386 8B310C81236690AB A2BCA5A738B1EB85 ED4241F62B745F86 1080EEFE91F6868A DF8CEAC5FCDEBE0D 75397A81CCD63186 0EAA90720AF36312 01567925D7D25876 384892E39AAE3DDA E70731A1CAE19003 BFF74CCE83312857 A0BDA26844D95D5B 83DE8F6DD2DC826E BD764FC8F9DC6E34 35EAF856F45BEAF4 39BCD1FA40B6725E CEA5A09AE278FE92 D4C1D0C8E6C9DF4A 1254E2F9ABDE7E42 71751DBD789CEC86 835143E5649B9133 D1EF2B91146C78BC 278F59A6C493D2B4 163631D7AA8126F1 F20A5DF200A3102A 79C2E168420D9DF3 4C1AAB6722C2D528 462D871B23464F52 524BE788439245A7 D90DB504A70443B5 868365F32E67D454 5C425BEEC119E06E 07EAA613B0660F14 8C44F813D1C961FD 3133134BD3DA0404 7C5A090C4FFD7A28 0031B9151D8A1CFF FAEC4CFDBB844B08 B4304DA1C3B8BBC7 B40A8E68F69418AB D0D1D28C4BE39A29 24BEE0E42AEF2A91 A20F32A7F9D098AF 2D2BD5CC5FF5BC29 B12E1E6921D76A43 D8AFA7E12469C67C 9D87AAF438091FA9 1F61DC8BEDDA2326 B56EC2ADF58A3DAF 16B3349F1C790FFC 7BEEDC84A349D1A9 D7EC5BB964954BDF AF35194ACBA6A334 837BC7F251996C75
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309151759 (name+title). Key = MD5(password) = bd4c69339502867bf6578e84d7a3cf4c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 39cbd09f-e3dd-50ab-ada3-c303ce714054
  2 2404dea4-3654-1031-9393-3d59e308b2f7
  3 15eb6607-0282-807b-8b5d-eba317d75bcf
  4 bcda2dc1-db65-7e43-8479-973a539827ad
  5 4daab2a0-68e8-7b01-a34a-691550b7f625
  6 6254a78f-0659-409a-bc79-972629e7167b
  7 237ddb4e-9e57-17f5-9f68-de4afb7491e3
  8 e26c8788-fee9-0a87-aa1c-a2e79bf427a1
  9 3f46609b-ce05-6c93-9bd5-5d5fbe7471b2
 10 a5419fec-3ea8-18f9-955c-f139a74a8c74
 11 7ec265af-752f-3d76-b3cd-fd3c156c6458
 12 3d9fc894-14a8-4dc8-b610-5cc9ab07a796
 13 d50bb863-39dc-5559-a2de-89da3bef031e
 14 0d270961-6784-2083-b543-4cb1c710664e
 15 47067e28-2aff-1306-a10f-1654c25934ef
 16 3da18ae0-a61a-5da2-a8f8-196996b77c29
 17 57f877d9-178e-1367-82ce-cf3df7fef895
 18 5de9f6e4-2ecd-1653-b375-f0ac526b9a4a
 19 91db2dbe-8f1e-055a-a452-7c72ef75edbb
 20 985eab25-150d-27d7-88d5-5dc0bb1c43c8
 21 387b0d55-d89b-4fae-9e5d-010971534cf0
 22 4c565956-adf4-20a4-8dc3-b09c417b6a12
 23 ad96654c-6402-8d3d-a0d4-b8dbaec46e98
 24 ba2c829b-2b27-8d0e-9638-e03ac562db16
 25 0cb8dd18-be7e-3cb6-b8f9-b1123631ddf7
 26 f3c4a791-7678-2ed7-8a0a-babad09e6ab9
 27 17c6be57-e4fc-008f-af5f-ecd25c1c3756
 28 3ecdf029-1fe5-3903-b1cc-cee1977b1234
 29 4e004eda-5904-14f3-b612-8131a6a28aa2
 30 430c70c5-fe27-17b4-8ef3-3574605ed095
 31 23b68ba0-7da2-4715-8660-7ff226f3f8a3
 32 74bc77e4-8ee4-461c-9f32-9118c59a1849

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 51877410613452151102428832031144. Exactly this sequence comes out of new Random(976).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 77 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs