A858DE45F56D9BC9 archive

201309160159 1mhgrw

explained decrypted filler

seed 577

Metadata

Post ID
1mhgrw
Title
201309160159 → 2013-09-16 01:59 on A858's clock
Posted (UTC)
2013-09-16 05:59:56
Timezone
UTC−4 · title 01:59 against posted 05:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309160159) = 2f98856f8a0d31d8120e863fb98f4e29 (name+title)
GUIDs
28
Filler GUID seed
new Random(577).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
85 · predicted N = 28 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

99D34165AABDDB26 8FEABCE61399558F 9ACF5E6E36231152 B30212662ED461B0 9E8FF60408B25C44 E23FF4EB4DDC371A 141E39A42D9926A9 114C53EDD168A8B6 676CFE3E20944BDD 739D7F308E3C7094 31D729AE409ABE9F BFAE29948FE0C11A 20E963A5D3B362FE F6B009D119C8553E 2921D39F67C3347C E6E65D24C63AF5D4 2937C41357463C91 F2074C44683C6441 63B2D9BCF7E91759 3DE4C4B579A25256 792E70FC82980B80 1FA5F359A8C0933E C0948EA245966685 D1ECF3F292A27079 3AE99C484A296957 37516505013DCD24 056207D5331F3D26 26BF7708D0EB90FA C5514A91CF60BA3D 89D9C1E4DE679903 E2EDD2A64A3E4EB4 0AD62FA088473492 CA77BF876B58CB5D B7DCFF191AD5A1D5 7186C74CD06E8CB2 75FE98CFAF4CED3C D82FCB4C39421802 FB00BEA8294F0DC6 85C42C1CB4A0E45C DC8F5A2D7DE4CF7F 1D666990DD1F5F8F 879992FF242C8E87 5BE8C184AF07015E B526E6D1C9BC8E4A 613641575291DBEB 42CFD41D5CBF4501 DFC43876D9C8AC9A 975C06B4539EE3FF 10112F792762A74C 070A25F529695810 1D287C9C81F68B99 54B4AB5DEF4EFC55 0D1A1C22A15FEDB2 2521EED60F2DB6C6 E55F8437DF332B39 255E25B3EA2D9E24 C985491CF7AF3E4E 399B6D5A0E7D0799 EFC0476EDCF96D4D 4DAF1FBB4DD2E142 46BBB417C57984B1 CC1146C0A11C2969 4AF554A1C615E850 0CD66E59583D9346 089E2E9D4DD86C8F EA3FD40CB67E41E6 F89897945425D024 049E0885065C4A67 3C59AC65094334DA 985AC68A82A93223 6A5D0EB9F923C83B E67B8E9336210040 82BC1C4CC8B684F0 7BCAB1B96C8C118C 73144078E8D5B9EC 62F180BC8AAD272A 5B553A82B5DF749B F9CC9C9B2C279526 958D5FAC0B6D623A DFA435ED00253DB5 C531E5C9BA415AC2 4599452F0BBE79DD 55EABE3576E9299E 37F5BD07F9157FFE A80BB2398B8A72A4 FC241B542E187A47 AB07ABAD376D69F0 E16DD2A222790B35 1CC1842F9F2BD74D 2CF069B96484E895 12323642483CA753 D4BD232DB2DE3E9C A8EFDD3864941740 5C35D4EFCC911E42 0507E6067DF22383 87556CE62865DB30 E87B1C7DCBAB76FA 00CB53944F9299E2 B321ACC7297861CF 41209EE30EE28432 68372CC04FE0FA89 17D6628063EDBEE1 8B087C1424F8A5BD 8FFC32EB88A2F6BA 803DF9D38B2E33B7 9383F75A8D5DDB78 C11D5F2096C1D74D E660027A1BEBB552 791927C39D8EA11F F19893AA561C3E1D 4301267A462CFAC0 C1DFA03E76BCE2FD E2585F260C384064
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309160159 (name+title). Key = MD5(password) = 2f98856f8a0d31d8120e863fb98f4e29, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 de22107a-16ad-1480-aa14-4855e180f905
  2 852b2349-99e0-15a7-ab4f-d73415b8cb34
  3 eb2d3ba3-2590-01c1-9272-afcd17859c34
  4 c83c5952-44ca-69ee-8ca8-549186a8f09b
  5 b2e9cc53-143d-6d47-87ec-5afd325d0094
  6 85a4f059-777a-73d9-96bf-f77c2357cc90
  7 d4d7ea67-0e34-35aa-9925-bd0d041e916a
  8 4fc6c516-fd1f-8fe9-950b-dd51e1aa4207
  9 1a042cd7-ad38-3535-a55c-fe0ec3c496d0
 10 d5279ac6-f394-09e8-b922-96f372813f20
 11 16109adc-1e94-3992-b195-b9f6c5373133
 12 7e6f71b8-17f7-8ef4-bee8-e51f06c44e1a
 13 895f4507-327f-2af4-80a9-2478c35b2bec
 14 29141907-b152-5706-a366-7a37656e3a1c
 15 babf5c5c-5d69-7a48-b33c-223bab1772a2
 16 36a52e33-1b08-3d6a-8730-4c4b6f3ed75c
 17 d48155bb-5961-3934-9ec9-45f2545a4e6a
 18 b04a935b-0f17-61f3-9695-8e6a17bc5e0d
 19 7424e947-aa1b-2885-9dd1-7b0db6bbbd45
 20 206805ad-a480-6f45-9f54-427da8add4ea
 21 3f730530-6cd6-4273-b40d-07543ea1dcad
 22 ecb4ddcc-4d6e-3722-b925-5d7930b76c41
 23 532fea98-9aaf-4a03-b948-cacfc8e0fc0b
 24 747d29a3-b0b2-5376-808d-782bc8e7011e
 25 65c9b060-3b76-2d31-bc33-3e7bb2e2a4b1
 26 31f61756-fbe9-5b42-af7a-d1831b9ff2ec
 27 8d196158-3af8-0e84-91fe-e1a0386a0e88
 28 9a705710-48fe-12f5-91e0-c68d6708504e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1106673830382573362643452501. Exactly this sequence comes out of new Random(577).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 85 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs