A858DE45F56D9BC9 archive

201309160259 1mhjhu

explained decrypted filler

seed 513

Metadata

Post ID
1mhjhu
Title
201309160259 → 2013-09-16 02:59 on A858's clock
Posted (UTC)
2013-09-16 06:59:56
Timezone
UTC−4 · title 02:59 against posted 06:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201309160259) = 7d3cad22c596ba7d94efe09ccec8e7a3 (name+title)
GUIDs
28
Filler GUID seed
new Random(513).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
86 · predicted N = 28 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

1AA78A2B41CA4F9B 17557DFBC3D2A0A9 F513C9CF1B085D10 1AC0A8650D4DA8B2 C6EA968BA18EA01E BA21D24BDC54EAFE DD5E066FCD1CE248 FD3232BCC30C8562 339A574C971DCF99 AB24F2055586D79F B7D01926FAB1DBF7 5A15A297594965B5 6D33BABFCF5A014A F6C0AB4C7A017C5B B2FA3F4928595F2B B528BBFDFB377CDE 24A713BCC823B864 3AB7BE050386C8F9 3514DFB068529BE3 516D9B72C993F6C7 14F2BD09A8D72A6E 9740069B66EB7396 632AB4680B2313FB F2BD3CBD6BA20A19 79894D9A5495A7EA 279E95B4BA7A8FC1 8397BD9ED52AA354 11F1E795E5DF5E55 C9C4104F9646BED9 59F19D621A0B038B F88ABCE22514A357 BDFD526C6750D53F E9AA63A31168A537 F32414651258DF4F C18890FCEF747AD2 74F35DECB5D25D26 BD48EA47EF459C58 DBE235DBC3527B2A A202A6714F580A71 97249F578982B91E E27D991A33D66521 114D216F23B68188 DBC637F6582BD685 550C50A095F26D69 F1105C0647F5B414 A550282BF23705A6 97D942370279EAFF DA7DACF47CADC9CF 0307AF4706669919 47450DB0F7DA32B8 1D680EB4F5F9C523 6246F3074B7741DF B3C2421B43B70F2E B870A406FB54F1DE C9DB3A576AB6C4C1 C266F538DF4D3951 1CC00B42A876B07A B302E69367FC1832 FEC560B3D6985993 29D0E628A6D4C57D AD326D7B712C4B3C 15F6D1C9587CA797 1197FC86A3C43419 E78A505D52843899 0F322BDFE32F6020 8E8C2607714E7C1F B875BCFF32D5FDAE 11057B255D1ACA61 CC10C647991FA1D0 10AD5A2AD8C092CD E1B0503B4B0318C2 022BDBF84DE02246 062850F037AB55AA 0A50945C65AE14E7 04D2F183E2F89F71 6C198E20FDEE119E 6000A50EDF4B5C94 AE758F44886772C0 38B176CDB2376723 C6C288C1DEEB2151 A8A95B5E083E8707 C498877A38E70725 143ADC6852A786D1 2B1087CFF500F41A 7FB1864BE1DC9AE3 6241EF9DAA1D0B4C 308C4E3EC57DF260 1F72C45934549CFE 70541C661A166028 C517D5846C3DC749 AFC6883EEDC476C4 7329CAE09CDC2557 C20CC6E09D0DCEEA E52BAE3F94390398 CE15C021D8FE2173 24BBF2C1BA3FE860 129DF80F1FC771F0 8A690C97BD6691EF 568ED661C0170BDB 54B4467EE752844D 7A10080EAFD5D682 43BCED10A0611F56 DAB222CB763E93F6 6DB4794C501C82F7 0642F65B94FA67C2 0A0DE8759BF785A2 5C7479A56098A1D6 BD5AEFC11312020F A8B288E90A0E7FBC F0AECF11A8A7E166 C0FAB60181D40855 1B9CC3594F925369 41DD6BB83A6B019B
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201309160259 (name+title). Key = MD5(password) = 7d3cad22c596ba7d94efe09ccec8e7a3, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9160f43b-7de2-6fe2-ab72-e08f88d69bfb
  2 70dff14a-0d69-33c5-a06e-6e6ac6c2f896
  3 410f41e9-b3df-38dd-88dd-85b074debaff
  4 3db52319-e549-05be-89dd-f2bd57f5f473
  5 1b56db3f-e145-7f3b-883a-e763a74a990f
  6 459bc0ad-12f0-72ee-82fa-2fa5cfed7011
  7 02df3d06-efc6-6101-9107-6cee9977319d
  8 4d2be581-8b3a-7778-b1ef-f5895cca78e0
  9 a1ef2769-2406-3d06-b159-09f17c88b9f2
 10 d1a40d99-093c-3271-bd62-39031e56fb07
 11 6253ace0-7ed8-2d8e-8724-846074d0279b
 12 857bfaab-4ae6-8233-ad8d-6405239e22a2
 13 2b123e4c-6b7d-295d-9969-99c48a682112
 14 e92138c2-d171-3baf-b444-24b9d90427b8
 15 6831dee4-6fa3-0252-9845-6490051783fb
 16 ee555c4b-d364-3bf6-b4b6-fe94903239bd
 17 7311292b-3134-4126-80da-85dbbd74dab1
 18 02698f0c-7ec9-07d8-92b3-6f3b54a5e5c3
 19 b5968e61-aa1e-5a17-8236-13f09121e59c
 20 f8177c03-954d-8e70-bb72-ff6e7e021b75
 21 2293384d-bc4c-80fd-ac57-3b987adee1ea
 22 a080843d-aaac-651a-8b00-266cac093dec
 23 194603be-5187-6f2a-8a07-11a2cbec496c
 24 86b336ce-3dd3-2f31-9069-1c54a44e0f9d
 25 bea0a8db-bbbb-8345-aad5-7b18015d24f7
 26 b093397f-a2ac-4098-8d52-618dbd8253c1
 27 06723ac1-93f5-8416-8ecc-16a3878497cd
 28 5e88d6c7-8f8c-4a9b-8a73-cba0529aff88

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6330776733282303405886628484. Exactly this sequence comes out of new Random(513).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 86 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs