A858DE45F56D9BC9 archive

201310050714 1ns3ls

explained decrypted filler

seed 882

Metadata

Post ID
1ns3ls
Title
201310050714 → 2013-10-05 07:14 on A858's clock
Posted (UTC)
2013-10-05 11:15:09
Timezone
UTC−4 · title 07:14 against posted 11:15 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201310050714) = 6a6bfbfe38d39a6271a047939bfe87a9 (name+title)
GUIDs
40
Filler GUID seed
new Random(882).Next(9) ✓ verified
Run
Run 53 (seed 26,950,390) (seed)
Draw
155 · predicted N = 40 ✓
Machine boot
2013-09-12 09:30–10:30 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

9D24BC24D243E7CE 1000E708D92E08F1 41C84CA915782E34 74E1B5869C992A04 B2842C2C1BB481C4 9E8E230631CD8C79 E8BE6A10FD7CBE03 941FB1B6455361C0 62A4FB3638983394 755EC7CACEC0F61E A4223ADF231EAC36 72C8A5A4F316B6DA 8279228CF8638E5C 0F396F6FC7BF2E5E 107694D6467DEF72 2971CC7CFAC03AD8 957A485F2FB9849A B73814127F71CC2D 3EF0915FC3577D92 77009A5EC3E545D0 2B89AF0773F6FD4B 8BA08E60F5926552 263F1E07076D0C25 F8B69A014A620CE1 AB45F2586F4BE914 B6CA17A7F66B8EC9 24DE9B5F260A9725 4BB60438D7EDEDE6 0820AD2EDF5CABF9 B83FD1096E4583D5 273A9CD020550B43 30F7340D205EB423 97263724A3EDC590 566F3FDC96C51568 DB03CC853DE323E0 A3767A8DCD2CE132 729CD6FBFFA7241B 26F68683D93BFB8A A9CD36950C4EBC75 0B8C01232DAD1DBA 454A79CEA27516EB C2596837BA713DCA 9296819899ACD97D D37EDE5E6A135EE3 2986C3BDB7047F46 02F9E57F11F01643 BB5D0269145163F4 B07D210812542B6E 28346921ACDDB1E1 B269D4B951676A47 EE1F2F18A8E8A2BA 6751D9A9FFAB9B51 23EA239D324F0EA6 C393F6B905F3CE02 35F456834067F7BE 76E1A6066B9D3CEB F4D47C4FCD65BADF D7C80C49AA713386 4182C4EC29815312 6F76B1FEDAF884A6 C365EC74DC5967EF 33D48EDA28BE1DDC D118594A3E6CE5C6 A7CC02485445493A BBF6BB80BF6DA93D 876F57703E47B878 EEA01024E1F39E28 4BA84814FD31578A C019D868AB054BCF 5C5A5E0E947C7050 C9AE49679E29B66B F55CEBAC92C63E0F E5A21E40E3DD7F5A DF7A491762F6C569 80B36958EDA9A1B4 E7A35AD732B67D3F A45B2F20057E999A 46F97E80B0E68507 E85399D7CDA86F38 8A1F364EC136C52F CA7DA9ACDC1B5FEA 237B463D9BFDAC8C 0E9C808313AC3D07 338761892D49E5C0 F7C164478FEF91F4 5C07F9E2D0304E09 7E32B8E516F1E143 594B291D24CD63D8 21DADEE255A84479 A24569673996E2DA F19788E15C415A61 8D0A339A7C40D0E8 2E6E3AE093AFBD64 1636E608F995EBDC 0BCFCFC49E74C45E 5389330252ACC7ED CDD129BCDB8928A4 2B52602CF9B3B13D ECF5237B2EA3EF40 24361EABAF84B9EA 594DCDFDFEFDD791 E2D1F275C0E6B891 48EA1BAC0C77E870 32F6608863F58C79 4E577F80E1B8AE4B E18E8F88009E4E88 106D2750BCF96D48 AAFF99D7A6BCA882 198D339025F62B56 C5B463053F288CB1 EF4E4E2972E9963D 19E287831CAC2BEF 5239D087973F250A EDB9E205B98F781C 3A6CC39862526AB6 11B1D8A3DC6901C3 651277BCF66BF4BE 78EEBFDEAC331A66 D6201B185A224C35 559BC6BFD9C9CC13 192B55B9154DE355 DD1B07850FE2E613 AE2EDF8A083C7893 95A066FDCD7B73BB 6AFB9168A0CCD211 F3C577B3C70AD430 21CE318567B93788 C5FBE93E250B09E0 E73776199AC49273 4E0A8DA5E0CEFA0F 2BF1A4C7D91FD505 30A788A06C6A96BC DD0C2DC3E19126CB 4CB73D9499DB93D9 B74090159260ECDD FFEB9950C6A18C21 EBAD1F444BCAEBDC 905052F767467E07 E0DB2B8BB482927B A37CB3C54ED90E81 03E32FC8707451FA 449F091A289CA653 116243096CB45466 DCA97DE5CAD31C5E 5BEB1F20C6D1B1C0 FD53A0BD15801BC7 6C2E443A2C1B3EED B02069E252B941EC 418DE70C1BC99C12 93FF2DA1AA4D569E 2008727F6DE25C16 3561B6185FF555F0 D9151F521A0ECE4B 75953FDD5E11285C 889D5039543C517D CD6A2C17C17263BA 743122188C5D3692 AAB3441A1D2F4787 EC5099EC527E874D 07CB12D8BAE23F0F 087C5E8D74657B7F
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201310050714 (name+title). Key = MD5(password) = 6a6bfbfe38d39a6271a047939bfe87a9, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 613c0436-2d71-4a3a-a190-21e6178cfc69
  2 b29487d5-dd1d-56d1-8d9d-a58d10457599
  3 0e3185e1-3d14-275b-a5e0-c781b841d911
  4 101bc45e-3e09-7b4f-b4aa-c7c7f94a26f3
  5 ec5d7b55-a344-33b1-b81c-00a1fea27467
  6 26e524c0-d5e7-34eb-aa81-391d64b94be0
  7 cd426ec3-b5f0-0659-b700-96db2b8f845b
  8 a0c3ba99-5464-85a8-8485-a41f24dad52c
  9 fe1c9f54-c1b2-0c62-b3af-4fa5a1eccd73
 10 03d16f56-8e78-4641-bb5a-fc7220db3d5d
 11 40a6e2d7-f8ff-06ab-9f78-fe0fba486927
 12 324a795b-764f-020c-b0ab-575faa4a03b9
 13 1c9c995f-0ab4-8727-b6d1-0159fd97c19b
 14 a975d7a7-66dc-393f-a054-23b6c9f08870
 15 4ba392e5-4a49-355f-b170-c0f61349e8f0
 16 0efd790e-3300-73f4-a66c-df351a10c98d
 17 32e8c782-ac15-5954-83f3-1738fd476036
 18 f6ed60fa-d2cb-7bf9-95c8-4a2f76f3cc83
 19 c948017b-a15b-4dc1-984f-a12df21d2a70
 20 fa553d94-957e-7031-a46f-165f952b0bb8
 21 6ad5da25-849b-015f-b11c-4c24366c58a0
 22 c48fa684-7621-29f6-bbb5-94596aa5d018
 23 d26c0507-8466-0a07-9699-ee6da4578f9c
 24 95d88cfb-0f74-1b8e-a707-5fc400916835
 25 9c830760-f764-17f9-880c-a1c05c810168
 26 483f20c0-bd9b-7c30-b2ea-4df40e12857c
 27 47a1a1e8-9f42-2394-bb39-b9f69a286811
 28 ed65a9cb-bd96-1841-b51b-8170a1403059
 29 a686de6f-6bf9-14b0-94da-3220a43b5a50
 30 05a9965d-9520-3331-9597-12964dc53854
 31 c4db6cb4-4a98-72e8-afad-999ecf084e72
 32 08b7667e-077f-71ee-ac94-a31d8a0f5b95
 33 1357112c-0569-865e-a3c2-6b53ab8be9f4
 34 1e8ba8b1-b3ca-078f-bbc5-ab9d2d782857
 35 0b1c0c4d-ef6e-50bc-b3d1-6a7cd4e5e1db
 36 246aecad-0be8-8b09-a442-cd339ad9f82f
 37 cd35c7c1-41c3-54fc-a896-5cdfb243c3ff
 38 1de8bc2a-496a-48d6-b124-fa5b1b07ae7a
 39 1f983efc-d756-3a47-b1ea-603e3cc7abf0
 40 ae61c3f3-9a0a-60cb-b47f-f296376ae326

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 4527330804008337574702011721137780585436. Exactly this sequence comes out of new Random(882).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 155 of Run 53 (seed 26,950,390): new Random(26950390), 4·Next(1,12) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-09-12 09:30–10:30).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs