A858DE45F56D9BC9 archive

201210081326 115aar

explained decrypted filler

seed 776

Metadata

Post ID
115aar
Title
201210081326 → 2012-10-08 13:26 on A858's clock
Posted (UTC)
2012-10-08 17:26:12
Timezone
UTC−4 · title 13:26 against posted 17:26 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,768 hex characters · 1,384 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210081326) = 7add8461c0e63bf83cb0eae82c67ca20 (name+title)
GUIDs
43
Filler GUID seed
new Random(776).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
460 · predicted N = 43 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

481C358C7CED7B1A 1D8BE86DD1C5B385 ED836F7440227E69 18357B9872C0334D 305870F8F3813E7B 689558C890A8975D F1EE463B348DE498 CF7B89C65D136F37 F22945FCC7931BE5 6F5EB26637043258 A7F12DA039A26706 E4794B22E15C2787 7E56A9C43D03B37D 6DFC4C941C63CCCA 44E9E931254BE989 86C1177D59F051E4 FD63E5BC6A2B82FD 1AA7601B210A4D79 C7C9290A7BDC3FBE EE1E3E54F1C8AA88 E14CA63AC8ACDA2A B1591B3B84120B48 FA57AE573524A3DD 1E10593EC7AF48FF 373358725BB2CDC1 21B13BEF116B5A7B 0117564DA88303F6 9002B68B2ABF6C38 F0CD6424D26F8FC3 8CEDE15449F8392F F857DB4F002341CE F8CC46D4DC78EF61 845EBE530F04196E B5F0363BF7B3A067 190E9FC0E7E333E7 41A9B07E006CEC80 82DB3359BB092891 0797D109AEB0E659 2F0C784335CD08FB A8BA4F64E39CD2A6 577F961AA827A1D6 C2A12E0F5E0E6B19 6B97E5ABF0EE294B 43234208DF77516C 84232E7D4CC5FC5F 23EAFB5B5B91E8C6 F82B1C2D839257BE 7536B9CC9E1FE5DC 02955E1817F50A5F 0077F4E5F59F5686 8D971FD417CE5F7B EE4BDBE25C0E455B 1D7F250A78A9871A 6C82956196469509 385602EF1A6D0312 BBCAEBAA929DEB7C A563DC0110FCD55F 753353E7C69F6F1A 0BD265916611EE7D F56B4B3B474AE432 2CDCF5ADD68C8327 1BF8330A9CEDE60A 15AD41836EF5853C 34B4CEE4D858E090 CF9D5D5AE61A818C 2708718E48C93BF5 DC4C18B405AA6986 E004C3E086BE3053 7C6963F3A00C7A1F 94DF2252A082D01C 4F390B3436B29747 2AE3CAA61FFBE5EF 99E103ABAB914981 FBE6D910F7FD1173 0CC70E3263DBF705 71AA40A60E6B7FD4 4320ABE8DA8C8DEF C89DF23E713B3806 9682D305CD4859EF 13C67EC8B3F8CBEF EC95CFBFBB7238BE B1FBA4A06A46D01B 0C394CC0385AC0DC 280EAF965C44BF63 AF0D57BD420CB68A 8C425F2FFF67DEB8 0F0B14D9F29444F1 27AD2BD820EBC050 0505B53309EBD07E 7225DCADC9ECA76B 79AFD729187A489E FD031E81CFFCA552 567600DB7EEAACEA 3040763C81358A9E DFF19930CD905900 3BBEE82421C2BE15 877F72EA6587A0DD 389FC9E6DBD4BA75 4E2056A67CEDD0F8 140D75A30879BFA0 55CC8E8EFB54AA84 B83B13434B828AA4 66D6979BD673046E D28227A5373F3C41 792719246AACAE4B 4C3F1769646CE68B A270295D9DEC0E62 C03C0B8A320DB4FE 1CFD1F788C3A2952 E5D4ECFF9856F18D 56E5052066300511 2C0CE490D939A7EB 3399EBC84CCE7ADD 72307FF2ED7C58F6 9BC0460BE2B743FE 80CE632A5340AFD0 FD4ECEF318019960 709136C18086F426 C658938FEE8D9E87 BAD1570352D43069 33E1F7998FA7B098 57EF3BE2A173BE4D 55FEB93674F763B2 329769942FDBFF73 626C4FBB7F3227DB 44E4DE429603FD37 6CCCC8A2D46161D6 66D542D35699FEC8 530F445F97C5310F D9AC96721D4C8A9C 7638F8B1D2C7D583 91F5AC48D51E9A09 98FB3052F4E61092 D911DA295B94C94A 6076BD9D9627A469 D507A1F669677373 E133E8CD6B6EC9C2 6002ECF0DF2DE896 527698E2FF23F673 0ABAD34D160A15E6 FBEE001ECCD43BC7 15524BCCEC9B377C 3F252453F227EF90 97E253FAA68E0AC8 8DA4BE689B0139C3 26069C4C17B2AA1B 60E95A049B82F59C 9330186D47ABBB84 0EED5E79BEDE2391 67F5A3BB6C9433E9 E4BCC345A62716EB 17C54ACE7D4CD8CE 16A13DEA0A7AC454 508AB619EB45769D C7B9BDB48691C0C7 9CE65770131AA3B6 DCDF5686F35F5FC9 CA634E5F9378645F 7FC8E8842987DD7F 910AD974DC716255 C44B4BDB400E27F6 E85865059558D060 69FB380C0C014B3A 7594456356AE4657 93EC1F842D1BA107 03F45118B047455A 497090B33A773393 1C7BEE481FDA3B28 E4D2C73C01202DE9 1E842DBFBB82A8DF E71B5EB089D1FE38 84DB5C40BE8831DE CE38D2E55D0CB834
  • Read the ciphertext. Strip whitespace: 2,768 hex characters = 1,384 bytes = 173 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210081326 (name+title). Key = MD5(password) = 7add8461c0e63bf83cb0eae82c67ca20, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 43 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b965b38e-47ae-12bf-9d73-ce6da1511e37
  2 47652452-4770-46ae-b4e7-de1b9a06f861
  3 4891d4ba-a668-15b6-bffd-f031f789a050
  4 65787182-e13b-1dce-8fdc-8983e52b4dbc
  5 b5c6758d-5e31-5348-9f18-b2a10ce1c8f8
  6 a365f045-fdfd-67a6-92ff-385490b30ae9
  7 9d0ce4f2-08aa-5ca4-9c12-6fba9c3a4e5a
  8 0a36fc91-8138-614d-98bc-6e59ed4690b5
  9 b37c871d-9746-82f4-859a-6fcf9ddcc1b7
 10 84650cec-4b2c-31d2-a6b1-54f51a511ec5
 11 0f3a9593-8daa-83b3-9612-afb49a5045cb
 12 ae045f21-2730-21e1-a4ef-df7b9230f9d9
 13 789fa2b2-ce95-0882-9436-fcdfb452d06e
 14 3ed1cdd4-7067-1e51-9bdf-2a08d7f06af4
 15 14ecf5c1-0804-103c-a72b-cdd8ca762630
 16 114c570e-0a5c-5cb5-81f8-47d703994577
 17 63f1a67f-2702-04f6-a74b-6b29c1b8054f
 18 71144aa7-f1cf-10bb-a670-55ed1c4bb1af
 19 5d9d889e-dec9-604b-aa89-f00fc53a78c2
 20 54f11b31-1d76-7f14-949c-2c80ef2b18aa
 21 638d0cab-f32f-8c82-85c6-a7aade5f8a50
 22 24ad4f0d-0990-2ab4-8d73-e77bb2f63251
 23 1ede582d-3426-1c8b-8849-78fe0212bcd0
 24 64ff57dd-5082-192f-9f26-0a80764a7047
 25 2ae1b85e-f3b1-66ee-857f-bc429accd937
 26 3c3fc828-25f0-5df8-aff9-fa01e55d9911
 27 1faa2be7-77f8-1767-9da3-c6c5d7770a38
 28 e44e80ac-2480-4174-aba1-72d2300aa1da
 29 d25ca31b-fa70-753b-b319-db31589926dc
 30 00c90b7f-8a0d-0d89-be61-e38527c218ab
 31 46fbe8c5-9f3b-6a70-bb24-bc06143b7d99
 32 52b85245-6d39-70be-9007-a7ff42ac82d3
 33 61ba4fbb-0b80-37e0-ac84-cbe6e9de30c8
 34 b8671556-c5fb-3b18-96b1-70e3012f799b
 35 9dbe0696-323d-5627-b0a4-c9713832184b
 36 e1cbfbb3-2f3b-3a9c-9cae-62b565299aac
 37 ab63f73a-4339-7f7b-a5cc-ea590f95fdec
 38 9d9159af-0f0c-2583-8c10-25021277ae2b
 39 5cc704ad-2a83-20eb-b281-bdfa75fdf0b5
 40 958a2c98-f62c-54d8-b3a1-727281a80447
 41 28279483-b59c-2577-9d9b-b86a2b84f9f5
 42 84cc5a70-144e-2fec-a832-238e96108fee
 43 82d8fd14-6ee6-0664-8b36-8fc48fd4c499

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1411565683820115016782116514706733537225220. Exactly this sequence comes out of new Random(776).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 460 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 43; the post has N = 43 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs