A858DE45F56D9BC9 archive

201210180600 11nfsh

explained decrypted filler

seed 979

Metadata

Post ID
11nfsh
Title
201210180600 → 2012-10-18 06:00 on A858's clock
Posted (UTC)
2012-10-17 21:00:03
Timezone
UTC+9 · title 06:00 against posted 21:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,768 hex characters · 1,384 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210180600) = e0f059c4554e2969aaf0617b8bd62ee2 (name+title)
GUIDs
43
Filler GUID seed
new Random(979).Next(9) ✓ verified
Run
Run 37 (seed 425,468,968) (seed)
Draw
6 · predicted N = 43 ✓
Machine boot
2012-10-10 14:48–22:48 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
11 · 3
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

FB8FAD536E48B0B4 CB757EDB9CE19005 EE2BCF731ED3A814 398DA0AF9B45EB93 CB54198DA2F7CE6B ACAB556CE13CDF4E BFC108AE8C771634 B334FE96554A3DC6 DE4C69B69855E449 2BA7942837BCBBE9 26994428A3F95D71 CEDF4E7E9FB63E38 92D9736ACD918600 76C628056CA8C2CF 24C28E7095E76F2C 2AAC1843CC528692 024B71EBC28C990A 04D134006E7EB34F 51AF62C49F13A507 E243E4AEF0EF030F 97BD4AFE2CE65C8E 9EACABC744A6D6FE 50613234A52F15E1 C42AD584CD0F576C 065056121E1A9190 E07A8E22D29D7488 751B17C9EF795D8D 65C78B2A0DB4A804 E8A1D2E89ED5F39A 7882BE6C7562D931 5009DF6C449DD508 56DC5E2019ED1C6B 3555CF398D9CC759 2F8BCF58EC186AE4 929C3B8BC9D9F0F2 B52E4CB6C5144B6C C30FDA0374FBB2C1 2A589ED6197E4922 BFBCFD7A19678C8A 4E8F08757F720A49 5C8FAB0FC02EC017 9FAC539635CE51FB 19AFB7F6C5C948EB 54E3FEE3EBC63968 DF9F4CF6A6780721 CE1E800482B30A8E 2CCD850D8AB9C2D8 BD945938EC7EF5F9 92FC95E113403D7C 676778FA17000810 1F211F43EABA6144 374A63806DF58865 88361F21FF662DD5 2637562B3CA0D099 909BB7B4130D761A FE9D7F4B9AB027A4 C8C1AE5459BCAACC AC0196D7DF6DC69F 2F4725BB00D1EB9E C13793750C6F93F6 ECDAD2A3B7461A12 21CF8DB2DF7750FA 194AE86BFA72783C 39A00B3C15490436 FF0ED8F48E0C620A 566C7739F5E70CF4 1C700855D68772A2 F4813E7D79A5AA90 0E7ACCC172B16380 070FBB61BD612FCA 91FCA0BFD42C2CB8 B4B3E222744A790B B24E41A01796B9AC A91FC333F079C84C 439455BAC25455AF D3BF0505AA97A9BA 84D5926FD9604D44 A97C7BDBA541E98F A9469EA8EDD0E375 60AA396A063DC1D7 7D874D3163C55E58 62A618D99ADD9778 FF3C0F249F3900E5 49EB14EF344449FC 842E10D2A56697DD B3D28275565C78DB A79ED865A6B87259 BAE8B594287F4DBF 0A0D5BC87B1989D1 C4882F3417422470 CE1FF5EAF98840A2 C22632C9D82C9014 630D55DCD66914EA C335523A2414649B 7FF0629D3823F299 39A2DB4D302EE119 F9771563B540DBAA DA81F3D7589B08B6 E4EF4590D53EB2EB C9A85142DC054500 DC3DE7D4933072BE 40503E0D18C94561 66E6D1063C9D833F BBA25C59F9CE651A 18D50E5C364DC2D4 30ADD28D3A824511 3C7A30DD51F194EF 2746A4C0B9EAC946 85D1F8AA5D5A2DD8 157017B33DE10B21 86DAFE4D368F6029 6C6E740357D5B5FC 64FABA0F286C1590 BBB413C07C4BEE8B 4A329A515CEA6234 85CD1C6C9B391B7B DF8BB85F7CAF3DDF 7B1EBAE55E808C28 F5F5E03D07950689 603484DFD74716B8 3D5B6CF5A9B1B631 B7FAC32DC4279421 1A0F1EF1FDCED22D 5C47E27C2A9EF350 31E1F0CD62D8C74A 59ADCA27A8FF7645 AFDA80E1788CDA51 0EE9FD34BE02BC3A A35C5CAAB9E325D2 EC43B9B4EFC2635B 01E226064C5CF93F 7F2A017C51CB74AA 4D6F0AFCB35B0A31 FFED78EDE907F791 17A9CF972F9D70F3 D3E882A2BD3571D3 2C52658F29855FF7 EF30C7AFDE78E0A0 6D79F54E05ECC31A D26AFAD0EEC0BA46 60026BDF429D526D 8910FAFDC920D9AC 2835CAD8936EFDDA 6EB7314BF1344BBA 7AC721F01A64D32C 85983E988BCF38E0 C7F296F0A751FE57 7DEBD602A84C4E3B 76F8BE2E6755A14A 64764D65DA1566C2 025CE0FB2B16CBAA 46DB54F5043D06F6 FD173C83C39765FD 8F3AF9988050B7D7 829DCD2867C8A8C1 42174C547A6ED17C DBE2DDBE04A1ABB0 127998DF87D5C884 0957470D05D5607C 758896270A73BADA 6280F0CE559F35D0 FD986D51E721BFD9 B7C23A114D8B2B79 A0071B3EB1E0944C A0F78194283F2732 DAB00AAB90300952 DB12A1144C330A9F 4183C1D1D0105427 678C0D1ACF4DC485 2C8205F88A7CC13C A9566908887C0009 C9FCE2F6B0E9F4E6 226E7D951A3CB899
  • Read the ciphertext. Strip whitespace: 2,768 hex characters = 1,384 bytes = 173 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210180600 (name+title). Key = MD5(password) = e0f059c4554e2969aaf0617b8bd62ee2, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 43 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3bce9087-76b0-1c38-aedf-d0c519f5b548
  2 6829b3df-938d-05bb-89bd-e4f129c4289f
  3 23d1c778-994f-04da-a5a2-72970195b2be
  4 e030c8fb-9ddf-401d-aa68-216d8bfd4cd1
  5 0b976c24-28b4-1144-8171-623433475593
  6 dfce2cb3-3552-0520-aab9-e17c078fa8af
  7 d9ee40e4-a3c1-4bd2-b961-02ce0a0920cc
  8 52f7c987-0ce9-5198-a7dd-519e8d068c5a
  9 4036287c-c36a-033c-a17f-b6ce225208e3
 10 912dba88-e85c-20d3-ada8-eca08b68564c
 11 61e14c54-b0c3-4a9e-b552-382bb9a44be2
 12 1cadff10-db09-7a78-9556-b254870d0214
 13 d61107f3-68ad-518a-81ab-ae9a6f11aaf2
 14 b6e67fdb-dc5c-789d-81dc-9bf28b44f130
 15 bbadddb1-8395-2dd4-994c-12a71b9f4f56
 16 36485c20-c9a2-3048-bf20-cbc91ad6ff78
 17 e11d720f-4126-35cc-a938-22995955b21b
 18 972ca4f6-89e3-8b05-8acf-673aa1516eea
 19 f60b619d-2ec4-1e2d-bfe8-f040925825d4
 20 347b76ee-ff46-38d9-b18b-a65b2ec0bc48
 21 e45e55bc-3571-8d24-a516-8b486549145f
 22 0506d877-e670-054e-a4a2-bf768e815d92
 23 e42b550c-74f0-46f6-83e1-09911e3f7e16
 24 55eca962-335b-007b-98e2-7045e75ccd63
 25 f30073a5-8c6b-544a-8833-f595b7d76170
 26 75707beb-420d-1e24-8f89-f13c1d60ba69
 27 6f7d5a8a-878e-5b2e-943b-6eb066a32d9c
 28 36e2cb43-cdc7-2f73-9e13-e357998bfa05
 29 7af3f17f-f853-89f3-80ce-99e32cef944c
 30 3d0523b2-556a-4006-a94a-11d082b8690a
 31 4877e19c-5268-5eb4-b7ca-c9d48ca4b3cf
 32 8957347c-1b7d-29bd-a71b-bf68be8ba624
 33 f8728166-015d-862c-9d22-209885716eab
 34 994ff5ca-9a4e-4c59-a438-6529be39abbe
 35 83c8d950-4930-48dc-ae56-75141f8c8be9
 36 7f17910b-fe66-196d-909c-ad7ddf29c292
 37 87da2e44-ee40-89e7-9f5f-dfa1d806707f
 38 ce1fb0f2-10fc-5242-bc05-d3e5c4d7e43b
 39 5a2b3f11-0ce2-841e-b302-be5eddf2d63c
 40 9ff50962-8c34-7ad2-b7a9-c2464bdb00fd
 41 bfd82023-fca7-0d97-8b0d-63f3bd619e7c
 42 793fe290-dbe3-6e47-a06b-4d5b702a9567
 43 27d1afce-edc5-2969-8e38-de574853bf69

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1004104502475723381380405152845284418587062. Exactly this sequence comes out of new Random(979).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 6 of Run 37 (seed 425,468,968): new Random(425468968), Next(8,64) per post. The RNG predicts N = 43; the post has N = 43 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-10 14:48–22:48).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs