A858DE45F56D9BC9 archive

201210211400 11tz5l

explained decrypted filler

seed 127

Metadata

Post ID
11tz5l
Title
201210211400 → 2012-10-21 14:00 on A858's clock
Posted (UTC)
2012-10-21 05:00:06
Timezone
UTC+9 · title 14:00 against posted 05:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,768 hex characters · 1,384 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210211400) = 1eadacd0e9ecce0b8e946ef66beceeab (name+title)
GUIDs
43
Filler GUID seed
new Random(127).Next(9) ✓ verified
Run
Run 37 (seed 425,468,968) (seed)
Draw
16 · predicted N = 43 ✓
Machine boot
2012-10-10 14:48–22:48 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
8 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

57252557B31E8350 634ABB83315D0E4D E5D42E4E2E4BA8A0 CB28BFFCDA4FA696 EB5DA7A67560BA3B 9C8D6D40AB1E4013 0BF82FBA57B0FF3E 713C5FAB7CFDD594 FB810F73EF1D7746 76EC4111D409347B 47036CABFF8DD57A 04C444C2C2E05DEE 39190DE1DA98B184 1788FA12438CEE03 49A5CD81D8820A3C A20B1370DDA23969 39E8121C689CBB80 71BB6C509B0AC515 BE1C1A93F7F3C693 122D426FE9718B54 3F0A5387DBFA9455 8BD1F30AFC15221A DD734114CC69794B 199902A79895F053 59C1C43B63BC15E1 1CE1DD5E665AB147 F97F9D132E0CA9BC F1766DEEBC1D252E AD451861D7760A83 B9B11B1FFE72B933 3E4061E3C89F6690 1459813C7523EE23 7F46258BCDF0D110 46E371109A3F7B4E CC671CEF99F60E68 FA2F09F3D1F0B815 77A53BBF7AF0D14E EDBA344136B0F83A 29DF9ED51CAB2F07 E8014B5010A41278 907B0102389E77F6 945D458E0347685E BE5C4A927CEAD778 C6788900A592A0D7 BACAE8E1F80B22AE 790754BD3F7DAD30 F94461D253841864 1FB1F57BC260DD98 0BD9AC0583DBE6E2 6DA310CF067218A9 B8FAB03E0778D383 53EFDD32F350F56B 5E82A744CB4E6EB3 1FB36302CD239E98 362898F5B39D2D1E A5563150D398A4B6 0D44962C3B6CDDC2 8D307A821B4420EE 5C148AAD2B92D9BC 01755C3C2B944275 7E842D8902CAE8F6 304D5949F30983B1 8B5ED19B3314BA74 6670A3230238FCBE 7FFE70E2147A6958 F870D977E5BB4C81 D22F1BC2BF5BC46F 74617765A65DA4FC C98EF55C52673233 15124239EF846387 C55762968964748E A41C778FEB481E42 3D8E43E630AFEB02 45155423A9816FC9 8D0CA15E10EBAEA5 F6A10313DDA1F60D B72EA192A6E5FE32 2488950264A11A3D 9A31C052008C6A71 4FF968F36A07D9D8 2D771F0D961BCE4A EF88DBDAE2BD7A48 D238FBB1D40B7F4A 5BEE8CE9E7BA17B0 C9123F2732B92AA9 4CD3AFBC8DDC9DAC 542798F6E1AB7866 E153471C8E686590 24F5E356356351F9 20D5A74B14C3A491 DF681ED3E7F18D67 7050EE8A08482E87 F9D9EED2AEC68BAA FFB727A9B0391B7C AD3A63617DC6C82D A6C9CF01AC0C69A9 97CF67ED69F38910 E349C36A4CAF0C17 CF815299C60AF6FC 2935D377C26E76E5 34A78B42D5B2D3BE 055450803C980CB3 FC002736255CF333 D52AB20C94CC1FEB 8C3E428E48A80E90 45CB23FE7EFD2A10 2421BD1E04193F4C 44A9DA3894FF89EB 19A1867B1F197422 6DA9252D4F539396 78ED9DA8DAECEAA9 E4775B127FA3658C A48B33573220697B 6AFA4008CC2B7984 FEE0AC0EE0619125 F1F04A40DBE86A0F EF8A38B693B7BA06 529C35B4D371D78E FEE09D98194C856B D980403D74CE2E27 5D0676832B360979 DC71635F72F0F790 091C5631CE2AE74D 77CFFF5148D81995 02A0EA658CA38EBD 7762DE8E911A96BE E5C805017BDE557C 5714C1E0AA530C6B 9B21E8F919D4EFDF 3004843C828EC816 66C5AE653466DBF4 2EE74DB382CEABB6 7CF41D7B3E36E534 087647F015E2FAAE B4231E171E0810C1 6B5564C2F8290F54 CED843DE1DA12F3B 0FF9451BA97FA5A2 0FDFAC0F54824F69 AF83D6C5BE350A75 AA3D73CDDE48FA63 AD0F48072F4A3DC7 C4CB9D7BFA17B527 9D95175C0604E8BB 904E73BC194B5F61 0EF7ACE9A822B3AE 51BA61CE1ABFC060 2791E0E845CBD3E3 F2FA2511B8A6B562 3976C934FD0D181A DFD21790E77FBC85 081FD0F7F9D1D76C 9E462ABE75FA46C9 239851685D419C4E 9B88379BABD4C464 4DEEB250769C8D32 F2DEF3B2CF617CA2 64C77AC34E10192A 443FE30F8449C9B8 9E0BA16B22CBDA0B 9AA00EE1DEE919B4 E5104939EEA71C04 741A55F820A1E029 3F526365695461F9 0B537574E659BA90 3FA14D123C0FD935 0E2E44878625D96B 33EE524556CD2670 5418C3FAFD6FBA4E 61F9AB7EAB66B87E C1012F03B1DD5BDC B690D9564BA3238C 4C78897F96BF6999
  • Read the ciphertext. Strip whitespace: 2,768 hex characters = 1,384 bytes = 173 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210211400 (name+title). Key = MD5(password) = 1eadacd0e9ecce0b8e946ef66beceeab, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 43 GUIDs as hex (shown below).

Decrypted: GUID list

  1 91985db2-c965-013f-be1d-8cee6d5778bb
  2 bda1352e-7ee9-0f39-9ba5-92d824e4e8af
  3 b7715853-29d1-4176-b54d-03edfa525a24
  4 ae5de921-3be1-57a9-9147-f073fbfa6f6b
  5 95eeb8da-b8f6-4bb1-8140-106134ea8f3e
  6 6b8b61ef-beb6-475e-a386-c2ebca87dc7b
  7 c75b490f-b128-7a8c-89e9-5fe5acb288f9
  8 14597f95-7101-19f9-a686-87bd12cc3f52
  9 0822fefa-4d41-673a-9a1f-31b50c1b3ed5
 10 480e6708-e490-090c-9856-65d16e3a9600
 11 18fa174f-449c-7b03-8c5c-60ebb8444b9a
 12 6fb1e22c-d1a0-53ab-a5ef-edf9d1cfdfcc
 13 887780b4-66a9-8547-bbbd-ad0f0b4780e8
 14 39647e60-68d0-49c8-9793-a71c495a2d98
 15 5f840a80-ae03-7ed2-9a7f-8c5b26f02ad7
 16 658d3839-adcb-346e-8079-dcfed87d28d0
 17 b08a81e8-cbfa-22f6-921f-6a3aeb3faf3a
 18 545dc463-d9a0-6acf-bd83-1e520d30912e
 19 40e2d512-cfaf-118d-b2ad-11e60c589f00
 20 d9b24f00-2416-4c36-8457-05ed6e944ad5
 21 4f898805-22af-6a17-ad98-6524ff3a48e3
 22 2fad2f97-b4aa-0189-8cc2-7cd2e2c1c021
 23 ada5ca8e-f1d5-4cc4-9542-5d3be5da9ac5
 24 9b073ce4-a4d0-3ee8-8479-eb6fa3eaf71d
 25 3e8bbe51-d39b-1506-ae5e-fc671fbc5917
 26 c704735c-1980-138e-9ac5-ab7bcc97a693
 27 3ad5eb46-ce1e-12a5-9aec-c2bfcc4f20e5
 28 7e54108f-d95e-3f42-9d00-26fbe8983103
 29 8eaecb44-47d1-5fd5-88fd-e469af37c376
 30 72471fbc-b42e-36e8-bd8d-77fe494baaa2
 31 74f7306b-c086-0fe7-8327-773868c47769
 32 0ff09297-9a63-8974-a288-cd68cb64b9b7
 33 5bc3e7b6-946e-39ef-8e39-bf54c3d10ba4
 34 552414c4-f34c-12b8-b553-1a66cfeabcec
 35 b293b708-64ba-899e-8985-e2b9e4701f54
 36 f7f73d5c-db34-2f1e-ad57-d11759546f05
 37 4055fc90-46bd-25e0-aa3a-efa259a8f6df
 38 cb11b955-59a6-88a2-9fd1-20604f68f722
 39 02d01b92-ddf8-0a33-8415-6536e110e2c8
 40 337b675f-b8ae-058d-9f12-9b9a4e2f3b54
 41 f4fc160c-e89f-0be2-b070-1252e017d332
 42 50c6ba48-421c-811c-b7e5-dc7a8c1e16ee
 43 c3b2018c-adba-7064-a44b-ed5c3b762005

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0045447160758473261460431113530831822800087. Exactly this sequence comes out of new Random(127).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 16 of Run 37 (seed 425,468,968): new Random(425468968), Next(8,64) per post. The RNG predicts N = 43; the post has N = 43 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-10 14:48–22:48).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs