A858DE45F56D9BC9 archive

201301301659 17k9ys

explained decrypted filler

seed 989

Metadata

Post ID
17k9ys
Title
201301301659 → 2013-01-30 16:59 on A858's clock
Posted (UTC)
2013-01-30 14:59:51
Timezone
UTC+2 · title 16:59 against posted 14:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,600 hex characters · 1,800 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201301301659) = a0248a35d77f57126f7a8a78b38ac905 (name+title)
GUIDs
56
Filler GUID seed
new Random(989).Next(9) ✓ verified
Run
Run 40 (seed 1,069,639,703) (seed)
Draw
9 · predicted N = 56 ✓
Machine boot
2013-01-09 05:52–05:52 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
12 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

CC1A51DBDC820D58 7F0C4DA38AD5F705 4238773B41687724 0B1AAF6A71726504 74096CA549893E78 0B5FEA1FE9E7B5C2 8F5E7F1785A37F89 AC9C9A26C1E01750 C472FF46B2AB445D 212A82529F0CFB88 F82D7B743CE24E95 21288EE8D1F19C22 82F81E8ADDACD2B3 38C2B6310778CB37 2342F86BB18148BA D2FD63D975CDEC33 EEA4029713C841CB 385A8D95F38A90BF E647AD0561BBFCBB 474FB0C82050FD7D 113D6D65C532A1B1 D8F143ECFCF87B56 6288E58460358EF1 6C5A79B797315389 8F689E4CD528EF8E A1134963D0A673D1 5DC5D480C6D6CFBC 5008C717688EA452 7690FB868D13220D 02B0F03868E93892 69E6D7E14944787D 90349E47F9187BCF 2CE1E22F3CC9A3DC B566A42078E56818 CF1590FE4F8D5F65 F428E2596D498AB2 238FBE4F5893DD1A F99B7B3630961DA8 79732D5537ED7D9E 05519637B6AB281A AF00B710DDCE8525 89A824658FD5C28C 4406E402C39CA509 CAEE1FFED6B2B9FB FC7BFDC1430D8B69 EBA167F1B74CF63B 6E9A7BC2820A471E 1B00C9E86E3EF350 9388EBC2CB96374A 5EC2E9012A89CE7B FF53759A68199AD8 124A3BD7D769333B 288FB1CEAFB31363 2A3FCD5E712D22C9 C6C13FB0CB26C1BC FB2EB824EBEFF676 F334FE351E912C21 1F47D52A7E5637C8 E6C4DFF53190C2CB AC043818F6353F5A 642D9B6FDD336F5C 2D5E82C885CB1EEB D41768850C033C64 2CA2DDDD8B5C311E 6980352A5B61A316 0EB521A7E38C7C9B 442E4661092E038C 2FE9B67F5EBF11F5 A1FDC3D8EA38FF2B FAE90C755721E7B7 9CA2D1AA9AE003C4 DA2433B86F92DDCC C93DA4D61548949D 7FB8D652A7ECDF07 2E2BBA74293AC5F0 DF905837CF30BCBB 620DEFF956364EA6 A6B97DA6736D24B7 116DA7D741264D75 DFA5E48C3D734334 8CE5AD9A8E35876D 8E31C951203AFC27 70626DAB7ACFA500 BCAE1682414AE16A 076364AE953B59D7 8207017676D7629C 82DFDE585F96D03A E10D9496082D5744 DAED86EB854EFFF6 EA76EC169EC54E86 1F7BC470E9FDDDAF 3405EBEB844E7A0E AADBA6D7117634FF 4B5C438C5D2FBC9F B80383D14589471A F03EB96D8EA62A00 9BB71C67DD5B79EB 02D34293D302BB31 357951F53361F7BF 7010CA86CD4E13D3 4E7873FF2F1C524F 1C468766EB903A5E B65DFA0496C740DC 56438E6595668E16 CEE61EE29966F3B7 8B21D89E3863F024 7577BD6BC6919EC8 8ACE89C03761A3D4 9F90BE04ED0E739B A5013D44C5A29F0A E6ED28D37A7C424B EFF1A7476F389AF7 0B71B65B93B0E1F1 C6CEFEDDB49AFD5F 571DE81416190611 1F145676654731A4 72028026CA00E681 994EC8C743C51B8C C306C1BA989D607E 49EB488492413085 6B8704D3D5750B96 462124AF3F9D5EAF BF362BED51220FC6 889EF736B2057A43 4AA8A29E19088AE7 C65941F0E0622762 0704CAEED9DBE241 7DFF5630E1F0A22F FADCD5176A891E0C 9FD0671D97D097CE 80A3C08F61D294D8 2CF3CEBE64AE47F6 3312E64AB9FBD273 0D72886741691726 20C8B7334705A449 D665FCB353FD002F 309004629E6DDC6E B2EF7C1A7F148D73 885B7ED31392E060 6E0F862B59B2D902 AA548DEBAAB273FB 802A3179BB0E9BE9 14EDF6FA3FD94240 B173177EB08EBD4C 0C54A02504BC3D8C C0A37621BEA496F0 6F59BA1B907C1893 8B0DA4AF1484F752 DE89FD87F8E9D2F4 A1392ED915EB08D2 9A48142543241E7D B5A704AAF020B8E0 9183174B21D2CE40 BF2D7BCCEC117526 B78C2CCECCB3D911 A5F0541934E3466F 6A1DFFF4DEE2EB50 7310048B0F3805DA CD27754D01F940E5 9F3A1E0FD000E2D9 C9123F3E76830894 80980478FE0334BA 8EE64D7F26615020 F3EBCD327E5ECA97 A272A5E9E9B8B208 EA0B74782C0E9AD5 6585621BC5E7EA6C 7E264B5648370524 198B769EF5047E91 67CD433305620581 F2297AF5157F0967 F5CAF5D7C56E6626 9379A591A83498C4 A5F229EA2E6A83EA 4A369BBB41C3A0EF 679FAF977F3BC958 41648D6C8EC44015 551019724969232A 2736F68DF3A6FBD0 3F90E6F0D6144415 8B7F1AE06732B13F 285BAC53CD677AB2 62C8B3F197F2C722 49EE5403E1AA82B3 955DDDB6F26F1D0F 6ABDD2B8E1791AD7 1444812F5D90B4AC 609E9575EEB78F87 EF30DD643F8585E3 5F9D29F8883CA3CB F1DDDD7AB7799A3C CB20C8841AF21EF9 DA3F3EE85333F174 DA8778F5D5109A92 EE06BF5518075C83 0163B6351F99EF28 9BA3946E0C1481B6 7CED952E47827164 666AC9CE7E976B39 376698E0D2AFA8BE 2CD9CC76BF6C80A8 A6CFE4AFFE586864 0776E6EBCE99A506 0F3F1E31BDB5CD09 D0544DB869587ABD C1A0E70A28A07BE3 222101073CEAA0B9 66F92135D41C3218 0F21109389B17A08 2204501EDF04C16A 16B1408046F54EDE E77C972E3ECD7D4C 72FF90FA1A34453E 8F9399548BA360E0 76D99EB7DBFAAAA5 0D194920BE976E83 D988151CDBCB24AF A5EB88E6AFF4D284 6AEBFFDA8338957A B0F4ACAAB2DFB4C3 1E53DE508BC6A209 F7D7CCC5D27F75D6 C181A391762C099E 5FED56BF22D67C68 0A5109780FDF42F0
  • Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201301301659 (name+title). Key = MD5(password) = a0248a35d77f57126f7a8a78b38ac905, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 77fa0da7-9abd-3beb-b4fd-1ff8fb44bff3
  2 eea49d97-7d35-08bd-835a-54899988a5f6
  3 b90b6a43-d84c-0a2a-8b4e-cd79a6c6d372
  4 592be1fb-9092-590e-b6b5-db88f40194ba
  5 35163ea9-a97d-6cf5-bd9f-1eb581cb0a0d
  6 3ab30319-bed4-7994-bd93-95973382c8c6
  7 ee27ece3-a250-0608-a343-6442aa19e91a
  8 a439bfe7-c23b-5bc8-ad1b-246fbdaf7067
  9 8990ea02-8662-39a1-9ccd-4b2f385bae31
 10 0011a254-32e2-8088-a2f7-eb0471e68ef9
 11 8688cde3-bd69-81a4-8a4e-ea3c32569752
 12 a3ae43d6-e77f-558c-bec3-d66c6f8b6395
 13 161ba2a0-f962-450d-a02f-a49a6181c613
 14 b51ac4ec-8414-04bb-bf1d-e65ea984196b
 15 6af73cff-0eab-2c7d-bfdc-27d05884dc26
 16 322d68a2-5942-6b75-8f7b-3fc8fed584f8
 17 87779ae8-7792-55fd-9cc9-9210793bda52
 18 58142fa0-f2db-1779-97ce-ba90dfb8c24d
 19 a4bb8bf3-3de4-44fc-9b7b-1a90a257b1d4
 20 08b3d247-4eaa-2ef6-8b86-aab80e0a3b81
 21 bfa32196-03ac-2174-9144-6a33385d4bf8
 22 85b4180d-571d-4ec1-8372-d40bd4a8d318
 23 c3bb6397-9d1b-176f-9a5a-8a462cfaa1c6
 24 1710a23e-eb86-4fc2-a0e1-476c240be92f
 25 f2c5510e-6ba3-5e23-b3c0-bd069acf0908
 26 1854337e-d7a4-508c-8866-ab16e4fa9b41
 27 6c3e7606-c2f5-2f34-ae82-36b7a00f126f
 28 d180b880-f231-4e23-b1a4-eac9a0cd9482
 29 115069ac-fbae-64ed-a33f-618212005004
 30 9e7e6e42-f2a4-5d63-8dea-740b85b728e8
 31 38e65eae-c3cb-2897-8f12-f70aaf96dd65
 32 d379797c-6ce9-8fa1-a643-68c03bd5d9e4
 33 6f9a24e9-bd23-8fc0-8c4f-0c544991fbbd
 34 52cd1b6a-403b-71c2-8f00-0079b39ffa8a
 35 207e5b7c-4eed-88b7-9a46-cb7a350c3cc0
 36 729eb085-c579-562d-96d8-3ac32a91ef65
 37 c623b9a1-929a-2af9-88a8-c8c0bc80acba
 38 9040f17a-5448-384b-91c3-9b6ded258011
 39 e287d14c-a7a0-6f39-aff1-7eca2650c507
 40 fd203ac0-2043-469d-a88b-7c9734df4b5c
 41 ffef9d82-e32c-6a54-9751-a8206c585376
 42 d771ba60-2cb3-4107-a963-c05f137550b1
 43 12750bdb-e099-887e-8531-a17ce98fe9a3
 44 7e26bba4-ea01-1180-af6b-1bd4551df19d
 45 1df68880-b32e-386c-98e7-45e2cc9c3ad9
 46 f3f6b633-99e9-66f8-8bca-8bf5713d3a3f
 47 456fba69-8eeb-7ed3-bf8e-6154ed6a93a0
 48 7bf62a77-d3d4-80a5-b1a0-b9e663240c89
 49 3dd15952-fa26-677a-8d55-5413943afd9d
 50 5765d91c-b4cc-8945-81a5-30f4d50d4f3c
 51 ecdceb3f-ed4e-243f-be81-56902da6f13a
 52 a0ed0564-eb03-496d-b283-fc5bab6b8a01
 53 56ac4367-4c6c-3232-bb8b-fd097c9dfaf2
 54 3bd79310-8c02-8090-8158-920420c796bd
 55 7f5f576a-d7cc-1655-a57c-687bb03ee367
 56 9e41bedf-69c4-8516-be3c-9bdfe64a29a2

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 30056705388540265142241455246528878523646481367868243818. Exactly this sequence comes out of new Random(989).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 9 of Run 40 (seed 1,069,639,703): new Random(1069639703), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-01-09 05:52–05:52).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs