A858DE45F56D9BC9 archive

201303281254 1b5kun

explained decrypted filler

seed 943

Metadata

Post ID
1b5kun
Title
201303281254 → 2013-03-28 12:54 on A858's clock
Posted (UTC)
2013-03-28 02:55:00
Timezone
UTC+10 · title 12:54 against posted 02:55 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,344 hex characters · 1,672 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303281254) = 9ae777aa49abf3f74b32bef292737629 (name+title)
GUIDs
52
Filler GUID seed
new Random(943).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
29 · predicted N = 52 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

79D67916CD4405C5 09BB2BEA293272FA C155A66C59898769 A13FFA0434538885 84882FCD77D6C18D 6E80A4D45F07BF1B 2BBD05BF8D10C97D BEE124AB18D572AF D028BB1ED1822EBC 7AB1106303F2493D 155200D3076BA271 6D917C93DA7835AC 9660978CDDCE4AD6 BA43740E608C76C1 9378D052E455720D FDA6083D0875A830 B385D337968C4520 CA35B92223EB08FA E4FD667B134871FB 90CEB371FAE8B4A9 6628FA6A99B63EB5 FF767251E70777FA E760C2844EBA8C2E 25AA4B0941D2A72C 3C41D8D071C917B9 EF70D3633737F486 E581EE3313CEF2B8 12082187C97D156D CBE647E77D94F4D2 D7F07E7E23750366 3BC8C248ECFCE6E2 17A8D93898C91926 0C53FCC11C2993DC 9C9361863A891A00 9F727C3BC8107CD1 EEEFEB9C5F2AD5FD 79952D42C3DFC9D3 F2AE7183A9844EB8 1A1FB748E98A30FB EE8ADC6838DBAEB4 B788A400B06942EF 95F7B2247353871D 4CC994EA4FCAC61D 2B3D4423E316284E E09A04326FBBCDCE 84D6253A94CB6CB1 AF4499A50E574960 1F2F4832098F42AC F7240871CDD63281 47DD66EABFA51D49 C1841A97DF36D5FB E6D9111583BBEA76 3CC3AE079E02D930 4FA1C600C29FE441 704CA9A106A5B8F8 C8B6195E1873E9F6 A06945445711A8BB 03075D6D5104F91D 158DFCCC89D1EAF4 67F0A1A4DB0A0E4F 4EAFC9CCFC9DA401 E57FB14E6F92BAB8 339313C4F8B271B1 274126E16803471C D2DB9CFCC6E765CB 23CA76FDC3C6C1F2 AF6340A667089245 F6A0DCE83EC33B65 DF9F1F7038ED0A44 76E7194720773710 695B97ECCA2A04DB CDFE91F59976B4D8 6486348038A3A49B 4EBFBD6E88E6C6CE F251E4454BDF13F8 46A8DDC3FF5FE658 BC9212A679D98E31 7D5D3AFDA8EAE188 F94C13CC830C84A6 06182D0471689FE2 D729AE7178692174 B214A87EF81FB183 C22BBB695FF2E695 7F1782D15B38176F B5E15CE26C75F61F A78071707AAE24A3 7E4313581D79712F 12872CB3A7BEE401 3B680F8F416A30D5 8EE0E3F1901C00F1 02C794390812D24A B93053EE2C178994 1554FC08246AD211 CB0FC83A8B4F49E3 F77368E694FA3014 5250CFD76E7BBAF1 CA4A87AE5633387A 3F7A8A7F3BE479F8 ED0EC8F49E401A17 B54A30A613005AA5 65B09695E8C5A612 356EA2EF58EFEA77 D102D75CF92CC090 D438AE6CE5CAA81C 110224C623EC7E13 6034FD55EC2D5F3E 91A3CF3BEE7F2D5F 9FCF6532C82C5937 2850A883680FFFC7 CABEA94315A7974A B10FFAA2DA16B3C9 845B3C9A4A5EB2DD 8231D12B1393C2A6 334B0A29D38FB9A6 C37F0BD6DAB4E14D BE418E8CF8E97D29 92F181E9A14BF31B DED0B607C05F71D1 4DF2DAE583EB6AB8 1A640D1ABC376D56 14E4BEEF72943842 AF03C42EFB4AD7E1 1545BEF3FB671C24 B8BA443D2EFDF3DF 714A4877524774F4 DC8F849E65250E33 184CEC30283B9DC2 BDAE733BF63915DB F84EFA14162E6BD0 3A7450B5B643138F 1FD4EF686307FEA9 F16786FF83FE8104 3EABFA42CBBE55EB D5E262AC2123C670 8EAE8D32D97ECA43 F9DEC8BB1D74C248 49B2040A525F6F0E 844786EEB66EDC97 AD78195A58178769 4186244A80E00F2D 70C4E2FDBA0E94F4 12DAAA482918FAA0 271F84F132F71B6B CA154AD5878DECB9 EDB6361ADE263EA8 4477B63475BFD4A6 2347AEED51475DF1 3A262D20C9D24523 47E6E60546AEBE73 84AA1F2D9E3AD608 6D99B75F9C31DE2E A7D13E0A0D34112A 8BDABAE4EB6DB704 6F9EE0AA29804619 1B796CBF6DB88EB8 0B2EC409B8FEDDCC 766EBD9B24B92567 F95F888F5B551834 2C6E538CAE45739B 22026B05E55002E8 7521BEA9312A8599 0E0A04BD95525512 8A30350A3B857ED1 7D01B5DAC1FEB1F4 EC17A6415E7FB0F2 44819F7E134D2DDF 003FCC5F195D324C 4422DFBD001CA721 67A042840DCF7E26 544A4C1820454A2C F87369C49A1E408A 7B7F68C18BB67920 F0BAC9304399B541 F6F46EA317071DD8 ABD987638A6DE927 83F791CA5F2B112E 0D005EA9A8205B16 BD1AE7B7C364B5F2 D32E4251C53F7DD5 A9F5AE8C862236C9 622B4D45AD500215 D12B19AA474064E0 DA3D0B0AA01C52A4 109D067673A75AB7 6B646B76A77E4AD6 C7E6E02902DBAD1F A4CA59B375D0D476 FF1A19D13F521DA7 39BFE0AE4C10A1C9 8CBFD2806AADE729 FAF8793937CA81BE AC364836BD458813 FA908491BF285CA8 4B6F89EA53BF3404 31044BBACAFE396F 2E9FC6006C44E0B2 58FF93494041400C C8C42862775FF367 18A93B4F00E1BED5 36E2E4AC4A8562EC A6769DFCBD131D22 A03287350973EF0B ABF4E7C977A9B51E 5CAB48A3DBFA93A9 FF5B249C5D6839B1 83B20FB5BC0C9FE9 B5A4311163AF2404 BABC2443F4C5D582 C60891A2FA5103E8
  • Read the ciphertext. Strip whitespace: 3,344 hex characters = 1,672 bytes = 209 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303281254 (name+title). Key = MD5(password) = 9ae777aa49abf3f74b32bef292737629, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 52 GUIDs as hex (shown below).

Decrypted: GUID list

  1 fc150e0a-3eaa-3678-8704-fc6b542dcd20
  2 791582f5-49a2-424f-8a36-5913d332f286
  3 6c298014-360e-81d6-abcb-b20b158e153d
  4 614d2af1-28d5-7bf9-8be8-b4681fe48961
  5 9dcb2a24-98de-866c-92c9-d46b5b2fd1a0
  6 b373b83d-b2f8-5910-b843-030ccd7913af
  7 74050821-d510-3d11-a3fa-3f49b734931c
  8 d7098d5d-5d01-4e41-9df1-5db77449f409
  9 59989671-fc5d-58a0-aa04-fc30a6e841ca
 10 4013d47b-7258-0bc6-8b13-7dfdb424b921
 11 aae64b42-5eed-0819-9c3f-f3b16e210d58
 12 aac65c21-bee0-6dc2-b794-774387f1bfec
 13 88da02ff-69c1-8ad6-852d-0df35b7d05a6
 14 8f9c7dea-ccfb-0f65-b6cb-9fe23699d46e
 15 b292aca6-1aa3-0022-a13b-418fb2aacd58
 16 9f2fbae4-95e1-8b1f-9fef-6dac1ed40c2d
 17 e077dae4-1208-2539-98b2-adc7051d0e8c
 18 56506734-7328-5362-8d47-5098489fac03
 19 eda052fe-656f-1ded-8554-6a8859e78238
 20 55aeab32-9b0a-4fbf-82e7-569d085e70fe
 21 93f48d9a-4997-1b39-84ad-6f840426cbb8
 22 9566df62-9fac-10e8-a8c7-ff0810fcfd30
 23 afb9fc9b-1640-3991-b976-d7da14466a9f
 24 ef17a477-2a95-41cf-a1f6-c881548ae519
 25 72fd1d17-afba-1ad3-becd-1173ecd1a5ff
 26 eb9c7b5f-b067-0126-9214-6eda2b20a70f
 27 e3de48d3-9e0c-602e-a745-6bf6aa77bbbf
 28 a0ee2fa5-cf96-8ed9-89a6-11e3569e56b5
 29 d4d91e7d-78ca-0554-a153-b584259be0a5
 30 77bf4d03-6890-4ad1-b7b0-bc7bff4eaca3
 31 9eee306f-7103-2688-a92a-00ceb3b37c1e
 32 1c9a1973-4d00-7880-8f4e-619048b1955c
 33 b0b05e09-954a-4ea3-b469-1e9cfc4c54c6
 34 eab78441-b0ec-5bed-af09-0faa617d2b77
 35 609dbe11-113d-80ec-b12c-89a2577aa1c7
 36 4c96722c-c2f3-5cff-9c73-a1bdb1107b51
 37 512f00dc-3a55-1701-88cb-730943c656d7
 38 734c3f0b-bebd-00dc-94d8-61002ff48bbf
 39 649d328f-620c-746f-8cab-c7a018822ef4
 40 048dbe6c-f510-38b8-b58b-95a148e0436e
 41 2d18c4a6-53b0-3588-9ddd-673c07ff7682
 42 99e16d65-63f7-6c9a-82b0-414bedd30048
 43 1d664c56-9877-576d-8683-79a082311caa
 44 6de7a21f-c5a2-8131-9052-8f498864bc62
 45 983d1a46-a411-0c8e-8c1a-ea8136f2a0c2
 46 020c77c7-e781-2ed3-8c67-c96b65cbcf06
 47 ae2636be-b7f9-121d-8620-c194b78bd8e1
 48 61841d75-94e2-28b0-9ed4-4729aa610e02
 49 1c80f545-361e-207f-9659-bcd6ebf97f63
 50 79f467e5-3eab-7f2d-8b51-ece631494735
 51 526c402d-9efd-844c-b522-e0fe9fa99b55
 52 514696da-89d6-6c2f-9479-fa2189aeb399

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3487853450068008251411341068042745851073365802122786. Exactly this sequence comes out of new Random(943).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 29 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 52; the post has N = 52 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs