A858DE45F56D9BC9 archive

201303310749 1bbnw7

explained decrypted filler

seed 411

Metadata

Post ID
1bbnw7
Title
201303310749 → 2013-03-31 07:49 on A858's clock
Posted (UTC)
2013-03-30 21:50:00
Timezone
UTC+10 · title 07:49 against posted 21:50 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201303310749) = 48c33f59a1839956d66b9e49d956e543 (name+title)
GUIDs
40
Filler GUID seed
new Random(411).Next(9) ✓ verified
Run
Run 43 (seed 120,022,078) (seed)
Draw
102 · predicted N = 40 ✓
Machine boot
2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

5E7E42D64EC25353 365AE8BDA25C3057 8B4938189BAB43CB 819ABB2E1B63E275 B6819542628B5998 2775FE92A15C6504 219E01F43A549634 A1C7D893AB72F0BF 6966CF1C48525A2E 6C76796E6B79AB4B 7272DED93D4A89E9 D4BC6E94BBF37AB2 EA7935F54BA3E32F C246C46DE2B0F30E D39D24E1D391CEA3 B7CA6DE7AA954530 01599F66B94E6124 3755CA1E029B7AB5 273D333A6C67E0E9 EA81B0FA475709A8 4233F95FC3C3FAFA 368F1C6A1455D912 B300F4A7E381EC16 3B3426C570EFE9B6 8C0AADB2C7EF739D 8F54417F2EBD1E8E 034FA302491C64F9 2480BACE61C1C36D 0E7546A3A2DD95F7 98E167D91C47ABB9 8898E5D60DD5DFBC 6BDB3AD5A0E0C3F2 51036BFF833F3C50 4DCDD7372BC0766C 671BF7B20C3B52D1 CDFD5A301A7A608E 5DE27DFFD63A4F0C 1EF0731E32C2FAC2 7BDB8221C21A67EE 7371695551F62935 7681D8A71072626F 3C57AFD532A09DAE 6DB3D075821D451D B6B2133430A3F9A7 4862E5C79A5EFAC1 12FD5FA63F1C7E40 8BDEF9437F9E4EF1 891F1351C9347F0B EFD909C960A03404 28C6EEE398AB76C0 0F5F90FE2F04D447 A116FF0DB75602F3 7D56364E53ADBEA5 560E12C3DE700667 7AB9BA179C512DC1 6158D0940A53581B 242CF300934BC366 6B8567A5865CD595 B41B58177074E447 A26B943B94201B1C 57A39469D5C48202 8C92F69FE7D5682D 7FF1837E347F4758 206FAA32587814DC 3A17EA6D4730520E C9B2FAAD7C6BB932 7FC6F0BDB34BE160 BFA244B7D8F60D98 FA11AC2935ED22ED BE2EFE69BCA3C626 24A11DAE8698BD31 C4291CCBB845B152 36584BA2AACD08F3 5D5E0651DAFD1540 8B42BA33057652A5 80FD7CFAAB8FE730 1C477EDFD9DE3A9D 3AC6D15F6D129D7F 23B08A56F2E97B51 6D607C4F073248E5 3B63E3870432D52C 66D855AFDD873419 61446E51032389A8 AA13B2ABABD87375 F6C3034E3124D506 EF477394CB61F58D B3618AA262813ED4 BAE3617FB3EF8E4B 472ED34CE9C6829B 9E25FE835F9683D0 BD5FAEB3CA62D6B3 B73DDEA84F3AD6E9 85255AA4FD989C68 AF8E4622DE1A1960 B2341D939FC78C35 B685302D28876847 0F4E76864A2420CF 941DAEA081B36D20 E56451B2FE353852 CB9F90BBC303DA85 2456327CE59B9707 D8A419A75C79A668 1BCDDAA2381426D0 B3A854572A836E1C 4E1C081214EB9D2F C29AA028EA1B24FC 37F0D21E4ABAF168 FFA8937ACC5153AA 058C8D8F5D1B36D2 BABA8B42307E28BC CFFDB7AD35D934B3 BC02DD3057EF0A74 C6269349386FA4E4 B0EFC2AB3077B403 53E8F55F3463CF00 3BF871331038BD8D D105B491A576974A 8C5E2EA62B7A9858 B8BC12D6D2F33728 270465F14649D41B 520651510DC4A114 CCE08A8B9075C89F F5B61863AF1597AD 86BAF4BD42C09D2A 6E272FF1A91F7BB0 D564FC9399051456 F17006EFFE0988F4 CD2381C6F8C845D6 7EB0D0D06E93CEE8 8658882978A78A00 3784FD4DC4CAE28B 8BB4E69AD833E0D6 52474F37A5D5B6A6 9F2E53EAB88D4712 6B7AE9FCAB5CAE5B E45170404FE28B1E 5914BDECAD157299 1E53CD3E2DB78A04 01B505918B008A97 097D4CB0B8B435BC 262ED0141CC4C4D2 DCE982F351C6393A E148E783A43BE01E EBD6ED59C451068E 943D44967457AF8B FA897FCD52BEFC80 59E8D99D94062C47 D4690F1DA6E8BEFC 41CEA780D28FDDCD E6EAE25A08B881E1 B61C034628F27299 2302B36C0EDD2E4E 67F34EF932B3AEDF DFBCA991D9A699D3 E7598562D58D0833 4C6FF54FC278BBA0 190CC4CDB9681AC0 AF2C321887F86826 F30AB716225CB79C 4D2FCCED1BE01CC9 225E58DCFFED73BD
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201303310749 (name+title). Key = MD5(password) = 48c33f59a1839956d66b9e49d956e543, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5f9bc242-125b-3d58-b717-33abe25ec73a
  2 d2a15c15-bed5-3806-ad0e-7c4ec2b4f7a1
  3 995bb111-11b4-0918-947a-3e4fd6f7257e
  4 40c8339e-3170-2ebb-bcbc-b25b0a5ceca5
  5 82c0bf59-3a76-6bf8-96f7-eaf87e354f12
  6 41854153-532f-63ad-b617-bfc58a20dd54
  7 c368156e-d69f-0a6b-ad38-99ab7874c219
  8 8e40733d-727f-557f-b582-51a5504a6d73
  9 7875b30f-fa5c-7d67-b1f8-ac9b2a8aaae4
 10 d7990d32-3325-7e88-ad7c-f223a27ff82a
 11 82610c7f-ff6b-0615-bb5e-639c30563ee9
 12 cfbfa92b-ffb4-3b3d-bc5b-ad9bfcedd5ac
 13 9c707bf4-56ca-1a21-9400-9fc6e40dbe42
 14 cf74683f-4d6f-2aa0-89e2-0dc5a92c5329
 15 5b87ad4e-b1c3-66b4-b848-cf01197d02c0
 16 a1ba3c38-efd5-6626-8208-9b3dde19c614
 17 1981f734-366a-59ee-8181-c10da00a9e3d
 18 6001b8d1-1ef5-7571-9fa0-d0aa50efff79
 19 c8157677-d7d0-724d-bf98-c1df6e996dee
 20 8a5eaa18-1861-4d32-9b93-ddfb06c6cb5b
 21 22f6c6af-535f-3268-8b36-18fccd4f9258
 22 0e42a9cf-3ada-6b14-b484-da6903c1d09b
 23 d7256e50-f5f0-4484-8bcf-8a07d1c35bbe
 24 ba0d2748-097f-5098-832a-5a3d72c177f4
 25 36dc33d9-6f05-8a02-be99-cb5584f6ea60
 26 ee367eeb-7747-7b97-8a0f-1b8695ba26b6
 27 cc91357d-81f2-2156-8074-eae3b10acebe
 28 1e3aacc6-bd92-3ea4-a397-88875106f4a9
 29 8dc55c8f-9660-0d90-874e-dc016b3a7d5c
 30 1ecab8f5-1426-04e3-aa0f-e39968500602
 31 06b09794-0cb3-8c38-b577-3a0e789a9a94
 32 4fdecfff-59d6-6d57-99bd-a3159727ee08
 33 194cc805-194e-5bf3-96b8-ba5c44deacee
 34 c05525a5-5c5d-21b8-9d67-570b1133dc7e
 35 a890bfa8-7095-1160-9450-51662e401df1
 36 9f0ea9bc-fc8c-569b-a83e-94daa95384f5
 37 d83f15f3-25ad-4b5f-867e-d4af56c56d20
 38 6c2f0440-b3d9-4ba4-bec0-2b1dbe6341d8
 39 d1ae7b4c-4c2b-6803-94fa-96dce0b95367
 40 eee8f835-7eae-245b-8e14-08c1670745b0

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3302660577031266577436458723008652154462. Exactly this sequence comes out of new Random(411).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 102 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs