A858DE45F56D9BC9 archive

201304031637 1bknzh

explained decrypted filler

seed 655

Metadata

Post ID
1bknzh
Title
201304031637 → 2013-04-03 16:37 on A858's clock
Posted (UTC)
2013-04-03 06:38:00
Timezone
UTC+10 · title 16:37 against posted 06:38 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304031637) = dc20b3fe587220b3c40a5a1a1e7a96c9 (name+title)
GUIDs
40
Filler GUID seed
new Random(655).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
11 · predicted N = 40 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

9E4E3BA75BF1269B 53F15DEC45330D43 E295589B39194297 1C81C6CE37210529 CB589CFF8FBD1498 2453679632CEB4EE CB8C3C43ACA92446 37CA3CC12841689A AF8479C2ECA087CF 31927B1B4C0B660A 4095BC971E44FED6 B61C1FE26B61A67C D19C1214A705CC9D 9009A28B9DA192A9 6904C3FDC1A7884F 60C500D5181CA1D2 2561AA9EAC2955F2 DFDF2E805817ACB7 BF7A3173999F9C65 256DBC9D81E3B56B E00A38293B74B5EF 1E408123739C56C7 C51B75BF6C1AB1AE D58125657AEE60DE 8951A61BE408E73B 6A81F9EAB2B38277 369060AE4D5B68E0 720483C89057241F AD4D1E435790685B 15A11DCCE2379BEA AA67F604A2A5DA7B 2623E7697441081B 011127A6786506AD 53B188FAE4A3E2F7 CE5DF60E3B395BAB 7D01AC2091EB6513 B5DC68ECCB579005 6F872B6187FEC7A6 1088C260B0854EAF 32C0BCC7AFC6AA0D D503E4C00777F100 FB96701E016F3C59 184C1923AB512921 7A9602A57D726417 D9DB2ED76566D1C3 C9E9FEA7D1F44E8F 1D8EE4CE84272EC4 DD5BAD92A2E461D6 3268C9AFA362BE37 F9E8069AFED446D1 221A5CAE7A1891F2 B1EAED4C420E435B 3882E6911C000833 55309F5CFFADC9AC B929FEDF1E248461 003F71F1C252A390 C8E27DC78E005744 5579DB428FEB82F3 01DBBFB1B0AB193C E16FBAFBC3C35D02 13B07742190AB71A DEC03217130481C9 36C94F34CE5B4061 3E17C988A930DFCE F4376AFF010400CE BB6F041B4908D24A 78263925C1368DC0 89B81BE6A586952F 7A43248DF2CAB185 042B41943F47A28F A3A9B8FB7852A0DD 3494C2D00B6A6548 27475490D7EF0428 7B30D512AFB77B94 775F0801018021E4 282E5C374A9ABD9A E238A9143D398798 656726A9F0AE8027 7B5280FB06DCFEB9 2237C525DDA00847 9A7931CA25510E4B EFB70391F4FB10DB 69B3B20B27387C06 4B0B4ED1F4840102 C5F9D6E7D66785B2 C3249080F4E55573 285946B8F76E2DF6 68F31E79989291EA 7FCF7288C9583C20 B27431864E14FAEF 1C1A09CBE79B1F99 B60B29D597C117E8 43885125BD980F18 D574D14FAA5C5E83 1CA7B888E76B21C4 5C18D36C57A560DC C962E0EE5D0C2145 FCF96338FEA4FBC1 59D9C8F940753611 A3D0C14B68C798EF 2ABD54DE334902F1 2D3E7D11673A57AE C98099BA8CE56194 53BB76E817BFB65D 43E5B8EB8E445039 ABB9F553F78FE2A8 67D11BA4D7160266 4F80B25EB4E43420 A8B5FE78DFFC0734 2A8ABB51ACA96CD5 1709AF7488FD8351 65CD4FF418A66245 FB6A7FB2CF3AA564 65AD14BB1261100C 2D0793E539A4C9BD D2807AE785F63C93 334249BD4FE26FE2 F6D9B92BD9491CD4 2330331C1A57F75C 5FF91F7630B8749B 6CCAF6410BEF9C1A 6BF08A3634CE3C48 BB7E93C84A856E63 086464A99C840489 C3D56F8866520637 9EF3E1F705769DFF 114B33DC36EB64B3 5D83BC1B1AE20F8C C45619BD7F7984AB 4D3072CA8B97092D 3C9507E2A45B4AC3 F7050A8922872BAA B47E01AC6CB7B52D B64FDEC492ABDB04 41D8B9E110583460 AF358FB67BCA4378 A759626A6787B03F 6CBC27744AA3449D F48C405AA5053322 B9159EFD096621C7 644B069B4D87B21E E7BA2E453A7DDE76 380A62D3E04B7311 7415F32A8DDF5BB6 A65FBB062FA7C6EF B762E35D687F1970 883B13AFF81BAE4F 27A77866943755E5 07583969CA244BBB E52C654AFE1C5417 24109315CD0EA719 EE4B8B1A8B276591 B3489BD2E6A81664 263B22B3E1F236C6 D465006324B255A9 12A1FED1A729B02D 11C0F2D08440F8F4 1B3A28700F0E3024 7A3C144065865CB9 F62B35D2EE51D987 0E0658B88AF699E8
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304031637 (name+title). Key = MD5(password) = dc20b3fe587220b3c40a5a1a1e7a96c9, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7fa2b7c1-172d-86b6-a037-ba62a497334c
  2 b9792240-a812-0c7e-b95c-990a11dfcd01
  3 8efa740e-b4a5-5d86-9667-c3950cc2abef
  4 f5d17f18-b1b4-3159-98f8-2791cb503107
  5 56b1c313-3693-8618-af08-cb3dd8a1413d
  6 ecf01a75-7cf8-842c-84d6-3679b1025225
  7 a6bb826c-f627-3913-a404-07ae3b083c4e
  8 a1166c83-985c-026b-abcf-89726b3f7e64
  9 f159b97c-8239-08d4-9166-109efc516bbb
 10 9f646a7b-7963-7626-891a-32700074af8d
 11 3190d44b-fa32-7ccb-87b0-d9e4a9edfc80
 12 a890b19b-da2a-71e1-b1d3-4c289a00f434
 13 c139bf6a-c9c2-8f37-9d68-5bdb4d9b528c
 14 7c4cca55-ece8-201a-a9dc-3f82735afb32
 15 1d551b9a-9d36-436f-ad03-aef7c76b1880
 16 9aebe73d-7c40-026e-84d2-9e5eb8afdf55
 17 63a190a0-f5aa-1eef-b267-28c02776656b
 18 47d81cc3-64a3-0de4-83f2-bdb0b8001245
 19 60def63b-f99f-3088-910f-809a7a84307e
 20 8f704f37-cd58-8a70-9886-5dc1c994947e
 21 56837399-8909-758d-9e1c-ea9cb3b02b1a
 22 9988599c-0cb4-4d83-8ae5-b4d135f34d9b
 23 57ce4618-8ad7-604f-8246-1be3a909ba1e
 24 e11ebde6-2371-7535-abc6-8b895cab3dc7
 25 eca18511-bbb3-831f-a902-a375f5d0d738
 26 5ce3edd3-3301-7acf-afe6-dd0829eeeabc
 27 bc197f9d-5015-0d96-a846-21da3e3d76a4
 28 d21f361b-c2c1-4e31-8b71-897e9ef83014
 29 e4de1a96-c494-411b-a175-2514cccbbc0e
 30 37bb9bff-6b83-5dbd-9beb-240ccd8e710c
 31 f8e871b1-af50-8de7-b3e2-87f168eb8de6
 32 e9092b6c-a25d-88a7-a7cd-a12bc2d9b174
 33 5e0d1834-b506-69a5-9a35-7cd484af1146
 34 f5e8f2e8-d253-36ea-9dc6-727c4e1be4bf
 35 a964b4de-9347-3261-a31a-9c867039903a
 36 a0b8553d-ce3d-1796-bd1b-ea6e36fb1297
 37 641f4e2c-bd1b-5ff2-babb-df8297092a09
 38 bebbe9db-7e1f-6954-9385-0b327da8fea4
 39 f375b2c6-799a-4452-8aec-c82ba4c41702
 40 cf450919-d1dc-7270-bee7-058f2904bbd5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8053883007778240103874678704458863315647. Exactly this sequence comes out of new Random(655).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 11 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs