A858DE45F56D9BC9 archive

201304032101 1bkwu9

explained decrypted filler

seed 456

Metadata

Post ID
1bkwu9
Title
201304032101 → 2013-04-03 21:01 on A858's clock
Posted (UTC)
2013-04-03 11:01:59
Timezone
UTC+10 · title 21:01 against posted 11:01 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304032101) = 5f388e874d97987f7a19c095ced7718d (name+title)
GUIDs
40
Filler GUID seed
new Random(456).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
17 · predicted N = 40 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

9E53E2F803081406 CCFB3F4D2D596DF9 2F9F5302F1FD3AE2 58E3FB619F25EF41 07A276B753C75455 6DC57134BE866403 0E5674B925F81AB5 79C1BD620E1F6C36 8230AB8F358008F4 F5BB11139A4C8F4B 9807E56E2DA22100 098392AEDB7F840A 66D8F620321FCC46 D853472269EA7881 2C9C4F25E26D8C2D BEA880E9658D5E56 7E2A7C722C2009AC CDC28EB1C0055E74 9981A56D98EBAF99 CB14950A6B54E0AF 78A161D58BA2DF06 7509BDB3D6BE3D0B 4954B08A96BD2272 80EFCEF71B072AF6 9254CF8620CFE151 873347847C819920 EEBA884D4D22DE15 06EB403CFCBCA195 CF27B1EDCE26CC01 83BF2EB1D8E4D54E 77FE746F13218942 BE4F59EFB479F342 A652DA28C03FDCAD 19397CCCDCBA1106 704902A46F5FFBB1 1D8AE3D97B2DD595 8F710A024C5A5280 AEA5AE6EE4C29FC7 D715AD597D164A6C E9DAC05B861E5BBA 0B3C63637B315357 D4ECF488A8D1E5FA 85A49AE4A1DB5F64 A478A08841979D25 F5CED48111291A85 198999B3948EE9D5 F1B2862B6686C29E 1C98ACEF8F8CEF18 A308B36F8779F955 105F006D11E04602 9423AF13A5560785 F24B3609337934BB D4F528D2CC60D227 1D9EF99990690988 0A8E03A97F79A2CA FABE3BFE78545CCD AC2E35714EAC4D00 A190595BF0C5BCA6 29238725B81AE542 BD441D30B93E27E6 AFDC72952B0A4DDB 0563F3D8CC290071 3D10C6062DF2C476 E324BEAED31CEC5E F1CD5511073C745A 680B0DAA3FAF01CB 7981E62394EE2A29 A7A2055305665BA0 8B705D4F92FE23E4 752A08B4C4B9244E 581723C819B57857 9639AD4F033C79DF 6843985C1BFF54ED E6AB3D0A0EDA49B7 F8B3F7DE7CCA3F35 D95A1509DEC077B3 A2375374E9AB08AB 38A05F8302569552 3D943991D157BDD9 DF1075AF13E2666E E386A51D9F34E4EB 26B2C1F499C90BCD 5C60E7A25EFDF524 D1C69229A1F14111 B7E66EB745F6EA3B 7DF94E0793D2F16A 9FB0CCA00247032E B24FD26C54767F5D 35EA9DE949886E27 607C633142035403 2ED17762622D63E9 93A3CFB32A9330A5 24A1706306B85E1B 1889EF8AA9CACAC5 363C1B97582394F6 708C0423F0D98CFF 8914E5BD7EC02C5C 96B75C9F5C987204 935F5B94500BC141 096039F2C2090067 A9AC19BD1C2AB3E3 718ABB01DCEEB7B5 A3FABDC459E46592 146526782843B5B6 3B11883EE6464ABB 7CDC7B326EDA39C4 0F07E72A9F0FE391 C04A6712F9195EC9 45B8B85FC4A25398 B05157E0F7DB81F3 2A082911BB32AA95 5073121AF32C85BC 3E41DC968DD46BF6 DC4973EEB9740C39 D0A4CF3484DC1493 5BFB32FE06DCE8AB BB984A7E8BE791CE C698B2EF6A6C71CF 613E39B4392079F1 EB1112EAAF65B88E 61F7E01C69D1DAEC 648048B3774EC394 771667009D71390D EB4E05A74D061142 FBA0C026D909A19C EA2CE4B6F69A08CF 8F29888890F7D2F0 81373A7C253A15B0 51DE63FEE4BBFFC9 15FD756321C26B65 6A4BD940EA409929 0C187F968599091B AAE5203FA2D73471 43708AA13E682810 BB7D64848D421489 31DC8FEC2FFD6BAE CF4D2E9C121C64A8 6A1DAA5AD2B8A36E 7E4A3B65CA8B767E B8DC98E2B336ECA6 BEBC4796CE6254EF AE49CAAB31710F66 946594F470C46262 D2C04360A250889A B41F0E769B775BE8 1C46A16E120FF3CD EDCBE7AF0E03C253 F0C71098002C7A45 32B05C217FF3F747 A7D0B4678503B70F A3DA49D332D10807 0AA64FB1A5DD2189 C5478CF0AAD01DB1 580FA8E681D85116 9039A4644C5CDFD9 5AD651997E423B9E 374CD7243D92F71B BBD599758781810B 98EEF73DA2946BAE 6586D388D455B831 B365DC1CBCF7B1E0
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304032101 (name+title). Key = MD5(password) = 5f388e874d97987f7a19c095ced7718d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 92c54726-dbfb-8f9d-be02-e72414c917f2
  2 c28b32e4-2e62-535b-a81a-dd0bacb79403
  3 747881f9-6ef3-4262-a65e-ed2b8449ad81
  4 44657210-2ae7-782e-9638-2dc6bbfd9978
  5 17898ce6-3fb9-0530-9a2c-f8822982cd94
  6 eaf59321-4234-0dbb-9f6e-1bcf820ef781
  7 6b8d2d9b-20a8-1a04-8b3b-9dd406ab252b
  8 bc883592-8167-1f9d-be6a-701c2b158991
  9 3742a0dc-ec1a-3675-b510-65e9c31bee8e
 10 3cb40a0f-1602-3a5e-a94d-9c7fc3b67abf
 11 56754187-2374-2455-bbc7-b1eb085781ac
 12 d491cf4d-f94d-4bbf-9dd1-fb6c5f80c02d
 13 1ee5f7cf-5e04-0d3e-a1cc-a9747fbcdf71
 14 85d1b36c-74e8-6ffa-8e9e-6f52ac581770
 15 9bda5de8-d513-19e4-9706-51199d0c6d3f
 16 de379f35-65cc-7b67-a6ad-aa09a143a6f0
 17 785c82a5-5907-4788-93ba-83bed583f786
 18 131db376-b93e-6c46-985f-51410b1e8ee4
 19 5864d331-ce98-094c-aba8-590370d3b730
 20 fc2c9d67-080b-7fec-82b7-4d7cfa814ce1
 21 48ee991d-98ef-3b92-ae7f-d0d52c6879b1
 22 c5e4e08e-1ddf-618a-8065-22b7c6a6b449
 23 00b03b9c-1a33-0c54-b90d-1ba5d6793c61
 24 f5ce7208-68dc-32a0-b203-de3a6dafccb0
 25 29e734f0-c3ab-3c29-b33d-ec5008ffb254
 26 07ed8b4b-9830-7aab-96d6-4f856d4d5729
 27 256feaf7-926d-8ea8-b471-3ac3b8f63fe5
 28 f0106fcf-6c78-298f-b85e-2814a436af63
 29 14a2a198-0648-4b73-b8ac-6574d41f25ce
 30 264ff618-daf1-28f4-a0bb-6ef2bbd1b6ca
 31 636d4f8c-19ee-446a-a585-180d7b0b11e3
 32 002b7f6a-71f0-506d-925f-4cbf65f44310
 33 d39eaedc-605a-5100-8509-6363def1f0e5
 34 5a90a64b-a57a-3e68-a84d-59985c9e722b
 35 7ab44b74-133d-79c5-a3bc-ff198c95745e
 36 de8c4833-cb2d-4e61-9a2e-010e3d0aa6fa
 37 327b43a6-098f-6d00-ba81-509ae0d85240
 38 4d4fac6e-f956-1328-be85-e0540cd754ae
 39 4a9abd4b-01b5-35f6-b6ae-fb43e9f2a7d0
 40 dec2cc9b-b4a5-7923-a009-60f3f03cadee

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8547001133240617460736033782424553746137. Exactly this sequence comes out of new Random(456).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 17 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs