A858DE45F56D9BC9 archive

201304040633 1bm1d4

explained decrypted filler

seed 956

Metadata

Post ID
1bm1d4
Title
201304040633 → 2013-04-04 06:33 on A858's clock
Posted (UTC)
2013-04-03 20:33:59
Timezone
UTC+10 · title 06:33 against posted 20:33 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304040633) = cfd6fa6fa3a0671b5731666cee3b28d6 (name+title)
GUIDs
40
Filler GUID seed
new Random(956).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
30 · predicted N = 40 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

7B093E394FF7EF3E A764C01AAB4F3D06 378E8680CCB31455 46E9017A998FC2E8 1790E71B8265B448 30A4AC5C65548A79 7178EB6B7794EC62 FF5EFF57D005CC1D ADFECF91DE2D7C04 51713ADCCB87267C CF11E89FB9951BE4 A9F97FAB2AEEA947 50B4FD598473CA1E 722B70FEBBBE5F26 CF52D55989F0C375 C347D0DCBE189AA1 9F3794AF24C10938 E5E941E4BB6637B2 5E57920404963204 C9A5F97F4C49038D 3B51BCB3A51D79B4 BF9B3C49EE3C1A7F 8C88ADA14952D642 2D88EC58A3CB8F72 4719E1DA9339F8EF D367E4E88AF0B6F9 7880EB50E7C37DDD 88471CEF59346DAC 5915EAC618944D4C 0A8AB9CF09FB53F5 ECEE063B01098B88 889C6CCAC9572E14 6D21CA6E2E253A7B 0163BF94936F5F06 7D4DC85AF576D097 D3D1F50B214EE979 20665F99FCF484CB 521B92C17E424029 DACDEEE9612C701F B9972BB48E9A3BE5 1394E66C1BED52DB 174FD27779D7EEE8 4EA6CB42AF041BCD FE7B0129F3D4A4BE F9B00FC3A258A533 07A959639724077C F162512E12DAA719 8C083E7427B5EE1C 09856865590327C0 03DECCB21A7E2955 27EBCBDA551A0A7C 8067428771EEE35C DC1908D8ADA41888 BFADB599B887EE33 3292B68C96231C58 BBF6B179757EA871 AAA59F1D14F1F76E 7CCB8257BB444717 3CA5F07B0BB3FF61 8910B96DFF626511 1B9CAF6551DAE0D8 C4B1FB5EB6C711F6 DA5EC3DE592983A3 509625BC294FB7F9 703CB58772ED99DB 3B0825E8A3887444 FC29BA488124292E FFC6C16464743F20 0896A24CFD346D76 5C804DB87F9ABE05 8A42B413B2C28809 E984526281FCED4D D4C2F2B62B9607C5 3B357328F0AA3B4C 536E91C2E0E1C42B 6AF2578B5711637D E9DFC668460C1316 926AD39D6E65127F E30EAA41D6C9F21A F95261F21F1FE571 E4408F9A64C5C1C1 1E5AEC42C6AF89D6 2AAA8D401EF6A69B 373C004D2A7B9D70 EBB4C0F60EDF3DA5 22C45CA9BAF81F80 50BD4F947CA4A755 3AF2EC204009A7B5 7E5A29667414703E 81C299F7A9C59E3A B29FEEE0EC6C0A63 7EE6CC6BE51CA2B0 074AFAB6704C146C 00F467EA08557D55 10611BE75E209F3F 38AA0B665622EE10 A2D366FD7ABE5C99 6C685A6D2909081B 55557499FF6262F0 3DC198EB5DFF8EC8 DD2182CFC19F7124 2BC6BEB0B891F802 D5F9DA1B87461D43 15AB39744530B56D 924C1D045D89EDD4 19B3CD5942FD7925 0B4F2EFFA39CCB96 1D528A8FB5DCD2EF A23D1CA20A34B17F E2C29CEEF3D36D34 C63E564318DBC0E3 6D252BA8B276A676 B5BA16D2B0E937A1 0EB607678DA356CF 9E249958A576DB95 550E501B1CFD87A3 529D7A33ED5E8FD3 5B5F9368BD522FC3 B5D453CC1B25191D 6AA13B1E312A36F9 81FE07AB45095BCC 507A52E9B1A0E6FA 2CF45CE8BE723859 D37878D7D4F87C59 45B33FF8635D333E D7F9A793DAB36943 887152B014F508FF 2C6728A6A72F658A 7609BC2F11922980 E83703BF2315AFBC 1E7EC60871F1D561 A93D5538FF06BF04 40CDA0A742BFA57C 794E18E91F275030 858CD6B538AFA1B8 AD5A15CBF826A54E 61C8FD92E8F0F0C2 1061D245313ACD81 DCACFED17311C09F 0F27FD5FC3F73FB4 6D4D674AF6AD3F9F 3583AB4BCB972A08 8C96EB37B7D6021F 38EE627F5CFD6C9C D25AEA66F53AB551 2BF74E8098D74071 58039C4F8FECB5DD 962EF5C037343DC7 F3E8559BDFACF90E 538903835E6F1AB9 8357FE2344266D4B 03EB5879AFF80C47 712C7622A0F79B77 01D4925832E47A7D 24C0827FCD4ABB5A 8892A608EE345B4D 276EFADE85DDECA5 C4149772DE080F63 A824280BE5A17D64 7880B62C162B1AFF 7938BED2D7A34112
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304040633 (name+title). Key = MD5(password) = cfd6fa6fa3a0671b5731666cee3b28d6, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 4e066e0d-bb45-10ce-8810-6517e1ca474b
  2 d16b2d4c-8fe7-2bc5-b82e-005cb0afcb10
  3 602c9e0d-4a45-0563-a7da-7570b629324f
  4 5c8a8c63-f2c0-5014-8323-04b69cc8a54e
  5 d331e13a-54f2-78c3-a89a-99ef55607417
  6 917bed89-819f-0f7f-918c-c45ed3808c01
  7 377d9eee-28bc-2231-b9d7-60334300ebbb
  8 c00308ef-220f-0c97-a561-0da24ae64194
  9 e4ed437b-0d47-2089-88d4-d4930d484c2c
 10 80e55b95-8a9f-7bed-82b7-75f0bee08616
 11 29866804-df2e-5ed2-a5fb-f2d44afec240
 12 c5549372-27b4-757d-a916-64b89f53030e
 13 34eaaa58-830d-7f0f-bbac-e50069f693f6
 14 47f8d100-7272-72ce-8c43-4113c5c7e658
 15 4d4f1e09-0ba4-1c1c-9458-da96093ce925
 16 c565762a-b9f2-0e5c-bc79-d63fdb748fd6
 17 4d1c9080-9f01-6643-aec3-b9b62119c7a3
 18 9d2c5a47-c1a0-6fa4-803c-171c978b8523
 19 39901515-81c8-5285-b2d4-a4ea574495a8
 20 f6e87a7f-2c82-4f66-91d6-9fc0595490ee
 21 666c2928-740c-72a7-b5c1-eb6f0242ad48
 22 8d93b3ac-1e8c-3815-a011-92b0c14acee8
 23 ee206dfa-6d7b-58ee-b367-73c946f5f50a
 24 dcc5d385-fa24-0c46-af45-b2b7f3851986
 25 0d889494-de11-3c8c-983a-5cf19dd69cbc
 26 8e633d02-1422-33a2-8852-530234f158db
 27 3a8d96fd-05db-77cd-802b-8f4fb73ea991
 28 8f2a0525-563a-05d3-a60b-5ad7b8cd6112
 29 6454bbe8-a78e-59c5-8603-d8e94ecbd757
 30 29fed6de-a490-0722-a849-8321fed0a188
 31 1f4c9dff-7427-1f53-9d32-eccf5b9b482a
 32 9b53143a-9849-2d75-b060-d1f5003d744a
 33 6b9e90fb-c17f-6331-aaa4-cd97180c9941
 34 a0efaf27-2660-8ade-b90d-705de775c478
 35 12c38c35-f224-4929-90d7-c8dfd9dce5dd
 36 510f8b26-bb3f-1351-b796-6803b4a1c0a5
 37 d47bed20-f93e-8e81-894d-4534fc378bd7
 38 f9402851-86e0-8221-834f-b218f2faf611
 39 d8caa759-18c3-0568-94e6-73e7909f95d4
 40 9a96de4b-66d4-6bd1-98b2-9fcb40648801

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1205702027577710665473503370501268418806. Exactly this sequence comes out of new Random(956).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 30 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs