A858DE45F56D9BC9 archive

201304042241 1bnnw7

explained decrypted filler

seed 188

Metadata

Post ID
1bnnw7
Title
201304042241 → 2013-04-04 22:41 on A858's clock
Posted (UTC)
2013-04-04 12:41:58
Timezone
UTC+10 · title 22:41 against posted 12:41 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,344 hex characters · 1,672 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304042241) = 1f41da9b5d1ad502e14cf76316290c1e (name+title)
GUIDs
52
Filler GUID seed
new Random(188).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
52 · predicted N = 52 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

87A941B2B5889D08 63363201331A85AA 3B48F9A6FCBCB961 63E3CA2CDCD6A1B6 B96B25059AE3D426 BD6BD6CDFAFA3918 AF743ECDB92D5CDD 301BB53C5FE041D9 2F8BB46E872F37A6 A322AE071119631D 581C5E235BF9AD77 E647DB51EB66ABC9 8F733378CB6090E3 E77E6A603B7DE26D BF51B1C5118E2CFF 9C2EFE53EE60304C DFBF25F6710C0736 F98E864D8095A5C2 01009A571BBDF86C 8B3EDD5C8E71ED94 28222105FDE5B24A E51E1CBB225A1604 8D788A34158F8632 96F0AC9DA55538ED 9712182440D36288 C6CE65AC918B7828 343E0D0415AAA013 BDAC21CF8EB51F9C 6A72E345303302A5 69D3F01D97B292E6 99314A5C8311CF98 AA1F85F87838934B D6F40DA58A3A8C93 2A84C4A9953ED6D6 764F6469AC4136EF 4083340F980C3CD8 6A57F6E8FCF85878 6C70321D822D98F2 D0CA857D5F855F17 C9369D764D4D8DA2 703EDD7FA665F6B1 88A34ABB1F84BE9B A7C9DED9D406CC78 E04F5CD9FAF32127 A0417B5843583D0A 2FFDA5087C149059 42DC495664486E39 69C99039A60A5013 59BA273BDCE423B3 0EAF8CBFC20028B0 7E928979A79B31D6 DAC4DFD29379462B 86C779E779889D0C B26A34865FEE853D C6245366EBC8DF7D 4756A9738013C84F D6939577C6B416D7 23E728A9FC4CB5FF 54D07BF7CFE5A6A7 76E00C52C6A16D78 4BF262103A23D8CB 184EC9EF9951D0D0 A29255226B01957E 22477FD0CA830FE2 DF7193D3F0517FDB 91FC6F3D7002C6A5 62699011CF1B9F81 C13C552847A185C8 A112F58B68BD8D9B A9EEAC2E3469E1F3 5A791E208D18A06C 6692EE3740182882 B9A54054EC532547 71A5A630FE4541DD F7204FD350BF42AD B5971F55FF68AE82 00199E13411963CD 6D9D5142665DE93C 70460B198078E43F 0A1FE674ABEBF689 FE88325E22C88575 8BF0A3727DF9A523 4C9B9A429ECB8529 EAB27B29CE09EF7F 747B8BF0B91491EC 6BA3B3C30250E0F7 4D25E0939B0EC0F1 13FE61F939F5941C 6FA4B72DEFA53409 77D6D05DA99FB24F 17459FED4B0D581D AF5983E46FE7F299 5B563B356D10E36C 33496E31EDB7DE72 3CE42A1FF4324572 BACA7D70EC2DE16E 3779E667D5D2D3F6 6528867E8B33EC8D 846D17F86B98F264 7E75CBF977927392 E9D0E1925AF6EE32 50CABC53BC746612 507711A4FF798888 28A00F0188F97569 1CBFB1034252B9CB 985D4B73FADDC308 DCBA0F7CEE8C66DD 1E8926290B88634D 468DFE1E5FFFE4A6 D105D40729C9D822 9091556312791AB7 B4799C73D3896B50 F4B481A3C96DE1DC CD5BF948EF60491A 23FBC1C808065F59 D75C510A0F19CE76 38DFD4D5EC96B0D0 A4E3086B446502EA 29FEA8FCBE41F6E3 4941DE6121A91C61 DF3E19BF425911EC 732CEA5D7A35D847 258B04ED219EA0F2 8D54C287FB92A743 8FBA3C0E166DC4AC ED9F73B122AE4A8E 82398380F800FD59 217F57EDB068A85C DE35CB3FD0E8B956 17296C1AD9B17EC0 47EAE808E12E9F7C 0EDE5D65C2EEB063 3464F8C2DD3FF667 9DDBB726FEB9BA4A 791CE5D0B447B0F1 438E4277537E01E9 37FA9376FB8867E8 85EC8AB43580B21A C8C4A9FEAC6DB1F8 E60FFB595996877A 6E2F58939959863F 087E105D1A744095 7430AC1D5402DA37 4246254F7A22FEAD 44C4C4E0727F271A 31D9CA04866939D9 13ED6E578BB15BEE EAA3F36D54D51D14 1F3578F538DB3EA0 F122FEBDC97E4FBE 8F50E032CFE06AD7 7E0E1121A6C89EEF EFA4551C709D8439 BE42B6E8AC9825C3 543E0F42FC4B84B4 FD605653155B7D06 9EF151CEAB888E67 FF86F00008BC778A 61B85F7A29D04ED0 CDC303BA83754A01 F6CA2DD2746616C1 92AD8AA6D4FFA75C FA84A95533834BCE 79B37255578AFA51 0282D2D1FFC8EE5B 92276E4B1F1051B8 EACD40242F896755 98A96CB54619F548 2743EF1549041F51 0A42CA8AB7E60483 F5660F9CC67BE302 0A6DAB3F3A8A1EC6 E2FCF8EA8D205EBB 606FA533D2703AA3 3A242DA980353A1C 8C452714DA9ED79B 6725190C5EC6B43D 904848AA37750E51 64442C15D64242A0 A7F8DE207679C8A8 34627A54E990F36C 6B5976FC430A4B3A 6FA983F8393ECACF CA857360AA49CE4A 2E51A6917EC45665 A8B28D915330ED37 DEE637CFA65C10B9 F58C6FA317244A11 DCB8ABA26F643F64 F0D2291495A54A9A 2AAA446F0DC2CE27 19B9A473D70BCCF0 15AA0A893B32C4CF 22E8046D9E110122 CDEE4E45314BDD0D 8428F0DFF7B77AB5 080D9685AE98F505 A104CC845FEB28F0 D12D768D2F86C8E8 E5D355573D2C1646 BFF018A85D13948F C8D4D5AE5D0D59CC 8D08367DA5D826A7 478979EAD22F9C13 19C4B6C663C8FC65 871F7B59C3BA0B11 960EF3AE58DD3163 3748866ADCA5D0EA A40DFCE6F3BE364E
  • Read the ciphertext. Strip whitespace: 3,344 hex characters = 1,672 bytes = 209 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304042241 (name+title). Key = MD5(password) = 1f41da9b5d1ad502e14cf76316290c1e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 52 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d0d0c31b-a1d4-835d-b22f-e2cdc4e2735d
  2 65d9494d-e773-81c7-8688-0105c888a04c
  3 f1d810b6-641e-1836-8816-7b580feba719
  4 3144b50b-6f67-6ec9-be94-0095783127ea
  5 23ea4ba7-44e4-05dc-adbc-d961f370dd4a
  6 d6325ae7-8622-795d-b8ec-26892d323af3
  7 fffde2bb-94fc-1aa6-8dd2-e92af6d84ca3
  8 30db9f45-960e-6a76-b49b-85ad65370b19
  9 a0936acd-a45f-202c-b456-4f82ae24345b
 10 47e79287-6ec0-5321-9119-bb8fdd69b440
 11 af416940-7f3c-7aef-9626-b67cf1412cf9
 12 65a6034f-81ec-2da3-8464-4a0b13a989fe
 13 890a146e-fa5a-7aff-92d0-d8c692979289
 14 ef1abee4-7860-2bc2-aefb-b4cb71234bc0
 15 6ff62b63-8770-5c69-be7f-9977f5b3641c
 16 4f56b3a3-78fd-3bd9-ad0a-04544a9acbfe
 17 61634795-ece7-87bb-b796-009f961676bd
 18 91fcfde5-b745-4e7a-984e-7641efd2d631
 19 3cf514ca-1b33-68ed-a648-b0cb6a8e2937
 20 04644a16-9c06-0ca6-9f40-93fc4dcdbf88
 21 01203204-fdfd-7c62-8404-93176597f97e
 22 f7d54120-7465-8792-a873-c39fffb815ff
 23 e9f528e6-9e8f-6838-a204-f684ca45b66f
 24 36bd7a7c-25a0-6de0-ba0e-53f869e0b967
 25 20d95a4c-8d00-1cf0-937d-689c6ba826aa
 26 bce066d1-4597-413b-a984-077c7c389ee7
 27 a6663e10-acb5-5778-848b-26963e383f94
 28 067ce75a-db8a-17a1-942c-e0a585a47b59
 29 504a586c-f04d-4141-a285-7edf314fe928
 30 9a2b97d6-f2c3-483c-8b48-43f74a0324fb
 31 1756e27b-5141-5f43-8ba6-2112b5f2edbb
 32 76bd938d-eab6-8b1c-9277-d46ad50cba80
 33 1f998ddb-1fcb-8cb9-8d0d-7c25b4ba66d8
 34 c70224aa-ed98-6d15-950b-ee35f9bfe844
 35 25bf4137-5573-2739-94da-fce9080ebf7c
 36 7e6374f4-44bf-8771-acf7-2fad45b2f23a
 37 d5220380-e4bc-6ab8-bb9a-5d154cca52d0
 38 04d23429-3edc-4f40-a46d-7b2a387c03c6
 39 230f32c5-5579-4d53-a626-357c7174bdc4
 40 787687c4-eceb-6340-92d5-9d3a7e38a119
 41 74df8d90-1553-7570-ab54-88e4a168d106
 42 6e874f4d-0b6c-8e1a-af6d-e511aa1bb771
 43 c5bfb59e-a3c2-66b4-9ae7-e3fb7b0fb378
 44 d493e7b2-ab92-4555-8a7a-c6ec0ad005ec
 45 a5483186-8aae-0346-bd5e-1789fc716ad8
 46 c466046a-074f-38c9-a188-9231d5ebbf22
 47 a2f961e7-539e-29ca-a2f7-f1a1b1dd4f7e
 48 e6a41d62-270b-3293-8122-bcf307e0818c
 49 bcde4f78-c061-4ee4-8c1f-a234bb98c805
 50 f4954234-443b-068d-9ccd-03f1e0a1563b
 51 30196366-5f7b-297b-9628-d0fff26e66c6
 52 c625aeb5-b5ec-44e3-b81a-e74831f2e136

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8816071625727253846078661451445886286446786403234024. Exactly this sequence comes out of new Random(188).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 52 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 52; the post has N = 52 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs