A858DE45F56D9BC9 archive

201304050941 1bp4eb

explained decrypted filler

seed 609

Metadata

Post ID
1bp4eb
Title
201304050941 → 2013-04-05 09:41 on A858's clock
Posted (UTC)
2013-04-04 23:41:58
Timezone
UTC+10 · title 09:41 against posted 23:41 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304050941) = 53c0e3fd9715e7eae074c6d317ef534e (name+title)
GUIDs
40
Filler GUID seed
new Random(609).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
67 · predicted N = 40 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

D3DA9DE02CB264D9 9D99CF182E53DE61 7F0B5D42810CE31C 16835D15E6D315FC EDCCAB041A41D8DF 3AF50114864593BC 2F1E5EDCB5B23E7C 7638045AB52BCEF4 380889D7921A7DB3 0D5D08D871565D15 59924692CEE8593C 6BC83EDDAC64189D 30708820B01DAAFF 8096474E77C7FE4E F08F6BEB8787DD2D 217F327F32257687 6462C919AF56FD92 FDE2164B93D3139F 613E88EAF98E004C 3867E8BEE67AAF87 0BD5CBF0F667A557 F083BE8392D44DEF EC3F609C277626CA 013E4656290CC340 6B7DD7867E87A765 7B8028B645EC3E51 997BD1A340F2753E 2ED639319D869F15 A2A1180AAA17C57A F6386CE663806C29 E46CA19CA2881145 503FA01F53A713CF 6CD729B5B0B2F53A 38D2620DA0397525 64A9126474A1E016 8107EBA585FAB73F B1B47B4A593143AC 7D144E324F266299 89198E1D143199ED 900A05386E75DB8A E6F5ECA5650171C6 0EDA7304D865AD2F 69081DE04E2A5342 65F19BFA5DACC63B EE0C2F916EEDD180 3A9CDCA3BCF67A31 A33A8F1EE585ED62 8AEEA3A072302917 97413B5B089B015E 95489FFEB6883419 28CE8DEA52583BE6 25AC5091453D57B9 2829B6D14A9E8642 323FC5CF3A80ACAA 5E27CAE7C470E26F 5E053609612DA645 785172477D12C5D4 A574D872C76E0FFC 0D6BA1B9A20A1FCA 44C175F1A2C62C72 DC8B642FF85CA0FD E2A3575AD17B1A05 606A6E4F0E564F8B 7389A9166D3C7A0A 211414CFA0905ABE EE95ED5F67AFAF8B 5AD487970A0573ED 572F3EF92B4B35E6 AD207230DACC4184 562430C848093046 9E45CB172DC68D5F B8EC469006667D34 BC35EABF13FDACBB 0D454C25260CDA3D A8D82731BB3CB75C A5DB91D8C2E02682 CA44E36B763F6899 3148B89D8D3E1851 51EEF53A673BE0F8 65126E61874A2784 855BDAF7A0328550 2B97BBC73D1FC2DD 9AC2B1CDDA80CAFA 24FC3BBE030E9707 3A02A41AE3E10A74 6CE1C33E79255E18 DC71FD9135AA2B6A DC96BA61A271A052 065EC762A9FB972F 6AB104E4F5DA1EAB 71D3D946FDA89E47 6F3078B2C7BE067C 770C163CDAEA9463 D3C150C303E7B9D9 A5CE2CCA2057A877 D9E74AB008CE9A44 E44ED31DA61E87F8 B17DF7F7996D1F33 2C62B3E77832E78C F7FA15C5AD179AAF 64CF62DCA67CEDB7 458BBC400BBFB8D7 E271AFBCBD04971A 813070CEB31D2431 F7113522A49B546C 0824F49698A231C9 81B8E3A941744459 84D0E7CD5B505EDD E3EEAEBE3294E6C0 3AF402ED9CC79E69 99F52B807D63745F CCE6D8A980F55DCA FD5A1AF9B0DA7335 009CB1AF42E5B66F 67BA74EB13A179A1 D6A9449D45E15864 BF35833C932AFD00 1F9E086B4D4E490C BF8A6D8586DB5559 2560266ED073E5EE 3D245B4C50854BC3 0949412EC24A0634 368CA0157116A625 FF5E052C7842020A E2C140B7229D9C6C 04B72CBA35A0397D D2EF42CD2E0FD19C 2072B0BCDB84A4F5 732B61B1FD15B616 948E6D9AF5D02811 0B097D7FE4EE5745 4233399264D093FC 1047F1B940C1EFF3 76E90DC2E9686932 D5A4AA454DF4D1B5 DA939447513AC47C D676536E9CCAEBFE B018A9325F7146F4 2646877E9A0ECE8D CA60088C273D4549 5712B8894CBE574B B055D8F51156CDAD CFE9D1F1AA5A08B1 360EA5061C9744CC 18A1A85E85ACFD35 93DABC5C0855BE04 99AEBC9D9E1B1C2A DE4A37741628CA81 96E632E24790A027 EA978DB9D54C3DEA 2726CF31851FF643 05E1504ABE15FD4B 5E29643BC097DCC3 B2DBFE5B8DC75CF2 56F8C539497774CE 20098C7FAF022A4F 2715597DC18A7474 CE381334D3E3D65F 7C8130715D68B08A 47393D7F7E10941B FE4B68EAEE38CF64
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304050941 (name+title). Key = MD5(password) = 53c0e3fd9715e7eae074c6d317ef534e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 1a65f98a-5e85-7282-93e7-5c6067a88268
  2 60663ee1-e174-4350-bcb5-c9de0bfc4b13
  3 461b5826-0b75-4685-a904-bb2240fec654
  4 309f3ec7-3ffa-4ba2-bcd1-3ffe5b788a5b
  5 d346f80f-a20f-13bb-9a86-4566f256e20b
  6 f24dcbc2-92d9-61ae-90d5-b756f2a51df1
  7 6520a11e-ca6e-6875-91ce-40b513e5d9f0
  8 70ab5a41-3339-895d-82a6-1fe1e0124a6f
  9 53a19806-3239-2d4a-b000-52f368a8aec7
 10 2d8dbc13-824e-7e7d-9cbb-09271f52425f
 11 15ab4496-665c-8b05-9401-ca256b69109e
 12 c8090382-6190-813c-a7d5-3e7639114cb9
 13 75330310-ed68-2b19-ac12-485f1846e283
 14 0301b4ab-0c2b-23d4-bccb-e433614551e7
 15 4da0585a-9518-25ee-a3a6-4282de17bd1a
 16 a24ab65a-70ce-3e8a-a65d-a80bce547f0a
 17 29e0d3de-2657-71b0-bb2f-38f216b23c2d
 18 e67e5bea-6c86-5e19-ad26-4ee66134d244
 19 fe11f2b4-7f1b-1a52-974a-11e6ff0438cd
 20 c520e88b-ec76-1bca-9668-e9db4a064301
 21 d9fee99a-c404-6f9b-8047-c1da2e701196
 22 67cebf6d-af73-2c27-b53a-8dbd38652e96
 23 7fc066a4-c0df-82eb-ae40-23fa589f98fd
 24 b7869028-2551-72d6-bc02-45d487e2a30d
 25 cb929929-564c-3d2c-ae37-26a352f6233b
 26 ffb8d27c-dc5d-21ad-81a6-f8746b8926c8
 27 b70eae4d-b20b-48c6-b15c-06ecd81829ee
 28 a25980fd-3fb8-0575-a667-0954b2c325a2
 29 65d3b4a8-6569-603b-90cc-d08120ff4906
 30 07a53ebf-dc4e-4e46-9c41-8bd365ab74fb
 31 f8a3448f-3d32-0da0-ae2b-57c819d53a79
 32 c3d86976-1aa7-7100-b22a-0bd683c3f067
 33 f22f7053-5f0a-17a1-9914-2b80d3142574
 34 84877d74-1e9a-2156-9b5b-e9331dcfc65f
 35 c98dbc74-14a1-2767-8ab2-771c380ded5d
 36 f73cd3b8-2561-13bb-945d-ccbbcc2b0520
 37 a4c22b81-b905-4770-984d-372f6d5bc5e8
 38 b2762cbc-50cd-3103-8a43-c244e8683a59
 39 d0f3d337-8173-54bf-b7b1-a248c07c432c
 40 026b29f2-9584-6e70-af7c-d1e8beff3d11

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7444166827882223751162873240640712214356. Exactly this sequence comes out of new Random(609).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 67 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs