A858DE45F56D9BC9 archive

201304051617 1bpvot

explained decrypted filler

seed 247

Metadata

Post ID
1bpvot
Title
201304051617 → 2013-04-05 16:17 on A858's clock
Posted (UTC)
2013-04-05 06:17:57
Timezone
UTC+10 · title 16:17 against posted 06:17 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304051617) = d08f8c709637f70297e48b54b4ba0739 (name+title)
GUIDs
40
Filler GUID seed
new Random(247).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
76 · predicted N = 40 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

5C01E738A6FB9E94 7F27F91D895E457C 3B893FDAAA65F679 4C8961D36BB0C3FD F1E3768ACED1CAB5 C937B1D1D5EBCAA1 3AD6FC1E39BD4072 276596CD086609B4 A2AF30EEB3F38343 6ECE5F289FA7D110 E39DE3F83BE58F2A D5333BD1CAF91A25 9FFAF01B4D9433D7 A38D749E19A5A17D 4DAB72BED0B8ED18 351CB3E4F535117C C9430B7D6E188FBB 1D78BBF68993DA5F 8EB767D556D425A1 5CBDB0F964C6DB40 758B67BB9E977833 D622E43585B8A6B4 3D6FE7677E0620EB 611BBAB1003310ED 82CCA618B9B668D5 B0B68051ACE77651 5EDFCAA98584430A 7B30D2A42C772F06 8890486E2550AB84 EE151477DF6E4735 7CF9D8492676E93B 25BE6085806ECC45 398BDA6BB736BEF4 AF353C6F1DC2832E 77E7E5E36C1F4CF5 A72755FA737B7119 F44F3731F9EFD592 7033F83F799FBBD6 C7B868374CB8A773 9CB34C81881598C0 FE65A81AEC33C75D 327AD1BC722609CF D4233ACC2FD8DB44 B389863FB9B04EFD C83C6819ED57EAAD 18250781DA8F4781 C7CB0ECCE56AC46A 8685ECBE7548561E 7771F7DB07DFE4EA 994594462679F3DC 8D3E8D5D7301C751 EEFB954E39C490FD 6D58942A3F7982FF 412803DA489CD86F E59C51139E048ECD 761D12F27851A7F4 3C110813A1F89E3C 7335473B0B66A4E8 EC090E9FB83AEF25 828F1CFF0108E5B7 9CEB14748B564AC1 8DAEAA46F65848FA A13F338057ABC325 E3AB6DB474688917 86E062698C320094 1576381E4E46533B 2BEAF80BF48C6D00 499037AADDBC830C BAD1EE117B53E6D2 B01F7326DFBBC771 F98F8BFE1266DD5E 2305E61D7B15E339 88B399E230D64514 4349EC3DD515AC02 570520DB973C4425 FEDCFACC56BAFD6D 22F0164D4BC95D3E D972354B9A4C951C C9F9037CB22BD89A 0F98893F5CB671DB CDAE4BBE5DF53958 C8CB21DE2905E247 A520D3B8C29DAED7 D95AF855777BF13E 29378B7BD620B460 B1CBCCCE789DB6DF 7166F5FC8ED10E43 824BFC3471E77EB5 580576CB362CE63F 4C50239701578A06 957358315EAA5198 C468312F715B066B 61A08332D62226A7 50E94D4C5FAF3FF6 2FD88AD837556392 18F2DD7E075581FF 6B0F421DD8097165 630B500E8698EF55 31F9360F620EB28E CA4B223563E97381 4EA31386BF7C7174 C6A96DBA92A82D4D 9A6899992032EBEF 790AFFAA886225FA B96EE013463206DA DB692DB0593FD07F 78CBA3798C1036DF 5A995DDCB3CB5C25 9EC1F70B8BB343C2 B03B960AD128CDE7 0C0FB8DDF8F06F60 30FAE234CA78A40A FF48173620DE63A6 D5FF517A9F1FC40D 4FC84AD292E7935B 5C21D28EED38D9B1 E583AFCF43D991E2 E80E7BAF08B31066 D6111320BAC1FF48 2B503FE22BDDBCB4 6B49270DAAD30BB3 FD5EF5933C51C0B4 247A98C07FB91A81 A4317E1BB7934CC7 60A660FF39ED54AD 55FD4795CD40D33D A2C018D6149BA366 63B14D58297A01AB 6CC1D6CE013789FC 28DD213DE7D71DB9 F4E5B66FF263BCBC EBB5B50BEED76741 745406BD7226087C 8E8AE855C819B33D ABC980492CEDDEFC 540F937554F365B1 37399DE701ACE4E6 9D89B0B2DD7ED4AB 769EE5A060813D95 1502A92A4B24BD9D 17FBBB04971C24D2 AE959B123268B084 6CAC6D92918C35F7 EF87E307536CB7E7 844B9F7CBAFCDF63 880D4FEC3D2648D1 4F7251440D6BA940 F21B934F9051454E FFD41C4990189926 0400D66EB9BABD66 A4BD8B3135165AB0 143D9570F19C4812 6A4F87150EB3DD5B 7D1420356FB8864A A8089877CB34C497 639C22AFB0205F8B C0B7E0D54A86051B 5B1ED471A053E1C2 5A246250BD9B7D0C 768F58B476A5E318 D32D8829CE9338A6
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304051617 (name+title). Key = MD5(password) = d08f8c709637f70297e48b54b4ba0739, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9271d6ae-07e8-6826-9ac4-7138600f98b1
  2 a70e6420-8a37-2daa-b768-64acbde93f97
  3 3fd63bd8-e928-33ce-b262-72b63becc506
  4 ed956d17-fdfa-234d-a0e7-fd0e604d9c09
  5 1d0b1287-7249-6573-bf4f-ffbea26a553b
  6 ae354cda-a85b-397d-8618-1e17e73324f7
  7 0b570849-f205-55b3-aca7-b0e33a67de78
  8 3e257a1a-85d3-35a8-bf32-5250341d8f11
  9 96208834-dffd-4714-a5a2-24aa135bcfd7
 10 d4be441e-e205-3bd1-b0f7-64ce08256752
 11 a2e082df-9123-2a45-ad7c-72de00d040b2
 12 fcfcabac-7583-2471-88c9-7d2ab0ea57b7
 13 00db7c89-832a-3dc0-8aa1-7b4270ce5dc0
 14 73d764a8-5b17-89b8-90aa-3827643d8428
 15 3e02b399-805f-7527-a491-37a1eb48b832
 16 f2aa846e-9b3f-2aa6-a83d-5725942d91b8
 17 a7e86f6c-a3c3-676e-97e6-e736900ff2ba
 18 7a2a9df9-553c-17d7-9086-2b9232d74e5e
 19 821bdec8-a5cb-3d59-8da1-0026985a5c8a
 20 1348b94d-2ecf-842a-b0a1-608b3493df97
 21 9579a37f-4a20-5dbd-be9e-0b986d390f21
 22 edae4cd0-7a41-45dd-af24-e295be6eb46f
 23 b93ee0fe-bbed-6791-97da-05834c659e20
 24 51e763c6-9dc7-294d-874f-49edadb7dec1
 25 1614fda8-4af1-8452-9192-d64e43bcd7e6
 26 e07e021d-d0a1-3568-ad2c-f3b52e134496
 27 7aab096c-cd5d-24a5-99a3-203f6684354e
 28 deea937c-19ef-686b-8971-22e96a5428dc
 29 3a6565f1-a834-69a5-bdda-ca2006e6c496
 30 f4fdb3d5-8f44-02a5-9a1c-a82be7da03a3
 31 7e012199-93fc-3eaa-9720-db449c2d88d4
 32 529124c2-c93a-456c-a2bd-c38b2c4d598c
 33 feba5fd3-d6aa-56ad-bcf7-89b3b6d9b104
 34 0ab6ee6f-5661-1a4b-867a-6545ce68e0ce
 35 a7935dca-efb8-8135-9b28-6ad491d4f7d4
 36 9cc9a9c5-055a-489d-a4c0-8d7e49e2aa94
 37 b39f8ef2-1289-5a32-82b7-3f8d3f66bf0a
 38 49d19160-68ac-68c5-87ee-8518c401cc6b
 39 9c9cc744-2cf4-5b2e-a513-748ce471a931
 40 9d83f341-51de-1114-96d0-cb6724a6ad26

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6232635343223872613854628326603451845651. Exactly this sequence comes out of new Random(247).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 76 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs