A858DE45F56D9BC9 archive

201304051829 1bq0oo

explained decrypted filler

seed 127

Metadata

Post ID
1bq0oo
Title
201304051829 → 2013-04-05 18:29 on A858's clock
Posted (UTC)
2013-04-05 08:29:57
Timezone
UTC+10 · title 18:29 against posted 08:29 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,344 hex characters · 1,672 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304051829) = b261d86372d0b444f9088162613bda1b (name+title)
GUIDs
52
Filler GUID seed
new Random(127).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
79 · predicted N = 52 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

F1A96AE6D820816B 78C94A49937A5333 B567293D796B39B0 3898AF480004282E 7B10EB37AE1C4908 E2D6FBD9C944D03E D01112205390DA5A D46D7955B6C5F09E 3C1FC499FA4C5439 37FEDE64003E36F7 747F848CC4B2D0C4 287DBC8EBD90380F AF747C0D6AEBF964 743324870AA5F643 FDD6038DF18651D9 24ADFA22F6FED991 E4FD51300B72B7CA AAA5ECFB5BCE175C 65EB9354EF4732A0 274206CC7F3089EA FB7328CCA70F4AA4 5BBC7CB90FD2CABE B1BE3AF6A316658A 315591885C9E2E59 1DC6110D85180B25 8CBA076D2012C5D6 09CF169F155B3C70 F0AA58F1F17831E2 E623D37B01F93898 5EEEC4E6D2DF1E72 E972A4CDA936848F 667921AC4B9CB4E0 356140AB78AE4F98 516D72993A569958 A69C78253CD5D219 6729DB5CC0395398 CA202CDDACAE07A0 47927DF066CCF272 1BCAB84E35EB584F 5CB031E4A6F9F4F5 2B92192BD5F4480B 242BC45F84258EB0 E187637C63AA2CCF 34807441DC9A6C3E E0AF2A7E218E5A77 5A6B3743F4E2778C 599EE0101680007E 09FC072F9A1157A5 0C8E27E9409BDA12 262DB7160DDCA839 BCE83860D0F16ABC F68659682611E4E2 41D500E85FBBC667 727138EFE25ED5CF 4374C5CF3ED067E4 A693FA15C8349C90 65E2979474A6078B BB36ACBD1895D005 5E22F50549F3FD56 D737586ED74A17FF 8D7CE1B508CF1E8A 4AA475487C006376 FACBF80109D675C3 FCC2AEDD073B3134 84B7D1ABB8C723F5 BAE9CE6930741823 1E908472CDC1BF35 72582663CAAAB029 F97BBEBFD3246E31 1C34540A97AA37A3 CCD4FDF062787925 8448AC4E6C86297F 2F7EF09FB1AD36DA 7A4A439B141F9FFE DEF4353DE15581C9 F2781FAE55B44EEC 6105A5992DC24EEB CED202214E47CB47 82E4A60ECE03A61C 5DCBF0AA062C4FC1 F1504A5AF8AD7E2B 0B5618006FAEE05B 7376F52208630106 DA5A821F84024106 17094D8B806F6496 0491CD1A05F04A0D 0D295C4CDC67366E 3B418532033715E9 57740CBD06015118 44E87D655B835096 585BAEBE60CF2D86 F2AED2D97EAA9EF6 75AC16108ED7A080 01BF58E049871E98 0300D47EF0437650 631BBC93AA228078 4B9FAD82A5EAB0EC 75B03ED8E5E02578 99EDEB56409229A6 334B2A6554142413 CFAE57ED2236E968 D26AA62BDD41514E 0E091BFC737AA795 4C052938EB4300C0 198853B172E8A7D9 B35E5ED6D58897E2 7C924643723BA36E C3C21FF4A2FE3DC3 CF75A2C218CFAA06 DC68E15FD12C1561 6FC093F1CD5A84F3 19ACB8EDBE92C309 4436084AF186FC65 3BCBB6CAD294F6D8 693AE07B0930021B 7E377AC33332940C 5FFC2398C9D140B4 D703CF103C94CA90 EBE9EB636D4363DB 6B23C42C5D039817 F7FE5D88E937D32F CEB27E3C6E915DC2 D45AD99757D7577D 677E5D71E7AC7BD9 D24B181046D3D33B 41952D9A80035A6D CBE5E38D3A35AD26 70097BFEACA46978 4926F81AA66D9ECB EB0AF55F2F4A63B7 D1DA4009BA9C9E5D 9A757FDC8D0BEF6D 9FBABDA7730EF7AF D358ABC810178F15 A82F234F0245B94E F8CDDF40AA4CB2FA A70561D0068D9722 FFFEBA58B72FB2E0 AC6940F8C66472B2 033489CC58451C8F 3A6664C6B7FBB875 34E14B0FB8333CED E7D54962FCCAA683 BC2E6B1BB699A7DA 3C591493C66C9762 551E766ADEA59B0C C83F34E05920AFC9 10B3E57E4E409E87 DED97E7B70F3386F 8736EF1CD07AA8BD 92B26085EA8A1AB9 935BB449B72EF3D7 E3C72CECC31B73E9 5F2D97A0F1B45043 A6BFF83EB2110433 18DAC371FA748444 8DE04B239EF3FB9D 0AF415B3A7103181 952B4F186FD12643 0392A701DAC7993B 990CA9CDAD16AFA4 CEB3122F80383A23 2F90DD8D3972A61E A7C701F6090BFCF3 8FA67E0E8A0B69D4 3250FC2FF9C9F5F3 FCF95C540851F6F5 CE994244D84BA611 55C688F4E310956D 277CA5515BC79E00 437261CB1A8AD97B DF822B588531A17C 9EEAECDDB3EA6FFF EC438F7203E4A779 18F13157CD7FA79C 825E490FDA29E87E 0722D63D9C89A412 5B731130C0996D25 48FFA4D4942283B4 E791259C8D261BE6 3CEDB0B4D03297CA 50AFBA3D8C6F2044 373748532F8CF44B 2D6D310CCD727779 EB1A3B565ED0DFCD BB22F0A6DF0080DF 9230C0838E6CEF73 7E1B196C7CE258ED 826E76C67942B524 55C84F68B521510A 06EFA1911B1BFF0B E6C0791A5D044465 9C0DA9C23A598C1C 93F9CF4A2928AF40 C0947704AB813288 317F1AAD7BC50039 064C63FFB3D72133 8F5D35B9D1F12315 F85E9971123B6511 27E1D2BF62CB4780 9BFEC5847ADBB227 935B559CBF318C5F 34A3B7FD307CECE3 D70EA0B988FA8B5A F177AAFDE92744CC 99A67EF8A7BE0355 CB604FB7C5565C7B 9D35158616C66157 469E9D217CB5473A
  • Read the ciphertext. Strip whitespace: 3,344 hex characters = 1,672 bytes = 209 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304051829 (name+title). Key = MD5(password) = b261d86372d0b444f9088162613bda1b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 52 GUIDs as hex (shown below).

Decrypted: GUID list

  1 755e852a-c977-02fc-b06b-1e48e57d5f5c
  2 6cf7a12d-3985-0677-a151-51a4314f869b
  3 cbafbe1e-5277-4100-b93a-cc15e3e1fe35
  4 e8fe894e-c871-569f-94bf-3b7106daba34
  5 be187408-1ee7-41f0-977d-b6329325ec5a
  6 7fbc1d69-fd1e-4435-9915-9ed8e56b6d1a
  7 ccfd0827-d3ee-76a2-a1a3-312c98a11ce1
  8 b5027e96-763c-1a0e-a662-d4cd758a748f
  9 ccf50375-6432-6742-bf76-cbe1b4f67b1b
 10 61d51537-01c8-07a9-b0ca-ceb145e1970c
 11 b5f32a14-ff39-79cc-b2fb-317b0715fadf
 12 3ba55de2-7f4e-57d5-9f66-28d504ca119d
 13 29f19f66-bbae-8ee7-9200-0864dbe9e469
 14 e29b66e6-5bdd-4a74-a17c-0db2b241a535
 15 79387d62-1caf-702f-bb3d-1e8d54e839ee
 16 84d416fd-9e23-3d04-b289-6de73147067f
 17 8a7e0cec-3cb5-2ebe-8ced-5efc4c583910
 18 9435880f-9f7f-68da-8c3c-d0c4a93f1e31
 19 9d620e73-5f6b-1100-8ad6-815caa423007
 20 9e72b62c-d9bd-4767-8d6d-093d4a35738c
 21 75796231-f8f0-66fc-a4b5-9e6cc2368072
 22 1f68f5c4-79d3-04e3-a9be-617de9714ade
 23 4996415b-4dff-46bd-aaa5-0b8b1007233e
 24 fbaefbe0-b070-37b4-817b-3592daccd020
 25 6a4c62bc-6e0d-1951-b965-cdaac477f51e
 26 577aa722-fbb2-1a73-bf09-7c0c587df34a
 27 4fdc304e-7dc7-1261-ade0-7ed9fe1da378
 28 c17a852b-8356-3890-9351-7bdc439443a0
 29 737bf4ef-a268-55db-8857-37f8fcd04e71
 30 1cb7b255-fbb5-3953-a5aa-bceb1263006d
 31 280379bc-49ea-016b-9214-81f07121d638
 32 8c1dbb1f-35db-85f3-b645-ab59f29df88a
 33 d2754d8a-e420-3a35-b029-8eb4e7a21a6b
 34 1c8821a4-471d-1160-a1bb-9e8b547ccacb
 35 8b376d35-8da8-8950-b571-4a327e3979ad
 36 66bd46f2-6cd1-2c0d-8d87-c85bb2c1f95d
 37 54125dbc-4fb6-2e55-88d9-7f38db5c4c8d
 38 3274d21e-5235-89f1-a4f6-accdc4c665ca
 39 6270babb-5cf1-002a-9c03-8b6d36f2b756
 40 6fc6099f-c96a-0334-97e8-361a17c35018
 41 ca490545-6bb9-0a9d-9eb5-4a356a9ff47e
 42 cdb81600-7981-8b6a-8de2-5b012a3f1267
 43 1baea105-d652-74d0-b706-89b0e199f663
 44 2db2b578-52f8-5e00-8735-9efec471e6d4
 45 57cf7770-586d-7414-b4d1-a239b7909b96
 46 6dbf10b3-6378-5d58-b3d1-9d415fe4bdb0
 47 a02c8e5b-82ec-4de9-865a-56d8fc6ed0e7
 48 f8d002ff-1313-4e55-b420-1605b453ec92
 49 34a75041-78ee-497f-b227-93dea6a806e2
 50 3d61ede2-c0e9-083f-8a02-b4ae62bc607a
 51 24c56223-4a04-1881-81a1-cb4a7d0a6171
 52 04a208bc-c025-8a54-ad4e-924ffb972789

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0045447160758473261460431113530831822800087575444018. Exactly this sequence comes out of new Random(127).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 79 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 52; the post has N = 52 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs