A858DE45F56D9BC9 archive

201304060149 1bqm6c

explained decrypted filler

seed 709

Metadata

Post ID
1bqm6c
Title
201304060149 → 2013-04-06 01:49 on A858's clock
Posted (UTC)
2013-04-05 15:49:57
Timezone
UTC+10 · title 01:49 against posted 15:49 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,832 hex characters · 1,416 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201304060149) = 7585d7895ac3e3cd225da26a5b26820a (name+title)
GUIDs
44
Filler GUID seed
new Random(709).Next(9) ✓ verified
Run
Run 44 (seed 1,087,967,875) (seed)
Draw
89 · predicted N = 44 ✓
Machine boot
2013-03-21 09:35–10:19 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

326FDAB0D96B9AFA C7AE67FCB74B26BF ABA1D3D59D55B7C2 E342CE45F3F9A858 29D134C4E3E6957E 45965A6AE8B3D6C0 19BFA1A34E5F871C 04B5C9D75C752A43 323626629FFBA0C6 1B173B859940451E EF699478067BDB47 7E4BF5EC7A147B10 90D8DA2190CAD5DE 855BB3C2ED1D574F 72A5EF7D69CD594A 5BC7BECBBE2AEEE8 4D2364E48DD7FBEE 56C273CB018D807C FB575D98A5D86249 6AE1F1886FBF4FA0 FA8CE9881BF629EB F6E95EF75C79B470 17CACA5FDB3BEE5E 4268BA718F932A5A 24C0F82B6A4CFBB9 94E61094BC348E16 D1392945FB16A946 049D52AD34F6FCF7 971997DB0B7D22F7 DFE77BE01BE7148F 5B0B4B2A636D750F 31981E1776842B3D 6A7E4998883D536D C239789B9D04EF6E 51A22BA82314F21E 0F23E14AA3EAC487 398F514401C6F445 619B85937E3F433F 4AD1D7A78320B1AF 72077B67B7660DE1 8998011B35004387 0A89673250BB5883 0BCE663E08A66407 27DF558101867137 3A6287A1C2AACDAC 4D9126E855269F2F BCFD26FCD0EF5931 47D3BD548DFE6E5E 9422B0218DE349EC 0DE86818A01698A0 25559AD313B0899B F9B0F38D4F92213D 506A1E69BDB1654A 5C9CD4601B715929 61BA122B6D645F15 9353E17B63304576 7BD743342DE2DFEC CBC746C7A02E4BBD 17143FA7370B5F67 8C446FBDFF9146A4 2F86135D6D5102A0 DB9904CEBFDEE7BF 8CA6A8AC73DDAB7C 442771016C11E44D 44A66A323CC54C9B 026311EB2552D4B0 2EAF22CC9223B8DA 9FCA3669B96FCC75 717477ADBDD0DDAA 028BC8F104641CFE 42A7C41F56AAF060 3C605D96B383B0E4 5412741303255C09 B460D85A45754556 BDA754A997EE8223 CA16F223A53CB26B 1A6194F2622144C3 8B1488C726CB1E6A 659F33986B8BD8E9 D98FB820E10F948A 484CBBED37D8570C D3501532A6B4ED74 109A41416F7D376A FA34F82A013C09AC 21AF729EA74AC414 5CE23B4113F0451A F04192AA0379BEB9 6389388F0A7EF930 F9F4EB51435F5475 9EF94187147CB09F 13B9DA1E8C8DF497 469D01FF8FE27798 B4F247D3A4D6BCC3 FA97BD0985458A00 DCA6089B36988665 865C321A8D75BF60 E11F6212C8371E73 1DAF2D76C143359C 6C1DA5A30F07B882 1F1EA6BF64261A6B A304FAC0E40B8C4E 5079F458C511B545 A212B0189001E685 1790D63804D25109 E38AB1357C832CAB BB57ADD1DFAD541D 7D49254B51945572 9CBBA6158725C337 9D3D032FE2215EA7 188C36F7F0ACF2DF 2823EE4416B460CB CC5A4646F83D463E 7D8F5EA5BAFC2E47 77FDDB860C2C9E74 842BEA923AA92EED 702860664C3BC9F2 682BF3DF6FA48386 8F5442F8C2B07868 6656AF30A6623BFB 08C4E90EAB2C210D 3227F18844763272 A7D2AFCD786038F0 1048066EC696ED6F 9C3A8F5B0DD52747 CEF69DF0FD04F7FB 913FED5544CF1A68 12059687E19E5412 07791AD062B3FBD8 4236962A64E089DD 4B08A9E19092BA66 62427D00684A446C 82003B3A20C07069 D907743285C15141 160588AA441C0519 E073E04460E0CAFF 11699CE2475CA7C2 466148BAC4348B84 25F6FBA4F491D620 6F9E713A55682EEA 8FEC4113E93314D0 A5A8435883648084 4095E5DF3AAE08E1 F84FD8C7A362513C 611B1AC28E78251F 1205D9D32CD08562 173B190FB15809AD 10B9A61860EBB53A E10C9C69C0009061 DA59080AD64FA50C B3AA8D6DD986F162 247E256135366B27 641DC0AC8B13E58B 0C5A54306DAA2C1F 3CB2A7385F1B6323 A38CC08D067B7F1E 12CC045A17B537B0 185673E1EB0F4412 EBFA7170CC4F3D26 326FBB1195CCAD59 02D39833D0A05B8E EA43789E6332353C F75109D2A1CB95C2 1B0B674486D951FB C0892B863EF278CF 07C346CDEF799713 D726C2782FB72332 DE0BED96488ED4FA 13737E6CA1927CCE F451A5D5DB58C95B 5C0943C2214012EF D080A554A961DDBF 9BAB4995C42E1840 132D6B76E83B79FA 5C0C048EEEB4F4FA 5334F1A20B577DBF 1AA01E38AABDC775 205FED2D4B67B9D2
  • Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201304060149 (name+title). Key = MD5(password) = 7585d7895ac3e3cd225da26a5b26820a, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 aa7e81af-8a6a-1453-ae0e-417638bbaddf
  2 4ad627e6-2ff4-78ca-a063-d235e169df57
  3 2bbefe17-9b12-3f19-a5b3-ee9a9419840a
  4 3472655b-7516-82a6-95e7-8e65386f4f00
  5 532c3059-5cfc-2a9e-9793-0b6c3760f3a8
  6 4e9a78b3-1843-1abd-ad73-1d8d8eccac2d
  7 80fd6dee-39cf-5e8b-b1ee-3bf20cfcb044
  8 6692195d-a8d7-1be9-9a6c-8bb556350509
  9 69551982-d12a-66c6-9617-25348e96f43a
 10 2384b835-53d3-63d7-b751-b3bb6fda1f64
 11 3942b26f-5102-5e75-b3af-83a3e07cc847
 12 8530216d-38dc-8ed9-84f6-b13cefc4e1b7
 13 bcbb1ede-17c0-0f04-a19b-4858d8dda83e
 14 f1dd4daa-0bc9-21b3-9244-3e1f63b52885
 15 6a743e34-ec01-27ba-b5fa-3b3ee4bc58cf
 16 61dba121-86ff-754b-92e2-d4f10b733f8a
 17 4cfa68d7-05a2-8947-9e93-7c83093db268
 18 1d518fe2-885a-596d-9c9a-eca50d8211d2
 19 f5854c84-3e2f-7783-92ea-747924a783d4
 20 4ec8114d-c080-7942-adbb-60d941c6523a
 21 4a3e894d-f3de-06eb-95cb-be1d8bb83ba7
 22 140a4682-4e03-779b-b134-97c950df1ec2
 23 d60513e3-0a66-7666-a5bb-088b94a34e42
 24 c400e923-0a32-6ed8-87b6-5e37c3b44d8c
 25 9007d899-e4e5-119c-a271-182ef374eb01
 26 d6975292-4dab-4975-ae6e-55743268c5c2
 27 ab6e1f29-363a-46ab-b12f-8082591f831f
 28 ca390365-6c2f-8a0d-b0aa-2eba4e6b86be
 29 066bee08-0bb8-30f2-8154-f1eb56a6ac81
 30 fbd3748d-e22e-01b0-9623-fe04d36e58de
 31 a4d35a21-b3fe-8d80-a58c-fc1ad4afab51
 32 cd4ff429-b5b4-1abe-8774-142e8864ac02
 33 9f171a88-6655-3206-b0ed-54074f746a5d
 34 7b3a18aa-80a9-6595-8c87-5b5f924d1d33
 35 6db3b058-1224-16e6-807e-00a6e56407d5
 36 6d87a8a2-0697-44e8-817d-05c125b54992
 37 4df4501c-077a-25d8-8f64-624d5749d3fc
 38 9b94a241-f55e-5fe2-a623-ae5724e81be4
 39 66af749e-2f11-6363-9e41-c3b7b929928e
 40 8083622e-17ec-4d46-8a1f-5eb0084ee051
 41 9189b27b-d1da-7f76-a1a8-293445ceed70
 42 8268f71e-b4ff-6b5b-a98e-98546f753ad2
 43 3eeff1df-1750-6818-88e9-c23be2bb0307
 44 b172a2b4-3497-4ac7-9a08-1a65084e0207

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 17382151665802278577077614483081361425647664. Exactly this sequence comes out of new Random(709).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 89 of Run 44 (seed 1,087,967,875): new Random(1087967875), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:35–10:19).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs