A858DE45F56D9BC9 archive

201304301520 1decn3

explained decrypted filler

seed 381

Metadata

Post ID
1decn3
Title
201304301520 → 2013-04-30 15:20 on A858's clock
Posted (UTC)
2013-04-30 07:20:36
Timezone
UTC+8 · title 15:20 against posted 07:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,832 hex characters · 1,416 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
44
Filler GUID seed
new Random(381).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
106 · predicted N = 44 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

C998592C93E128B6 A597FFF941918AA7 A6AE9BE35C2FF714 D83C843BB33D6324 2CCD1020C6B9743B 1D3B495F333FE4B0 498BA44CB56CE7DD D1B6BD4A1C2C3A48 6DF1510CA4A8155C 40212B20F73E5BD9 6DD01FA2818BB229 390B766943D3E472 FBFDDA44D032BB50 C96AF98F469A1038 33725E3574A6BD3E 538178FF9C967E5F D5563E2658441385 1CBB114C268F59E9 3199CB02006134CF 0BD0BCA935391CB7 6BCEEEDCDC06B340 D5E87A19D815C823 B867C8608218513E 17BDF1A8C177BC30 E2C0498D6C574D2F B71914A367F19F83 173DD10A32427394 E7A4E82CE15B6BB5 5B446A1302B1A56B 634B9F1102531BDD 71677C009551DD36 BB60123E23853C83 54834C5361C751C0 3BFFC1815DFCC1C2 2B321ED0B9CE2756 0155DC1B5F553FCA 759205CC94FF0244 9E44B910029416AE F7E90E90E809B1B2 569EFFF11ECD09EF 65C67CBAE02BF138 8C6C7FDC2FF7C735 A48165DB8A8F692D F08BCF169B0509EA D89CC0900AD572F1 1E9AD27C74432CE4 25561EA47B81DDD5 E284EFD9A96F6D21 540419988FE6FBB4 B9A6E0878B375BCE D7BB516992BF80C6 1D7F21A9781D9B23 7790AFED25DF13CD 23204A55638A6349 B224FFE46206C371 4BE6A4E7A3997749 C03E9394A34D9AD7 0895043DA16FD77D 96566B244948CE45 E29B5A6EE00AA50A A30620D33396BE84 C66D2809EF8BA38C C7475AAA6A5D5ACC E0A443052F164B3F E72F7349A64C3A8A 3570664BF48044AB E91773E9F3C440DA 476A8FA834E6950C 4F4D024B85582ACA 8C0590612448A9FC 7A550A61AA7D7EC1 3F7250D81FB9AB36 C77E9E099460EDBD 4D53097F16C83044 239D6B129A7D4E7B 9578DCC6864E0A74 76B6515D3FDCE81F 2BE815EDB4A22096 9E8E1B119EFE350C B7CE4ED3661C23B9 48D1C5C11317DE1F DD4F4DAE1AC3940D 87B5F5FD9A8EEDC2 00CD2FCA1DCC0702 BA49CA2BE647A1BB 7C6EDC0365CD22E3 798D37E4F0F61626 D2C80A91B116D70C A37F8211981C8F6E 04F6B324460B3682 58ABCAD74DAB3752 EB64A85B50A7D561 E57E7FF9B48A09C2 A7824331AD3AB741 A888DC83F5FF61F7 6646F642E1B3CC97 121439473DF48AD6 413010554EA2E309 D5D8AC23E9C81AB5 6F9F31DBF0C0F0CC 4945A456392E8D2C CD76138F886EC93E 016393CB75E84FFC 2088BE43B751E255 9A91C48641ECCE5D 58E7D326E1F8D792 AABFD582033A791A 089076E54A20C579 E8CD07B65AB198BF 37B7BDE44B316838 64C053CCD866533C 4BF3795FE756817A 446B122C6915C992 C2197BBBA4A745ED E330597982AA0C80 A50FC1CBD537F21A BEEB94F36A7F7E9E E2CA98494E79502F D03851A931CD54D4 1543D344F0D69226 FA7B044151353EA3 99D569EF3DEA65BD 63FF4B30AE76286C D7CC2F0CC07F3133 1A8C79213AC2001C E1A0ABF6DDD1A706 DA8697B14E4BEA5E 5324797EBCD9C561 465BDEE6D3B4B3F4 41C02C6CD3AF0DED 598F4D4ADF29D48A 3211AFCEAD319DC5 B2D039ABFDD534C2 51E08EF1629F815E AB587652CECF9C8F 1A5AEE074AF91020 8C140A074294B3E5 297B093E65C25593 BEF2436E144981D8 0B7276A8B9D695C5 CC0F6DD543C05AC7 F6EDB67B9D6439BF EC7278576D92B6C8 A7D39FB039D2E431 7483E7C70C2337E3 B465372C94E449AF A13154F18F96E4BB 1BA9B9E71DAD2321 522E10BC8F7EDA8E E7D5D32CE4B0BF05 DA3F56BF0BDAAEE5 75599CEC2A1589ED A97AD3B937DD7F48 34FC82437694CB8F 8F8C756BF140ABBE 53C61336DD79BA0D EB616648CA854E7D 9A0DF34AE57796EF FEC7548CFC63ABF9 B6673D7D009FC352 6667308145A621D3 A52D09800FE54917 EC1CFE217B817A6D EBB830B6053DA72F 06E0B092B00B8831 6AE3C4F4E1C412E1 2311CDCC6424C4E8 9467A5F0C12070D8 2DFA89CE37879605 592017FB0B0E50DC FBCA0C90CEC32792 13433D93044F67C0 3627143D29D6DD07 8964019AE7EFE6A0 8B2989D8DFD165C5 170DAF4BCB289F75 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c1d93302-38b1-6966-9a75-d4d9df3454d1
  2 fcb637ad-c293-5a45-bf88-9c1569499e4e
  3 d64c508a-b92d-0807-b15d-1150b1dbb501
  4 ae64b933-f551-7450-9016-54f203254061
  5 b67ac50d-8772-1b2c-9bf8-b97348b628b4
  6 aeac7e56-caf6-4435-aa97-d7e03681afc3
  7 58e11728-2bee-5203-bc98-9c071d6b8660
  8 6ace974b-ec17-556c-a648-0284a6fb5c21
  9 a7e53188-d71e-19b8-a0f6-a6c727f0d3f6
 10 19388195-e1b0-6955-92f4-b1af499fe8ec
 11 fa1bdae1-3773-872e-9a0d-f10b4f9342b7
 12 7ae6085c-874d-819a-b951-5b7027c82bda
 13 f96f942c-48bb-41f4-8bef-2c131d561329
 14 0c6b2b88-05ed-6f40-b48c-df05db935197
 15 92841377-13be-6068-ace7-48a1ace4afec
 16 fd292fe8-6979-8c32-9803-af2df8d99e84
 17 6b7c3e40-ae32-02b6-9d05-464f41df7b4f
 18 352be638-9a25-1074-a149-0828b74c94f5
 19 891034be-2d10-87f6-a2f3-cde1ddbb9d1e
 20 dc8d171b-9de6-74fe-8f57-70b05015c8a6
 21 d73dc00d-351e-305e-9067-bca54d08b132
 22 7c08d4ec-30fd-2bab-a1fa-bf3622d1f7e9
 23 2bd65fa9-b6c1-39c3-a759-8b6ab4f5d86d
 24 02892ac8-64d8-1dc8-8d97-58f0a4bbd08a
 25 bad2f582-0083-05c7-b161-d74a7f04e80f
 26 9af26dee-bde9-50e4-9e1a-8fdee8fa2f9a
 27 23e88de9-95ce-4422-a403-9c3de4cdcb6b
 28 c4333361-b19c-6244-a7e1-9aa465787e29
 29 1502d612-5eae-71cc-bc66-8ba6e36945ac
 30 ba4d68d5-0e72-8473-86eb-9089fda35040
 31 a1b6a9d4-b6de-7e5f-ad78-7c1025c8843d
 32 2c63023f-0bff-7f7b-b579-95e5e7dc2fab
 33 7e9ba85b-9097-43ee-8b96-6a11a8d99c21
 34 fdf04784-ed19-4626-9b25-1f32e6bd51cf
 35 1d1f3ea2-789d-6de1-8cd6-3a921fcdf3ef
 36 c85edcbb-4fb3-2e99-813b-d599fe0926ff
 37 54c27b1a-17f8-56ea-946e-0c57ce140566
 38 ac53e748-1c55-04b7-a38d-3166ee35a2ee
 39 e1e3c09c-683d-5f5c-ae44-0e79461460b0
 40 325ee5f2-baaa-2c5d-88f0-b7b2e2c3fee3
 41 91b71b68-c600-8417-bc46-8ddc1f644f6c
 42 787cd66a-64d1-5763-9da6-3774788e32be
 43 2b149be8-ba2b-0ff6-a975-d4df2b1b7556
 44 c9213b07-f78a-33af-a92a-23867007428e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 65071455168846680187323105467877446250528503. Exactly this sequence comes out of new Random(381).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 106 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs