A858DE45F56D9BC9 archive

201305010005 1df1lw

explained decrypted filler

seed 956

Metadata

Post ID
1df1lw
Title
201305010005 → 2013-05-01 00:05 on A858's clock
Posted (UTC)
2013-04-30 16:05:36
Timezone
UTC+8 · title 00:05 against posted 16:05 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
36
Filler GUID seed
new Random(956).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
111 · predicted N = 36 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

6BB170F8BE19C8C8 DA3146F86A9EFF35 4FC36EC51D7305F9 28D093A61BB9AF90 07329D5052E33D1C EDE0A51DC5B5A86E DFA793A955AD653A 028D43DED455E2C2 82F176496F159914 0EED85AEDBB5DCD1 7E01969A5545121E 4EF72225A4E439E3 60B6FE6BE55BC1B5 854FA9B18E3CCC46 AAADC193E7076D70 9AC1038BE24A0F0A 91A43E2E98ECAF8A F00B9E6375EF5096 1E7AA181A2E85AD7 3A118BEFAF3B4585 ECB1EC79EC187824 42D5797AF6E437E8 D47067A9B545F721 6BE51CF2BAB7250A 37806FBF38DA435E 4ED8E676F1E5F0FF 862AE6A0FE3B9BBA 139E3AAB59FEA604 B718CAC4CC6A005F 68FB7EC4DE01C6E4 FCB50BAC0002D672 A40A9A399C4B9F53 CEB7FDE8E0178654 18CF88026AD705C8 91F90F415DD905BA AA81B48A92AFBA5D 38F8D5BBCED46AD3 BB170E5123502C32 0F2F6B40EB8E653E E10E4D7A5F2A5797 7BEF3D6ACA9F4CCF 4FBD7B10BC862611 2516B81F113DF1C7 5FA0C45F1B35A2AE D65CCE0EA7B56E7D 6ACEC179A0FED739 C5652DDB378B7067 5535131CC3608C98 1CB0293CFEF2635F F7614B3CD2F16510 AAA7BBC5F6F6556C 1F86255DD1D29B18 6A57498DF6613C18 98935EE99EF0D244 BC33D0EDCD768AF8 DFA7481A6946E00B 92DE68C6C9B318E5 32039A9B45FE1195 0C9AA81FBEF5795E AE96CFFCC62EBDF5 380CF5EB7BBEC812 DDB40340AA48A4CA 2E7229210360AD8E 03625874B3E0B9B5 B0840F21DAC75CC8 7B2B5AA48A031966 1C43B9CD11D72C48 A55676C634D7303D 83CE3F6D4686FEFD 026B3E27E7BB6A81 5B645F6B86E61F12 2437745829CD7D54 0E38562ED7CEFB28 36B4145910D4D727 566AEF001299E386 C64D4EB77E5E5303 855E4E86BDFFFC83 5E089CCA4044F012 FD6F6F7FE07BBBB9 4D26C88E0E025D13 A8EC336F70DC9206 A7059162CD6DE8DC 777AA8129EB91B28 17B1E03E32F9DB35 1DAF2833F777252F C12BD4DBA69FD776 6E9C46F3881131EC 8BADBCF4FEC24B00 2F756FAE1C96F830 92E51A440D7480EA BE661EC7E62D129C 682EF59BA00784F7 35EDC8E59A4DD358 3547EA3357F2D07A 43AEBC89CD4E4485 FA40D723A146BC80 5ECB4B8E1B280B2F 7BFABD7894725B0D 17869B2F90B428D0 88C88DD6AA115206 2D151A7520E731A6 45CF41F8E286FC27 737756B1D4D2A719 D773A444DAF17DE4 18EC4D6EE9103ED3 F2CDC9E1813087A6 E4BC6C642FC8D5D8 D1D2C6AD19688AFB E0745B751C72519B 5B9CB96B6D8C095E 8FF67234376B6A0E 09048D576A8A534E F1123527D9D996CE DBEA088CC7C66E0F CE2170D5A0600435 BC5005C637316212 A2D06F96566FE997 A40A75E3D122DBE7 B967ACFD96D61CB9 50CA270B661F7481 1BE94E98B80FA64D C8EB96DBE9553AE9 D405DF0D905819D6 5161DE8753517BCF EEAAC5C421C229A4 E03EA97B726108E6 B7712F88E00FD3E0 A2219B964B1EEFB7 D10168016C2D76C1 ADF046741B5FE2B0 4FE60977CEA88E53 D7F88FEAB53670D9 A1D46DCEEDB88BED 227E320C3F7E72E6 D77B04FA55ADC625 4C25554D0D3E575B 213652BC4928E8E6 B6D3E3B99692B6B9 54411D9E1E98DF9A C81DC0F9B035DA84 056815BBA237CC21 1C88989C589CA6D1 84F9145AE1981E0B ED627247098A428A 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 fad4a253-ed3c-1a4a-9d99-53813cd0e439
  2 0ef92e20-d1ae-2331-90db-a4d1a9f28374
  3 a2eced3b-f6a7-0c8f-9bab-1938e6c85da1
  4 945a31be-65c1-5ee4-8e76-260a1d0d7e03
  5 557877e5-aeab-7135-8e8a-db11686d3434
  6 07db10dd-1058-079b-9e44-a482c1e614e2
  7 34f1331c-8c84-2abb-99ed-eee426a09313
  8 295a9164-91ac-0fad-85f4-b2a7304bb301
  9 867dccb2-646e-23ed-a932-99956a85e508
 10 fc777087-45d7-7301-b13a-8a5f7e2f1e50
 11 4de00133-e00c-5a61-93a8-c40bc835c980
 12 c639427d-f4c0-7087-a7a5-27cd031f7d07
 13 a811bd09-acff-7b94-a2b6-a0f083be6fbe
 14 0347acf1-ddd7-7122-b88c-72131541bf0e
 15 1121a2b0-e51e-195d-bc3e-76d3344ec54a
 16 53d133ca-680b-04c9-a435-d565f8b2698f
 17 4f65e638-1f89-64f6-86d0-1349b7a78321
 18 85b6213a-0f16-6ebf-bb30-f1172c572afa
 19 21f274c8-e456-56a6-8245-a611143a5ebe
 20 be38305e-1ffa-4a9d-bfe7-a574e326ae12
 21 0c1d2e63-2a9f-72d3-a637-ab7986c7345d
 22 6d088194-91a4-3207-9308-1b40f446454a
 23 6000927e-2d16-56ba-998c-c1ea87ecc09d
 24 015ccb99-fd46-0046-9b7c-7ff9a2b3bc34
 25 84a06261-0ed1-37d9-b9c2-dcfcb72a35c4
 26 6db3ad9c-b8df-3b7f-ac54-f8d60a326175
 27 6adba12e-9073-77fa-89de-2cc6543e11b5
 28 8fc42ed8-9679-00ce-bb03-7d18adcef8fe
 29 a24be38f-25ee-5e25-a040-3cf5b188625b
 30 377026e7-15a9-0028-9860-eb17c3e14da4
 31 8c02d451-f06c-19cf-bcfd-9090f565cf2b
 32 09f0d749-e039-29ca-ad8c-b3a343efac9a
 33 e9671620-720c-6527-9583-1920b1d6ea77
 34 6cab4633-334f-839a-875c-7b3a295a4037
 35 1305cc42-f491-4d8e-85d7-cd271f4cb70b
 36 42779bdb-5eb3-19eb-967f-d8423ce48463

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 120570202757771066547350337050126841. Exactly this sequence comes out of new Random(956).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 111 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs