A858DE45F56D9BC9 archive

201305011220 1dgo9f

explained decrypted filler

seed 376

Metadata

Post ID
1dgo9f
Title
201305011220 → 2013-05-01 12:20 on A858's clock
Posted (UTC)
2013-05-01 04:20:36
Timezone
UTC+8 · title 12:20 against posted 04:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,832 hex characters · 1,416 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
44
Filler GUID seed
new Random(376).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
118 · predicted N = 44 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
15 · 11
Tags
automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

A0F8B3F656A1A104 69F67458785BEB63 91CD2B165193CA4F 2F550F9A4DEEC08C A70B35DF215CABB3 FFC19F560FE3D6B3 FC7403852489C15C CCE1173119293436 D6C0A42C411FF7A2 957AB5A752246D1A 24C53915525FE737 C34201ACDC785E20 85DA1EC8117CD9E9 CE2AF0EE9700F8B4 EF91702EB2D88797 50D92F684DFD441E F2B6EBF0E47C4DFB E6B0029B646C0954 0B5ED0D13F1F73BD 7B38015908440DC2 2C4459AC5C5D8A97 31070DCB21F40348 D9D1C0228F72F506 48FD42F313C3586D C0F9C6BEB128B4B8 F78A5B42D9D5D85A 93DB28E18BFF17E2 F0AC7ABDD5261B72 272478AF37ABD74B 7D1B1D5760823B78 548A0A55CBFB20AF 9380904130D420EA D96F6DE6B2DF7317 68F814626792BBF0 F02562B5B24A8368 40507FFE0040FABD C206D89700C6FAD2 ACBBF7C39BB512E1 BC6C9E36E927C963 F9DA07B647DA337F 36471E011CD4263E 1CE0100AF44A1F43 C35B3522550F1A30 9F2BE714F8A5545D 68D5BE59F72CC148 780C8A12F5264D1C 3CAE3D10E3715E39 5AB3CF8D9D5EE577 59590944E10F8DD2 5C94C7FA8FA24278 9DC1516B2930A359 5DF62A3D3A2F86E5 C13FF34065CA035B 2BDD8A101D0FD869 F16AC2A5B91AA253 8FD9798608879E13 DB4A4818BCF37413 2C1C6F81E6E4BCCB 842F91820A23C98A 4B3CA534064E1C16 D5FF34D0C3DBDC2B 81E2064F3D2C8FF3 62B3D7D28A8A452F F18851A9D8A505AF 4A3289D59A2E1284 337D0EE04794F289 9C901B575A33F860 19A0137E2235A4F4 57F613BA7EC8522C 24DA9E709F497028 9882820B4467BF04 F5175B4CE001A339 C3C850D889953663 D6B5ED89FAAA1F76 C3CFC2B36443D2E6 FA1F1FA29256D4CC A9F7121AB90EC8E6 50522E13456A69EB 1344FD614F4398C0 FC7C8E4AC39137AE E18DA1E5CCC36350 288B00E9D95F968A BB1B4C5F8466B41D 6D1A25B18E3A0E09 E5EF10E91CB8EF67 40D8A050B54E22FA 08B930F29AF9D035 536E97B2F9958D7B B435FBE293D361F2 07CC92BCF5982981 99EDBC078A8CDB6C 86EB736589D6F680 38CB98948ACE9283 4BACF0C52AB8135D 15F46985C06DCF88 E6CA49D59E4DAE12 C08726DB419C1284 0EEFFE3E55BA3B32 9E6489A4DE50020B FAD69FE9CE6B38DE F13617B0F5E1ACEF 282C15C48F1798BA CDC58EBC2A9EB352 C1AC8266B5EB091C BB1F10D92021607F 350238A456A7DBD7 F529B6183E785D1C BD409AAD62FE8E51 784F55A8E9ECEF66 9CF539282E55FA48 63ECB232E6AC26B5 1EA63189980D5EB3 3A5147370FFBF3A5 18E94BC96A25F7A5 B0B1CDFE86332458 8C5D620949A3D1A6 37335BA2C5445B51 9EE7BCC58100B22B 867B7899DC2DE1B4 AAAE2DD4AACC88BA E4FCD16EA8EB64AB 115B43D582B81D3F 53E9ACF83A2968EA 6A8BA82B27DC9866 FDAB912E49DBF911 73130A231B503093 CF5DDD234F173CD1 BB4C8709FAD1257F 17DACFD1BF0E65B3 3308911F5D080509 5992CC3C713474CE 1E9DAFC864950FBA A19A0EA66F94B177 C7D39D779C890DDD CE998C41C06ACD34 687E6B1F83058BE7 C44CC85873D42F98 3B56DA2268577A46 ED4BDABCFB5A8458 845E64E2C43262D7 0A6D24F3A815F082 AB99C28240287779 1246AC3066A23D06 DC5FFB629BBF61AC 18877853301F3AEC BC4E0D8536CEEEE1 25029009FF351195 2F3EB7ED38435593 390C3E963CA04586 CE9B3112377C759B 8411E137A0600EA1 FAD56A23C902EC90 870C7255273A1F25 25B83ADF922ED95D 5B445050B4EFE71E 0B37C3C415940E1E 1737C7DDA711FDF3 49389E19A529A7B7 A7F87735520D7A68 29AB0F3ADB56A485 ACAAC6CC0242F468 E9F938A6A0F23244 62197AB12F39B8D6 F6F99CF4833E545A E9D2A16AB2D8C1DD C4246D6FCE16F3D6 807EAC5034E01064 A86279242C28E034 700CC7C7381492C8 F9AB6AF70D77C297 C6E57D207186775A C975526E531F30EF 10F16BE6213E6386 A8C6C4DB75AE2A87 A28DE9CBA0417E25 2DA3BCFB878ABFE7 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 901f8813-a5e4-1a6e-8d78-ee9fbc430b18
  2 ff3b4c07-21ba-13be-9a18-0ad1289404eb
  3 0b84862a-6b36-53e6-a20b-bec7d6689fa2
  4 4fa610df-4f73-762c-a924-936f77711e41
  5 ba447b55-c8e5-8cde-98bf-49b24d7bc978
  6 3089a4cf-35a7-1c0e-b68c-2888c0e1a193
  7 a4cc8587-b509-3599-98b1-310e94741d0b
  8 dc854f7a-de2f-08c2-8cc0-6dcff052af70
  9 e0f77d1a-ba54-48dd-8c14-9d5e3e63893a
 10 431fce78-6f75-8596-be60-cc2c15e81044
 11 24444cfc-0b09-2557-b65c-6a22841e1dc6
 12 38e8aa8c-35bf-0b5d-9c59-ace6eca07eb5
 13 f2db8691-f7d7-1606-bf79-f31116237a21
 14 04e160dc-3915-0a3a-b30d-fa6f7e693a54
 15 9ff271fb-fe5d-1e6a-adb3-5b716aba1227
 16 d1f63967-18b3-7136-980b-65bda276772e
 17 6d76ea73-8270-84e8-87f1-79c1146f1056
 18 a75645bb-f2a4-1cf7-a005-12e0e761a1b4
 19 1a619fda-8041-7d42-805c-656536492c46
 20 495e69fb-ecbd-8580-b30b-424a39fffd03
 21 b31e7f53-86ed-68ac-a46a-cc660f542cfc
 22 fc82cb55-e143-066e-af71-86da450efec5
 23 71a420fd-7bdb-4629-abad-29e60b3aa549
 24 e0e972e6-01e3-3d5d-9f8a-74eb14879fff
 25 908036a8-4648-4233-b969-2b54adb20967
 26 55710d85-7959-3c8b-bfac-844536a629e0
 27 d960541c-a07d-1d81-ad16-d5516ca3f249
 28 5c4c99c2-afda-543b-9765-09436ac045d0
 29 17dccb75-5cb4-3984-af68-631e4a93541f
 30 ff1f5e03-b6ba-812f-9891-b3d8896bc528
 31 3c600a7f-ecc9-81fd-9b4c-8ce2af7fd2c9
 32 c0030838-3482-468a-959e-d3b8155b5320
 33 07cf20d9-bb2d-4ef8-a0e6-2b42c72f5d76
 34 17f453bc-95da-3e69-ac22-ce182cdf72fd
 35 2178b51a-fc13-8bb1-880f-a3e9ae2c2a99
 36 757bd6ec-67ba-0129-8b4b-93cb861d019f
 37 71a966f6-8564-412c-8dd0-246be51df4c6
 38 a5382ef5-0221-5f8b-a32f-ff5a99855f58
 39 bf115ecc-9c12-6795-abff-9b3a4b41d6fc
 40 7ec0a37a-0d79-4eb2-ade9-35011fbc2fe4
 41 adbb16b3-4fc9-1fb0-a0db-812fde24953b
 42 f477ed18-a121-184d-8d26-3ec1e729e920
 43 5536bce9-1cfa-23a7-8e74-e454fee3b270
 44 a4065b61-00f9-7278-876e-4d10938495ec

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 11578130482010178178604343153884438045641127. Exactly this sequence comes out of new Random(376).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 118 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs