A858DE45F56D9BC9 archive

201305012250 1dhex3

explained decrypted filler

seed 837

Metadata

Post ID
1dhex3
Title
201305012250 → 2013-05-01 22:50 on A858's clock
Posted (UTC)
2013-05-01 14:50:35
Timezone
UTC+8 · title 22:50 against posted 14:50 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,344 hex characters · 1,672 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
52
Filler GUID seed
new Random(837).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
124 · predicted N = 52 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

13A1128920593BD6 5B12540DD5EEB424 0B9079E4E9354089 1F5FA54D6C271BF3 1BCEADABD08234AC F049A3C6A7C5EEE7 B00C780B44A8021D 27A72B4E318EC672 C5169A7E3C274797 49757D2AD2AF4504 1CDBA5EB438E8A1B 350CBD2380E4A990 3763660363A56E54 809B1C0D70E7760B E66EB8A428CCEDF4 5157F158A464F381 47B24651A6188C62 0199F8E35F8ECD92 9B055A6F108380BD 96F89FBFB574C486 2603AF34103E9817 37FF463F0E119A2E 4B6F47AA56376A01 4A820DBA50CFE6B3 2DBE998B4E4E80B8 8B374D6D889981D2 FC019C4361B22A7E 28135520912D30CB F929308F8BD31F2A 025EEB5A735215FA EBC021488C98947B 36DA471A55B56FD5 AF0E8FEF07A60887 6629AF2B9C63B05D 05283631DC0B395B B060EE935A61E7A2 02CA4DBB5012327C FA500D60C641FE2F 3494A7A1E013C596 CA410893027FB63E 9E20EACF1DD61B2F 9DC99C6535C4A26E E302B8DC1828CC8A 2DDC947D59DFB476 C3E826DF8286D759 054591F3018EC1B1 D514088AF50D328F AFBEA81FB1C7DA09 FF140F7BCB9756E5 E000CD05F1253300 856DF5C130223075 1C3082F9880C6162 98C69740B444E829 997B8E90D9464E40 593BC3FF5968AD89 6753334AE2668D1B D981B7549F985062 8662C22C494E1B44 13D66DF789D8F138 E4B080F82095967E A47430A8160F4B08 44BDD200288280F4 EF54CB125CD07DE4 C984E6427C2523B3 C82AB1E9F72489D8 6F3D77D923B542B9 329B7A6679AACD5A ACE1B5176AFDB78F DD1FDBD00DE8C29A 261C4E3B719F296D 8447BE1A451A5C24 2B47AF31B8C9F8C8 4D99A4DA374285BA 5727C297A048B3A5 747DBA1D706084D9 5CC16B71DCD16F69 6348DF6D8FB3AB35 75B5608AF72874C3 63875FA4E6F4E3DD 88B55EC4A135F7CF F4C5A0A101AAA8CB CD078DF33CE3D1FD CF2E34AD5978E01E 9792FFA6B13F59BD 9E16B6D1FD833012 F06AABCF68DC4988 F74CF766FB0B2DC4 90CDCEF028E66302 C05CE488FE9DD884 1B79C9B7E11D0F79 D982157BE64E8890 75B16ED5CA838CA2 B8FB8678F49DD04A 47E703CB235662BD 1194C5832B3C9FF4 97DB062CE56A88D3 C82D36459FF78F96 6508D7D80CF128D8 CFAF5AA5B98833BA 2C3F4CAEED9BEBAE 771AC8D5097A12E3 36019CB12AEF3935 87488E8E59DEBB46 777AA3026782FD98 587BC495B05B614D F26F25A2B451F9D3 40671F5DB4FD1F4C 6B43AD035CF8A49E C1388CB9E38EDC51 DB1BB861C707B6D1 4941174A419D2803 44495B417D503BB0 FFF6D295DD30C85B 02C0F530FDB1DC8D 951F10F80DBA5DD9 30397CD920A4057C 5C188202753424B3 79F5FCEE483EA2F1 98FFCBCADCF610FF 928DCCF7F7778FB3 1FCDAB206C7288CA 1E6A497507105013 BB515C8CDFC45E29 5C3655947F3E07B5 6E8F892F61784D3E 5246B21E03B2B5A9 728E44E1332787FF 491E829CF03A5E43 D9145631B140066E AAB60029A3EC66D1 85D33EC96BBD127F 0A3F9A9926161C01 36F5F1DD6DCC2E5F D1E2F643FA5E3ECA D1F68F5931ED2CA3 254FDCA0A2CF60D8 422BB80CA3BED7F7 C65789B20DC8FA31 3DB75EB7588346A9 563B50F4E311E498 74B924C96223096C C51D9A46A29933CE AB61FEADF85704AA A8F3C541E448B6DA 8D1FDBC872DBD25E 91907CEFCBF96515 337C6CB4DE32CD5F 1E247F4A7AEEA310 3260B65FA4DEA94E 09E2C657011ECCCA 467358CB7994FC4F CAA5C8271E11E20A A8771C9E7FB33B16 65680AC446186E14 B6832F856EB26748 0C7950853A6FE5F5 A124E325D3D621DF 9D695675E5AAE309 0144E0E3CA2412D4 E3397B74F5581C2E 5FB325CD4C987928 9635D70CF4246E97 D1353EFDDE017659 7216178A1CEA1EEC 814422B61773FDCC 043173809E58272C 357D05B3D4236795 C0012B69DE442570 0FCD199834361FDB EE7867D628DB6F07 A67F86441236D5A3 894342AEDBBC71FD 3819462406E8037F 356D60F611583E64 B0BBC9B183C5395C F26535BFF8243F07 53A9668E872A818C 66B8E34517004537 CEE65295A6E364BB 09C4F55C3C30C196 A5BE62C02644F2A7 7FAAC67CE6108696 90AD44AB2E7232D7 1773EA86092D48B3 D90B60CF6C5392E7 F7C039D6F4DB74BC F7EAC01F10E0EFE7 59D11E9BB218BF29 6D41A201673B338E 90D6ADEE5AC4332F 561BDECF0DD4F505 CEF9EDE73A943007 39C225431AA0C914 2CA93400F2EB5F9B 40AF2754B3E39C9D B302B4E8F7BC1E71 FFDD86D5744C113B 9798EE6CDCF9283C DE9A365998FE1106 83369DA03A5AE089 62B2759C689A5FD9 D79B7ECEB96E0CB0 3A683E0860BC5672 EEB94324207C4C43 4721F948F1643104 1A3D2E89E7311CCC EE60D769F01A047A 4FCC5FE82C2BB64E 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 3,344 hex characters = 1,672 bytes = 209 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 52 GUIDs as hex (shown below).

Decrypted: GUID list

  1 cd495316-c7a5-8997-a6fd-2d6b982e288b
  2 00dd591a-9674-304b-b25d-af2582dd2b88
  3 d334cb40-5c4a-7af1-b2ee-7bbe9291c627
  4 7e80d4da-3665-13b7-a739-a93fef989b32
  5 32ca54aa-53e0-0218-87d5-c6b6a6291c8f
  6 1d76fe6b-8dff-05a3-9b7c-f5a6608e2694
  7 343c3751-a7ba-80ab-a714-55d67697779b
  8 f940c189-ea50-3308-8d66-8061ab3531f9
  9 e2183b61-8bda-4967-bae9-aaa2eae38789
 10 c15a3444-b4ac-8e1c-84bc-d5adbf114ae3
 11 b3f477ce-2096-85a0-bc89-cd33e5f42bb3
 12 bf0d23c2-da40-8006-888d-f2378c123746
 13 2027ee52-ada1-0ce0-b68c-49f254d8c1e6
 14 a8284237-cb83-8d44-95ba-5e38ddcf335d
 15 b825a94c-4e2e-75c9-afbf-0d0c047afc66
 16 bd356ef3-b1e2-6649-868b-487542092398
 17 b6827adf-6758-65c7-996a-7eb8a8da9ba7
 18 f1bad5a9-81c2-809d-8c21-3748689d5b1f
 19 fbf6c051-f047-3196-adb8-546c0b939046
 20 4e0a6f23-7d41-38db-8b4f-45418d299d91
 21 24f00abd-fcb2-0f97-aa84-36159963d718
 22 064a768c-2710-133c-a0f8-4c52b914ce72
 23 24679d1e-3413-4475-a3c1-3b1509a3437a
 24 3d56fd60-5a28-3a35-b9f2-7d1b7f231c24
 25 e4f808ba-f985-6b87-b9b9-04edbb92bf34
 26 5a3a5c29-12e3-77a6-8829-ba77988693a7
 27 72e5f42c-c62b-571d-b904-c2e7a2efa4f1
 28 d1359f22-45ae-23dd-8e64-2ad39cb9702d
 29 704606e5-fafa-6e47-b1ae-3132da37f7c8
 30 714941da-5dc3-195c-abe3-7ccd41dc9537
 31 1c832b30-331d-1ab2-ad19-ab3963b315e3
 32 eb727500-c037-88ee-a29e-54cbc706a9b6
 33 f844b2f5-c59d-7daa-831c-49020f516567
 34 f757c545-3819-85ec-888f-2865d8c8748b
 35 e25e4aed-ab47-8c09-b063-d3d9998adc16
 36 081966cc-c953-0700-a4c9-995a98ebaa25
 37 163c1cb3-80c5-33bd-ab30-b6982ea45836
 38 c5a6ce66-45c4-74a5-ac28-d2668b06b3d5
 39 6c113992-f743-65ed-ad69-76c2658f7af1
 40 cb8a7ba4-194b-1ff9-90d1-f8754421a5de
 41 77f372e9-b1b3-060c-acd1-bacf49cc5c2f
 42 55cbb0ca-23b9-2788-906b-448074e5c82c
 43 eea92fd7-f049-0d0e-baba-fb71eedf254a
 44 80a3a774-9cb9-85a7-9537-066736b97984
 45 baf34b09-4a1c-1c64-bc8b-d0100557a679
 46 e89df69d-546a-869a-941e-7236af61b13c
 47 d8e3ca25-1e60-01b9-a32c-77c52213ac42
 48 b9ac3138-2b35-5dc0-8fd7-42ab2ca7dd25
 49 6f252103-91bf-8f94-902e-e6ed024c451d
 50 38eeb826-ec21-78fe-8648-72cdb82cf1e0
 51 c31e6e01-96e9-5685-9049-71c67a3e41ec
 52 6f91ff79-ef87-8b4a-bfb0-f21289330017

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8371008348880876683301436752611878803761020818058758. Exactly this sequence comes out of new Random(837).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 124 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 52; the post has N = 52 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs