A858DE45F56D9BC9 archive

201305020550 1diclr

explained decrypted filler

seed 557

Metadata

Post ID
1diclr
Title
201305020550 → 2013-05-02 05:50 on A858's clock
Posted (UTC)
2013-05-01 21:50:38
Timezone
UTC+8 · title 05:50 against posted 21:50 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,344 hex characters · 1,672 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
52
Filler GUID seed
new Random(557).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
128 · predicted N = 52 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

BB94C6F432B0581D AA64F9E6C75B1A5C 244231A882DFB3B4 6CC7BA5DEEAA7D84 0C3098055C81C52C 3B2698F0BA77DF78 9F2CA35D58559FE2 A23902056405EE1F 884A6C9A0F71E746 EFAFEF364B2FA950 2352B596FBC21B22 624F54DAF8C1AAAF 8C2CB73A2ADDDD8F A59DCC585409B5A2 6EF05A212E5C8678 8BE0518411AB6595 38B0ECEBE05C210D BA0FC5AD6AADFE17 DE9BE73ED8F7A41A 6CFF2E232FE543F7 A787CF67EC91549B BF952B3D10D6BAC3 4AD0A84C63F35EE4 3A4047088EE49BD5 18021BACBB2FAD13 0B4C1EC5B26EB7D3 6A1A286DE7A743BB B90D3FEF3CA7A434 C3D18E8D030C541F 9CE9B8A7EC794075 58CFA168DC86F103 2A236B18A7FA6966 584574613AE75205 E92CE189A79C8FAA 95D153664C16ABFF A9084BA281A478A2 2A857BEE966E1ACB 25292A2167DC5A55 8AFB50736441F156 F06F468FB9121B16 DD0FF57B6CF2F12A 51A182553E15FB81 3B7A7AA855D2C624 0E3911B5C7781172 29AF75BE02FB063A 894C4172B4E3E557 D0A727CFFACCB758 2A30CB1A6B02F1F9 0B10368E24DD076C A4480E4A859B627F 9F4E63CECFC00E27 7D804F83C3FF69C0 8456C57BFD100E66 E4A8FDE62787B38C D601CDBC74524A12 F4141499044CB981 51F9064DF6606E8D 240261CE04406A37 F1F855CA821A238E 00AA13E726BD9DED 77E143BBB77914EE 1883DC01DA46F648 9E0B0269C30DE99B E808DF80880AB1EF ACE06EDB04BFE18D 64270114F6A5EA1A 1BF245EE22D1F27B 40C0C79509B77422 D329688FBCB3C665 36E5A12CC48032AB 7076AE1BDB2166B9 34205D992A6E8690 D6206043C83DEFB6 73FAEF18083C63BE DEF218DDBFE672DF 6253EA3464D1C340 7846D10177C94FBE B46BAD3D3BB19D19 93D9AD3C9F1804CF 844E7C7A040940F6 3453B61BB3FF231A A8F77230B1220470 6A003F9100147AE5 920294AD16EE8724 9BABAE6791238992 39DA947C142C9514 209117E38D3F67F7 0C92BAB09D49DBB9 C5072384449DB112 A36615F7FD928518 C304BBC7FAAB1B29 3B0E2FDED41675A3 251BF09C6E85831E 21380516963E3156 70940F1810030622 0C587427D300CF57 5ACD4CB52BCFD9D6 55554050867AA8EC 9E347D1302BB6584 CCB5F0AC14C293B0 62AA29CBA0ABD912 4EEC94BF5B07C09A 953D436DB8BBCB57 0FB44A45ECF782E4 1465CCBACFADA41A F9D4884ADD92124D 7D941C43B2B9CA7C 1E85CC31863C0BA2 876D339E9EF1D03B C4D09A896BA620B8 840A6F32298AFC58 89883194B4F84522 0C66B046FC2E4488 8711F6C9C2744666 EAAB1D29DFCF7260 0A01002847BA371F 3CA4E616812A300F BF5DF2B056DFBEDB 27C1F88D577951D6 C4A3E184C12ADA6A 1B506BB72CFA6E54 333D035D9BE3F1C3 CA255C5EB06E4C59 BA1FC5CEB62481B5 9E5D25C293F4D560 0B6602294519037B 32C58DFB659E6B8C 7FA8B895B5741EA0 791AB48C0C151A9D FA8C6D4A7A6EF8D7 F71C57DDD21D88F5 3E42A422DDBB7C56 C363747BDB8DF192 E889FD248326AA25 D5CB88ED93AD3672 02C8D69AFDE15027 1E17CAC79DED4CD5 CAAC59DCEB4CE1D6 CC2821334142BA4A 0D0DCCB54FD9A20E C573AC207995AE4C 6F1CBC1C86743FA3 FF5199F2C1172D54 38E0D0A1713AC7D8 789FC78CD9B72DF0 AE0B9E9E10D1D4CB F04735EF92B1A4BC 2D09FADE2C840DAF 89574264A75D8C65 5FB188B9BE2290D8 0259DE9819D3EC7F BFF5CC7992420230 590377D24704D3E8 BDB2556E9E3F3325 AB5236B5DE777C38 DA2E08DD7A12C356 55446CA81B66C6CF 11CADF851D57487B 83FD87A58C134BFD 3A7F7A0B38ABD703 DEA13349130B00F0 0B0DFDE6C3F756FD C381819BF3F88059 7DE988BD119F76B7 A7F6708FF9A3DF20 5DAEBF59F4FA7CA4 D18E29ECA84EA7CC EEFA53D3113BA146 3FE90E2C150B6A6D 19BBCB2F76D9E626 1440BF62258D5A57 572641A58E3B6BBB 9621E934F35EFC17 9EB675F93A21BC5A 0F94293D61A931FE C676BE4C85671A84 2E3DE92774F10C59 ABCB96422A22AE1B 57AAAB74690D51F9 51DE6CD67A357B34 A0D2346DAB09C556 F4F86697306D0A55 7F5D1C931F933A30 F7FFEBF1201282AB 2052C07CA373103C 6638D1FF54E41861 6F44DAFFEEB39C05 A822A18B3C8E5A9A F8B7BD218D32F4AC 40FACA6F26DE392F B5988B14C7F757DA B3D63D6F8DC46C53 121E90E519381EB8 7AACC693DA8E54BC 983BC0558494DECF F3F0D57082F714AE 08817B0255459DD5 9FFFC36AE4D12158 85263CD5BC41B5B7 280116F0CB8C5EF5 13C25DB722224336 18F8C7D4B71763B0 ED8297FE3090DA78 07799C1E9B02D4B3 C96EC9AACC534BBF 5FFEA151CF193464 CC2E755E578EBD3B FE53380FE45D054D 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 3,344 hex characters = 1,672 bytes = 209 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 52 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3cb9f9e3-d9bd-666b-a591-70dac8092d9a
  2 a5365876-415c-241a-a0ba-6748837c6bb6
  3 f9a6241c-e814-0beb-8fc3-750328140964
  4 475f5d64-3714-44a0-a38d-31f1b34215bf
  5 d2e31762-97b5-668a-9232-84a2967e21d7
  6 11589b5c-a723-22da-8acb-23397e8b1cc8
  7 464d5c21-d1f3-4e78-b66b-28f8d57dd56e
  8 f91cf388-654a-7e69-8312-39e73b199b85
  9 b22ad0d6-bb4f-7966-8e1c-9b61e7156f98
 10 3508c2d3-bc1d-6bca-94d6-05ee709720ac
 11 49376b36-0da8-5133-b127-a10528197d9f
 12 180fb572-446a-2aa4-8e32-aa4062f44c0a
 13 50c8465a-b33f-410e-b557-1e7f27107854
 14 57be0be5-ea93-2135-8dff-9ceedfed440e
 15 08dda057-4fd3-782b-a4f2-df932d0d2678
 16 f78c72f9-79d3-7013-94e8-861645064293
 17 e46aec7f-5557-0cb8-88fd-8ec258db9477
 18 d2e23db5-bcc3-3e44-9d20-63b3d492580c
 19 3abf2841-5395-6bf6-bd5f-c25d6e302d6b
 20 05b67b83-d445-828f-b99b-bf8e0efd836b
 21 27d09a86-5c32-766b-a070-dc2364e772ef
 22 ec6583c4-ec2e-44aa-ba13-85f02fa3ad48
 23 24091b05-89f1-1213-b5da-db80b6751fdb
 24 f9c4b63b-1a09-59b9-8020-16d24e265570
 25 0a4f349f-5bc9-27f1-a581-f6c02a355803
 26 91a8c2f3-9c61-7ee1-b0e0-4e70db552b80
 27 6fb4f0d9-af95-7476-8e97-bad758d8ccb5
 28 020bdef8-1b0d-763e-9d31-48b70408b775
 29 7c0643b2-0a92-38a8-b407-e4a9c60dfb7e
 30 c6c8a548-d9ce-50b9-91fc-0d3ac5fa803c
 31 d480fbc2-ed29-7d96-9801-c0f7898c5ace
 32 6b20d6b8-bbc9-1e5a-a092-6aa81677562b
 33 5a3455b4-fe7b-252c-b8f3-c92b0ad698d1
 34 a5181b38-f5e2-858d-aac6-3ff0352ae2d8
 35 ba0aeb58-1441-1d1d-8258-1e062efc5735
 36 bfc90bc7-5731-80d6-81d2-5f22fd9aad54
 37 b52fc0ba-30d2-3c75-b8e7-3c471414e1eb
 38 4ab543a1-4f1b-86ac-8f1b-b548856a2ec4
 39 a1659170-2ec6-632e-b5b9-526d24d4b210
 40 863c8cb4-b4ae-2b0a-82ed-2e71c82992b1
 41 888e03a2-d707-1e1e-bd44-5b679660ef57
 42 7f1e86d0-6d3d-434f-9df2-aa6f7b92ffd2
 43 8a0b9f22-67e2-7473-836a-2a2c7bf3f1c6
 44 b9e0687b-360c-22df-a9de-51fddd446744
 45 057e3b12-d838-533b-a6dc-324ea130eca9
 46 56c9bb4e-bba9-21cd-a121-c87e04aa8342
 47 a194a1e3-8666-7322-aeb5-de903ca4d58f
 48 1fbfad4b-6013-129d-b098-6f5af462d0f8
 49 d99ae794-d5c2-5a77-b7db-ffaebced803f
 50 588d7e69-4ad9-7215-b6d6-d624fa684eba
 51 60b439ee-0d0c-1823-8f51-450e06748b47
 52 8626eee8-b774-6349-a539-b4f4a316c43c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 6204624776524277036874152777357128183862147252715716. Exactly this sequence comes out of new Random(557).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 128 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 52; the post has N = 52 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs