A858DE45F56D9BC9 archive

201305021250 1dj83p

explained decrypted filler

seed 249

Metadata

Post ID
1dj83p
Title
201305021250 → 2013-05-02 12:50 on A858's clock
Posted (UTC)
2013-05-02 04:50:34
Timezone
UTC+8 · title 12:50 against posted 04:50 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
36
Filler GUID seed
new Random(249).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
132 · predicted N = 36 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

EBB6BFECA2FF0F53 C29DA4928BC0F64D 1A5E38268942243F FA28D6D31AAA3537 050ACC03DDAA7363 70EDE529192FAEE0 AE89983357AE1494 E50E53B7927FF368 9A781F877B27673C 0129C53BE090B263 24E5350BF33FD9BD 8014D88DFB1616D2 0CC57138363A3DED 2AC033F1CE888C97 A8870BC9C5B47613 D1496D4DBA65ECB9 38DCD8918CB0987B 36DC518C25D2B28A 4C3C2BC8A5F849E0 41AE9E2255BB0361 6EE80A8009947565 41AAC03ABE268D5B BE749A9420F73391 8EE434273A9256B4 76281B75F87EA807 C86E3987847C91D9 F72E13D66DF5E2AD 63CA9701B6699C02 F7B9CB29478C0C77 889FDB445E4D2AF2 ED328C209CAD049B AEE095AE391EAFE9 7057709AB063A114 CE5FCAF201C833B0 526CBD36C6642EA2 3EA8E7F71225758F F2C698CE5557695A 6FE51389F77AC7E5 45D3B67BB143015B 7DF5BD415B713599 0529B86A36A3A375 62B7CFDABF62DEFB F020F7027B4F2758 570501E1199DDBC0 4E12C86716E47382 BEF900C4A05B186B 898608F8F56A9D90 ECF1CE899B2D769B 50F85B2C2A5F8610 8980E05A042B54C4 D016135F7EA8C03B B0C8D0B13308A69D A1142BB7E5A2F464 73215687AE966C19 22E5741F929B9072 9ED002B2FA65BCE9 E6204B5BCB81D69E AF4CEE4D918F340E 93C08D70F7531D08 1BE9CAFECDBD8362 2F96738B67249AF9 042BE40941F41DE4 E6324D374D5126B8 7048F20A12CBD4CF 3CDCBA1D2D3911B9 C329D4FA3AFF44B8 F628E59529BBB096 F50D329B51673EF2 76283DFF1170B891 D4A6A8A6D4B41F4A 6B3478E2C966CB7A E0EE968A0548794E 1293647928067F2F 7FDA76695B241D15 BDB33FEBA84043E6 19CC112824BC01F4 28E0C2E21C7C1BB0 DA2B24B4C0029A2D 30780588AC30EE67 73EA38AD7BCF8618 130AEC33ADB81E24 7F14F7EFA0862474 493E4C7C69AF08C8 A9B9F4EBBEE6238A 44254C2354310C0B 522451AB9500E9D1 3823EB6D07680CBA 491C3868F1C1A0A8 9B6F479DE62EE3DC 8D17D79F07E2AE14 452CF9A215DBA7FE 8EE9ADDC0D46E1C2 63DDB4B73EF2B775 A65982E2EB1F283D A151AA3867DC07E9 1DC4859B7931425F 1D9BE6FB24D88E3C 8934959B2D8AB625 89D87BE78F03D1F4 3C9443CCEEE41F2F 86AD203AD850603E 48FEECDBC0E524D0 FE75580C3C5DFE65 EC68F267BA3C91A1 8E3D7AB7454B750E 805018934CB1D69A 1C5A3E9446A5E2B8 3928424E7F989C60 2AEBF28F9073C086 05125CDED7FA56B5 135466D4F701C78E 9801B01A1636905E 42FDB46D857E4723 21B46EB7BEC6D19D EB1FB50D3788A9A7 38D4D0B20B4F09E1 146A3ECB3DCDCD1A 94F8C95C26A03F76 3BED16BBF88BF5A2 14FA0BC533058877 408D2FAC52823691 310814FA8E786471 4AF648EE44AB0F7C A6C1608142A12B41 DEE457546DF9CF51 093C6DD5138F37FD FF7AC23CA4657E62 CB5ADDBA5412A3F3 DBD37E7A12B535D0 94298C05000549E1 56477919516C9FDB B79883DC09B67016 2C7CAC4681680F6C FD1E691E3553AB7B CA3E5E8F5C64DAED 43F689C6D8CD3628 000B04EDBB9C8501 0716EC6C878F7B87 E89D8F4BF6271B76 5CEBECA522157B56 ED65C0ECA9322B3D 9B7F2DE942191A3E 435B2D49F51809FB E7C126A37F5345FA 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 369cae6b-0073-73cd-984f-f4e322b7203d
  2 dc98880a-f91e-7583-88d0-9f86b045e4b3
  3 b7512ea7-9e37-7392-bc84-aa0181fe7446
  4 78edce49-b689-692c-a228-866ce121849f
  5 d526b96a-06d2-55d3-9ad8-eb7d45366052
  6 58491673-8454-181e-8b14-d42ec92815e0
  7 fe942eb9-2511-4ada-b09a-41dc711cb868
  8 8baa7bdb-67d1-30c2-b791-db66d8222ed8
  9 35562d65-2894-7239-8d8b-ede436792037
 10 45f31c43-7c51-0cbe-a75d-6f576542a2dc
 11 56491559-d479-6df7-843d-8a0228b30120
 12 b7c4e2d0-ab5e-7e4e-a928-efaa6301a362
 13 55f9fc78-9f06-7f35-a0b9-016ed940ef0e
 14 ee890365-814e-0a67-bf65-35599a5b99b8
 15 cbeb0ec4-f5eb-2649-90fe-47ee2e2a45a3
 16 8733d2b0-ae9c-4abe-a051-4d4bdf8ab16a
 17 8c2342b1-0b3a-4d21-8b43-cbdd1ce7ad95
 18 5576f671-f980-35bb-9261-1911fa96163f
 19 9712a62b-d2cf-3bdf-9a55-34f91599d272
 20 dbb061c0-3598-62ce-a283-226b1fd9c1d1
 21 ba2a0b60-4b7d-8121-8d0f-7fb50ab027a8
 22 36227634-d9d1-834e-aa30-1211b8c915df
 23 161938ca-7508-07cd-8474-2c6b4d41943b
 24 c156890e-c596-0571-87f5-ea023f95417e
 25 a7894599-a5d5-027a-a73e-a573a609e164
 26 f14f8426-7dd5-69cb-a859-eae91707d1d9
 27 9022c1a4-4590-0da0-a436-8581f26b3224
 28 c07dfa9d-de51-88c5-91fc-9cb7bbbad8fc
 29 89112806-6fd6-296f-ba1d-bea22e77dc42
 30 ccef867c-39b8-50f7-a36a-8b1f18bbcd3b
 31 1297f94d-dede-1bea-ba84-c220a908f706
 32 b47a2a08-de95-0c26-9fa7-307b8af45c59
 33 e3ebf910-b3ce-3118-abaa-b76915ce1301
 34 2e29fe1e-ed36-2ec3-a965-f0c1d94bce60
 35 3aa96018-df64-55b6-9e86-cf53677cd410
 36 a49a83a6-ca0a-44cf-8835-4c7b9338b20b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 777651437067702443368800060825103254. Exactly this sequence comes out of new Random(249).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 132 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs