A858DE45F56D9BC9 archive

201305021620 1djgyz

explained decrypted filler

seed 58

Metadata

Post ID
1djgyz
Title
201305021620 → 2013-05-02 16:20 on A858's clock
Posted (UTC)
2013-05-02 08:20:34
Timezone
UTC+8 · title 16:20 against posted 08:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,832 hex characters · 1,416 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
44
Filler GUID seed
new Random(58).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
134 · predicted N = 44 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

DF083DA8D829FC37 3C091BE1C595E983 E94EA8CF03892245 23D5109AC7815138 8B054164B6E1E803 D967FA3CC601E97C 692165A923C6318F 075F6AAF53182F5A F15B6770C18E6459 9C6B3B6672938092 8B7B1FD71911368E A30E56AAE031D4F3 F32E6E0E9B36235E C82DFDABB4E367A2 E1D6E707F97B15C4 411A88C06886AA4F EF882ACB64A365E7 CE26650385BF5C11 BE88F40D1CAB85F9 D6127494E3A3B52F A092BF16DDB0CFB7 358414D77BC89EE4 7E8DD53B842D3CF9 8F5B7F4B91CD81F0 4AEDFC7B5CFC23E8 6D786F02535124B9 619BB0B5364AE478 09086643B92CB9E1 CC83695FC67BC4D0 4C56F471142BE0AC E9E60D92270CCEB4 B51770029EEA59DE A970EDA52B3BE8EC 231C1F4BF0E30ECC ECDED00E2775ED6A 6E787B5A2BC2E035 ECCDFB2796D73275 324CC58475DFE612 631415B1C00CF55D 58C76AD0C89EDB02 1864DD8716DD5052 EC8E455CA84069D5 3D37C83AB438B7FA AE2AF79F641BDD5C 55F011EE8616604E 9926D63CA377E9C3 42EF8091D505658A 00D693D524497042 84C3F0252D896DA2 B2125EB7C4420413 AC002727729E3E34 C11849D484147B81 303DEEF0BEF89247 E3254E4CBEEE4B1B 9CDB016853EA3DCB 5FF69ADFBC6FC691 E3D852BCA90EA325 819956BFDBE9BC4D 798CA171A483978D E68BFDC93A453C94 A8B134F6878E2348 5FAA806A835D00D3 8EC7545BE8056935 F7CA75670061DEE8 1B8A8EBD93927FA0 1BC93755AFF03FE2 E347E4A432E0C1B9 E4B0595784C901E3 49A46B2F4E1781CF 864C47FD14E839D9 05AA8703D10DF780 0A55FBF125627CE5 A9732BD1D6A438AB 39F27D5F5B06DE87 AD2E7D726A1265CB 50426887311C9EF3 AA248EA5AF4A2F41 220D04ACC0E200AC FBD0D76A50229DDF 90D138893B141667 1F469B72EA14FF65 1DC88C3D764F745C 705F4854E6A588D3 01484D81AAD6C449 CE4E6D54557451A5 66E9E686E6C45845 3337EA68BE29969F 4CB222737F952679 B9D1FB30C3CDB2B7 CEFF819D903FC827 9C35AEC056CC1151 B4F499C389B13F7C FF10FDDD0E365B3A 9D8523D7B479C150 16BF5DB4250E9A12 E6B49742B264965D EC12EBC3BC7872F3 5339D761322091B6 233465B188F5BF34 6C0B5E7DDE9AA953 F9BFBA01FD8B7E50 68DF033BA8A9DAB3 45FE90EEC1551D6B 740189B598389996 A8D0339B5D847EC2 FD36F1C3939EB45E D29C0CC472DF39F3 6615BF962F20BDF7 8BD7507DE1B73869 49980D8C00379F0D 9D04F6B2E6B41688 523CAEFB58B19DBC 0919A25E3E088579 29DD8F494492B500 3B9996F4F734D69F DBC9CC1BF328B4E1 34341D9CA4A9BB9D A431D124232E37FB 63081F04A79BC5CB B3DDF057A4DDA5E3 EB09AF444EEB1D29 7FD1DFF6A1678E73 2D55321EAB84CB66 AD48D0AAD9E44254 B5FD4249326A2B61 F6CB0B3B1135DB21 5F026B49BA068C3A 3135A658302C86E5 BDE8D0F7DED52BC8 31DFE8AFA9DE50D4 695FDB26F1EBBDD9 CB7F82A409B8B02B 324E5EDD576ACDF8 A7131C4826BED42B A9C6107BFFD96C17 A2B5114E7BF4F387 9B0D3A0A34F66378 6CECE59907AEFAAF 9DCA8E7BB26F7348 554946D64AF6D749 5996E29F89A3F020 4878578CB1753682 313760A83A4251DE 424D19071CC74B31 24A9B25B463D6AAC 1D46369DEB741C06 7BD2AF99EAC31355 9662226B0522BC03 F5794D638CFB24D7 850866F0945D3E27 BA39F32D4A13A2A3 41400AA9697027F1 6BAAE148AF518993 A8A6D711316B7676 611684A4BD5AC856 ADF88889BB14F3E3 3096BA0065B951F3 97E80971FDB9FEB9 476B2FA25E61DBB4 13A2E809E9A240F3 4B73BD6181B54224 410CDA612EFB1553 EA33C07DEAC23126 86971C927D21AFA5 08A1EE4E3F65A83C D188FCA309076F2D 5C5FAB7AEEE3E894 C4ED74B3BC6144A9 4CDA2BD52F016BC4 DEFCFE0117378D86 E6CAEEB0BB3AC9AA 17EABA84293C0F5B E5C35C8B04FDE02F FD3EE608BCB1E16C 12FB2EED7C5D171B 94BEDFD6FD1413C8 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 643a849f-97d9-0056-b32a-c8d50064a8e0
  2 aa41cc83-312e-7834-bbec-801fd7250236
  3 6e8c54f8-fbc1-2a34-bdc7-c05cdd826e99
  4 aa851ad4-c621-86f6-b783-43187120d102
  5 cc08a730-bb31-3709-89c4-488bdeb50fcf
  6 4f065b32-eddd-2171-9461-881f3a02da1e
  7 f25245ee-92b9-8031-9859-b5e105f279cf
  8 cd7aba16-7eb7-4354-9e03-e41f15f2d684
  9 e92fb238-c54c-1999-a86b-3034fb98dd7e
 10 be319244-21c8-503f-8bed-4f536995dc4d
 11 6f30f4e0-f43c-077e-a3d4-02867f2fe971
 12 20d8f79b-242b-6f73-a878-62f00f614fd2
 13 a5f2cac9-bf49-4594-ba20-9a74a9252902
 14 b71f5aef-1267-558e-b3ff-d68b760db466
 15 c7cdf095-4232-55f8-906b-29242db94274
 16 c36834bb-1bf5-2005-be45-f88ba2eb550f
 17 dec281d1-1b64-2330-937e-c25ac3be0e29
 18 4f5078a8-ba71-8075-b0ce-4796aff23f9e
 19 420a3327-6854-2647-adde-997763991dfc
 20 751c74f4-6918-6268-874a-87ebbd0c41db
 21 43604311-3f4d-4c2b-9466-e649f04cbe51
 22 f602bf35-35cb-0102-bb70-c5fe5b6fcb7e
 23 bde306ca-2dca-73a5-9396-0416470b8c03
 24 d20e45bc-f179-2531-a26f-cff4fc47dae4
 25 82ee7b44-a9b5-3a7a-a3c6-abc53c00134e
 26 4b9a5af2-aa02-73a1-828f-7cb07e6a4cd5
 27 b592de04-190c-793b-999f-233e7017961e
 28 2d549e81-e8ca-5749-abd8-b24a727ea3f7
 29 9ae6657f-65bc-54e1-bbb8-42aa1f07309c
 30 a575f682-8ee2-76ad-9731-cbc0f7d48d8c
 31 3205f856-e3f9-594c-8c3b-7388a954e39e
 32 ef107576-95c1-6926-8936-f32c50c10dd0
 33 066197b0-3340-5aa3-a2e7-a64a231daede
 34 ce116f74-ffd8-3c87-8ed8-4a51f8695195
 35 a9b9b81a-7874-82a0-a238-d833d6484d55
 36 65079343-5f65-2742-910a-eb47a919b6ca
 37 974679cd-3583-0766-85b9-6ee76165519b
 38 dab03584-3d8f-80c6-b6d2-7f0181f411db
 39 9dfafa5c-d0ee-29c8-a89e-f17d9a2b9a4b
 40 551a65bc-714e-8043-8ca5-7bfe2b44b21b
 41 0a76ea15-c55a-06ae-9e55-7e8eb0af43ac
 42 1bf09a48-63a9-79c1-a3a9-32ac964dd5e9
 43 f8425790-82a7-22c9-ace6-11bc68f4eeee
 44 b5c64cf0-f55d-77f0-ae69-c50b55c5a8e7

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 07283284150645522826407237755756538208280727. Exactly this sequence comes out of new Random(58).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 134 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs