A858DE45F56D9BC9 archive

201305030435 1dkolp

explained decrypted filler

seed 372

Metadata

Post ID
1dkolp
Title
201305030435 → 2013-05-03 04:35 on A858's clock
Posted (UTC)
2013-05-02 20:35:34
Timezone
UTC+8 · title 04:35 against posted 20:35 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,832 hex characters · 1,416 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
44
Filler GUID seed
new Random(372).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
141 · predicted N = 44 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

863EF840C1A2903E EDE40212AC362168 D910892AAD7DE26E 7CD8BAE0DA54853A 58804DE7E4FC4BF2 B5B4354B7E357A24 A6790CE2CAEEF785 334D6E96EE497802 8DE708D4F9034813 BBC6AB01069A6F49 6E5DCCCE6D8C85D4 73DA789A1CAD74ED 45FBE5FFEA4154A4 E7C10995A6C67808 D17F78FF04DAA936 E607B3DE84F4274E 30B963FD8528AC6F 5020F155DE84EB63 B0EB44D81C1F7908 66C6C3E2CD173117 16A8061C0ADB13F5 98B7AE23C1E92C12 828957811A04CF61 4A79CEEC033B162A 475F410C9EF3B876 E44C825E029D69D1 845FDB157B12EB65 06F8FB94C8BCAFDF 23073A2008C0B1C3 C79C242BA1541FE9 A08BDD79600A6F37 39612F0ADBB082AE F1742E46F1DB9F74 DDCA82D73B713A8F FB75D937D641446A CC3183EC9402B322 9E0EF549CD62246F 39D2B63F3C3804B1 3A06A71F0148C632 8B6103BC360DAE78 57D421EBBFF6E20A 4A2E704D7F5017B2 9AC87A7CD46E3FE2 4E6D48DE90C8CC32 165AC3DB32F34E79 688DC3412B799831 36EE834294101366 B04494FFA99CBD96 F489B6C0966FFDE7 62BFD48BF6689873 5B1B093569523962 95D547B393826569 B147F3A06CD2C0B8 36F4D21816344DC4 780A9909C6844C9D 84B74EF6743EA75A D03152AD450F39FE 0E7C8816AC2C2657 D57F6C71AED98605 76AB40DCD6CBFD69 581B92E7CA1CC767 01A018CFCC776D6B EB808B36E29735E6 F2ADD1AC32525E47 99015D2B48874BF3 67D15EB15627B095 E0F15E53257C2B58 C652AA775E1C3D7E E81A694A7CA53EDB AE4C30CB4916903C 07016A1FF61AD8B4 6CEFF74605C2D7DE 04D283DE58A8DB3A 91BFACA44BA237E5 8C25457484E24EBA 17F8F375A9D1D9C7 1E37C31CD4126C0C AFEAAE8586C11DF5 107BA616B3E6C21F A9FE43D0AF212909 084E399382FD8D48 2A93F6ACAA8909A6 DEBE600B06B95789 C1F005133FF28429 D3B8A272BAD2A692 4ED4FA39206E3150 B8D3293B54BD9442 11720628647704CB 621DCBC19BD24186 736E7BFFE9B966C8 97FB0AF71B90990F 9BF642A51B367A99 F1DC069E5471D7AA CD726270F011CDC8 F1A0E0BA5CCAAE59 86184A25FF63A7CB 030731DC113DB0A3 5428417FE24B9B56 CB51E4C18E145692 0F67C33291E70197 D90CA691842E5A24 43A3AF7E101293A7 4C2E15AB2F156475 09BE1F58B1BAF29E 99B5C5DCE12A4266 8730B4DCF78A4A9F 116DDA03D950BC47 9962F9529BCD5634 970A9E141A2E63D2 F0ED8CAFD7C02FB2 12BB76514B17EB6A F4FD9CFB47428698 7FBA6ACDB6AFB7DB B362D03C5D8E4030 002A66D91853AE43 C4084CF569AC9C87 94477AB4E36D9DDD 8567EA92DFD5ABB4 97AA9B1E806C0878 24C05CF763752E60 B8BA06A2E7F7FDC2 EAA0FA48F570646F D3617BF428588599 DAE4FDC269A7B0BF 0CAA91DC0D131F1D 2BE7FCF4D3A35F25 650CD84743BA5269 4ECF1A3289F8253F BEFBED082DA071EE EFC1F728AA5B4F02 46FAC8F7952B6640 E633BFF505CE00BB 98E9627AC6FFBB7B 808138E4F5D895A5 5EE91459B5A8096A 72B0A40EC96E278E D202A639AF51F06D 7090C1D8D8103F9C 4AD49EDDFC2BA1F8 C362CA814098AC68 6B8744DEF77D9E56 AC73FFCE7B9F67A9 533173F182629012 F8E54D5571F7E401 F4CF5CA52294713D 689EB9F0F6580AE5 7F1DC8E745DFC976 F62CD0A88CA42C42 83A0D6B93661A26C 0CBB2AF3487F4D5C 26C1FD2E835B9F72 FDE579E9220AE8CB 0F9F4BB1C2B3067B 06A67083583BF607 B2951EDF98645FAE AC6D2D862DEE4FA7 0B9905C1EDEB004A 1382B8DABBB30592 D57FD94C2B808577 DF78B75E5B1AA683 A2266F164EBC6940 F5FF76F7E4B7C271 67B5CD013C5E2B5A 661988759FC1BD9B A1941F11CC2721A1 CD117DFFBF5FA5F4 9EF3327F3CA1E01C 5F141330098C5F9B FC420ACB72EA18C4 F4AFFECDFB707F37 476D578410413812 2FFCB90EB5FBD5DC 7D59E88D98C08C4D 16271C3622226D97 2743E49A7D828C9F ACDA6E3C5FA67FC8 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 bb3a8010-b856-04fb-8922-b60aecbba0ad
  2 b5253a1f-50f1-88d2-89bf-380c0a8ac7ee
  3 277d5c10-cb6f-7243-a0aa-fbdf9e3301d5
  4 bd90aacd-76a3-8779-818b-61c13b0f7df0
  5 073c9a59-c11b-1213-a317-0789f54952f3
  6 ba17a9d9-8b7b-5bfa-8f5e-836874dd5f93
  7 73d02215-db4c-5ee3-86c2-e0072aae3a4b
  8 c15178aa-ebbd-00cb-81a0-7dde755e0da5
  9 c7667c83-b678-0e96-9fa4-210aa0b77287
 10 c4999182-8192-48d4-8682-266229a3cbc2
 11 8a083f96-ecff-38bd-a9a8-f65250a24f5c
 12 eaae5bcd-138c-8413-9945-7c6ac7121c9b
 13 f10cd2fd-37e7-38f8-9913-746851ae15b5
 14 a847a43d-b118-0d78-8393-e671af0756d0
 15 8e3e4686-4af8-3a04-81f7-6ed1aaa83c68
 16 8f01c3c3-7d6b-323f-8289-24c4a364f1da
 17 9dd03a56-90c2-237f-a2ba-486fb14d5d91
 18 0cfdd647-7461-555c-b91f-9c3061c377e2
 19 f535fd7d-a1af-6b42-8d79-90aa8362d3d0
 20 d8c3cf34-8715-3c2d-a730-87af26b76ff3
 21 3e56e2e8-644d-2411-84f5-b669fb312452
 22 b950a88e-a618-13fe-b329-fa46d222a228
 23 4a68646f-9e20-73cd-b501-8cc252043d64
 24 8a5f31e9-6054-8c02-84af-d34bebb7c8e7
 25 913fd3c3-e1e1-1887-87fa-5a03fe140dc4
 26 e47312e8-57c8-70a0-9cb1-321318012acf
 27 67277654-acd7-6950-882a-137d55781b0c
 28 d05b9906-e462-17b0-984f-c92848be8cd5
 29 f26d11f5-a513-2948-be20-e79345edfa66
 30 64520143-b760-61c1-b616-d301aed36209
 31 e121e8ea-2541-42d8-a29e-a5c7bad892fb
 32 b6c7f18b-1a06-39c1-bbea-32dd6da88218
 33 68170713-3119-74f5-b5ac-8f6ec889a18a
 34 70ca3e50-29fa-2245-9502-4aebfbe90ad2
 35 4821d650-64c5-4599-80a5-04fc1add7cb8
 36 410ce87a-d0ee-71b0-a795-b480c687361e
 37 def758d1-67aa-180e-8a88-dd8ae3a1f575
 38 86a2917c-eb95-8483-8d3b-32eef9896604
 39 5a785ef2-11be-05e0-9aba-220e1216a1d2
 40 f7d6a5c6-abc1-1742-889f-178258aa9d64
 41 84b92c42-b910-0ec8-a586-33958f3ad920
 42 2856503d-8f5e-05dc-b043-8dac58d9c403
 43 bd37b93c-6648-8450-953d-33d2ad37a221
 44 2fa4ecb6-9132-31a4-9b23-495982dee9cb

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 08781550043830332563217817612643724718010083. Exactly this sequence comes out of new Random(372).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 141 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs