A858DE45F56D9BC9 archive

201305032205 1dmaog

explained decrypted filler

seed 429

Metadata

Post ID
1dmaog
Title
201305032205 → 2013-05-03 22:05 on A858's clock
Posted (UTC)
2013-05-03 14:05:32
Timezone
UTC+8 · title 22:05 against posted 14:05 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,832 hex characters · 1,416 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
44
Filler GUID seed
new Random(429).Next(9) ✓ verified
Run
Run 45 (seed 51,450,859) (seed)
Draw
151 · predicted N = 44 ✓
Machine boot
2013-04-10 12:46–16:39 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

6D4FDC54559432BB 3AFE7E4E3748E0BB B24AF52C8A01229B F9C21D051ED4BBA8 47FBA646ABA1E1F3 CC23D0D1D80D4862 39FC42AE52B6D262 0AC48B4C51A058CE A057693DC2647A01 D6424D2D8A55B71D 5AEBFF5898A0DB6F 49E3531B721549A1 547A4D3996332F07 F907B370B369F5A1 D5097BAFF469F2AF ABEA96A35ABBB4AE 1A30438A6985CB73 8ACFECEC7F940232 2BF60FD009F8594C 304A8FC58CB8F878 1D3BD58E29961C92 78B0EE77702A4F45 7D56CB5A00AA436A FC8A8B272DB8DA74 4E9915D567E4BABA 81D37ABEA8EB1877 161576DE97A75546 FA43AC4017C198CA 7D219908B658B445 DC63C595C9FD018D 753145F6D0CC95E6 0A7A8189F5886536 6CCB6B820F9DDF3D 1000B472715B7E56 13B524C4D6ACCA52 9F7E42BC7B489DD8 B8E2CC98E4D11419 14130FD6F3CFEEAB 4F503A2F1AB5E611 2CA5427F09CEBF5B 30C9A226D1762624 795B79CE458F2C3F AF0FA4D951C300F4 3C51EA4D5F0DCC97 AAFD32E0943C4363 24B6BF1C87CBD132 9551B57810F6F3E0 BBBD035DB61B6526 1BB1BB0416CCFDD3 8591633BE9EA65DB 0D1DF44089E454FA 2F6CFCB5258D97A7 4D7AA58686486166 C83435408B3D6FE4 FC5F0E0674E0FAE7 81BA536A690A869B 0CDA931699A18774 42A0B8A9B56CAB50 EC94E544718A21E1 83F8B386F8D74FF3 E8308BDE47187312 2223028E29190694 8CDAF40DFC3EE998 8538ACBBB13B5148 FFB23BC334768F2E 2DF2F02989189AE9 66B2E12997C1FB6D 26B9A740779A3380 799B22B2838E26F7 C98328F5A26AE7C2 2FAD6C94691388A6 E7B6EFB11AB3F54A A98AA885CD71A8FA A1A054E0409F88BE F98EDDAE801CE1C5 EE6189D50E3925C6 227F69A95E387D49 5497D2C43ACB1A74 2C54EB9377660A7D 4201F57219B9437F 4C70C37E719DD95D A27B7C0A6ED24164 D0753D7890098826 E55C382B438DEB07 94686C265EF90610 7C7285BB7D846DC6 E769E80BFE6329FF 8594166242395632 ED771A35EA7CDEC0 24B7DF26724DA7EF FE4B7FAC7A4DB18C 8D5700A7A80E47C5 7C99A3885A99788D 4DD6012155840B3F D018E23843654CAB 1811A9FABF0F3C3B 60ED28F21B47804E 53B5466529AA390C 1AB96EF04712757E 189158F3A3768805 AC21A5B5FA6F4451 1254C118F7D56431 6D897195744DA303 B38C3505D9930C98 93EC8696A3D52036 D90BE9C280E70529 91AA048021823FE9 8F8FCD1E23BC4687 F9FBA0F4C531E60E 9E150D02BF3E3BA2 03A3E2F59BD3A084 5A4C5ED511186D93 43EB8C2449BD04DB 7405296029D2B874 598ECDC331CF44EA 5F99DFFC30BFFA3F BE6A6E119015477C 19B6A06E419C8F7A C12257700F81D8EB 1863A4D7B74ABA98 2096F20737BDF354 6906550BF663EB00 77A63878F83E87A5 207DE6B0E491D1E6 706446CC9699D54E 5094DD70C09AE94C 0A7338FE2D2BF613 F667276CE80BC706 8DBA65B57A7E3006 410D6F96284061C3 03E465EA025D4AD8 893A8BF1B2E9BAB9 C97E544D10D9CB21 9D4FA8F3541E29B1 8594D356087508C5 0D047B5C04B61329 8ADD8D6A00E92C52 69A30A5684453B5D F5205D0729FD8F26 84C420CB5C558C33 FBD33043085C2137 5AB577194068091B 704ECE52AAB222EA DD5FEDE8274E6BA7 412AF363E8154147 9DE44DE3AEF1289F C10767F51A56623B 8B61FA3FC14A5EF5 204455F10B3AEC86 6DF632F67F3FB725 7072814C51DB034C F46214D18D2C1778 378BEE89C5228147 A930C9C55B806FAD 2B185188412571C3 EF6918EAD851EBFD B027502C5C9BE57B A0A298FED92406C1 790CED6CCEF15EF4 FD401ED1E30C7BA6 BF1D04FA9DBA1A85 96BB82C850CA0EBD C43A2881631AFF79 B3D719E46DAF444C 5B038C824ED3E282 03480E08E255DF9A 99F3D3BE2D22E0AA BD9D3B7DCBF153EA F6F00A4A160D521A AFA0408502310DAB B543A327673D84CE 16C663B0BF435190 67D24BF7B772DB34 6E1465B5881EB55D CB8228654EAFB57C DE4B6966969841C2 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).

Decrypted: GUID list

  1 eb4ce78d-8161-7f09-b7b1-a660217cd9db
  2 2d98a3db-5153-6bc0-8cab-b4b07fce984c
  3 fb961df1-729c-5641-84be-21242d4ea7c6
  4 ee3c00c9-54ab-1dba-a142-5f99518765fa
  5 ab745ee0-e9b9-88bb-8878-f0dc9c6a74cc
  6 5bbe7987-2e83-4ffc-a42c-47a2556d0377
  7 acd2e594-86d1-1ca8-8391-1bafba4f1c44
  8 0641f27d-2303-59cc-a667-472dd484da28
  9 f244c3cd-0f82-00c5-b937-f809148b3dcc
 10 85a9fd14-7bc3-4c2b-abc2-86e404a64469
 11 f2f51568-182f-3320-ba9f-089c10bd8212
 12 24ebd7f0-bee5-31f2-9ddf-b161dad78cac
 13 ade20f68-9169-49e8-8ea8-1017441e3e40
 14 f16fbb5f-3ff4-58eb-b8bc-a9b2613e177f
 15 faf754eb-fe1c-26f1-a618-2d98de316ba1
 16 8163179b-adec-8a5c-9684-adf52dc98ec0
 17 27493a7d-6f1b-1102-812d-0547561da4f9
 18 5f63b60c-11de-8466-af6e-153c3341bfcc
 19 148e0b66-bd80-20ef-8b6c-97f2aa65f2d4
 20 fd5e19b2-13f9-3629-baf2-09442174f905
 21 047e081b-5b22-7fa2-8298-78ba20f79718
 22 86672ffa-fc5e-0ce3-a69e-93cf64335850
 23 ca30899a-cd56-4ef6-bc96-3a02812eb41b
 24 9ac5c5c1-dbcc-82cf-a83a-30abcd740b6e
 25 80801439-b4a8-6b1e-9ce6-4440e40149cc
 26 6c605501-a9ae-4a70-8fb4-e303781b6c99
 27 f7b4caf9-3b43-6b3c-bba9-98e27a4dc960
 28 108bb8e8-7529-45ce-ad02-bd13ba8bd45c
 29 6ca87ba2-7069-00c3-89f0-91195ce3e778
 30 c14275d9-5d2e-5b6a-b7d6-aa6b19b85bf6
 31 25dc04f7-7649-53dd-8b69-8000412288fd
 32 61b67b17-f8c0-4763-b1c2-17d686b16dfa
 33 78d0fa33-ec21-7523-8937-195445c2e0a5
 34 f7b31345-48b9-6d07-8940-85fdf0e67461
 35 ccdc1e85-f029-3a66-a7e0-b81cc79d9d75
 36 b25a5259-1afa-35ef-92e9-9ff266479489
 37 228ff9bf-8844-32a5-a0c5-34569a9a76d3
 38 90bea142-20d0-6338-a6c1-23e612353d4f
 39 8afa002f-a319-748b-b2dc-0d0ebb50f954
 40 71052124-b1b4-43f7-8fcd-e8b4ad3078bd
 41 4a8d5ba6-3e30-7190-a97f-54426e039d8e
 42 a404f222-9f23-8007-a503-1d09ba3bf3b8
 43 09f34e38-57c9-5038-ad81-bf87ce352133
 44 86ad8fb3-8351-7da0-ab5c-e29da7c162e2

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 76518415043345281823704864640554763336747857. Exactly this sequence comes out of new Random(429).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 151 of Run 45 (seed 51,450,859): new Random(51450859), 4·Next(8,16) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-04-10 12:46–16:39).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs