A858DE45F56D9BC9 archive

201305161325 1efo6u

explained decrypted filler

seed 722

Metadata

Post ID
1efo6u
Title
201305161325 → 2013-05-16 13:25 on A858's clock
Posted (UTC)
2013-05-16 05:26:00
Timezone
UTC+8 · title 13:25 against posted 05:26 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201305161325) = 4d8203b43d5ec41907554d22bdd2aa6c (name+title)
GUIDs
36
Filler GUID seed
new Random(722).Next(9) ✓ verified
Run
Run 46 (seed 39,043,781) (seed)
Draw
12 · predicted N = 36 ✓
Machine boot
2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

0A5AFED1445A5DD6 265D027AF7C79DE0 AD71655E73611E9B 3C63D860455F5289 3AC60FE207B35075 3C06F217C93617ED 8D4884109F7835B7 9BB98A153E83D8FD 63D44812FD664395 849A1738954A36C8 0718E4DD1054D41B FC74474CEA7350AE C2CE0DDF131B6755 B7CE0B1427C3A009 7F10E621C2C5CC9C F7CF56A1BE0B53DA E6747FA7AB153632 D5CF5A17285D70BE 15EC60CEEA7DF3FF 21699329FDDD98FC 23FFF645BF60B973 5F92600303DA94D4 C6DBEC67FD292AEB D587D722CCD991C5 73E2427A8BF94AC5 C6D819AEA4EA5A04 3083E660E0EA0EE3 274959FE650F194B E0CDEAE46C84C0C0 4F03E64AD8574359 7D2EC3C8C4B3F8A1 78CA6151E4158AE6 6938DEE8069BD44F A5E5503BAD231E6A E450834E1566C952 94EF8011E1F2E230 A923F16FCF999DDA 5BF5F210778F5772 1684A2B83E369A2D 0614182942188790 B66E1C805E8C9155 F752F160C2DFA5A7 56BBD83ADA4E725D 3B13F96F7C35A8F6 ACDE2AD440C8F9F2 64AEB5E9F4E65834 08F1E11996705312 CD11B66B927257F8 AC447FD99F42A660 81E53B535E2ED7A6 25A76FED7919C9BD 930A755918BD42D1 DBD0FCE9305F46F9 C23AB397D93EA8D0 2D698468D93CC99E 7CF6F2DD43201225 15C745F60CFB4740 108BFC7C8A1DABC8 1F30D1D0F5FC2494 254DDF413CB5767F 1A809CFE77146492 00E88043BE0A59A1 6AACC9A7E7B2DFC0 DA392425B9258201 89AF096663E47F6A E4295E5AEF4DB6A1 D284E3EDE8FB49AB 32CDDF32DE188DFA 0F579FE3917F842B 3128F5C606F35DCD 05F190C8ABB38274 ECF8E392B26BC452 1E391E3300D9A787 A2E3DBECDB7D4E3E 2D2AAD8AFF7DE3D3 F4CDC8DDDF52921E 99F923EEB21E7778 101D111E2C2C0D02 6136A8DC563E6006 C513AADB20F72AD3 0F683F54B72822A6 B8A5932EC65A5FC1 A815323417327F29 C1E32F16AB5EEBC2 8DD9D19C621289ED 97271D1C6947D505 5744448A3DF32649 3F5270F330159083 BC4676B34A96BBEA 330065039C371940 21E017B3D8667ED4 A874EA22D859F930 927B569084F92353 C570267F5AD3E7E3 36316B642D17A905 BBB918F4031B3436 5ABF03105B2BCDCA 48BE2EFF6FB0CF16 0D97505F7CB02B8A 34AEBA978159319F C3D67C22D6AFF97C 946655CC1F9D6B88 CA080DA29B1966BB 4F35770AB2F973CE E87707D39F5781AB 89F946639BC6FDAC 35C7A037B2B3358B 0F4CEBBEFA012160 DD7A9309DFDBF81D 3F4541E9EA716073 442B56CF9A9AE0A0 821CFBF97BBE0B52 5ECA8C911EA6710D 2D19B70D2117F5D3 2AE69994F04E7A15 7E179C205A5AC740 8098BA719B05F9C1 5E2F0EA6473061CA BC89EA99804DA9F4 345C33E3BB756D31 703F46094C7B5B47 73448F40409C511A B27F6D4AA1C0C44B 5396ADE896A2B018 D3833C4E927AA6AD 105C7F7017684DE8 4EF07DF2855EB843 77E35AFF7F9AD27C 25EE31B1FBBA0631 4B949E582BCE9668 530E68885E9ABE01 9AC87C3E866382FB 2C5F0BAA77BD8009 3DD467EE6529D344 8A4987CFFA2C67FC AD99B006D6893E7F F399684AB83C00D6 00BD92894247B3E4 179ECC8E967CB207 4996D1CDAB170FC8 FB2669681E9AB5A5 76FF6E742478EC57 D18DDDE7FFEA6738 F560FB67014420B0 574576BF5F697CB7
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201305161325 (name+title). Key = MD5(password) = 4d8203b43d5ec41907554d22bdd2aa6c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ab00b9e4-c029-8895-a33a-4f7679e6376a
  2 6c83f0dc-ffb3-5239-9b03-cd20981b80c4
  3 00976864-a772-328f-8a82-458534f071b6
  4 94c0a03a-a635-5850-8ca1-5138fd702bcf
  5 cb5a2bd0-39e2-1a08-a3c6-5dee0804e708
  6 bc2ea736-451e-4a9d-b58c-9c95f3ee9f44
  7 5cfe4421-30e1-33f0-8247-23dd78c4634c
  8 1d53a0bd-2593-5453-b3a5-eefcb7174d73
  9 ecb187e0-0e28-2b74-b7d3-c875ab938952
 10 4a9794ec-df85-4643-b590-60b9c6219f0a
 11 ad3dcbd8-cf71-1523-9604-34242f91f0c6
 12 cea8bc50-f96c-1182-9738-89a5a4ee6305
 13 4f00cd87-d9c5-8109-b88a-8a0bd711fee3
 14 2ff9433b-aad4-04b9-a224-1c7b69b6df50
 15 1e191b28-2e46-35fe-a66b-a310ff4bc6bc
 16 881fd9b2-e353-885b-8c99-c1d01c72829f
 17 1ee92abb-41c0-3969-9e97-cd60537e95d0
 18 082b8e37-e556-55ea-a401-6825ac7c68fe
 19 462b7290-2921-1257-a9c6-e25e281595c0
 20 fb9603d1-0456-7179-a6aa-39e587237269
 21 13940273-4f39-6a41-9ac5-61df8c7676cc
 22 1aa270d1-8d10-8cda-9105-b3d9c51bed8d
 23 2ba3d163-237a-0c5f-851f-ebda7ada8a04
 24 ccbd6b41-6d99-283f-be7b-8ff924192ad9
 25 0ded47ab-3791-4c4d-8034-e7c50838d2d6
 26 772fc6e0-e6c7-8ef2-aaf6-b2f0e0771012
 27 5abd28ba-4ab9-6cf8-b380-4616cbfb4fbd
 28 2e5f8a73-194e-0921-9d41-7ba00c3fd238
 29 57c3b277-de37-8b41-8890-0afb28f4d872
 30 fe1bd5e5-8a83-4f57-b19c-7f158393f130
 31 35e4b890-fe80-6f5a-80cb-d6af24112a99
 32 7c8ddb41-415f-51fb-9df9-28d9bccf29f1
 33 e9ef26e9-80b5-5a1c-aa24-b2c0456f51f0
 34 f8c20318-9048-08c7-a850-f87d36a93b03
 35 5cea1c7a-1fdb-6550-99b6-ae7428cfa224
 36 ead2404f-1ee9-01f2-a90e-53705e58c471

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 853514352411803835176802486084655060. Exactly this sequence comes out of new Random(722).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 12 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs