A858DE45F56D9BC9 archive

201305170244 1egsxq

explained decrypted filler

seed 70

Metadata

Post ID
1egsxq
Title
201305170244 → 2013-05-17 02:44 on A858's clock
Posted (UTC)
2013-05-16 18:44:02
Timezone
UTC+8 · title 02:44 against posted 18:44 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,344 hex characters · 1,672 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201305170244) = 81ff3a034be6d0801fbccd89bdff2324 (name+title)
GUIDs
52
Filler GUID seed
new Random(70).Next(9) ✓ verified
Run
Run 46 (seed 39,043,781) (seed)
Draw
31 · predicted N = 52 ✓
Machine boot
2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

33B861946C4A3AB7 D96FE23BFD530916 CC38ABFD46F05F83 BC5C72ABD692E8FD B49B5BB3AD31D969 E25E7E229DE323B3 056C7E1289D1309B 6A19FA3636B05D6F E9887234B3E8202D 0572863E76702E00 EFF56A368EC2E157 87A6BA0B25AB51B2 B1245D00605424D4 89255E7089D04927 3D14DBF74A96BEC6 8008BCD0352827CE 8AA50564617C7104 E7B85799E45A233E BBCDF11364E53031 4178A65077E6F1B9 CFFD349B1923393B 24B8BD1BE84E48A2 073038D81E809770 A8591ED6C04DDCA7 7D6B2D91E09036A8 585C98D4C47ED866 7D15D5BE2024B640 8C9924F664CE2546 0D3B24FE6C6FCB02 2BE919EF5202AD09 23B214F1078C6FEC F29B08B7A0FD5331 CAE0DD01229CE948 9E289C414CE9051C 67832D4B30263BB8 7B3CE1AA42994474 005A8704A83C842D 2E0E54549195CE91 8843B35B708272BC AF80BACE76C0C6EE 17E07C1D97CCF8CE 113970713EAC2881 47D72C25AC18561D 18DFFC7DAFA0EFB1 D0109BFFF91378E3 6F833C8B78107B49 2ED0216C44D86CA4 4531658B03D3970E BFAE521939B7996C A6445A479F904696 435737DC46C00296 6F86DAB6821F86B9 8D51449182590186 006463D7D3127E1F 53F28BDCD63C4AAE 1A0E80361BA435DE F072F60275F2E3BA 6CC31572C4AFA7ED 53C227738AC36FD9 3FF59B5BCA921AA9 53C5DA1E60F923EB E3EB028BAF66F872 C8105D979BCB279A AFBF0EE2AC39A753 725F1D84EFC90AA5 6AE93FAAB2F40E3F 212DE5BCFCE7EE8F E92EB1F9598188C4 54DAAE80A6D40258 FF9CAD9B68AE643C 7796A5C5C793448B C62A6FF6EFC53153 681E5C45781F449B E248636CA51508BA F884428D27D36116 49248A75A81C123C E2D379D8B781051E 90AE046A5040BA38 ABB204CF3FE76F5F ECFE176C46D05DD7 3A58FAD50635BBED 9FBE9180885E2860 BED9B3FD578A2950 48492624C57E3F5E E9D90145CCBB9BF5 48A8542B2FDAA517 E7B837CEC025F013 FF8BE99F73C309D7 DBDDF2B8F62BF113 DF71953B3039E29F 2DA5664B8BDA541A 0CFD716749753A36 53B5489D9DEADB97 8A7620FA072DB8AC 60B9EAA645584D62 C71CCB2BC64BA49F 5B40AE54B11BCA1D 54D14D244E1556AF 173F1498A9474E07 51D67C6E38D92A7B 079E7D472B951913 BAD0A2CDFC5792B7 1E8363C3C7E44145 4AAC5FAC5EA4E436 659970906CA127F1 A059018B8EF2CFD2 584879060C2B8600 51FC2D91B773C475 89FE4B967B21D476 1C1CAD308E6EA7D4 660F325BEA43D6F4 51EFD047DF4A486F 39490ED59E4AEA70 E73B035E9C49F454 874579A46468B726 3CF60D9E52542486 B3F2AF97542339DC C903DEA1EED202D9 2B54337E47EC2D30 CA7CD2EC881EF333 C77933850A620C82 E77A4F2D35A5A06A A1CE5CB2617C0BC5 1803A506187B1800 A559D3FF1A879FF6 5929978EFD0D5A80 DC9A5DBC6D4C2D0E B862B2FA4CC75A75 F75D65530B241127 33EDF1009039C6F4 C912507D0FA179DF 8E63437A9B1287A9 29E605138B18C733 730CBF7EE3DBE7E7 AF375FD4FED582B3 483E4236E7B33FD6 B60C4E65F0C4E4C1 C2A598AF5E9C6781 38DC62E33C293208 E835826E066F7A25 727262DEAA3C9BE9 EA76629081D8B5C9 64614387A352C4D1 DFD1C38AD3B827C3 ABF3D912151F267D 6D5593EE7F9C5376 8D9D0F965B769AB0 E86273146367DD38 70C33F0D680C9A51 F1A42F1138FA27F0 241E6784F092465C 8B50DC0C617B11BC 247AC8996DD1B511 BFE8650CCBA4EAB8 D568197B63388A4B 43B39B0FD95209B6 1EE820E7CFA69821 B76C1FE4B5240550 D9037E91BF00637F 80BF9484C1F71CEF 14148CCE5AC85AF9 4DD186ABD1473870 1AEC2C2712168355 326E808D9066512E D1D40DD7E2E6E02E 5A16DA65459FDF0F 5CA56AFEBEC62929 0DF5F18AA958CF49 A51F0202448F3BC4 B8C4D681F9639BE9 4C9D8F146B2D7F7B 6748B7DC53DA0193 EEB39FAD535B0ADF 852EC4ACE100987C 9EBF66610CE4BC99 0EFB9E9388EC5ACC 70C42D05F0C3031A FF54566D2F54519C 2AF0C72B3BB467EB 728C0F75918A4D12 2BF698511AA01A3A 0E3A1C2979949768 D95F5A4610319C8F D177A18F012964A1 F985AAAFA4DCEEE5 8F2DB327974C8FBD 9D7F52FD9E63697F 895D0B7A33A8F259 951685BFBF2844F2 AA8012EFF0E7043B 58D6057D5ECA6A31 779DADD081647F31 62C0A1B8EE0DE2B4 45667AE7FF9D973B 26394BB93B000860 EDAA43EE84CB803B C95FA102A0F1997B 04B8992D6BB570BA EC3CE0D667768627 6414F898F9A5CD96 C7E7CE390B79E76C F8AE587A7400A381 4F25BCE283F726C0 75CC403FBBCD52CE AD578639FD095E16 67C5BA752CF99BE3 E9B8B0561DBA9DAD 4D788474E52A89D8 F067D5E2DC6495E5
  • Read the ciphertext. Strip whitespace: 3,344 hex characters = 1,672 bytes = 209 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201305170244 (name+title). Key = MD5(password) = 81ff3a034be6d0801fbccd89bdff2324, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 52 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a18c9609-82c2-2860-a213-848b485d6a5e
  2 2bad16c8-cec3-3ef9-a5e8-915491577c64
  3 a1f275ee-77d6-6983-9307-60b53269e438
  4 97b17db8-a5a3-47f2-a03a-c31901688563
  5 2091e69b-01b6-730b-be71-7ab3a6068b6a
  6 7aa40e25-a632-6acb-b8f8-3fc3b06a8e66
  7 86a5ab92-96a7-2471-b782-bf33acf5a702
  8 41e53026-2ed5-53f6-a8f9-d373c7fe9aa9
  9 7b19f1bc-5192-5c5e-abeb-66bd508cc714
 10 2394677a-2f07-0433-9d1d-fdcf438f1bc1
 11 7ea16db2-c8e3-7f3a-9ac9-d28835474100
 12 4cd6ff17-3979-18fc-9542-46db55edd796
 13 963807d4-a28c-6b21-82a1-de1866fd42eb
 14 be0ca1a8-c184-7425-a424-4879b18a7ac5
 15 abc2de2c-7593-8117-b94b-debe9382f9f8
 16 bebb16f0-32f6-68e2-ae4e-0960b12538d6
 17 68ec4e4d-87c9-202a-8ca5-6cd4f84be2d3
 18 b3a9e33d-aa94-3135-953e-16057ba66004
 19 76e8e976-7805-5f0d-baed-7dd0c5e51754
 20 9db78c37-e372-3ae5-84ec-4691c4f490a4
 21 6c6ce158-050a-193b-9a4e-53140fd315fd
 22 41636e49-ba95-0824-96df-30d30f47c18f
 23 573e9260-9a54-7fed-90d5-857325baaeb3
 24 5bf2ae67-aa7d-44d7-a1fe-bbfcb7103d79
 25 99946eaa-2725-5823-a833-dbe3e645d1f0
 26 cad14097-16db-4ccb-8d2b-e836722c053c
 27 4a3f41d8-f0cf-1b2a-9797-12a96e6d8dff
 28 1f18884b-4989-0714-a98f-fb95b7abfc60
 29 d51892ef-1b71-7665-8215-5122a2faf38a
 30 16fbd4e4-11b0-44fd-9c17-0cac852ab993
 31 6cbe86b1-d55c-082d-90c4-dfeaf4ba24cd
 32 dd502d3f-5a7a-839c-ba67-ce47e985edda
 33 106a527b-59a1-4101-bebc-0e60093f74fb
 34 490b44e9-d2aa-62b6-9411-77be974b9b96
 35 26e4bb63-32bd-01f0-9ac8-c62a5bc636c0
 36 80c554c7-dbed-70d2-be90-6271fe750a53
 37 3890e6fe-931f-0465-b4ca-344fff5c3afc
 38 e9ac4760-f55e-0b50-8933-f861311b4a92
 39 3c8f6b50-1c9a-2705-8aa8-24dd21c70350
 40 b62d3f72-6270-6ba2-8490-463559ef9659
 41 549ca692-92e3-2ec2-92e5-92b24068218d
 42 cef80989-54a8-1ee9-8fdd-590fa5029841
 43 6322053f-1aec-16f9-97ea-6155599878c1
 44 1cc3c5af-2d03-13ce-9b09-167721dd5b01
 45 509d71d7-df19-7d1c-9307-92715e297d2e
 46 47b9f121-373d-320f-a79d-b4ca7804eaf1
 47 ab58d258-c441-1063-b868-87db0f841bcb
 48 97077a32-ba5b-4a87-9daa-85b8126ffa47
 49 f0064607-9b83-8084-bdeb-35e845096577
 50 c08ca35a-da1a-491b-96bb-bc15a2b26ff4
 51 103acf4d-1e43-4d22-817f-1b2fc6cb90d1
 52 3a037b38-50b3-2150-af3c-78305e80aa18

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2364762550716786235310745410740846070026211173148442. Exactly this sequence comes out of new Random(70).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 31 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 52; the post has N = 52 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs