A858DE45F56D9BC9 archive

201305201931 1eos8m

explained decrypted filler

seed 680

Metadata

Post ID
1eos8m
Title
201305201931 → 2013-05-20 19:31 on A858's clock
Posted (UTC)
2013-05-20 11:31:56
Timezone
UTC+8 · title 19:31 against posted 11:31 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,344 hex characters · 1,672 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201305201931) = 65540feedd1474b029fa9cbcfbb6f2dd (name+title)
GUIDs
52
Filler GUID seed
new Random(680).Next(9) ✓ verified
Run
Run 46 (seed 39,043,781) (seed)
Draw
43 · predicted N = 52 ✓
Machine boot
2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
11 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

8FE27444A72BE277 C8F8713BD50B081C CE685B8BD4862CAD 152BB64A64B38369 57CFF37A90B24D26 0B4F681D540F8CAF 472D3FBA74E8CB3B 777423D2D26EFF77 D0DDA6D490FA31F1 F34613EB295F1797 66891AC948134B9F 2EF8E4A45A47ED81 83511092C1B947BE ADEF92102606A04F F57E5A584DFC30A6 E899563D278CDC2E 0E1142C39DEA8835 D02C62D55B82B71B 9A225293005DE654 8C98F47349D3E5ED 8C18AE3A769BDF2F 5726F7A5489DD9A9 36CDA50856F76C88 8FE4F1A72FC30BF5 DD1A9C869A78A733 D9DA5F4CB071474B 304C626EB594ED48 EA227DB7ABED3857 1D0FD9DD34BA37BA EE9A6928569B7FD0 CE16E4C53C04FF48 ADD512A1114DB73D 45DD2A2B67263956 7493C0163A62E440 5B12D8DFA1B95CE0 F671449DA0905877 4120EBD63FD9B115 89F0E8ED01A318FD 53D63DEF082D7804 9FF61CE1CFCF035F ACB8A0E4AD2349C4 1922E2A0F58D1443 2A40EE2DC8E8A0DD 5A8AD23B55DC8FDE 00BDB83496BD836E F45DC7171FF05EAA 69029E373E2FE918 4415F4AE1A744DFB BCAB4A0C77D08FF3 F47AEE0DE1164E5C 29A940BC64E77E59 F24B2F475A501761 7175683CA5F12FA9 7D925AA28ECB8371 6FC322B14C0A6CB2 7E16054ED764E660 8B1F24FFDF5755F7 C5FB9F62C4E78EFB 09B1C41A8F288831 2AEA9D810864C6E5 4428645A31846913 4F2C3315832CF69E 02144F55FA4090F1 E9544E13E6E38F6A 24B3A3B59F2B905D 7D2BD85B8EF3547D 6D2A024E350DE90A FD102D108754A5F4 CBBB206F395BB4C0 BE1B221187A08403 81C442450A7C94D4 3FD150730A6D3072 90408A12D882EB6A FF7323483F6156C0 824E8312D9FB1D78 F9FBDCB21FCD0507 9941AEAD7014D70A C65909B1377691A8 631513E097759A64 E34AA390EEBAF348 6772A130470A293D 5E994E332F86C152 C1224E37F5251FE5 4EAB745AA23ED47B 67F5EA82387D3D79 ED370957F5F1BE30 F9E61C2DA68D0780 96D59F456D5BE78C 38E650DEF7FD73D9 EC8B7B8A9C838750 156D1E79A5375006 899B14328729FF27 B5045C128EF8AFF4 F7227C5180DDD707 12F72CF524457B1D C49A4F291B34DAEA 8CD4F3A0E229AA86 65120D27FD6D05F6 3C2B3A77B6987D24 8B6FBD1F04ABC84B CED8DD2624FA8EC7 22C88A0969DC5289 D0A9A1C8758BA1F9 49609CEA2517B614 24B7EDF2E87DDB06 3B687E67854047DE 5347E10D8572B600 A5F7E02BC29FC928 ED394D685B0DA54F F81EDAD60FFBD797 CB9DF48AF643AA49 27D9001C0CEC5635 95ECD045A2AEF09A 301077804FE0D4DA 561D9967CF772915 9B6E6CB208502C2B BA39E5146553C4F7 2EEE8DE2F215D8B7 3A365B5AD5F8FCF6 EB2CD31B2F244146 23179AFE4F09F8F6 D44DD2FB3D4BCE88 14A5CE11204C5BE1 20B09C46E8A2A846 6C49502162C361C0 96FEA95E90ED7A85 F57C51F1018F129D 4B1187E8196DDA37 08C2FCEAF820838C 16881069B34BAAA5 C236E198F1D6AFF9 559F249CE2919DA9 630743F54D1F3D84 05992D9E5B6BA285 45EC4B355F096AB3 B0F6ACBDDD4D5091 D298A10C8B5A6D12 44ED9D16032C1CD8 3F62CF301BE7ED9F 6EC6BC2406BBFDAC 4BEA1F971A161115 FE249280D9467524 5746976BBDF77A23 31B4B66E2537D704 299C1DEFA9479CB9 577C9D930E86DF82 2A0F2701C176952D 7348996AA00B8B00 86122267A2E6BC90 D74656A983B3A1C7 DC67C2FE58773AF7 02E34E3D877230BE DF165273AEB81B91 21CBC9CAC7B53AEA 009147C83A81FEF1 AA1E7809D528F9EA BBD3FDF2DCD231C1 FBBE8E3B37746530 1E5801A8F1F726D7 1C0E17DBFF94B0C9 27F6108B8E290CDD 6ABD2D609A184197 F65C12FA67FA6EED D42BCDCAAAFD6C90 2EF3560EA5CE73DE A7B04CD0B74BCED9 A40AE37154C3602E D8846D934E07048C 07D752E77A0E546F 4377B808FDCC8620 2DE5A0772D0A3BE9 AA85DFDE105600B3 68D5D4B9EC918770 A067B1174D2CE03F 93866D9ADB4C394F 477FC20FF271EF94 C4EACA87A60D6ED6 DB41469F516377C2 240F9908F6F5E752 D073449F381F2B5C C742C6C5FF4817D3 0C4B596D7E10EB7E D19ECFAF1ACF88CA 775C588F7DB41A9A 6B48821202A532E8 6DDD150B2669C304 CA518BC0295A5A65 5C7AFC6944661325 32613DEDC82ECFDA A3F303B668B39A2A 03F122A1166866AC 54D67749EA11A7AB 3A3BA1B35EB84130 AF162F0E18EF5F25 6CF094ACED82F4C7 AE4C3D75328DC26A A70346A517B59B6D D6056425E957EEC0 4566D7E834B6F5BF 6BBD7DE53E7B2298 7C3DDDEF83649DDC 037065EED92A5F37 C109B11FB080F1FE 04F62F1ABD9E2F35 6E1177A65BDA5168 7555D82E7897F3DB 9C97739EA789F4CD A9678CBEBE003726 31141AF7BE5728DF
  • Read the ciphertext. Strip whitespace: 3,344 hex characters = 1,672 bytes = 209 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201305201931 (name+title). Key = MD5(password) = 65540feedd1474b029fa9cbcfbb6f2dd, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 52 GUIDs as hex (shown below).

Decrypted: GUID list

  1 262b502a-5f99-83f7-a0b5-c91c3bb8f951
  2 1c4e732f-98f4-3b05-8639-0e05f8d6e14d
  3 a6d9504b-3afd-0db1-b131-dbc8bebf16ca
  4 89f3a40a-218d-6006-a20c-38336b30fcf7
  5 0326f96e-8729-15f4-85a8-c7ebca80c059
  6 baa223d5-cc96-7838-8327-9e75744b4976
  7 9f008380-ae71-5670-aadf-69444a0a9966
  8 1e98ba23-2c7d-524b-b266-bb180e662217
  9 538e38e0-0fb1-0ad6-aef4-e43c6c5f56d9
 10 eb598dc2-8f2e-0fa1-a4e8-04fdf49234f1
 11 f10760aa-d02c-2688-9dcf-90b41e80f95a
 12 f5522f35-2d3f-3ff2-a890-4b784914c272
 13 fd6ef9b0-9535-0990-a2a1-537c8b26d5b9
 14 c4dc2fac-68a0-2937-bbb2-cc3b2dc36203
 15 a2d9cdbb-1d58-8151-8b63-a7539317a8de
 16 53719348-ebb7-6232-8b9f-3c7aa0a8a6a9
 17 7b7d94ab-79bd-6103-b93f-4c9ba1cf9d80
 18 1da68069-9fba-5215-aef4-2dec4e13796e
 19 2d1b8e43-0826-0466-bad9-d4d80cbeea81
 20 907e55bf-75ce-5729-9b18-d3a6d2011ff8
 21 f39affb2-8222-1e99-a05f-d0d001066cef
 22 d401a443-6e84-6a16-8bbc-8497d6974c12
 23 beb7432e-b9e9-8cdd-afa6-f1fd2f735f0d
 24 2d2b9755-5571-5f5d-be5b-b6bc6e1388ac
 25 3ed4b7c0-f670-3105-bf71-7d48b7ab280f
 26 2ed4f42f-6ad4-88b6-9625-d604b8b9e5dc
 27 01d731b3-5cc6-5c3b-bb4c-c4608de923e9
 28 b0733643-948d-0104-9d4d-6b301ad9002d
 29 526e40bd-1cff-36b9-9cda-0702712dcc15
 30 f1101716-5a01-6936-b5fd-f1e80817b2ed
 31 1c36e959-72ef-21d2-b8e2-a5764d3ef5bb
 32 aaa9eae1-e0f6-5673-ab8e-6ef6bc06ad16
 33 0e5564d2-76aa-6846-a0f7-ee00aeaedb33
 34 a82eb7a8-53e7-0169-a3c1-a8b454b96a01
 35 2d7cbeda-8415-0a2c-871c-b4c78618a4e1
 36 4333e8ff-7f9a-20e7-8149-cff64776a152
 37 eeaa1d25-b300-2eb1-9f5d-4b9bc3fdc736
 38 f63c49f4-94e6-7b60-889b-4409c9db309d
 39 c226e7d3-cf7b-7d17-9397-e79372189f8f
 40 263d2977-a6bd-02e2-a236-1c059e105c29
 41 76a4bd41-536a-45e6-ad03-d937596b65bd
 42 7ee9307a-9908-5be4-a296-ed26dddf8163
 43 b869a002-e1de-13a0-842a-2afcd3e9e4c1
 44 6fc643dd-4eb2-26f3-beab-c2f927796af1
 45 3eeffe44-2b08-3e81-9600-8e552a7e5179
 46 1b8838a1-6fdf-53f9-9555-e7adc745bfc3
 47 c0c55603-10f7-686f-857f-484e4b83c310
 48 61712f77-d114-009e-a36c-8b6a2232b4f1
 49 e14d7fa5-fe24-5c18-9415-e9c1f6cd1148
 50 88bbb889-1be2-0080-bbe1-ba1e731d7c58
 51 5318b6e5-66fd-3b06-9aa5-187d16978f35
 52 d86ac6bf-13aa-15d0-9dbc-954e3b3eb74a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8306175500230286650516853850362560022770451235605031. Exactly this sequence comes out of new Random(680).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 43 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 52; the post has N = 52 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs