A858DE45F56D9BC9 archive

201305240455 1exelr

explained decrypted filler

seed 175

Metadata

Post ID
1exelr
Title
201305240455 → 2013-05-24 04:55 on A858's clock
Posted (UTC)
2013-05-23 20:55:51
Timezone
UTC+8 · title 04:55 against posted 20:55 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201305240455) = fb14f8be9d2629a24fc62682023b869e (name+title)
GUIDs
40
Filler GUID seed
new Random(175).Next(9) ✓ verified
Run
Run 46 (seed 39,043,781) (seed)
Draw
54 · predicted N = 40 ✓
Machine boot
2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

A018D25B7621F13B 1A96426B9DCC2EE2 E3EAD6BC989D2492 BC2142C8B70F70C1 E139158B34D4972B 534DD6C3B1E58FE0 A465F316F3D325D5 486E347AB0803323 2512A4DC9EED971D 12DDEABB02885AC8 40AF473C7FD665C8 C32B61522333F0BF 74B9DE9C2F704ACF 4BF47BFD9B1FF67C 858B5B0C9DBF7809 12ADD77081EEB9BE B2BD36BE9E88C883 3E501E3E4556D965 49ADC858906109E9 EF8768C75AE7ADBE F53973CE341CA888 F8BF5B8242AC9E3B 6835457059F0FB70 3B585D3CD48BA404 91E027D912097BB5 F944A81BBA39F479 5225CF1391EEE723 E19F4DF3FA474A46 CED3A0E42962414E 6C00A99A84932538 4F58473A026019DB 228E4B696B6FEBDA E4E778DF190276AE D5E25B64DAFB568D 06F7959CF8035CA3 8EF2F95BD569F0A1 8C05FF2F71694DA4 D9E79D60F2051F72 ED0F33D406C9233B 15E39B2BD48888B7 5B858E2805153B1B F4C272AD12E7A2AE 9D047BA2954D9FA1 B833B45D4310AE4E 91A2A51B43B29320 ABB0255CF713D8A7 C93C521BC78E2D1C 628393DE068FE497 D6C2E9794C9B6E4D 3D12E3DD736606FB 3CE3CFA5FB191658 15FEF6A60F28A536 5D0E801058C1AD55 2CEB91FAF346B62C B9A78F193761A7D8 EA24437D3E192C8D EB63AAC32A253C38 693C7B40078BE567 EF6FFD4F1CF6EC36 6073EFEBBCE6CC75 2B70A83580C04F7E 27FAA62862BF31F8 4885EF4A9CE2E4B4 6231CBDCDA96B6A9 2A25B0905ECDBD26 F34A6E6A8FA06CF4 37B2CED6287D057D 8BBFF23B3D401D4F EF5C1AF1A8C0F0A2 12E0CCE34EA9E019 A03521C3D671CE3B 27F9BD92734F07B7 01223F0FBD0F5CDA 86FD1A0805D78950 F6A566F7D978DB10 8C4291BADFA647ED 86641500706133C4 FADBF27335632D78 E15BF14D552CF3E0 94A92F6314268406 8A51436E851F5F2C 30EA358AEF93DB66 D920DFDEC6EAC727 63D096B62FD352DF B1369D715C210EEF BA61B88CA21D762F E1B38BB48AB9D385 288C1D4DE91CC411 2F6BCEF7970C3C06 80EF7ADC55FE7EF2 48AA1E4D80BE1DCB 7D8E7436B06645B4 A98F9675E511083C E128846BA4369E43 9033C63CCC6F130A E561F771FF7319C8 BF1200774976DFED 345355E8C8DB7D27 670611B27E8BDF01 11509FE97C8FAF92 8DB55984C195B96E 3FCE19A38D2FB54B AA30470148705F63 8709107BE0E6CCE3 E2AFC2676E4685F7 5BE00A7E947BC9FB 5AEA05AA0D45A583 E01C619BF255E998 2A439145A1AA8886 4EAF38C4D92F7113 2D240AEA708BBCEB 496C35A92ED3E21E 07CF8D6E73CED028 35C537A38C5A2C8B 8C918BD634893736 AF1DBC895DF71D73 CD64CCEE28FA078A BB9622CED3DD76B8 C7E053B18B93B209 A434F0B11EF478BD DA40C37A5F086F0A A6196E7CF648AB99 BF0F9D7FD6D88BA6 EE02497939408D2F ADEFCF08C08B9BF8 71C35D9F748522A0 BC7F7A2A6FE9E4B9 6656738576F2CCB9 B0BB1A37AE241B40 FA1D5B0D9B36986F 7292F03117C2085F 2EF099DDBAE59861 B9198854DAB37CBE 03FCEEE992F5E87F 922D425847777E1F BA62B07B5E62ED65 0A07009C5631F88F DCA40AE82A635718 13671E75A7DF917C 79E2F8BC1E72C523 7648019BB0BADE83 7529ADA0D1343267 9A1EEC6F96655A98 2CFF24D0487371CB 4B02AA08DC2574CD 0D470C40BC5B7418 1909A49F25E4BB7E 1F7D1E787DAF511E 0184001CD5915EFC D9CA34BDFA057081 0215C0730FAFF7D7 2136A684CB6B01A6 A8AA17A4651B79AE 0DA8581F497BEEB8 DB77B9C58B455239 EFF6FFB7DF1DDB73 A72B71A966B708BE 81E0650419769BEC 7E3FF86F885DCEE6 15E3461B0546F898 E8D14E327B981714
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201305240455 (name+title). Key = MD5(password) = fb14f8be9d2629a24fc62682023b869e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 35aee893-3028-1723-b446-875920c8df7f
  2 62b32630-f746-1783-b635-6918ba68d01f
  3 60c88b97-f974-09b8-a94d-3217ed83cfde
  4 af2026b1-cbaa-8349-a7e3-2e8b0d44aed4
  5 34be10dd-66a3-1a67-9ef2-97ce03c54ab9
  6 223df012-4a58-40a6-9d21-022e1ea42a62
  7 781d8d43-62bf-2673-b0a2-e4b189aac264
  8 7a259fc0-2913-2a52-adf9-c3a5a0d9e128
  9 ec55569e-9fc2-556d-913a-4ad4d4977641
 10 ad8e808c-c376-735f-bd86-8ffaefe88144
 11 8e565d70-1c2c-1370-bf85-e4255ef1bd33
 12 ecc97cc1-1a04-0115-a896-0f7114520205
 13 2b5f6f13-c50e-831d-804d-4f63d40a30d9
 14 c9861190-10f6-4dda-b67c-093583f7eac0
 15 062400db-cf02-4e9c-a666-c28bf3c1d1bf
 16 53c2c7c4-4bfe-2d94-8eba-09b9c7744f69
 17 19327610-78d6-3957-a793-6bd76caf4c8b
 18 e5487565-0582-4778-a9ec-1c19323b268d
 19 e3ee435e-d436-3a4d-8f68-b8e5e4c4aa3a
 20 7c8df56c-88cd-0f5d-8b7f-0951c1aab47e
 21 5d6b04d9-38d9-0a67-a71f-f51f4a6348ff
 22 e27bb001-262b-7ce7-8a2d-2d9737077e52
 23 f8980f03-2352-546f-8dad-3279415f3596
 24 d3c1697c-01dd-18df-b83d-ea55717db265
 25 8e82c799-0dc8-73c0-9488-40dbdc3d5163
 26 78221147-7fe0-07e3-8210-d51535f3256f
 27 d3673019-4261-3794-8f70-39a82b0136e3
 28 aab2178b-6a8c-1150-85be-93d45181e3c9
 29 629ecc78-9e38-7ac0-8839-119e68b77938
 30 857988f3-7963-0b48-97c5-20a5cc362dc7
 31 fb8f46f6-335b-7819-94ce-05ec8de55645
 32 dfbb20dd-38ca-4bc4-b6a2-7792e567df02
 33 fccd266c-36a1-6475-bd71-8300b07e71fd
 34 412da97b-ee3d-340f-b02f-13cdbbf5f856
 35 cdb7b8a8-11a9-6940-ba5c-169e07a86ce3
 36 bface135-25f3-3ca3-99f7-37637c285cad
 37 f0297863-313a-86d8-befd-0a2f5aab94e4
 38 64353a21-39bc-5063-b155-8a0c275e1884
 39 d7b406a7-5821-2bf1-bc9a-79f035b4b43d
 40 5b837e5d-9e53-20f8-8a4d-8199e1fe9e53

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1108142257108442343007517031707463638522. Exactly this sequence comes out of new Random(175).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 54 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs