A858DE45F56D9BC9 archive

201305270655 1f3smk

explained decrypted filler

seed 108

Metadata

Post ID
1f3smk
Title
201305270655 → 2013-05-27 06:55 on A858's clock
Posted (UTC)
2013-05-26 22:55:47
Timezone
UTC+8 · title 06:55 against posted 22:55 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201305270655) = f7ac8980406f085b438858ced380ff2b (name+title)
GUIDs
40
Filler GUID seed
new Random(108).Next(9) ✓ verified
Run
Run 46 (seed 39,043,781) (seed)
Draw
64 · predicted N = 40 ✓
Machine boot
2013-05-15 03:07–10:31 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
15 · 3
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

E3799FE0C491B635 6E973E72434EF07C C8701F0F80D37F33 4F6A7E9F11009AD2 175874CA3DF1E1F0 57C1E4BE87743CA3 F087101D73D1AB81 3632E4C325ED3990 56D6A203591AFF35 04614A09BC6A949F 23FBA768C1BB16BB F0E2C15F31C97691 5ECF50BCCAF1A5E2 E375D85BF8B64247 6F941247EAED420E 23538F6FCE316396 DD5615490DE2AA41 5834ACF79CC38431 392581176CD8E970 88226DC617BC0256 43E2F93B68F3AC39 8E8F2313A7110FA7 F1F901832257E212 23C6C22776BDE598 8DC03BF2543FBEAF F5F7126DADE4A44B BEAD37A4B63D83F3 9D081043A2BA86C5 81D7AAE10EC491A3 CA878FCEDCC9F7A6 E72D5B341C803E02 EFBC30C7F715E0E9 6DD4ED1A4D9B89EC 3306912F11D94CDF B8F615BDA97C5CBB 6555FF9E4E24224C 8FCB188218772A2A DBF306BA6DC3D109 EBF2082A93F6E5EB 0D0687D2E7D94419 52C70AABA9E748E6 0CB12FFF2DCB444A 227A4D1FCEE058F0 2799A4BB7B557626 8BD5A93A6902E9FC 058540A2644F39B1 2616A63F8ADD79B3 69A523497C2CCCFC 29DC7803EF6B150A 4FB2DFA423E4B204 77286CED7A1807DD 5A1CC9F0E6A3264C 6E6EC0F983FA0D6A 2F4DAC69F35DCFFE 79BFBD958DD63501 9DF4E37147F73CCE 9743CCC8E3BB6150 D6CD13D97C223ECA 1839D902640A7532 72621EAC6CE89F2B 486D408C4E8B92FA 2B030381A9BD7C0E 14009FFE02FF69B5 9871BF09FD95432F B8ACE1B6BE98C9E0 597CA41E231A2537 DD892C6C23E1A808 F68B23F0CE097069 4B3C46FA5AA380CB 459E6B4A0F8B80C4 7611E9DA4F4656DC 105AF9BEDA476009 70CD13804207722B C9C7C94F439A46F1 FB004CBB01BD7860 D227F9086C8FDACA 8899DC3FA525BEA7 E2B6BC54C0627175 957EFA69882A8ED5 A5D7650EA4756F38 64D98B102DD65B27 485DBD1CA5F59380 86E9EF785531EB16 0954DB8520964F38 3A4AF35AA1760705 4AB1F904E78927EB 8B9A096757B3538E F07C4E81541626CE 9C9C5C64451EA543 EC3092558EA222A1 96A866AB8C930586 F47CFE987E0D80BF 04F480D3C9C0E63B BB20EC726D708C0D 68F22E8944223B1A FFC373E2750EE728 8A756A7DE63B5B3F B78CE15B776EC9A9 546492C53DA4F074 E46D16D325901854 3E673FD6A933E39F 677E837CD3890F5E FB07462C512AAD72 3A88014C4FBE7000 5C9923145117CBED A833C6CEC2794ACB AE5C85B18EF12C83 000BBA49279A6088 1A217DF4696110BF E2465381C37086AB B338FC8476C0262B AED72E64FFD4D0D6 F3C1DCD4E51A3007 3B0F840F557E801B 5925741C297E200F 4E38F2691086451F 330CA9CEB0CEB83F 80C1DF3FDBDBEB6F A21E4F92158DD6E9 BF677EEA4A067B4A 9FBA770D0670696E A3D949E8C162C085 9FFEC507A9EFAFFA 6C0E49F227AB93CA 801273E31F91178A A7F5CF0C2D04E41C CD8BBC1585F91976 086610F424E6D1BF 2E224603B12D9277 135EA5EE3AA962D8 48EA72DDC3723B2A 7587B40FFDD20164 7AB125DA5944B90F B64D573D76291E43 5CFDF293ADC2A729 BCD9E54B9C6A7C47 EDA6714F5D19BCCE 24D567C3CCBB4A89 71FC4D0CF0E03579 0205EB35CE3D3705 91C23777D186B64F 910D6ED52D9C53C8 A070DC9297DEDC1A C7795CD3C26A8981 0F3FD06A8498DB48 FD6BC37A9BBE5ECA 0C6725339B537361 B90BEAC63B7EC5C9 BA790F7AD8BD1EC0 DA1F5E0D30727297 46AC5E66413A2A36 E4DD7FBFF0F20B3B F488E76E835651DB 492776C4086AC53B FE8CAEF610756A21 322DC05C27A7C618 BB490F144CDE9612 E9445B766B4BFD96 0E030A719FDB9ABD D1B52972AF636958 C9725DC80E60C456
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201305270655 (name+title). Key = MD5(password) = f7ac8980406f085b438858ced380ff2b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7a6bf6b6-5fb0-1594-b696-f74064984345
  2 9ad2cc2b-2a6e-495e-b76a-071ef3fd3c90
  3 3d6b1778-b205-2a9b-991b-9eb4737b3d0c
  4 6b905bef-e88f-54ee-9de2-5eebd900678c
  5 37068ca5-16e5-8c3a-b247-7111cd672183
  6 cf574a73-0529-8fc7-9f97-4971b1e8cf91
  7 81f89371-8f5f-243b-8a49-2dada22daaa9
  8 d2c75a42-1e3c-5c0a-a61f-08bee927c677
  9 69120f44-96fa-337d-96de-62ec98ff51c0
 10 bddb2ba5-c42b-0d72-b487-80f0a768a00b
 11 2601639a-3c66-7547-8b94-61994dfe1b48
 12 e2d4ba0c-bd43-73a4-b047-07f4ba4f025e
 13 3f89d4ca-0c2d-7a71-9381-05fdb61fc3f3
 14 6130c572-aa77-51f6-b2bd-78e3f89cf23a
 15 aee9d06c-e7b3-50bb-ae3d-a3e9bd4c7eb8
 16 d88b1086-0172-4e7f-b54f-7a799383ec38
 17 edec10e4-dcd0-2c72-a142-b74ca807640e
 18 4fc4c35d-068f-8275-9ea7-0ab7f92c6d92
 19 3eb9a8a6-f5c7-532c-b641-b2f3d5bd612f
 20 627b4e81-a911-12a9-b640-af1784c58224
 21 1f9a52ca-5eee-1cd9-bb25-da5f5ffa6d71
 22 4d29ed62-0282-3857-bf09-a89e0e80a78d
 23 bd416041-ecec-2b4f-a0d4-854dd834fa33
 24 f1676d21-6987-67d7-99bb-7e90a513de0d
 25 d70800bb-ef7d-202d-aa77-11c5b21ddf84
 26 9343a7a7-de15-8b15-8b61-54554942cf40
 27 2b1709d0-f048-71fc-ac6b-34584208d1eb
 28 40adee8e-e711-5b1d-b310-0ad6ef8946ab
 29 bce09155-4ae8-3018-a76b-b3592e012881
 30 36aa509e-27db-06d0-89ae-d1a6606ef10b
 31 a2b1aeed-90a7-0606-910e-f454a1f25098
 32 6215c8a5-2d2f-84a7-8eb6-b85c459bfb58
 33 da080077-e0fc-6039-823f-7eb22938456e
 34 3b7acd94-f5e0-63b6-a2d8-3d7626dde0f1
 35 6e86ed73-9c1c-3e64-8f50-2d5bf4ef5e6d
 36 36fb31aa-ba27-3715-8986-dfb178c615db
 37 bd2450cf-3443-42f8-b49f-9a59bae8b8e8
 38 69bfca3e-17e8-8abb-bc88-e189fadc2c44
 39 ee2a270f-e68d-7195-8b13-d2641a70d2da
 40 605b957e-b52f-2151-807d-54ca16daf8a6

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1425882530777554285113262875300866334872. Exactly this sequence comes out of new Random(108).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 64 of Run 46 (seed 39,043,781): new Random(39043781), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-05-15 03:07–10:31).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs