A858DE45F56D9BC9 archive

201307031759 1hlg43

explained decrypted filler

seed 131

Metadata

Post ID
1hlg43
Title
201307031759 → 2013-07-03 17:59 on A858's clock
Posted (UTC)
2013-07-03 21:59:43
Timezone
UTC−4 · title 17:59 against posted 21:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,600 hex characters · 1,800 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307031759) = e8443c57d5710b8305927b587fc2f906 (name+title)
GUIDs
56
Filler GUID seed
new Random(131).Next(9) ✓ verified
Run
Run 48 (seed 387,048,281) (seed)
Draw
17 · predicted N = 56 ✓
Machine boot
2013-06-12 10:29–10:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

A29117D73740A43F 7AEAF9C52615F51A DE5A0E1ACA48481A 453FE8E5F8D7E7C3 32F6E14F33D45D45 2D424B653EAF7AD7 C512F2A2F2336218 9C9B1D341F1496B6 A92AAA16F07B1140 77F336832E08CCB8 8FD59A06958394DC 984F1105F675938C 640EC8A78CEAF55B 00EBC19C03A9DC18 918C3E42A14AAD6C FD7CB54DC2A4DBB2 74A27585BFB60738 97A56CBE08D58323 C6CEBBCE7B78B72C 5A468237134FB077 C9C54CDCC0FA2F35 00A750B8FE62A053 831E775AF6B5FDFE B3127BE20F3FAE70 08FB289A346B3EEA F7C8BB449B7ADEFB 935B4CC8F76DE006 7B5EE599D406799E 5EE471029F919626 F8EC1AA05E147DAA DE578A36B05561A2 C8D60B2BBA437275 9A6CD08B2EFB4BE1 8180BEF15F7768D3 E3F0BCF9CF630E70 CE544D09697FA1D9 B0B4D30A1CCC8C94 60DB0D3DDEB4E81E 37E041629C4BD6CB A939814E49B9AA82 5448A1A6784A9467 60CE04BC3BA8C267 69153C3E711E1414 65C6421EF53D5E88 3B9B8C9F2DEFF39B 2E69E5DA2FFE7BBE 42D8D2474F6AF346 7710A82EF55692F0 B6D0F1C371E73274 5E946BACC41FAF5D 56734088BDC51C39 C71E3A8EBD80D35D AB7EF3053BC47EC8 DC621E86AA0D04B2 26B04784C5F6E641 C60A79C5E03F3FA9 C760D3E7814E60CE 0A3F050F3C68D276 7F4E82F16C0A4F28 BC6EE0BD2C381C7F 2A6C50D0DB5774A8 D7F12A15F7EC7B14 FEAFA5C15BA849E3 661AE77E76E796BE ECAFDE4FAAAE3EBC 3E3AEB0455EEAC04 193A9D0995EC90FD 21947BC06ECDA444 BBC2A6D3D84F1DF8 72E97FF2C755D504 2231DFF3996D8554 AD0B485555DA5AC8 72A4619E1EB0BEB8 2F712FE776990061 9DC23E540F006E6B F2A32057CAE796A5 D8422ACFFFB9EEEC 9712DED4950DF97D A3C219E847B57DFE 7EBF759B19B98D4E 9E994B71A0E965DE 5F0610715917C4A4 7FBBCCC395335967 286DC171F1B24EF1 241BA6D2AEFCE7E6 511693ED03834F8B 00D175B04EB29AA5 85BC28A294FE407B 327915032C3FE284 5C06A0CA4E8C7357 E50EB8F34A51AA3E C7424A8E1FBD4A7E 93C8A26D8118B5D6 F6CA4DA6579E708C 1B4B911D9CFD3682 3E6969FC6097C80C AFBD36994B39F59A 1C59BB284E8FD763 7040A5914075F545 60E88D5433190D43 6B1338F7B8FA944E 3D9A3D9247077575 12B508B9ED9CC667 A336C22F9E79E60E F0BB3F1872CCA773 26D9245CBB89B24B C7A6078FCE4C59EB 26AA3A5485BC2988 5332DB99E1C12509 21A3ECC47FE7BFA0 C3A4CA91143C5E01 46E92E64BF228BD9 82170238764DD47F 7A04A0DB7516DAF7 A57ACFD6BDAA5C05 52AE73FCACD74568 D430C2D13DEA5D9C 86E66AD7015BCD69 6F71C826765D9B25 B1C705749324A22B 826AAC999C82BB2C 64E7246087AC341D A5686E610423DE39 F7F0D98B1D3470AD 962188AD9A20766C 503C9CF338FB03AD BA481CCE5AD19EFC CA866AA449D3FC81 397E8F6D55882108 33172258D464286C 569DAE80917252C2 653AE080384A292B 7BCA3EE1694DA474 99DA89294B656A06 5F52ECC759940E86 B45F554027059E89 42B8EFAB55CABC59 B8DC6E4F436849B5 B74F76B6917EE7DA 0042AA77E34ACB18 2778ECF564B89768 CFD82D4227CDC1D0 25A54179A457B7A0 BE965909FA102223 EC6E41F69D49A44E 5B55FACB82E35492 47E433D635F36D41 99A40F07130063E2 1E11B710ED96F502 E45F14D55A0A2452 9F5F8BB4B44367C9 94242D30BFA37528 D51CFC64E122F006 B44FD0A85B035C7E 10E849A908DB2471 EFCD7D5A109DD6C8 73DCD5ABD00C3801 C34E027CBBF72B5D 44737A151196A3C0 F51CB69C2A694C73 9C03F0A2D55E3C5E 5DEEF4890643825A F1D52EE1E6F6D6BA F6776BE97B3D6CB4 2F07DCFFA6E27D6E 30CAA462C16F82AE 158CA114E4445175 4B7C2126A4F22486 6E71DD7BE462DA90 19B9EDF33D048232 539F13ABC4BD62A9 7AC3CE3AF4799084 FDE41007A584D1E1 53A405B51A3FBFF3 F5EB95CFBA1254EC 610A643EB8E879CA 6AB493BB8D3B19FF 78A764F6C6AB69D0 47164F6E231C7169 CC4AC27E1755F4D9 8473D7B36DF1ED4A F58F4DC1A9342AAA A18F705AD1F704A9 73A8DC9C66F92A7D 5DBC086D9487F230 593B0F46F5E0BF72 83003CB50F3A109C 1245D4DAF4B40E99 4E658874E7FA8A69 BBF4B9184FFC9C67 F18A2B302B7B8791 E6BFAAD4B707BCDC DCDF8241F664F164 7835F76A7FDD53D9 A1F10310CC7E18CD 892831E57A823518 48D6D51E0BC59646 75B6F48692C9D1C1 2883BEF1F070ADE0 2391BEEB429E0B68 31C9AF6E55DD413F 0B7E318443C2689E B3D35EB5CEDB6A93 86280A66147ABA05 44F883FA787E5C43 1EE44DD64BF31593 4AC3CE114467EC65 6FE37F042DC8E61B 413E63AFDF21BADB AFEEFC5F5977781F 3B6B9F6BF97DB1D0 A8F5E5B2182F014C 359EB6F9D577E2DD 287C80CCFCC419BB 47E8E3F7E7B53C02 75360312B8DAE989 049FEFF12BE05F18 BAD865E8018C8788 3CD85EA185CADFB5 E62802DE112037ED 5C02575FC1FC59A7 282871C76675EB8D 9BAE2FF169D44AB0 08FC0240D94C3079 346705607E86E52C
  • Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307031759 (name+title). Key = MD5(password) = e8443c57d5710b8305927b587fc2f906, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 772d2d15-2ae5-1b8a-b36a-5513b909a4cc
  2 e3398cce-e27b-25a5-8d07-db7c9b2cdd1e
  3 6eb677c3-0b5c-3294-a09d-c6210b28e974
  4 c7eec791-91cf-41ed-a2f9-c70ee486c103
  5 30c00f64-5682-3090-97fd-875be3043175
  6 59066f82-b770-0f5f-adb8-04497d9eddf5
  7 ae0ff10d-1b00-573e-9b32-ba65a0798be1
  8 b4896248-e7d2-1456-b0c5-37a46cbd1f5b
  9 fdb11000-6465-1e86-9f7b-5bbad32bea20
 10 454cfd1a-4a94-58bc-a659-3c4ddb87019b
 11 9e7cc8fb-a128-7315-acf2-3943071cf7e1
 12 db096f46-fe72-6e79-b045-cae0d0488617
 13 b302cfbf-827a-6111-ba08-612ac0e351e2
 14 ab682238-921a-5ffa-9c47-fb0a5bb9df34
 15 1bc005f2-a905-6e07-98df-2a5a0ad48b63
 16 a9288ee0-50de-749e-92ae-b36d1b567df4
 17 fdb5e6a3-8619-81be-85a4-9956b7dcc7d6
 18 2d09d608-224c-1643-95fe-67d43bb17e68
 19 aa1ba14b-1250-24b4-a666-dda54b07ee90
 20 d7a8af71-fb1f-046e-88dc-fb9396e52916
 21 429371c6-f4a1-2e76-989f-a7c9d1a5fcd5
 22 8139f0e5-438b-8b75-904e-0db9194f37c2
 23 2c6cfa6a-fbe2-110c-bd8a-5b6f47270e17
 24 db4445a0-fdde-7f38-b8bb-ec0a80e6337c
 25 c81e301f-bc61-4cac-8c1e-95e9379ffc0a
 26 7b90219d-2e72-7d78-9f27-04cd6f10ce19
 27 a67d3bbb-30d3-5d66-af0f-81839874a4ea
 28 7cba44a4-e082-7596-b24b-b286e4e22a2b
 29 bac601b5-5ec8-6de0-a821-60c2f12793b3
 30 d8effffd-3969-5220-8124-17b96c86f8b8
 31 85a55204-cc4f-4fbe-80f4-d33e6a412480
 32 2438b560-1a07-8fdd-9535-68ed473ba526
 33 5fe19b54-c507-83ef-bfda-f6234280b2c9
 34 f795294a-9dbe-2e0d-af96-0b2d9b64c138
 35 e03ff0d9-1a39-3cdf-b0cb-8a05f5db4366
 36 f76ce3eb-0276-3ddc-b4c1-b38e97e01e87
 37 7a6f0729-9cb2-4981-9df4-8fd94ee3661a
 38 594f6983-3bf0-590e-8fd1-fc957ef82312
 39 34aa12df-8876-6a6c-80ae-07fd768ebbb7
 40 c0c24c75-36dd-3f14-85ba-199d113c5fd0
 41 062e0d5a-896d-0e57-9769-d07ea8b545e7
 42 81d51641-f7b4-0048-939e-01821b44e137
 43 34f961a6-00b1-0fc4-9581-884e93ef2d13
 44 7ded3be4-d6cb-0b77-a745-e1ca5330ffbf
 45 ee98488e-8245-81d0-b46f-1a31f8af0b0a
 46 88e51eec-ba13-1c1e-9feb-db18b95a7739
 47 1b662485-30d7-863a-8bd3-401d2923292d
 48 24ef0dd4-30fa-4d46-8264-7d0ad7ffad96
 49 4ce8473f-3a67-8b20-866b-f0d5ef253e4b
 50 29ee7d12-c9a4-40b5-b19e-83de26233c3d
 51 f9c0f340-3797-5097-ae0a-087c72457564
 52 62f811a4-b278-6ebe-800c-2dfb78417f9d
 53 65f29b59-7c39-76ce-8538-b3e09869432d
 54 8ca6e21c-7dbe-1de5-89c5-6fe158ccbc26
 55 4cb62a2e-2bf1-3e7d-b3c7-825eefc9e209
 56 e0f7ea7d-8784-1afd-bfba-a2658b5d0845

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 12343051157665678120281747576548823345630000818484567131. Exactly this sequence comes out of new Random(131).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 17 of Run 48 (seed 387,048,281): new Random(387048281), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-06-12 10:29–10:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs