A858DE45F56D9BC9 archive

201307210935 1iq3cz

explained decrypted filler

seed 734

Metadata

Post ID
1iq3cz
Title
201307210935 → 2013-07-21 09:35 on A858's clock
Posted (UTC)
2013-07-21 00:35:59
Timezone
UTC+9 · title 09:35 against posted 00:35 UTC
Author
A858DE45F56D9BC9
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,600 hex characters · 1,800 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307210935) = 7806f3fbe3ea66d9d991a672f11c41c9 (name+title)
GUIDs
56
Filler GUID seed
new Random(734).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
48 · predicted N = 56 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

489CA92E881DBE14 DEE548818AD37BBF 204FE215B225313C 26FEAC8215FA13E9 E3983D491827CC77 BE0F9EF7E300567B BD7D3504BC2C5319 EFEAAADAA5E62434 02F26CCEFA0DD5E0 C134FDD486F6CE04 D2C068717CEC1175 71D25B8F6EEC46CA A246A527F2132F46 4AC3395FA89D66A4 1A70615041A17887 7E48C64F777F155D 0F25383C44620D56 1C16AFE5A8712452 B6F536D123F12D56 4FC948C7486A73CD 0781A76F1F20F5B1 1172650D84FC094E D915752DFDBBEA76 894311DCB99CE196 CAF71C016FA5FD9D 1CF6DA6C19BA4502 FD3DA2506ED8DFA8 384CEBEE7B5FEB96 6258A29C17B698DB FD5719D66D1C1748 1FA2FF2AA70AFB54 E141A145D28E82B1 645B41FA8AE27545 3998CC2C1C7A001F A62D80465558808F 748676552686FDCB 2177714DD1A961C2 A03FE0502B91E6B0 21780BD3DD97AFCB EC0F0C56B7964FBA 8EFBA63D03EC0E13 E8CA5FF46FBE1071 2A151D6F9394E169 83E419A12588A8C7 907ADAB3C4FCE8AF 5AEFF094AA0E3143 4D04FC6234A8822B 27CCB55243152DC2 CBF1018AE78C3CC5 981C37798CA26F2A 51EEC1928B2C069C C3EA5F0446D84D06 707E466060AE4B07 9C68372DB9E7AA72 D996D91B5E90FE2F BF0C05B68305820C 352631DE06201D45 24AAF2E77438A8CB 4003E00BA5B9B623 38DE6111B4C83A2C 7580B841D1E3289C 12909FB20E9E5A98 7CDCE4FCB0B4044F 1C98C2D8C509AFC5 82AAB2D84D377E03 B64C5EA150D784A1 25FAEC7E7F1738AF E29DC37ECFFAB59D 58D00359963E98CB BDCF910FEA725BB7 0EA8DA3DF77F229E BA78F935411A753B 64CA07890632E0F3 AA58247A1CF0F555 F226548A1DB5FB59 FA42FF5AC361DD66 6AA0965C8F1B9C30 B4C3E4B11294AC2B FC3DAD478DB7E8CE 7E02CDC3579022A6 904EE8142ED7FBD6 32A70C7A5012B71A 1A0E186D63808E31 B8B77DF4DECDC242 2C295274F3ABCE6A 18045F88086C89BB DD2D18626EE23800 E944C217D770F14A AA145F98C53367CF 505F49694B17CC14 CB9D647903A12D4D 170818FD595365ED AA6BBCF2C834DD0D 37FA97C860779ABD 6A69D721450F8CFA 74F07EF3ED880F00 2B0D2312052BD68E 9CC2981D1C4A0DEF 0A5860CB31039ECA 0B95928C333F6506 457E9E72B05711F7 619251E3F5EE902D 4600ED16782B257B 2331EF6B16B1BF0A 2A0550FBDAF22FAA F39B91AAB1A242D5 BDC79EEEC16508B8 56992E2BC831A7BA 705A96D46FE61240 BB7ED5C17C2717D6 369E9511942F64C0 EE6B86AD69CB1D4B 37785D9B66AD5175 A286F6643E20EAF3 99855A1D0BBA9AC3 7ECDE4E303F32405 AB06B7B55BD0AF32 810B95450C04F4AB A5125F3FDBDAD891 4AB19E17D42E607F 61614C01FE687B5D 752E2CFB5EE4514A 101FB5DFE97975DE 64B5B36523B0729C 33AFEF299A627BAC E724C3FC07EE378E C4EDCFAFD5FA9A62 8C533CF0021F292F 6149D6334A091997 27BC531C40C025D4 8945F71F1ECED86B 226505B811788B2F 4D0101613511FB6D 13E074F4DFE07DAC 792552E59D46ABAC 3C416BDCC285AAF5 4242E0F20CBC923F AD1713A7FC440D83 A1861FFE40B0AFF6 C04AF1656CC64BBF 54E9B4636F823D89 C5A348C0290B511F 3D50CB7142F8FA7C C3F35F31EB68A57E 01B1A546DB7437CA DE8DBC0284368E26 1754B924A4CDBB74 5C630D9A4010198F 5B90770F1EEA5C48 3EB44BEE1A8D1F2D 480B3A888BB51161 75F10E729A90C518 ADBC2ECF0F909CB5 B68C14EA5FDAE14D 6A17B9188B4D1AAD 3001909E02121DFB BEAEB85D36CDD91E 15329211C2827B49 477CC9D4E38CA247 5735144C1CB02676 16AC84D821B0EC05 A2E49AE7AE5AFD71 957D2ACD91C27748 387EF39BAF775D39 E80D68FE2B2F8107 62D3BE9526353783 11C68029C7FE59A0 938E5148CDDA5A22 02152073C6E2E100 B137E1FC3FA9DAFA 1397D6DBC6A60D8E 604C8190B5625675 62A46239918E135C E6A965D20A893DE1 16215F191BED2909 B1AAE1970E593F46 404C96B9B5F3D3BA 91B5A1E42518897C 0A91175C37B9619A 2D78804A559B710B 73C86150758F3101 B981E8B5FF55C139 17F0861E9C7733ED 344B697FB117865D 8412CD4874AE0BC5 ED4531F8E8BF7318 A4C400874872A82D 989123934A0BE252 12E0B11B490F3853 77D1EEDFC9D16497 E79EB244B3484CB4 71A89EDF1F61A625 A840DBC2811DC274 706FB9EC3FFD79F0 AAF3949F565521AE BAFD9A02A2BD037F 76113C7DE0088A67 EF889D40A2574FC9 ED4489067E909236 DDE79EB046616506 523FF4A7DC05B766 CA1A159D4D304B1B 69679E967D9DE692 775A0798C06F4032 8CCA6662A535F36D D8BA682825D01BBB 32342651C4230269 C71402C8C46B63D2 2DE5A5C37544A21E EB2F8A55DF63758B 389A2A456C152560 2754071644FDB6B6 983C547F0DC68971 6EE5FA109E446C93 35A73F368BA18E47 C6DBC2023A9D1D4E 534896F4096438BA 197F47C8C288292D 3ED3951E17A654AA 6BF20019B9E07952 092FE71E6273A5A1 068F0EBBB259D3D9 8CF0BFD64FA531A3 7B986018F973F8C4 6631F2A9794F363F
  • Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307210935 (name+title). Key = MD5(password) = 7806f3fbe3ea66d9d991a672f11c41c9, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a380e8c3-8737-15a3-b225-a2d44cf2aa03
  2 21f61b83-637f-1b55-814e-6ab670136fc5
  3 a49f8e7a-79bf-74c7-a015-2302379077f5
  4 b4cb3640-c103-2d91-a713-abb4ade25468
  5 b553229c-e8ca-5ea2-81ae-54dfbd583742
  6 709edd5f-33c8-8b9b-8881-3391e67bc3b1
  7 7692db06-8eed-7a78-8b3a-7ac4b98a8a30
  8 cdf5d4ba-4bba-66b5-a9b6-d73cb016c55a
  9 fadb873f-58d1-7b8e-b414-0098f9dad3b7
 10 b7aba45d-9af0-8cce-8413-589c011fb778
 11 a9b9a59a-6e0c-0044-a5f9-0a59b20677d3
 12 88c7a1d1-39d0-41b4-94ce-2e4232580510
 13 4a0ca149-9fe5-1881-be97-bf85daa13256
 14 256c1256-4180-35f4-8dfe-f4b01a181e8a
 15 43d02e24-260a-64ab-adcf-1059917bd08a
 16 28ca6408-f3a2-3556-b5ba-2d5c794085b9
 17 d5006b20-7b9d-3f8f-aa40-ee763c9af234
 18 eba96a73-0c94-0cb9-99c6-bc995e2483cb
 19 301d4e89-17a2-4e81-b44e-0c25a4ed0942
 20 3314332e-a29a-4b6c-8800-3c766444e1d8
 21 e6ad8290-f3b3-3cd3-8746-25d1ead7072e
 22 1c6d978b-639b-806f-930a-604dfbef60fe
 23 e54131fd-c954-051b-b6db-12b874eefb29
 24 f11a944d-b0a5-473b-8f0b-3c466a8b254f
 25 27417610-16c5-5411-abb2-a4433f7436a8
 26 9d37d489-2fbf-59a3-9f8f-8b32898d26cc
 27 ec51a669-ff4a-0e46-b570-a1ce7a2863e0
 28 012b2b0d-d76a-4e69-bb64-36b7896e7c72
 29 c4ac8891-5d87-2cf6-ad67-731905c50477
 30 04519edd-d14d-1338-ba56-e94f854fb9ec
 31 b624b964-6a94-120e-8aa6-05086a5c93cd
 32 60ac402a-755d-7af2-ba7a-2ec3623d82c3
 33 56126f98-80e6-484e-a6e3-84b7c4d6b826
 34 3d1c4b09-5b5a-3016-9fbd-705892c954dd
 35 2e766293-be05-85c6-97b0-8e58c6ea6d85
 36 1af370ea-5da8-5e65-b63c-aa1f571c8b20
 37 4faba09b-6fe4-05e3-b638-ea0f834cd1b6
 38 8390d1ea-ec66-5934-ad2c-b17be9b0f752
 39 73437285-8a74-08db-8d6f-c8637e05c96a
 40 bd8337f4-82d0-6687-9a61-cc9b9021326e
 41 d22e698f-3892-8608-9c41-884448088235
 42 c0c496f6-2740-5462-8e65-3ae945a97623
 43 0d1d3623-ae5f-0c65-ba21-8e70d4860db8
 44 0f0c4a38-a530-3e5f-a956-55c737f7794e
 45 f12029a2-ac80-8cd6-890f-7fc332c3089f
 46 5e589839-7f53-1094-a843-9fae7b6d1a19
 47 9b99d185-f47e-0ecc-9bea-b86cb696f286
 48 d4e74ac6-d961-823c-9952-8e0236b4dc01
 49 f6b53689-ac82-72c7-b5fd-51416d985908
 50 96dd2245-b747-22f7-9370-cac0cb8f0f33
 51 fe18c20f-475c-690b-ac98-8a539f1e9963
 52 255d2fa6-6159-4374-b459-66ffc3205bbe
 53 a5990a84-8152-0546-9861-34e724dcea75
 54 6f389a87-602b-051a-b773-6a8445827234
 55 c505bc01-39d5-15e0-a359-49f3173c91c2
 56 7f493770-6277-2235-869f-ff9e3762d03c

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 11725876780413633044380455042117438505068503810872640012. Exactly this sequence comes out of new Random(734).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 48 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs