A858DE45F56D9BC9 archive

201307210947 1iq42h

explained decrypted filler

seed 717

Metadata

Post ID
1iq42h
Title
201307210947 → 2013-07-21 09:47 on A858's clock
Posted (UTC)
2013-07-21 00:47:59
Timezone
UTC+9 · title 09:47 against posted 00:47 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307210947) = 6e9249375a6fd119af0ded33794c170d (name+title)
GUIDs
40
Filler GUID seed
new Random(717).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
54 · predicted N = 40 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
316 · 28
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

C466C5687018C2C6 2620FFD4583921D4 9B0B4BBFD91A84D5 2DD9037365611A1D 780C9D73899D278C 8A6550D782A39278 F931893F8FD353F9 C195BAAB3D81C677 9D9234F6D0C5A648 41AC7070379F7378 627F28824E04CC93 E51729BB5B3A3025 C93262C00EB23F80 69952518AF52885A 5C2EAFA1A7CA91B5 809A77FA1EB9B9DA F17C31C5A17B67FD 7D01843859C26EFD BCA06D34279CA021 29ED642DB8026D38 B3C083B0FB15CC14 EF0485904BAD031E A143F449374E483F B65353DA0CE74A1D EE67FA6B5C6E555E 6BD2C89F93C7E70E B5CA5D5FFD5F9934 97B94D2934D2C9D5 31753265BA5D7E84 A750F603EE84521D 81C36591F8DF9652 507C2C6E011E02BA 7A959E7AA9D70CBE FE0B520E6261A7D6 21B8454DE50B72F7 DD7EE87860061326 242916978F39CE67 337450F143D91095 A4C6D57A2090DAA3 50093DF75B5279D3 2F65E8EE9D1E0617 16045CD91582524A 49C2A6A4917E1ADE FF3ECE3BE83BC833 4BFC9EFEA6FC79FA EA35A2EFFBC3E88C 45BD8F5D1DE86243 2B0742F1D18DB3BA EDAE7C40682A27F9 E235948333E93FB5 C7C8952ACB9073C4 70109A5093B18F28 1B322AFE89941B03 5AEF574B10C973A1 1177C2529AE1D180 835492A29A852F83 DA9BF3E0D267C41E 1D7407BB843CF1F2 AC5E0F60033FD902 7F5EF31FB782031C 4DDF7CE78F8CA394 1E9452B712D4983A B8AEEF7D17B353D1 E724526D9DA0D2EA 01F81A45389D6AC0 6ED12F27E8BDF810 EE84357C10479A82 5B4E0E6BC7A7334F AA6DD409B81CA70D 59D6F07EC911DD33 88D63172A6093CBD A173236803F251B3 B77509272C75BB30 3FE8CA42600DFC0F B0A99A0FBCB007C1 52BB157EA932444B 2AB3DB76043375BB A4EE7E1B812240F9 14CBFBB83B228BB5 22EE2A62EB9E95A3 DD6600AD98178B66 974DB2E7D1A57760 757013033D0939EA 0C85606E15B551FE 69957143FA4A0954 10E21184CD969870 DDDB2CEB190E4EEE 142AAC26AEBCB0BB 9A2F6E21F228F347 A9053D0381853388 9DBEDC2E561EB07E 161B1FC3C39D9356 56A69A76CB5A5C50 83AC23C99CFDAC9B 3DF0B9BEC571E51A CB7120FACCE01159 7BB8E0DF5FC61F38 286C08FD580DAEBC 1CAECFFD1E014A78 C06CCFC2F81A98F4 33846E86370540D8 D81BA3C5D2557E22 C78B9F82087AB4B3 8800C16D4C401989 DC744BEE38157905 0487CECC1A71C510 9A2B2EFD9A422F2A 82214F672C0F689F B3DB182A589B6F06 F3AF6ECADDEEE8DF E54FECD42358E37E 0A2CFFC555CAFFD6 11368BB0280A8A20 2CAE113D59CFB547 3BCFC225FD2EF51E CD2EEE2199CCB20B 505DA6DF073AC62F 34C4D1113C5FA4E8 EC8FA3EF978E0863 A7EC23F215A6AE63 37B90966F2A5745A F84C50063C251FEC C9E823342308ACB0 1A5FF1EEEB6009E2 D79C19E9957383EE F76B1B8A88EDE81A FC0DE08BAF6E6B95 C857FF54F926C919 93288F8C99DDB137 53F1791A0973EA26 9D1A15A5657A3468 D64D940A0F7DE03D EC27ED4E6B856CDA EB4BFB65DFF6EAE7 CF48B4F25D1BFF01 6C9BAD7FAFF54D0C 538307FA16C3D7BF 339E4E9BE16B2D46 CB50D55587D8A289 04E23E34BF8FBE23 F5987DEEFAEC0CE9 3DEA2F062267E87F 53D3D8A899984809 8CE9C485375FA646 581757F685AAF7AB 9AE529419870EE57 32E41C81256E1C50 D1EFFB89F5238A31 F134D83F2B603008 8212991DCED207DF 1DE480C70042B783 C4D66C9E9FF9C210 2462D7C0597347F5 020BD9261AA0131C 74456A025418296E F55A905766ECE178 D0D8800D2B28FFB6 42F5C4532F6D6D19 A563C60E66B57A57 4303FEC0B35017C2 51DD3A70754B02FA
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307210947 (name+title). Key = MD5(password) = 6e9249375a6fd119af0ded33794c170d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 cc9aa601-272c-2316-b01a-a3902719263f
  2 9b6eea60-2998-13fe-b5df-10339b9f14b4
  3 042c3806-2c86-8535-ac4b-4742296c0608
  4 6b4594d9-a8b9-5e6b-be39-0bee348fd584
  5 2ef9cb49-a99b-8f4a-8e8a-c75b28d4943d
  6 3795fd9b-4184-1e7a-b91c-355b4f3cba40
  7 25e630cb-ff97-190f-9823-9624f82f5946
  8 7022c63d-c3be-1472-ae56-475462d6dce0
  9 8a496499-293d-6a55-9e10-184146cfc842
 10 a34c380a-2b0a-69ab-8bd8-aeaed3b8db43
 11 410b75d7-3bd0-45a4-b301-9ed5b1c81e05
 12 250149eb-172a-2013-94bb-6f5484daf7af
 13 008fd944-285e-4d58-8658-f8e8cfee4afa
 14 9681d8c8-9c06-46af-bf4c-da27f461a409
 15 39ae0ec9-bd6d-7db3-9f66-b809d5f5b0ae
 16 bba3fd6e-a0f6-7fc0-8ecf-012bde58526a
 17 48454a86-95c3-2734-9d9d-1d8ccc095b3b
 18 7d0aae67-e94b-429c-88ed-858390b14f10
 19 01e76eae-e501-0ba7-b09b-53a5e781cac5
 20 24097e1f-3142-86a7-98ce-f061cb0daaa3
 21 0eb81668-23c3-02f8-bfe0-92c0b0d93fba
 22 9c87bb2a-be2a-6acd-993b-57999d86feeb
 23 142c6930-c4c0-1ec4-8abd-3f29c411a75d
 24 b4511b7b-11e8-424b-8216-1540c9a7ffce
 25 59e59bf9-46f5-88aa-b0b0-3b467b9497e4
 26 6d7f1798-636a-6067-ab8f-ed08533bf2c6
 27 1d1bc8c2-a61c-30bb-a0fb-3632a52e1fe5
 28 5399b7bd-027b-860a-965e-fdd1368e3c21
 29 97ebe83d-5feb-53df-9ecd-69a5f55582ce
 30 fa0c19b7-f428-44cf-8439-fd644c8a359c
 31 9b189167-7478-799e-b9ef-25b6874dd2f0
 32 3ffa83e7-85b8-200e-8f19-e72ae3f59601
 33 f3b438d6-0f28-5ffe-926a-7c1bd083a4be
 34 70673ab7-eeec-836d-8289-dbd4994530bb
 35 dba7d579-6b8f-0ecb-bb6f-516462027f8c
 36 43ecb7c6-a011-7d2e-b228-554e268551c1
 37 b1e3c575-c6c0-88eb-83f2-10fd0ae31015
 38 c3e2fa53-04c0-09ab-9213-bca20959d943
 39 fe4a4477-ceb1-1ce5-b446-3dcd37ecfc9c
 40 c25b3728-b97c-0d5d-bdd9-fa200252bb66

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2185811166424477240806148638547258078010. Exactly this sequence comes out of new Random(717).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 54 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs