A858DE45F56D9BC9 archive

201307230940 1iuo9v

explained decrypted filler

seed 666

Metadata

Post ID
1iuo9v
Title
201307230940 → 2013-07-23 09:40 on A858's clock
Posted (UTC)
2013-07-23 00:41:00
Timezone
UTC+9 · title 09:40 against posted 00:41 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307230940) = 7a167d71b1e643db958feacd05e78443 (name+title)
GUIDs
40
Filler GUID seed
new Random(666).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
80 · predicted N = 40 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

F7B9F1686D8690FF 583EF8A246E1908F 818DD764340F15CE EC62A03172C33624 98C85F72305F530C 987C93404362FA17 DDE253095D00AF39 698A40198CE927FB DE3B15135AB94F49 752DC01048588B3E A09BBF9FF3839C59 F1EB1438B715B533 DBE3DE9A6960FCE0 45F269E1090B576C 847C6AEAEEA89E90 A1F36F4968DED81B A6F8EC1BF213FC66 8949749A4B004A4F 8EF1749CD41A235F FDF42A92F9AAF906 595FC58A94C89F76 D343ECF89EB87E93 1E852535C1352505 7163FD2AB2715351 399D3EB18B77CAE6 7DC27FD254E5BBC9 932E59CAEABF0287 A5DE6AD14C45B5F0 EFFC76ED4D62DD19 AA1D3053A7986BE2 F1D7F6DEC673CFE5 D2114730370C25B2 FEA2532EBB7370F0 897AC73BF8DE8D94 215CC7633F5417E2 CAE5FF88F60C1365 890907BDA467028C 0565D131E27EFB0C 39AA894E27C578D8 4504E625312E8BC4 C7B7D31325AFFDBF 562C56394956D598 EB4855AAE6D956B0 A18B20610098FBFE EEBFA292080B9999 F825E73EA2523D7F 323831AF2BF92A6E 91912FA6AA2C9320 8D7A3370DFCE8115 A181961D2BBB3DD5 9D8E48429174D4BC 47DC274880BDDF2A 3CB85DAB428AB13E 385C8B4F402A3B4F FDF7F85965DF110C 41F8103884465502 502FC146E2995289 DB81436D36E1A57C 75C74D56C74513D6 6D58C4A2A1B09657 13E8769012206EF0 6AC17AC2DF9109AD ED39173745911730 DD0537716D8142DB 81AC79B93DC9BA38 9B38C888BCDFDB19 FDC75CD25AA2644C 680A0D5FA68A40FB 27D854B5A0432D79 D98DDF09809C42CD BD78D0CEAC60F950 71450716EDB428C0 4C52B32AE7F19BB3 848FFFA6313F2B01 65A772367AE94CBF 9960F9A8518B067C 3678457AB11A51D8 D927169CCBB7760C 10BC697C529DE7D9 50DE65D9DB616357 CDCA6E677067B727 1ED8143583B29AA4 42D817725B9C8DEE 0BC80F90B2A87919 26412E6A9065571D 70C527DB19B0E0B4 13A9D593D68CD61E 2D240A939C7E934B 61A72440619361AB C7D0F6AC1D31A549 FA5427E8CD643EDE 0416B68759ABBD34 FB813C18911AAF93 8170F86B84BA355A D9D86B143F7D96FA A3FFF690B1561C13 34019095C22838AE 81DC7DD84DA9EBED AD07856D6BF6F535 EA0A843E9DD185CF 98C894F38491A601 79267D1D641D5458 10C88A324DC63583 0522E8BFACB51F98 A32A9AE92377E5F9 43D1DA213FB12165 35427FAA4EE6AA6B 2C63103EFC12A238 FBA1B48603F21533 6B5A4FD6B7E629CA D929DC325347FB9E 3ECF0D1FF868C23B 87AEE1259B9ABDD6 CDAA18A00AF08F73 F97C201C9D7679C0 50F0249B2BC97186 7789F8A351015491 1E658EBC5D9D5CCD 0A8545F8D3636046 FB03EF979C3BED75 FCE0AF55E9C05F6B BE041EAAE9E4AD72 C62E1D1A90DDCF42 9E0AEB9E72834322 E44BA3D0CA7516B9 7E3EEED6AC1E2949 0A8B88CBC778E0F3 B86EB195C3F97132 587AE8D050D5FFDA 6A237244C5E9011A C964FBFBCB748BA8 BD14FA55D58C52A9 2C8C22AE0B2CAE29 359F248862101503 EAD9B44296F33F66 C552EEC1429B8FD9 9285D6FBDC4E0032 0604676C23A6C778 3C7A0EDA44B17177 F5CBC8CAFD770688 CA780EEC05B06783 834915C944E009D0 6CE3B0B0E55D9B80 943ECE4BA5C30DB4 8DD759B51D5D3107 E64835DF00BE562B EA69D0020C92126F 681EFD181CD939FF 68BCB15A22CF09D5 CAE6AA2BB5E590DA 0E55C9E145E18AB0 3C20908206476867 B6B61AB3395D9774 F2325C472FF313C0 4502589D6A4E7226 B592AA79CD928BCB 99869C03A6328A6A 739E7DA5ED6F1DC6 567DE07845D3A834 73B93BE035E6CC32 050CFB8E662E4E65
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307230940 (name+title). Key = MD5(password) = 7a167d71b1e643db958feacd05e78443, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 248f4ee9-1652-5aea-ac6e-af6c7f1c323c
  2 bd4eb977-d97d-2683-93d3-23d7f311d0ab
  3 6f62c11b-bbca-220f-8d10-ad8b7205b7c8
  4 bf9c3e24-581a-675b-9df9-a3d0bf04a168
  5 1b67fffc-14fe-8777-a3ba-602b52dda0d7
  6 77232f89-3514-5d3e-abc2-07820d8c49f1
  7 b446aa6b-2761-249a-bf2f-4b6823079e04
  8 ff926247-021e-58a1-8254-56e035dbabd8
  9 f3a7a309-f96d-33c5-92a0-e983a4e6a09d
 10 bec8c1ff-2c31-7ce4-b07e-aaf9220e417e
 11 05e7c980-dbf1-8b04-98db-37de5bf86c11
 12 9d28aa76-8236-3dc0-9977-8c542b07f33f
 13 a791efdc-4ad2-4bbc-a52a-969e9d91a48f
 14 1f149d0e-23c8-8bac-9648-80c7bf949e84
 15 d7add5dc-c389-1298-a8e8-7bcc633dc8c4
 16 5f5af416-70ae-854c-85db-7f461fa3a45f
 17 038a48bd-2df5-7840-bfea-74f8ff1b83cf
 18 53978daf-ffce-8e92-af2a-aceee18611df
 19 b5917937-c396-641c-93a3-2ee51a76e657
 20 d60a7807-4234-1b9b-874b-db3161dac4ef
 21 c73604dc-98dc-27b3-a867-b7bc7f1b136e
 22 cd5ac607-90ff-23b7-92da-7b0674deda46
 23 f0c54632-5d1d-4385-9563-08b6d4057477
 24 40e4c775-9bdc-696e-a0e1-5f5488cf59cf
 25 46f617e1-5808-8d86-9599-758c3bf55ebd
 26 89eb5cbc-3063-783a-9f0e-90ca4d92f1a5
 27 1e471b75-33bb-4375-bd1b-986b114d44cc
 28 25f5fcee-7b10-347b-b5b9-42fc7c2f44a9
 29 505a579e-6422-4feb-a7b2-3f847d56a3cb
 30 c0b36ee2-343a-40c5-af73-030e29562053
 31 a83c80b1-a91a-0a1a-b28d-1f7c2bfa774b
 32 02099f06-f65f-765a-b2cf-5ad26ef4021a
 33 36b01ed9-0a59-13e4-bc86-a02187d5b747
 34 9fb3aa85-67c5-6a1c-800d-e4ea5cf3c31a
 35 a3770696-9fe2-19c3-b178-aff0d97e75af
 36 ce214fa5-ccd3-595a-8611-09fdd5a1bb1d
 37 ef097f42-0bd8-6711-9e10-c5fa8ca57a32
 38 68c38d79-1305-2440-a798-4622415ec4dd
 39 7d998581-a709-31b2-bf3d-9fc8baed2663
 40 a46f48a7-f32f-13b9-a695-6cede593e919

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 5226852537834818786122468743440716156231. Exactly this sequence comes out of new Random(666).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 80 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs