A858DE45F56D9BC9 archive

201307281500 1j7d46

explained decrypted filler

seed 299

Metadata

Post ID
1j7d46
Title
201307281500 → 2013-07-28 15:00 on A858's clock
Posted (UTC)
2013-07-28 06:00:58
Timezone
UTC+9 · title 15:00 against posted 06:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,600 hex characters · 1,800 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307281500) = 6bcc13b72c7a8f102d8497f81130f74a (name+title)
GUIDs
56
Filler GUID seed
new Random(299).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
112 · predicted N = 56 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 3
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

EE8437F7F5AD229F 799578125E97A7A9 78D101C506C3BA44 0F81DDE306EF0D5A 6788BE1B9A3FBB16 5130AB6FD8EB5E3A 06D0C6176530143E 7B37CCE930F9854F 9CEA94A3425841E8 A212C482C2B65185 3C930503211ED8CC 6813B042D2B20F23 7A3A886152B74EC1 0CEA4BE4C2F3720A 6F7D364B5006DE68 29FCB4FA2B73FD50 60D3EE05D807ADF0 54FAD01922AB3255 89D65A8E92AE2703 1DDF9BC904FE4BEF 0B1A3EAAB34B2203 0F8C0E1194CB23D1 AF03F200E13643DA 8BCA260068831FE6 2D020B0D021A1161 3A7ADCC044EF35E2 904E9106F54FE2A3 742BCEECF2309650 351BF319109E97CB D9E3F1EB506EEB63 9459AF791AA2E551 31A16C0C7B3EF69E F0705178E9FF6DD1 900EE4747F8565D1 9581E7BFDDE43315 B63F3D06F5DF1A69 05549F0B20077F94 6C1BF921F8DFDD01 114DDFC79F000C40 3DC4AE185BEFCAEF C41EC0B4AF8171F5 A05EBC1331A58D86 D81CCD85E49A97E3 329E80626FEE68E7 C1B8E1B57A2BD5A8 CB17C4ECF84C7096 2C1565A796907FCE FCB8DCCFFED1A4FD 7D9B2464799C5676 E44C26CC0BB70454 C54974DC7ACDFD46 96D865BFF938DF10 C2E2989A4944FEBE 08AD51881FE56EB1 A6AB3059866985D3 0F1482D7E365C23B 68B42718B582B0CD 3D663694A61A30A3 71E86BBCE3E7F3FE 3EFDC9B78CA2B136 F4F44FA1DF525FB2 EA29E356160251D8 99F8E3EF0AF8F000 4D055B64C6831B6E 19339B0F3F89DE44 3FC10B784DE4777D D1BF9A7CB1652627 F31C332B199E7A3C 9806B15FC65D45B6 20F19C868089162F B6BBEC543016C13B 3176468BE03B8356 B72EFCCC611F1DCB D8F097DE4DEDC68E 81B9E00F97506C39 09E4AF6EDD22FCA6 302B8A33B8F054CF 106ECEE3D164EE67 CBC910150FAD180F 9EF49395AF10A0C4 AAECDCED0E021FD8 8659F06B4051D97A 2A2EF0A2D68FC428 CB0E9E3106B27150 2F02156E8275A6F7 2091B7C23E577081 B5859A81CFC19D43 2043FC1DF1CA6B5B C6FF3415BBF8323B AD7B21532FC785B4 2C2B325D83E8AE23 39A535A1F76B0242 90AE4754897246B6 EFDA2A2574C9E0E4 F44609A03DDA80F4 87C13CB7CC8F3C5B 1BFB417697CF46B1 BCE4BC2B2F75F0A0 9463335087D63D16 4D9071AC77C8FB20 36B5456DF216F224 A4DA3E87DB83EB86 C755874F19A5434A 7531E885DBF7A1B7 421DE8B8E494B0E7 09864DDCFBE3E8C2 C93C2BE76EDF6DF1 1E0C3FC9E746A372 D5AA6797B3711C0B 8760881B2339B942 247E76197F401679 DCBFDEE475DA897D 0E146349F5B118A7 CEEC52DB0C63B092 3470AF76956EEF82 DFEAE293297A9827 787A3A044F33E9D0 ACFAAE44A5ED5444 55482D46FA49DE24 B66E6B2C2630AD66 0A24E8038E111CBC 249BE822BAD9F621 32F92370AF7E8472 F732625C7D6A2653 496134AC1DAC4B86 D9155CA4F41054A7 6A63427F3F6E9FB2 59CBC5D1B1AC6E15 96736456D66CB04A 76F9AC7ABA8B592F 32D946A3CA21E0DA 42F22376397579CB ADC0F7D0FD71F644 CE5737220ABFD612 B8133F77DB5AEF03 DDFFB42F04E2D29D 71CB1B6AF1CACF52 64BEB53837BC0AC5 26164D7E45822EA0 6833A3DC53319CE0 6AEA3A6D34178CE5 486C22B4181BD450 0EB3EA2D9CA7C649 4B73379C3BE55A68 048E18AB91C2AAA2 36EB9ABB58A59CF5 5FA34A557E7F6D49 5DF21EB88116180F 99AE090AAA54AA4F 46276D6F20C34048 FEAD7ABDAB429B13 47A4F104026C0BBA C0BD83F62A0D4DFB 10568FE94D6380D9 C93D0085FC64B272 070F2E23D777F2C2 AAE8A7C4CC4A6023 A53B66FF7691B00F 3D7FF8C7485DFFE8 3BFAB0A611E99706 4894A1FB73C63A87 BB8C87580C941AAF 9A845435A60047E7 63ACBA67ED2437C5 500113F008A296CF 4F8D1B27B952B56C 29142C1B4EEBAAAD 678A794CF58C4966 D9E8A0722CC970BE 5AB6D53E3CE01A9B F43FCE35ACA39871 10BF9E2B65E919DC 7F3005F87F8C206B 371BEC7BF3CE2C82 2EB1413CCD38A458 22CD8CFB7A1FC647 927849C0261133C8 7C6D63AFCDDC9F1A ADA4D38169B6D35E D821C31DAC60DBA4 99C8884489F8A41B E3DE226FD8C5ED0A 50DDFF1ED5292525 131BC17ED354FD5D 851D813F7649EE51 C5301D4CB26B6C16 BBDB738B56261D51 9D7AB68F899B977C 30167F633C8B59D0 CE289EECEE5A6EC0 0AD85FBCEC414F45 3511575D2E1CD015 4F9A41388C10FED2 000343DC6FB8E667 26A663CAEEE573C3 6A3140C2D07B87E1 DA155C9AC831DEAC 1FF51F785EFAFDB4 575F8CE99D4FC1E8 CA044C55B229FBC1 1F829C2FE2450500 B0697F0F42C0EF60 B1E719BDC334CE0F 8824B9401F186EBA 38AB58869E09A46A 71043D51F4625FF6 1F3A71BC0668E1DF 065EBA4DB054482F 305886EAFA6CDE14 D8ADE79D214D9EA5 79F8D7B68C53AD98 238DF5784B089287 423B00476D6EDAAB 564CEBBA381C9BA1 5283496F756F1BEC AB3A458ADC6EF6E5 AECB3337ACF8D988 EAF923C973F3A560 AC28C4B714A4EF8D 69BCC2EAFEDF2960 D2893514C288004E 96739B43E6C88203 97E5C95C024276C7 F34D4F1C943F3516 AB1EA5514AB3F745
  • Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307281500 (name+title). Key = MD5(password) = 6bcc13b72c7a8f102d8497f81130f74a, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 c4210cf4-88ea-8686-a825-170f132e16b7
  2 fef8f2af-81b9-4c24-99c0-b21043341ff7
  3 79ae29b2-fd0c-6df6-aa0e-79e87d1b36a9
  4 edd6b723-fa47-3912-9658-1263a32c57f0
  5 681073bc-4f08-1a9b-abd6-7387f92ccc3e
  6 2a0f2918-27a1-73f3-b91a-88bd574b5fcb
  7 3b88c64a-d09b-70db-ad9c-de81f6af891a
  8 eb7e3369-ab53-4aa6-af72-eed7fb7eaeee
  9 04884676-fe59-85c0-ab2b-46b8b9ab514d
 10 e29366b9-4625-4e6b-9f10-3ce0cabbdfed
 11 aea16837-4b94-5b97-ba05-e763f3717d0d
 12 7c47a323-3443-8c57-a7be-2e8fb7f482b2
 13 31a9fcf0-019f-1cdc-b807-38cc26c0986c
 14 6f172b4c-e3b0-04c5-8102-f9097eabbc4a
 15 d62cc282-4aa3-20c7-b3c2-f887079409af
 16 ec6b2845-9ea8-6630-973e-10156ba26639
 17 187689b6-4fe5-4c41-b9bb-e12dceed3584
 18 1bdaec77-bcee-3b19-9576-f6b2bc34a942
 19 5a810754-4d83-605e-9f65-22af9146568c
 20 26d56201-8a0e-081a-a2c8-3c9846849b74
 21 50e356e7-2372-4a11-b35a-6cbb01964d8c
 22 b020ea05-fbd0-11a1-8ef2-dc136c598b60
 23 2637454e-20a2-4eaf-97b0-e5e06d74947a
 24 7d43b1ef-f4c9-4bb5-b048-df4768f7180d
 25 05fb12e0-1dcc-0d43-a080-7b465f86cd93
 26 752ff4fb-66d8-7f8a-b099-8c61b2bb5660
 27 fa4d52f6-8046-0927-bffc-967fc86a9b8e
 28 cd26c84e-ff6a-8c7b-9194-840c0ba3fe9f
 29 f1330fd6-af34-1287-94df-d826d5186e4c
 30 66b1feb9-fecc-78cf-9d2e-bf8ec5273f99
 31 24a41239-749d-5616-b687-92038070cf35
 32 6bfbbc5f-f63e-1ef2-968e-1cfa8eedaf32
 33 709f33f0-393d-4f95-91e5-e0a42cca3356
 34 4707c651-3b03-46f6-b9aa-e069adf440f4
 35 a7565269-6e43-0b8d-9ad5-6c3e81889b1c
 36 56cf2533-6a82-6893-8c0d-820dd4f2b5de
 37 3e613960-df91-6897-878b-87b8dfe55ae0
 38 a47849ec-4bec-135f-8f9b-d109e20c0b93
 39 5a8472cb-6e92-4839-afe8-8104dccd88af
 40 83c649f6-5a4d-69d1-88d7-9880b9a6fbc2
 41 0924fad7-3ce9-07ff-b339-a8bd84bb787c
 42 8e211077-ba6d-7336-93f3-bca3e955079a
 43 076f10df-da27-1c22-b749-99b8a2c2c292
 44 2431d778-5711-086b-837f-fba5266297c0
 45 49762bca-6f65-43e6-b8b8-609bfeacf05f
 46 e5f27547-9dd6-07d0-8e34-48a5305308bc
 47 928a26cb-e4b0-0866-8008-814a0b1cd88c
 48 ff0d0cbb-1a1c-1c13-a8fc-17f97bd342dc
 49 b3b8a3af-f9a4-3fd2-a37f-a6d1f893d3f0
 50 f3fa77ad-d1de-68cf-af95-81367d1cff56
 51 de902d10-7abd-1776-831f-136e2150a590
 52 366e517a-ea5e-4641-bd7b-c6d15138c7bc
 53 2e5303f8-af62-88f4-aab2-918729827172
 54 aff19acd-2b93-387c-bd4d-2b94c1b3738f
 55 07df03c2-a363-0996-b50d-c8bf54951d15
 56 e16eb04b-84de-609c-a836-2363927c06af

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 84631774845810264360414407081751440661460710400136148306. Exactly this sequence comes out of new Random(299).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 112 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs