A858DE45F56D9BC9 archive

201307290000 1j7tum

explained decrypted filler

seed 948

Metadata

Post ID
1j7tum
Title
201307290000 → 2013-07-29 00:00 on A858's clock
Posted (UTC)
2013-07-28 15:00:58
Timezone
UTC+9 · title 00:00 against posted 15:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307290000) = 852ed2c5f3c5e46865b4650e52c2e254 (name+title)
GUIDs
36
Filler GUID seed
new Random(948).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
115 · predicted N = 36 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 2
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

6BBAF33E0C8209FA 82A112502273AD73 E132C7E46DE85E7C B60AC6D27FAC8E63 D2993CB918D20398 B604D66A7F3B4B95 6C9143B5CD284857 497C431489F3E49B 4044718A911191C1 29513DC71547EDCC 6B6CA15DBDFD14BD CF83B526CD545240 ADC14BA386258E6F FB7D0711ED24E839 C197710FF598A989 EFFB7F045C818816 588F53928222DD23 73CC319D6226698A 628128AC3F27C6C7 2738BEE39738966E 99DD10178849A6E8 B9925421563078E8 2F293BCBE4DDD9F7 423C68DACC0A35A7 31EDA7262DE5AECC B8D7D6095CE83639 3B806E68AA679AE4 1429301E4EB34C9E DFE49B1B4FE33F54 6CD1F662286F5994 EB7365D8E8E0DEAD CE96BD83118BC024 8CF6F28C0BB6D28F 2C10B83D8927E597 29A30D92956C83D4 0261355F92FCA8A1 B7394646F3C8BC37 A3DD6CFFDCA86D30 9AABB92D342C9AC1 1FDC947F0EAE20D1 056884AB6D08C2B3 71E6257CF57B4A5A 1A67F160AA64F5BE 538845E203CF2804 258B9B2530D87DC4 7672D451F9EBC805 B00C80D4E6613D03 2EBACABFA9788489 7F1318F5D0854098 130DDB8BA4999912 B0E699B30FBCEA46 FAEA75D4D930B6E9 C4DC164276BB1836 507B04AE7EFEDD70 594E39FE4B9E8732 B7C1C81D9F62856F B5FCD59981D2CA21 41F920C2B1C5B6CB 180E4E6CF3758EA1 8808274C50F7FEDB D6BD177C24BFC668 4E73FD0CEF54C953 DF4FCD39C745C4E6 A0BC420A7279A586 E0D248C294186E49 019CC5E7EA39CB0F E423D6DE65C7A071 2DA80ED36B357E0E 2206A98852B7CC29 4DE1EF7CFB7DD07C 6E0684C2F7868392 52C3D39EF1BFA906 BB8F216254F5AA31 EB0A8BAB90C76176 B3E7A2B761FC95EA 9B0ED64F56A2780E 7BF8FD18F7A86E7E 2C965C74860DD57D 94E6BF084E66E46F 5A39352EC9F999F2 1BD637857C7E2FBD AB553BA80EC06758 7DD4ECCD6372BD6A 0E32CF0602346B57 6DDAF824371593E7 6C592C0B039FD84C 0EAE4968CB83BA6F 2C5C440D719970E7 84F0FC1F33E594B9 F7C767BAC4BB8664 6A17972D2CBDACF0 02A72E30F1BA3E2B 6AFFEB78D0DCD7FC 33AF886CF79F2FDA 365ECE6FE8A6E5CE 52D1AFF5ABB68BCB 432ACCD2A17C86BC 8625F3CFE95EFC18 2353C6158988D76F 5D0CF321863B566C 6153BCC9E05BB76C 72AB2E2F7163A46F 7664E756561DDACC 8594A15417462D1B A446886A7894B4FD A292E887A55FB7B5 DB31730363847CD9 7B6A6530EE9E3F32 9CE5C80DE6210A57 7BE7CB422C75D8F7 0752745805E1C775 6B4269C600000412 91E2BCFA1D4E6469 3797AD83F45A2A9A 7F1947D3B2139A7C E0AE2764E4FDCECE 6FD0A357892AD2BF 27F1EC1AE6F91A4C 7A29100403A71D89 8748EA056F6256F7 9DE24E75A8AAFC6A 1B984B4041F3DCF8 1B45824B9A97F225 2702B44CE8D34ED2 FE81028B63BA3DB3 9D9014FFE182DBF4 FABDA8FB7663FC6E FE6854C25881BBD5 8546F4C3F2F87F86 B3EEDAFBE47BDF96 129ED33E1DD8A565 7C36371CC7C36EF9 222DD5DC4CB1F937 6854C0752F8F8641 ECE023749AEC7B65 BDFE00AFF67F45C7 49617243E3DD0753 9EEBCE15B9C723C1 C2DA4F379D0B24A1 F531CBFF72AECA0B A679ECBDAF38FD33 97FC2E3D7DE050FE F7985F3D36F8022F C75A3C53CC9C28D6 1C89DB3100F2CD01
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307290000 (name+title). Key = MD5(password) = 852ed2c5f3c5e46865b4650e52c2e254, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b7e2412a-8cb3-8ff4-8337-faab0b38e01c
  2 ad77acab-b3c7-8b63-b815-61279aba3247
  3 e50073c7-5fda-3720-8f5e-abee493fae3b
  4 764ee12b-3272-8a7f-823c-411357d488ba
  5 f3576e0f-05e0-1c6c-8069-d6180607d01c
  6 719988c9-74f3-094f-bd44-74631c19a91c
  7 51892ac9-8837-5c1e-ae31-6e8634409846
  8 ad0cf899-7cd2-0da9-abb7-0592babd2775
  9 e59c43cd-2674-2664-a45e-e233e82d7f5a
 10 13b11dd6-bf30-7095-97de-c884a7571072
 11 c8a198fa-d0ad-6de6-b60b-30a4fd786ec4
 12 648c0a1c-256b-543c-9ced-7569fe6e1624
 13 5f5f5043-5cdb-3ce9-ae2e-b172b3bb29b2
 14 17d47f95-e7a3-6954-9f16-a7acd25be2df
 15 c51af60b-6c27-4d6b-acaa-1b3ffe5d9374
 16 d6eb33c8-9b16-0959-b528-77ee07711fd0
 17 a5de57a3-a4cc-34ff-9424-a99ccda73b69
 18 e0974b0d-0276-6cf7-8640-2461606c55a6
 19 f573ddd6-0887-3920-b5a8-ffb98202111a
 20 35c6a24f-25d8-3e98-8526-d53279630eb1
 21 b730d3a0-aeab-754f-a6ff-6d66f83b21cf
 22 229ed501-7a06-3770-8178-fe2c88ba8294
 23 7ee1f0f4-1957-16e2-b8ac-9384c6a6f58c
 24 8fc83508-435a-1487-8d77-20170ede1ca6
 25 ce82d3d0-ffdc-5123-86e9-6511169b30d7
 26 d97975cd-f2b9-2a78-a187-7f21e7923744
 27 877fd607-4739-8ed2-b676-2e090db399e7
 28 08d584aa-b470-0f97-95bb-bc333101b9ca
 29 cc46e913-b21a-3be9-bad6-7ffb26a43c23
 30 7b610a75-b0a9-5a83-bff2-f1d45be9b2e7
 31 a8fb9fae-cf11-1d6d-ab45-0deef8703da3
 32 0b1674e8-135f-1885-bc07-bd637bc5a473
 33 e8dfcb8d-3565-430d-ac00-c815cd6b541a
 34 10487c76-deab-6ed9-a672-01af95fc60b4
 35 345ccef4-5bee-512e-b986-7b5c713ed0eb
 36 841f491c-b151-7059-a185-1051aaee57be

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 883810502765364036337311528035114657. Exactly this sequence comes out of new Random(948).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 115 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs