A858DE45F56D9BC9 archive

201307292100 1j9s3x

explained decrypted filler

seed 956

Metadata

Post ID
1j9s3x
Title
201307292100 → 2013-07-29 21:00 on A858's clock
Posted (UTC)
2013-07-29 12:00:57
Timezone
UTC+9 · title 21:00 against posted 12:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,320 hex characters · 1,160 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307292100) = 355b3e93d30df2149af07a4fa538802b (name+title)
GUIDs
36
Filler GUID seed
new Random(956).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
122 · predicted N = 36 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

9A23C998C5F3B09F 1858480CC87B5947 DB30E47A4436AA29 3F47740B263FE5EB 6EFF08DC8073BB5F D2723BCDA64984AC 4319D711AD27DE47 59F0A53F58C33A99 794C96D57B38DAB1 D0C1ED3FF1D67577 20B4943EB2791776 702B982DB52CCE5E 379220933F2ADA6A BC05B19602CFA29C 55E9009E7F0A89EC 3CDD03373DCC6B17 723A674A23BDD21D 47B4961466FCAC7E CF0FC97634D842E6 45799BB3F7C5A2A2 BA2D86B9A50CCB62 1942E9966C29C45C 0F68B3082F172FD8 8B70A6B60E2ADB71 B3EE3011FE796DBB A42D77D9C8EBAA65 937A4024352C5515 7BDEAA32A925B620 3C0E6EF3D717E766 F0C4D3EE2C192EAD 5AF6C051234ADAF3 76D0B7036977CBB6 D12B254D2A7E75C7 9DF78A2E9F016A5F E13370F2CF914A38 658A23C627663906 313C9F6F3DED0062 3ECD296A3C93227F 82D08BE6C2727E8B CC970C8DE31FB2A2 17F10361E1584BB2 899F812A31DE6B17 0CB9EF74EEB13AD1 F12A0A8AD17B8D8A C2B6429901FF2559 86F9664E58B6C84F AACECAD6B1E4BDAB 806105982F6DAC40 3C31803C152C4AF7 F6648DE5D53C6543 9F9EAD917531342A DB33604B92EC20A3 A0779FAC696FFFFA 79EEF334479EE6C4 AA7033FD8778B191 C074BA486C046614 5F237A198BE82668 2F9072012DE9683D FE36FDCC475394F3 3DA9C22E4C5C2952 34534BD849BAB418 BFC2C7B571798BE9 199F416A878D022B B2D5DF6F5CDECE52 4E7522DE8AE041AF 4314793270B219A1 6642865F23F78D6B 8B5FC0EB2FC2A2D8 4C00129A9319653E B0C3A9E36BC2A529 F2C24472667234B7 FCEE41C0C2AAC9CA 8AB2DD86E345BB7C 46EF0B2CC0F3F732 05BED5C7DEC123FC C3A79D109B8BE6B2 3E9CAC340F5F678A CCEEAD9A79A3754F 631DCE2DCD581E05 482A2D260E55E2F6 0684E34C6AF8CE5E 199CEE21CF498A0E FB517693E8C15CAF E940CB4C90D8AAD5 3AE1E13823BF9AA4 FD3E1263415D3A1A 3D3A5CA09C30EB52 4CAC72B32646DCB9 3107387A90B5D7B6 83C6A34BFDE0E92F D17E8855A15A0732 D17128CB08AEABB4 E2B5A61725C4D23E 1116244070B0F1BD DA75A6FDEF34E733 7ED80A747F87D252 2CC83D34F5144A95 7024ED78AD4F7C38 7D150C877AA2D5CF F9B415478DEBF2E4 C220BAB07B84DEF4 355F95A9C67DBF19 FE58F9EE679A9C96 C3562178C0E7BF3C 2ADED16CE7EBB8B8 639C5CAEA02ED7E7 58E45808EC8B0BFB 8C85A2029712C416 C37D95445F134ECD 4A40164741BE3809 034728B49E69A246 ED09A6AB526151BD C44E1DA72E13C5DF 3EECD7F85F3AF61D 9FF4A28C9739929A 89C92BC02FDF0B9A 3FE7C6AB87CE9415 ACC4BB81EFAB1461 756697DD5A923B03 C30596564F4FBEE9 95CF5EA0AE7F81F5 9E5A61876E7E8080 7247C25DAE670BD4 DDB6D9DBAF51ABF7 A03785EF7A378479 25FA9FB9655139D0 E5FD9CD2EC319265 82EB03033923FA4E E67E67E7DA6788EA AB40E2F9ACCD899A 1300E8B7F0561FCF 9038C226B19D71EA F13DB4A69B7933C3 B33900F2F0205961 775EDAE3A3D96BCC F2A633CB70007262 FF2EA3210C59E835 EE63CAA9EBFB01B0 B0C1BF3A9C83F4D3 A6DDD1DE1ED8FA4C 5D8ADD65B648D865 392DF053FC6A58F3 6EB68C2D66E23CD6 CA85898055141B45 AD0B05906FC563C3
  • Read the ciphertext. Strip whitespace: 2,320 hex characters = 1,160 bytes = 145 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307292100 (name+title). Key = MD5(password) = 355b3e93d30df2149af07a4fa538802b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 36 GUIDs as hex (shown below).

Decrypted: GUID list

  1 44c220d6-576f-1e73-b678-6a1fee53d227
  2 49038d0f-f855-289f-9e5d-96fc53e59642
  3 edf6e921-58dc-0847-ad19-6acb759cecd3
  4 5cbe57b0-3d31-58c7-ab52-661ab2c24eab
  5 0546220c-131d-781a-a407-2f02435e82e2
  6 be80db72-cdc5-07a5-a057-5d974608a7b5
  7 4eb97937-ab48-2284-9ac1-c05999d8d5bf
  8 be6f10c7-5683-0a73-b9fd-475b39c771e8
  9 eb25b08a-9885-2481-8791-3f1d948b3ba4
 10 35132b2c-12b1-79db-a0ad-c673cd5ed597
 11 619433f7-73ce-5399-a675-6d45f09876e9
 12 472c70e3-9cdd-7107-a421-ae131e617cbc
 13 ede22ca2-4dc2-7d36-a66b-67e513b65451
 14 59e2b052-e070-79fb-b198-89e39889fa19
 15 13eb7f18-e2c4-1c36-8bd7-73f8a5b60088
 16 548327fe-80b3-0a5c-8c53-3a91af447031
 17 ff7b6c82-5027-682e-9d33-7162c8cdb9f6
 18 b47d12a9-297f-6485-a2cb-dafe983956fb
 19 a206bf06-8a79-5783-8c40-7feff65f3409
 20 a5752454-5026-4e3b-bce0-91bc8992cf4f
 21 4a034dad-3b15-7390-ac61-ea7f34db60d3
 22 6660e3f4-7496-38c6-bfa0-cad6bdd16d98
 23 dd349a1a-9011-5532-b402-6bd2ff0c75ef
 24 984c2b5f-0c82-0e93-afd6-56f4cc6ff6a2
 25 83c9a29b-7ed1-3250-91f6-a32973ce27c2
 26 f1634870-a6b3-347b-8319-0fe3cecbe27e
 27 d56fb2d0-e42f-7b44-b02d-a48a91a25be3
 28 940c0a56-ffd7-0384-8ab5-b050bd58fdb2
 29 48d70f86-36a4-585c-8ac0-b12619a92160
 30 4f640581-9dd8-0740-9946-e50c522455ae
 31 79131fc6-eaf6-1589-a0b1-6d1203eebfda
 32 80621887-cbb3-20de-b4b5-e1761086cccf
 33 fedcaacf-7d46-68a0-b2ae-32a669654f6f
 34 7771dad4-7592-86be-bb8c-5cfa830719b6
 35 9df41a5d-42bf-4cf5-b8c9-9f5acdf07183
 36 71142963-9098-1d20-b576-ec68d8294c3e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 120570202757771066547350337050126841. Exactly this sequence comes out of new Random(956).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 122 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 36; the post has N = 36 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs