A858DE45F56D9BC9 archive

201307301200 1jbnsj

explained decrypted filler

seed 138

Metadata

Post ID
1jbnsj
Title
201307301200 → 2013-07-30 12:00 on A858's clock
Posted (UTC)
2013-07-30 03:00:56
Timezone
UTC+9 · title 12:00 against posted 03:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307301200) = a3a28ff47487dfb08dfff8bd6c7f3d4f (name+title)
GUIDs
40
Filler GUID seed
new Random(138).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
127 · predicted N = 40 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
8 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

0F8BC78D105BCA7E 0299523B84B4AA2F 593FAE26390114C2 E75E52B2B0540911 C7DD0EC137CDEF6C 09C3E1DA1A84B2FA 42DF890E368F29DD 072E8EE06AD12925 D303100F20AA7D3A 496D66F23E60F25C 98A5070EF14C56C2 534B4A19F8BB6CDB 41EF04B91D6A7C12 64F38C1E781B517A 4885F888703BC4F5 0F9090BC8981AC90 4825EBAC072F5E65 E8369AF5FCECF16F AE9749E256BBB074 6926EEF5074045FD EB9AD9E22C79470F 57AC9A05C67B3DEF AFEAF81FC9438527 10A0D665539007E6 7EEF1EF597C203AF 833BC7070CE9D325 216AEC483A72762C 96D8933379017AC4 986D1F4E06AEC8AD 8ECE512B0FB95644 31D98E9ED3FFB41F 365001E93687CBB7 2B3EA0975ED8C678 8F4585CD4D066B79 19310493666816ED 35F788B5180A1BF9 F92F94E975C4103C 51695CC4C3C38313 DB0CD0F1423ABE05 75F95601F809B341 CE544851CC9022E5 D23815EE598CDF9F 5A6732175C7A2C5F 6FAB327FE479F3FB 708B4D6615C067B0 C12025D835BEDB1F A48E2FE234F3A298 BC83B205C01227EB 078B29B728062A01 9F657AC4842BBB84 8941D58EAE96EB2C 89F1E551422DBBCC 19B79BC9C1533BC8 FF934A64BA50CB08 1AD564550DA02A18 41C7879521F45B2C 532C02E19DD9D4FF 24B55B897A9ADE01 E3CCB56F8B258B0B D274883C464F909D DA70EC7CE78AF304 EA2097E3E03D0348 C15FA15AB1983AC4 32194C240C82C6C0 819A3488872EFC6D 3CCE61C2F790AC44 4BABA1FA23B3D065 92B516863658EC90 7870F32F974C2293 2069FE772539159E 0050036041D30A4E 665EBA86F3A46820 EAA9E76D2C9DE1C4 902248DB869A92C4 E6F304B8F7402E9A 1B39AE411BFFC9C8 17EE9A3354BCAC16 078FE7BDD4B029AB 6DBDC161DE8908C0 5E79DB7A205399ED 287159275742E9E9 5F2CEA43ECC0F617 9C7FD9BB482A7DDE 8001D14DA31FFF8E 847F3CFF51E4460F 2E5D0FAB713BB99D 5B3B86CCCCD39788 9867B0D96A0BBC86 6A7893B270604A06 BAF57A550A0A6943 E52D8B451F9437A6 987438B1B3D7C2F1 FA92DED44ADF9247 88E798EE733950BC E3500C5686ADCB3E BEF598A33972B91C 29FA06F3CFA1DC18 1CB94AA0533BE760 9E4B9ED69772F59B 5308668B9DB0586A 708C2A71C97AB05B 622BC7B70154664F 99F1170A2E3BCF12 EA68362FB7FFB187 704A5ACA96552CFF 0837473EADECBA17 1655A8B51ECC3776 DC4652B8A7400018 59FD1C15F4652EF5 25DA3DDB0C263D60 47D744C174ED53E6 B4F935481F8E33E8 DF91A229C4034638 71CA909CEB21FE45 FAF9D898A03AB722 4D4E143C7C778D43 034EC84F40BDBC15 43F212E48FD89A9B 2DA45A3C43DC190C 33ECB9D73F958D5C 808A2B05A2125300 7829F8099DEDBC43 F59133D7F98CDD39 EB0F0659EC8AB948 D053FD422135BE95 FBBAF768A40F7C6C 2D88D6D68FA68205 F132549B5A570A48 28AEC451851E548F DF321553497BA44D F97F6FB57A67F0CD 5CCB974FD921ADD2 1ADD621CA159A457 6F16C0F3C9C35B9C 510AFAF0B977A0BB F7901F4F1D4E464F DA25E9EC901E898E 67F2801E3108D48E 0452036090BCC733 571035E1D3921B1D FE89FF031219E58E 7C999E7D6F02CA0B EF7DDE58A1F57F50 C6A49CB922D00003 FB859F58A40BBEE8 268F239790E3338D 320F98C2E5621C3C 29A08C37FD060CE3 248FCECB8C7B0E95 7512AAF5B45F74ED 55342A565B1AE19E F3390C1208A4CCF3 4A675466C4937FF5 ED017FB04A87BC1C 751C38F9C975C501 68B70DFE085170F4 F9E9688157F66649 F9ED6F884BBF9AA1 57E49FA4BBABE08F F58D8194036C4D9D F2AFE4817416F481
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307301200 (name+title). Key = MD5(password) = a3a28ff47487dfb08dfff8bd6c7f3d4f, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 1280264a-8962-7c95-af2e-46e8b2338b82
  2 75bf55b4-b6f0-2706-991e-105f2e44f2bf
  3 9b53639b-ad6d-212f-bc51-6f7eae10882b
  4 92936696-9651-0486-a927-d7ed3381c83f
  5 adcc5cad-1152-4d27-abbe-88a7a0eaa3a1
  6 98ef7731-6c61-1225-84be-ab98ce9b10f4
  7 48f8eb74-a38b-6e75-8012-f1a87846ac59
  8 b2c0b0ce-ea72-6839-9e2e-43be1e61cacf
  9 d2a3990f-8c86-0a86-a6b3-695c30414caf
 10 69620b9f-4400-178e-b5ab-632f2025279f
 11 ee02a414-95d6-83fa-a10c-7fce38a5d227
 12 ec7ff1c7-0130-1771-a38f-2eac20cfc46a
 13 6b502378-56a8-4dea-8d9b-ab6dda980a0a
 14 dbbf72cb-7b6b-2f5f-8914-efda1aefda9b
 15 0006c225-e10d-5c1a-9069-002dcee1e0ec
 16 227e2896-36a4-1cb9-8441-cf17b39d7e8f
 17 83f4cfa2-81fa-7cd6-b5e9-55e139040bea
 18 c24ee733-2e9c-4fa1-b848-b9210379126f
 19 e5b23db9-df06-3f69-bae5-8380851ab2fe
 20 05238ec3-1a8c-6783-93ed-86ee8cc82191
 21 bb97669c-563e-1bd7-a4cb-4afd74962acd
 22 269e72b3-bcff-692a-8af5-a7afcdca0c9a
 23 fcf955b0-95ca-2600-a809-bded93da084b
 24 3117b04b-b0bf-2fbe-98a6-acd1d74f42a4
 25 b98fdd7a-645a-2eef-9653-20ee1551e489
 26 3d1c499a-e58b-2e01-a278-4b68df5f39e6
 27 8b052fcd-a1c9-5d57-b5fd-ec8bbfc2bcae
 28 87b66c42-48e0-1c1a-b32e-e78000cff3fb
 29 2afc1882-9997-50de-9c84-8b10401f04d6
 30 e23289ef-55a7-15bb-aaef-2e5cf316c16c
 31 63aa2b1e-d943-1e9d-b942-87322ce6276c
 32 4189259f-0024-782e-8327-19dc89e3d292
 33 f879ca64-bcd6-7591-a9d4-9ccc0307c135
 34 28e22ef9-dc09-40f5-b8dd-e0d203a0ac50
 35 8affec41-4a50-7286-be9b-00935a259315
 36 c604b1e5-996c-6109-b2be-0dc5ceb7fb90
 37 6b86da48-0b16-3e4a-abcd-2307f6a9109e
 38 a6535e99-bb9e-350e-9266-ab103c540677
 39 abeac54e-5be5-8a6b-896a-3d344be060f1
 40 41c2df06-4423-2487-bb47-e87de4b20f3f

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7220416601814251743616222251511774763382. Exactly this sequence comes out of new Random(138).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 127 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs