A858DE45F56D9BC9 archive

201307301500 1jbze7

explained decrypted filler

seed 62

Metadata

Post ID
1jbze7
Title
201307301500 → 2013-07-30 15:00 on A858's clock
Posted (UTC)
2013-07-30 06:00:56
Timezone
UTC+9 · title 15:00 against posted 06:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201307301500) = 3b05e88650751bd13882203c2920b416 (name+title)
GUIDs
40
Filler GUID seed
new Random(62).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
128 · predicted N = 40 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

016F95045BACB7D5 39309573A0DC51CD 13DD8736EEE2E19F DCF94B9B93EEFFEE 63954A02EA8220A6 843B7EA577876FD3 B11EFF5DAF24BDFE BDC23C26F0C7E730 849D908661753127 71ADF627622A104C D596ADA316CEFA7F B8C76080ACA0CF7F CE156E0D911C5794 74E16D15EF8DE37A 3DFA9806709F6C70 5C3ABAE922CE0839 AA76B6D82E6E0A03 6C36B85509864709 464F4E1E9E3D832A D384878DAAF9E61D C9D0B23452D23692 6E860D0D42027D66 663F17C592D50817 AA7D244DEBAFACD2 96B13DB528355F25 4A5A45DCF4F8316D 2550C49E2A144E8D CB95A35A35D4695E 98E0D7BAFC951FB8 330097572D82D065 3D52FA4264A18F36 5E39F4A36E2F44BC C9296F66A40E9FCC C250797571811891 4A4AE9BF820F2A7E 8911BF8086ABE007 E5F4F63DE183659E AE03109F897F31CD 141046446547D08F 76EA3442D4A73D0F 6E299A88E38FB052 6D7F6E63EE810106 AE87E3ED606E90C7 1857389A6FA843CF E5602091EE9F6F01 B3665B813B75B22D 6FB15850F32146E8 FDAB1F709A97DC4C 6950D978E13AAC9B 255BF8F0EF86A902 AA0D662F2010143C AE41F68471C848A6 5694A017C7AC4FE8 620DEA14E65DF479 8C70CFF8D167CEE4 98A977A342D76312 22759C9F00F9C191 62FC2A7AC57F7B77 835E8D1D72C83601 50F8AECFCBEE7E3B D533E703154CE975 A26F20D0B259657D B3896698A5C5CD6B 8CF6FC461BD6AA29 D5B5582D052CFD44 EB1CB15943F94849 2AF5F0988566B976 849B564D89342883 3DF697CC78D4B1C1 82A47F26F889F15A 734CD2A8024B3A9A 2E5C1FE56293E98A 53444DFB6F9A3494 9B41B4C8056AD28B 5CE036922C582971 64B3AA9D951636BA 29245CDEC54AC49C B3450770340F186B 4C1B2EFB5239C4AD 29D0F5FC0E536C31 E6D028E2F255A2BF EF445D407AE159E5 0242C74689B54C92 F959FB1BAA34DC6B CAAE452680D5D808 484C10CE5F080E14 394A7BA485D726D1 74C37E08C80D6406 E02BAB4829B6FE66 F78DF712D2052774 13FEED80A2E32D1C 46EB31870925F8C2 D72A0407F1D867F9 2FA49A00681F5F42 8DA36322629A71AB C39F10811F51BEA2 761BFBD1DCA703C4 334C9E123C1D2FD0 C20862862CAF87BF 202C4DEB98237F51 CDDBC0B4F01065C9 268C5FD113448013 1D813A149596E5C0 270F47CDA2BC4456 137F9FB8C655357B 8E07BA3A7BA8AEC2 A125813C3C107A58 AFCC243010D33229 30A6AC31EFBB53C1 DF290758C34A8497 AC6D6E7157A9C8AF E70D99D7B4CE3F23 AB8F1CA5818E9BC2 51542FC840BFC56E 6F739D3AA7455333 C4CBD6D997739256 9BD51F8065CED709 9517607A0E9A3010 A6DFD980E57F181D FE6346CCF4C23E8F 7C429855F5674B4D 5AC859E6F30172C4 865B92C03489DE76 4BEA7364853700D3 635AC5062AF48EB2 3B096DCC48BFC8C3 A86ED59ECC62CEF0 084B3827F2BC9A0B ABE0AD6D9D309F13 F93B97C70C8623B6 AD879DD7C19C8A79 8026D00DD6B6BC3C 57C9E1BF0AE64C9B 59D3EEDDFC619C0F 2A16F1FCB4874F02 08B25C69E3D58DE2 7AE61450B1CCDAFC 03F3AE87800F26DD 1EB99F89DF50E3E7 1D67507698343116 E1D0CC72051192AC 73734B97EED76AD7 6F6027AD4FA7321B 693207236FFACE77 4BD2CA4A6AFD56B0 73F83EC5BA1F84AB 27C8E3DD80DD6F23 F8CA06CF99B06A1A B1C57973CE9E264A FA3D0BC12AC30647 BACD0E13629E5102 86AC6F0D143E335C 6177BF09EFCABBF9 119A6D7F2A25BF7E AFB01DB950EFA3D2 F66C48E8E0BBA6CA 56A82D578E38C85E 3A76E4DD482A0A87 BA797450567E0D8A 307B165B1DBD0328 3442913A089C5631
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201307301500 (name+title). Key = MD5(password) = 3b05e88650751bd13882203c2920b416, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b8be3f0c-54e5-1894-819d-4a957f7ec16c
  2 8c65da52-44fb-096f-9e58-9c0752d95338
  3 b89144ce-2ac3-0b9c-8933-80318ef2e2c1
  4 4f9f693e-5b83-7cfc-8655-be21d1a93027
  5 170d11f0-f2cc-1007-80fe-bb1e65c66b4e
  6 8fa3bd1d-1d3e-6e61-bf04-8ec99ea83ea1
  7 be1fe115-4dc2-6902-9ff6-c65ab2cb46c7
  8 17558ca1-368d-4b72-b242-8b2edc806b6c
  9 8f0aca3e-16a5-5c69-be23-0dc8b74e9a2b
 10 a59f7646-9f37-1400-b6b8-80887efe91c2
 11 875f41b7-1b9a-8b28-ad4e-ac4df3af64b3
 12 76165824-b0ea-7b6d-854e-de359dabbe65
 13 fd166d6c-2efc-28b7-aa83-17483c694052
 14 62801d64-424f-6121-8397-d489c0f2d6ac
 15 94caa0aa-9759-380d-a775-c01080545482
 16 1e8755c3-6c47-6f56-b306-121c21dd7980
 17 6bf19993-9fcb-832a-accd-8f2b98a073f6
 18 caf6a625-dc49-3e14-b9f2-fedaed0ced19
 19 6948fa9f-bd96-3e08-b13b-8e2927d4d50d
 20 e5ca526a-997a-2868-be25-9c455816268a
 21 72303441-9ef7-0609-accd-5260ced5abef
 22 dd058069-c512-0ea3-8a26-85f2243923de
 23 dbe67905-5c9f-440f-b1ba-71d3237b5a18
 24 5dd3b0d7-eec1-6cb4-8da2-f1144857efe9
 25 6d04c624-c209-676f-aa60-c4ac1a737f4c
 26 682273db-d56f-324e-a369-c9076a97d96e
 27 7ba8af57-4575-2456-8648-bf8a6cd96228
 28 535f4130-e18d-0168-8ea1-3645dee27d63
 29 ad8f66cc-c800-6867-88e3-a2b03d44a4a3
 30 fb9cc28c-4f23-0b87-beb3-9a9b1c81762e
 31 6f997fbd-463f-0479-8bfd-85fdc5a088db
 32 ccf02d18-6ea0-70e0-a6c6-c0be2197c98f
 33 d0655729-2ace-2097-aa97-773218879ce2
 34 54e3e254-ae2e-48e5-b1ba-774d4a6afbe1
 35 334dff01-1f90-214b-af8e-e73380633de6
 36 3a63bb2d-a094-43c3-983d-9fbda16875a0
 37 5a03cb43-1bf8-3795-bc8d-920c6bbc5fc0
 38 fd7489b0-2a33-5431-87f8-8a891f6df6b7
 39 222f6a50-f988-8813-965d-1fec12f4ead1
 40 3207834a-c247-1659-be57-d9104e948092

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1007166451872636833200466320600724243581. Exactly this sequence comes out of new Random(62).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 128 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs