A858DE45F56D9BC9 archive

201308010300 1jfooo

explained decrypted filler

seed 211

Metadata

Post ID
1jfooo
Title
201308010300 → 2013-08-01 03:00 on A858's clock
Posted (UTC)
2013-07-31 18:00:54
Timezone
UTC+9 · title 03:00 against posted 18:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308010300) = b75c3908f9b9250b21fe968342a0df8d (name+title)
GUIDs
40
Filler GUID seed
new Random(211).Next(9) ✓ verified
Run
Run 49 (seed 822,652,546) (seed)
Draw
140 · predicted N = 40 ✓
Machine boot
2013-07-10 11:27–11:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 1
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

A914EBF2CAC5E1D5 396EDBC8236EC241 3231BAA519EA3AA6 4B53CBC4435556D5 05C58580AC87A76C B285F161F56D357C 9D8F5A912091998E DCB535E8A5FAD025 F465099A73A60E29 DA9704E761CD148B E9EBDC1EEECF930E E6C21C7313AB48E8 7EE0BF577928B372 45E8656A7BAD651F F2CA9213FC949C41 FCB98E35F9579691 47C815CF37B9E123 E0787F5DC59119F6 85CC036BAA937C4A 59C2D538BB7ED7AD F250874E9B70F4DB 734018AA0406220F 0D2A4736E0CD48DC 3E4E6E21602BA8CE D25CB741D7263405 24DF15CDD9EFAB57 07A0AB217D3E8510 0B45D6BCCCEB968E 4AB38039CDCF6BFB 6A5BE8ADEA0DF8C8 D22CED022C9A6B89 4EF4B7142B89D8F7 FF49CDD7706AEE91 38B9FF6302ADD242 3F679729AAE3F7A3 3ADFDB2241FFDF8F 4125F499A3DB855D 3996695A328CBE42 9C8F54ECC28E2BB1 83782E8B01DDCB31 037713D854CEBAB2 D10F763E8E973951 05BFC080ED916CE8 4CF0E6CFF97E7B1B E29FF78DE57E54B0 E8CC1CC755937340 E384BA21AF5696F7 5A24134147A2BB6C D58D4C18DC96CC80 341F79F54C7E9556 4F3FCBAD02D9F605 BA9497DFEB1C16F5 826E13B3023746EC EDE70F2E8CF2D1D0 0E3A4A5E72F85352 1E7B0A7C13F94A43 608F87A2CBFC220B 8630994300024E9E 1D09B54A8D9D4A48 A70F3A0B53E2C26E A3EB89C07BB2B17B 893FBDF6BF095072 D5F538C878996514 DBD779C3E7C449AA DDB953B98169AFF1 9C49A8CDBB38CCA5 A640E5A16DA0A6B3 4C72E4FB77C3070F F9981049781B5BA6 A77B148DE3A40C3A 0D9DBCD1E9608F7C B834D9D8C9E7A487 A01A2371D82C1381 52DB3EF2FA6C1C2A B1E698ED6257E413 E58E9A35654701BB 8079C29BD7F4C73D C307FD9992099A72 9193589454DE028E 73BD8F0A23A8A44B 05CEDCC3577A6AB7 3A9853EB8125750D E8CC68409C2E7533 838A16BD8A7F1C96 B40A163FD2DADF52 1FB696AE5872A5D4 0906D6DC92A98BC0 A26350D4B5290975 4062A43EE2BB19F4 C1C6B1DB7270C7AD 0D551731CC776CB1 0B1732E1C3866BC5 430347AA5EEC3735 F2268B3DAEE27935 A69F621C6CFDF00B 66A36C2289FA2969 B02F255CD359ACE1 752E6CDF6B373429 CDB1361984954C83 39B67BDBF7E5C6C7 8FBAA5B699683A4B 3E869012433FFDE4 3A38AFA67CA004BF 58A89698F427E14A A883287CD36934CE 207CE218E0CD5258 9E80CCE064C3A904 ADC14CBFC6107D82 99B1222A2DE358FD 315100CDE4EA4F3A 92FC929AD3ECFFC1 50FA4C3AF45FF8D4 C6EB98C6CE0455F6 CC65082C4FC2E3EF 9D32C4B39C3452A6 33092EE69A38D5A0 A484B2468C7B6E9C 42D642E0BE5A338A 9455ED962DC54C3B FACF12EE3517380B 17168D9262E84542 B5F98D5A4F8BABC1 F7227BE93C01D0F0 8EA26F3EBBC2D195 221E09331967781B 3C2481EB29C4FF2B 55E784B2B757B1E2 87AA6F400E983DC8 9D18B1E7F4402469 1FF8FF57605A82AA FC7BF7C8899F7ECD F795A8A89B598CA9 022BACC98F78413B 9CD7982E84EEBD7A 3020D52CAD7626D3 D9023CDA29A26AC2 A11D660111642D45 7F5572363C17B712 86F8BD0D17BA7DEA 95193D7880E6E70D B1D1502EAB41E795 A9F5448FDE26BD1D 93B597E1FA75920E D092DDD674E12498 CE0527BB7EC1F77D A749E5BA30B2631F A238A30CA246B850 EC9DFBEF5A2A6C9C 4D5349D008D8AEDA F2788AC17335D93C 6A60BBEFA39485B3 DBA34BE9709CF242 19905FBBE30210D9 EF9751B1316D18A3 226F8E389CC3B7CA 0F146E1C4528295E 05A4149CA1B01DF6 CE5BE08F3AB9CCEE F4589C9D8AE9157A 24CF527E888A4123 D508AF4DDD176937
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308010300 (name+title). Key = MD5(password) = b75c3908f9b9250b21fe968342a0df8d, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 87895bbc-b7c9-8093-bb58-b1e434932bed
  2 02671301-ea9e-6c70-9763-0d65d238e18c
  3 bd2d74c2-52df-27fa-8267-a51648a585b5
  4 690f2960-405e-5ab2-90a7-8b849b49cdcb
  5 56a1fa94-fa8e-40e1-b996-c1dc574615cd
  6 5ca4d098-a50e-8cb3-98ff-f7ef349c97ad
  7 1475b673-1bc7-4e75-a658-dd54c13668d7
  8 983ffcab-d77c-2d0f-ae90-2ee04edd258f
  9 155f49c4-993f-0d2e-ad66-c8d1734aea0a
 10 63e79a37-582c-0c5f-901a-6092617b4cbb
 11 b482b38a-ff8e-6538-bfd0-d9c4c15466b4
 12 2c3517e0-4270-1a0f-b7f6-1ea2935befb6
 13 79371296-0201-6941-ba0a-57d46a5def13
 14 3974136b-5569-25f5-b630-626c811ba220
 15 79fd8943-db16-6f71-ab8b-0a4ade37cf6d
 16 a829e139-9c47-7f69-a00d-fc31c0d89015
 17 f42bc6f8-aa23-59b3-a33f-41a0337eb76d
 18 4248ba69-5c77-7d90-bf10-42d31a12dffd
 19 ce02f895-ac58-310c-ba11-0c28420741eb
 20 9bac118e-b1fa-017a-bb5b-9ff8d0d0ed66
 21 05c411df-c7b7-706d-948e-fbfe0acd9f54
 22 6035dd0b-541a-5f61-bb5e-49f2c3934190
 23 3a2ab722-7499-51a2-874e-9f4034ff3df5
 24 7951582a-ee16-6d9a-9441-c8510e1142b7
 25 3717f9cf-99df-3894-9717-6a24ad502429
 26 24226934-29cf-2553-ac33-2b51ab8101a3
 27 c051c3b2-f8d9-3691-a285-7c97464bfc2e
 28 01fa2f74-5081-346e-89d6-4ed4551e0316
 29 7e4eb0bb-cd0c-7797-9ae5-398a332182e2
 30 8e1f7783-f4c2-070d-94cd-beb18a72d0d5
 31 d84284ed-a496-0c80-aeff-e953906e0996
 32 39a2dd67-7ddc-0119-9c3f-7ab342f1b65d
 33 7a1d0c77-eff2-1314-b543-bfcf061ecc5d
 34 5199f280-4a0b-206a-a254-f884233eec50
 35 966eed5a-78a3-2a6b-8420-380ed57ca937
 36 d7f8d1d3-890f-8bc4-a5c2-4c9cc1b80c51
 37 acdda1ee-da9e-7a61-96e4-9b1c87e11299
 38 03c3d799-62ff-1d2c-a054-c3f5075e0a00
 39 5152c581-6ced-42fd-b447-9cde9a52fb0d
 40 c50820f2-fa90-6b06-bad4-dc5823304dea

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8625484200616267573075563233700012287146. Exactly this sequence comes out of new Random(211).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 140 of Run 49 (seed 822,652,546): new Random(822652546), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-07-10 11:27–11:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs