A858DE45F56D9BC9 archive

201308061806 1jtc8f

explained decrypted filler

seed 104

Metadata

Post ID
1jtc8f
Title
201308061806 → 2013-08-06 18:06 on A858's clock
Posted (UTC)
2013-08-06 15:06:59
Timezone
UTC+3 · title 18:06 against posted 15:06 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,600 hex characters · 1,800 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308061806) = bd102f72c36f75285c97a646aff5c037 (name+title)
GUIDs
56
Filler GUID seed
new Random(104).Next(9) ✓ verified
Run
Run 50 (seed 2,278,890) (seed)
Draw
6 · predicted N = 56 ✓
Machine boot
2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

4A864BB0C8A716F9 25F1B923F23D2C1C 51716D7E11CE75AC 60FC2D107A9D7006 004D5996A04AAA22 5454B1F7938EA6B3 13AF190355C16A2D 3949BF55927FB5C2 72587052FD49B462 1E36ADAFD70A7B3C 8FB1962BCD6D9315 763C50A5795D9385 6163B2AC7C6FD262 2457C36250C65D27 DF60CCB82EA0C080 041ACBD99E38F42F 652122956313C1BF FF0347203ECD2A55 FC5A7CB53946F115 F0D07D9124EAE739 0B522D7DC16D20AB 30F4FB5BD8EDF017 43D4BF6DAD1835C7 B56516B155F75CCF 306646F80C73B760 296955EA0557DBEA 1183FD678F87E649 B0AC591139D661AD 61BD416AEC4C5CC8 335D7E89B6E8C4CF 39991E5DFDDE3D39 248EB2257539EA3D DFE46A253C57C5EF 750420D7F165F56C 44FEE1E5ECB2863F BD1786DB7707B76D F07F0DFF58379A2A 3FCD11890CC2536C 14C134DB8EB756FF 46D8B0ABC6714B65 35B84F7EBC2D48EC 3DC324209080CC7A F70CA73CBF1288A7 729873286ABC9938 6CAABE7780579736 E021A36CEBD889EB 65FDAF6ACFD2A23E B9511E5B5E3D9337 F22F3D01B9E89655 C7FA47104A66827C 00D46DFBA8793EE8 6FA39D3BC707E764 F7619F7F2D06B18D 043C9803EBE84012 CE3DECDE7A46BD51 3E348E3797BB75E0 1C86AB36C6F419AF 2324FA6ABCFE6FB8 B35B39950386CB33 56915C9700EBBF25 81476706631F1453 D8DFD3D8C7E6FB42 7A5EC37C53DA4628 A02A41E24ED2DDC9 C28B86F61BCE08EF 5BB572DA596D625A 0A680A46257EF416 DC69EFC73F37E590 864C787B6CD27A5E C67414F85115650A 4FF65EF6B3D98639 5737359DFA7C2410 896DD52EE0C012BC A776E9A394109FCF 884626EF734A4C5D D736325656826E69 AC1217CF5475C15F 220166EF1F9E8EAA B0B739EC9BEA3169 4D07499B4D08CD13 DCA5FF156E48191E A54E4CE86F65337F 7AF0501879B135FD 5C8D78F821FD7B15 030BE0BC0E72D0A4 1D06AC80F37101D8 78760B1C481B7A73 5DE81EDECB68B140 6CDAD6ED9FB1311E 56A3B5AD0E19A16A 3F17AC53992A949D 963ACD9884D6BEE3 2B589D62425F4797 68A1E4B80705C9AC 813C5C6FC35C2FD0 BAD3CBA6ABF4363C BCC4FAADEB14A7F2 9B7D0F9FA91687DA 6D1AA687E7D6B790 660FB0DB5EF67822 C38C52538767097B BACD2EBF15462F37 60188A9D0CB7C6E9 73652130BC2C3D3D 3B7645AF32D84BFE 160FD589D25ED75A 3164B3FF512AEFB3 324A7041C3CBCEA6 60F9AB07DB61D341 25FDF7B56C01078A 90D87FA7FDDF5A56 52169AAB66819436 E20D508231FC3259 5B6E84F1BFDB9DDA 6EA15A90B4DB6772 9E1F3342949B4A2C 0EC3B1684ADC169A 896A378282C5C834 9B3D182E1FA05E12 7C597EC71551C3B5 41ABED3C1C574B95 32D40AFFD3021E1F 7085BB7C23B65D25 7D9AA458DE8A8DD4 B759FD4EC44DCD2A 8CF23A8C5AF224C4 F22722F9E4D116BF 017392C22B736FD7 1543664AC3B3C6E4 5506DAA8D04D9737 814C7B12D965443D 59868EA37E3C1DAA 25EC4E2004DF67E6 E4F15C56394F69F7 3732CA8DED5E43F6 F9D7889E1E3808E9 2661CD16DA9D9657 391DB4B67239F617 40A274ABD4884A72 B2551F8E94C3C957 29D0ED4D031B5038 871F6FC90B6A59A3 5ECC08F913D2651A 8E67C4DB0FF51280 5564D2ABA2E89A9A F4FA8BE83FDDD8A6 50BFCC6FB822ECDD BD8E159B4A96404C 351BB5904C87FA2C 207480D2A09AFA45 32BBE4C979A6138E 07ECFD3ADE79B97A FE38429EB2BE8946 EBFF1B89FF1EA7CF 4D1C071C5C6E8BE8 8CE62292C118465B D405925D14D32E5E 4C4F098D3B36B5E6 8C40DE4D8F3DED99 B69230ECB2CE8FD5 53A0D228B5598FEE 8BDB2A025F62146E FC8C8517A741BBC2 D064E0782D53F216 3E6B6CF5C1C1B374 970E10727F1015F3 0134A5A4F5FBE0AE E81C809EB3F9B1DC 3CE278E5ACE4D502 1D70BC9E90464975 2E05E44359FC074F A90C53949C0B279F 9BC3EFE43BB97358 FBBC8CC16F1BC552 9580B3D50DDD5FAC FA00CD409E13AF4B 4215530F12899EAE 4E0EF8DD8307ACF3 F695D5F5E2539236 52A7441144BA481E DBBAB2F810CFE36C 3BB3E8B51A5D11FB 050A0AFDFC00BB5F BA7A798F73D3B698 63574C3644505FFC EA325CD326505F5A 9D6D444704F6C539 8BA67B884A6E1DCF 07FF8A527E4915A5 765CC03B293D8F48 13699836CA5900F1 547F02046C080CBB 347666879757A42A 9B015C764E8306D7 7E61D1619B7D7704 9853D98A170BC1B7 43A5721FA820D8E5 41C8CE282D9E7BDE 29FEEE6F1BE127E7 2E08F56A2D3D758A BDE76E496053798C A3D751E8C8F56E0D 331DFE3A03DAA8D3 0FBE2D8B3ABC05D1 5EF2840B7FA63C6B F76E3EB014D415F0 E1F4239B4EE4B616 D66519529D0B0491 667E6B3352D7C974 011F1D6A00DE3940 3CE0ADEEF1113B58 9DF54FD2769344E4 D6F7C179CFE258B7 2132D9CC4CFD1456 73200A1B83F9FB64 538D6702A34BA3EE 7A61E8C312E742B4 0C2B18EADC1F6FA5 51BA6B7E3CF6664B B9409DC6121A8B0B 2DC0D8A871DB80A4 498C37DF4CBC6F5E 23A60531088C7577 65F6C2C5719D9D3B 096F6E370A513B6C
  • Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308061806 (name+title). Key = MD5(password) = bd102f72c36f75285c97a646aff5c037, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 02a7c685-5be8-0ef2-8368-89dab9bd6da6
  2 4ed8eb3c-caa8-2e6c-acb3-7f09f7c707af
  3 1d46aae2-8bf3-424b-b9b1-a3793d663d2e
  4 76fe147f-3297-6708-ae88-368683d24f51
  5 29627106-49d5-1b4f-9835-02cd795479fb
  6 6b845d0f-b4f6-3d55-8720-a503286e429f
  7 e54ed6e6-cd5c-4574-aead-9fe5394005df
  8 addc2885-86bd-5849-81a3-cbae469b97c5
  9 faaaaed8-e198-768a-ac1a-389999d7e391
 10 44e2d696-fb50-50ef-9d41-4c1e87e1e3d0
 11 a718b711-906f-8362-9d31-2c6cd0acb047
 12 a8d11e03-719b-5c31-8af6-bbf08be05a42
 13 36d63062-4069-1620-9253-e922f03785cc
 14 300be8ce-840f-5a66-88e4-f5c15685c47a
 15 914aa034-f56d-7120-809f-cc9f528140ee
 16 87266b1f-36e3-898a-b563-0c901464b601
 17 ea841efb-3324-57ad-8443-bec0100554fc
 18 9b42f087-42e3-4fe1-aa3e-be3e7f060d56
 19 04a8e00a-bf0d-4ccc-bc54-65f4c5183695
 20 0337b2f2-62a9-5a94-8e69-2f88eb25622b
 21 b267e36e-df46-575a-a67f-a011d421cb5e
 22 ad17d539-9513-3a0c-a9dc-1ed8e7a7ed04
 23 19206f4b-04ce-5db1-b114-4892a4ccff8c
 24 398f2b8f-0a92-368f-ae23-4ec936c481a3
 25 1dc48b4e-1e3d-881f-90ad-697ea2726a59
 26 1198ea63-d9d5-3bf3-af9d-853a65c34e50
 27 e9863e96-5fed-3936-8bf2-c58f9ebeb7a8
 28 91fff3db-5319-1b00-97ab-9e9d9402a361
 29 e0d5f8cd-ca55-2dd2-81f2-648ede6fac94
 30 d5a73054-8674-745f-b7f4-9ec04d0f82f0
 31 43654249-6cae-5393-b968-c9eec110d185
 32 dcfb6330-b301-765a-ae20-843f46aa947b
 33 b618bd88-3182-10df-82dc-b58e9f3afd8d
 34 75e2a995-8f28-5c99-b419-b55b5a1153a3
 35 ded35d58-5ae3-8097-93ac-bd0bbc0a9f3d
 36 e8d24d48-6de3-2c1c-8d61-06fc3091db3d
 37 2b61a6e6-2281-14ec-b655-68cc873b1afe
 38 0c627953-7b12-2f03-9e94-78b31c92a938
 39 bc283606-135e-11d4-acad-bda86840a5d6
 40 2c7209f4-b99e-0d59-ace1-523feed1e2aa
 41 c7fe1e2d-3e10-3e46-9865-c79729ad348f
 42 0a543c30-c401-573d-9d7d-e444c527fdca
 43 4eec343f-88f7-5ea4-be29-561acdea1c0f
 44 6ef3b3c4-d27f-062c-a8bb-c52b34508aa5
 45 f8d3a572-e86c-62b4-bfb1-7d060e650266
 46 efc7a572-8245-3287-8e98-15096c3e99e4
 47 db8454ee-0892-695e-b252-3c426e4ee4ad
 48 fed6220d-7176-094c-8173-d3358775d2bb
 49 5cc9d6de-805e-2d7a-9743-f49fa070e34b
 50 e5259934-ed66-829f-8f78-5d78cef774bd
 51 25a0207e-fa3c-4418-8053-1c9e8d840f59
 52 fd540e98-4638-502d-996e-c5f9ce84d453
 53 9044b9df-ce62-1c87-9f13-19790da7b0c9
 54 2c1be436-f663-684d-bf13-aff4e05ba6c4
 55 ce799e18-d104-0d99-b7fe-66a1c3cd5fb2
 56 c22823cc-febd-6bfc-ac67-72946534985a

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 02461345758515785445535383312757158212103550636028451606. Exactly this sequence comes out of new Random(104).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 6 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs