A858DE45F56D9BC9 archive

201308091506 1k0rib

explained decrypted filler

seed 828

Metadata

Post ID
1k0rib
Title
201308091506 → 2013-08-09 15:06 on A858's clock
Posted (UTC)
2013-08-09 12:06:56
Timezone
UTC+3 · title 15:06 against posted 12:06 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,856 hex characters · 1,928 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308091506) = 41e9c34937e40998389913ea58c2d5a5 (name+title)
GUIDs
60
Filler GUID seed
new Random(828).Next(9) ✓ verified
Run
Run 50 (seed 2,278,890) (seed)
Draw
29 · predicted N = 60 ✓
Machine boot
2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
11 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

8DD300D093BDCB48 83E42C189F830B52 AF6ADB9F86629FD1 D887EEC98366C026 C250E170BD219F17 5E735F8BEDAFA2C7 65F952432C707199 1BB59CAFFFF44BD0 B6843EBBE4F38CD4 6886D35F6E2F14B4 87F4FED59CEC910A 5DC778FEE7A55B00 2D04BDE01189FC85 C4F6E954C562B60A 19E3289C5C087303 12F8BEBB6641D566 53CE621869E0E638 2D9E1E88DF638821 6485BE8FF42A4EBE 790F71B88CBC7E07 DC27BC83D6832F20 290A551224A49084 C23F4D3D81A64E74 29A348F712B3EE19 5F33A9D600A63B1A BBE249980F2F621C 0D866B091F3751F7 8385B821638D3010 4CD677D4003E1D8C 83FACF48DA560329 E431D957B2054BD8 FF22EAB8000258B9 8E747DE9ABCA0085 210482F73FA0E895 62FB391544595C77 A4A5491A3EF48AB5 0AE2B54BED4F5AD9 565F366EC638C1C4 9E314ED77E2EC9A8 43E40AAEDC0D11EB 3BD25C9AE54F1AEB CA9E9C707635115D 3620E214AF8061C0 66A49DB1D255B97F FAAA50BE1791C4FB CE1C6023CF6A8E41 905A09EFB775715A 2852C177F457DFD1 5411E0C6895E8309 13DE05C17BD33083 1AD44A2464C21620 D494C7A42E4FAADF E3C64F8F762781AB E1F1A4C3F3F8A7A4 466AEE9843FCEB19 7E34112C88BB0A9A 2FE0491FA4DBADDB 34452072308C39A8 FEA3FC91DC0874DD D9F36D03A449613C AAB08E93C272AD59 18EAC8B758AAFE7F C159BECB8B7A1097 BBC977BCBDFE9EAB D4631C8C699D4B7B C3AB467D0607F6B2 5A47123B94E91514 111DE60CFDC8EEB0 5274408BC3D3CA46 50D5C706CA41C0E4 B13288498CE466B7 799C8B513C6D3901 8B1F9D37056B8277 5637905954B7D5B6 8545AD8BC5FB5329 23AF2C21A449855E A19FBA3AF21336C4 BC1EC459FDC24DE0 D0FCE22EA8DB4155 C26DE23D481B64CB 3D8E6968568AA4BA D33366EA3B6937E7 9DBC75085FADEA4D B2DBC35F47B9EAC9 C8D19C1F95EB1A68 5FE4BAFADCB59FDD AD5BB1B13E1758D2 A276AD6CA2787B1F A03CF3AC626AAF60 64D0F071A660E299 6FF2EB6C6A26BCC4 574DE4EA1BADD273 68C7485A5A0A579B CC1FA3C2F2877152 43D1756CC450D802 309A6DEB377A39B8 8B7085139BBACFC7 6492E42555BF712C EB594F7645B436BF C5FADD340208BF75 E19323FD61B42DAD 867784F7F9650804 EF841CE62F635010 CED34A980C40CB0E 0F153CC59A837FBC DB5BCA2AD84AF680 D6946DBF59B7BDC5 A970BB95A368C40E 83C41F3EF9FDC611 EB505E2E78D509B0 1C53327459389FAB 764A92F0249819EA 7DFF49ED5D045764 75E2CF9600257F1A 7876FEE63A7BD92D 9D15C8CC1789CBDC E38EA44BE69C3AE2 BF698A792B9982B7 A4BB0A008401C2F4 BC97C196E8D4CE08 7BC819D09705B6E4 4328DA3F9071643C 611C3F594F6FB2C3 5CF86667A5ACF94F 7EFA5E2F7084357E C07F14C8E95DCF90 237A8112CB9143D9 BA23FFB2B4114547 AAA96C2FFDA24E59 41BD4C955F2B012A 34F15078CFFC2D56 AAAB34E808D5E0B5 C3C6A0E154B00385 6C46F8452ED6025A 50AC65CC8696C655 2F0F88E327D283A5 E4813C02BD83748B CCFD9D811031ACC9 5C2D1097ED260B51 252F2C90F69C7526 1DA5FA351051253C D77F587A76BA7395 8ADB4064FD130647 C0723707E46BD948 5D57FEFB722A8A63 D18DAFCCA4D1A5D0 C384FA7BCBAF1AA2 9E31215398F67F46 2AAE95501B2B032F 4CB5F340167649C0 EE83B094020C94E4 F4F4BADA0EA5B4A7 E927E0B3FC428211 AB5DD393F45B9405 E459D6F15AF8D8B5 71CFCD452201CEA4 90D853B05ADB710A 392A5696864E437E C81783A71314942A 2DE4A224120EACF2 446C4F3D23BCE054 B6F670E40548935C ED2765794013F885 DD7E5352A551E6BA 49F53A8FCF087C87 8B06581857CD07AD A662CB24CA9634C4 21C390933A156496 F1C88F1F56C91B1A 0B01D7C596324AAB ABBDF5D893EA3E7A 6F9A2E4EF0398EAC 1AED637EE34AF8F6 D876F9689A14C864 61001FE3690DEA80 0ADFDDEEA8390C1D AA292BDE601A29A8 D6D0040A21CAA0F5 964A0DC3DF621AB8 66B3D49559CA1E9C E63124594C4F819D D9D8620EB22769C4 12B1DF6F8AA9FFAE 69060B228A9B2192 2E324BE21270CB4B 0A560B07FA4DDE6C 57965E4D34C0ADFE EEF2D1B7EFAEC611 5F34E774A0ECAA89 EE23A06177FD6A39 4F7EE20A86602E73 023C3EAF6E200D06 848D1839D681EF51 DFD7C5B0DE0F35F8 B90BD5386A8D36DD 76736BF1F116E343 B81B2039BC91041A 931FBB6C51F09433 5D561F28EF89EF6D 6E4FB24385041505 3DA46998AC5547C5 BFE365845DC0F37F EB7F0BD2A4F7E8B1 FE96351754AE4183 11B79F8AA1CCDCD4 23F15E546C92B479 0F58B94F3DCDC44A C545B9CEF80E6954 89A1F69DCAD60BB7 91CF2F23B6F96D91 7776657E8AE8D7B4 A74A86F9E0FA1BA6 6D3A509E2A63335C A358DDB3BDD1FF00 CF5BB14A7EF137EB 76CC666638A6E565 2BA4B75D06B1F9CE F0F8FFB383645252 66A5B93EC9338F54 711C4F5A12CAE11E 676185027F70047A 088699915AC22F77 090B87E142FC3A70 9D6B2F69D26E9C2F 7C596FDFC9BC9188 0D18AF5861DD8167 2E8FFB10564BD860 08B7719FE65C034E 3DBE2F7ED3B592BF 5E0C707E3E11B73A 1EFF40667D477A28 262B002FA7284102 71298BB6254CC421 388E6E05B185CCE7 82BF529E96100E2A AF2C0DDF76B5848E 195926D58AA311BF D69321E252A8695B 0DD46FD2E517FDC7 C179F907B3DCE5BD 110E23EA5BAAD58B
  • Read the ciphertext. Strip whitespace: 3,856 hex characters = 1,928 bytes = 241 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308091506 (name+title). Key = MD5(password) = 41e9c34937e40998389913ea58c2d5a5, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 60 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5010536d-9e3c-282f-985a-302908b3aab5
  2 756fc870-c657-6f0a-9a86-90c6df5e8787
  3 790c97ac-ce8d-4539-8a79-256bc7b62113
  4 c7766be6-4829-2cd6-9360-8788e0e3b0d0
  5 5ca66797-d3be-0f6d-8dcf-000585f68660
  6 42c9dfdb-d475-1add-9345-47f27abbff5c
  7 d30d847c-f028-853f-adfa-014d800d4cf1
  8 7efa7969-a33a-75fe-97d8-0e991751b28d
  9 6617291c-a54e-3a9e-8c33-e56bdc537002
 10 5788576a-ea30-5d0e-9df6-6138d30a24a4
 11 c0cab926-ead2-2940-9965-34f7784143f5
 12 fef67d31-27b2-8814-a1eb-1164ddfd78ae
 13 6d85ac10-27f8-7f54-9445-7c8ddda4ee24
 14 f36c685e-293d-28fa-b30f-a93e1215a6b0
 15 79cb3fbe-a58e-55bb-98d2-7b73abb21393
 16 173087e1-9cb3-1dbe-a04e-04d5b091080d
 17 11befbea-0c23-88e4-b333-3948d75b0e9e
 18 bbc8759e-a169-3fff-a947-b1998e25b69c
 19 01d7adc4-0a6c-05a4-a4fd-8d3b6de30e3d
 20 8b558690-df52-85a9-ac8e-8bcf01101d84
 21 fbde4b1c-eb2e-72a6-89c8-20382d3b21f1
 22 b4fdb0d1-3910-824b-a20a-e457763d780f
 23 778f6bc5-df1a-8768-b1bc-e170a917f2f3
 24 645b4ffc-6489-27fc-b8eb-eb0a88b08987
 25 082d4b32-c570-7116-b328-924f19816a83
 26 7c39b11b-b8f1-0627-96f5-fa293bd6e4e0
 27 9faca5e0-f770-7bd1-a74f-d37d36d0eba3
 28 076ba381-58f2-6851-bc76-63db5d2fdf90
 29 4fa1fd3e-6b07-20b4-b3b1-231715bd3f2c
 30 805ab779-c66b-8010-b6f1-4518c694a36d
 31 b716980b-1138-7b39-9c70-46c2c561635f
 32 0dd90ce2-6c10-4ebb-b68a-1665360191d7
 33 ddd29f63-64d8-2953-a951-386d48885e12
 34 aa42591d-4413-670b-9d83-84cd67a8f2dd
 35 ff33d719-15b2-6c49-9643-95541ab1602f
 36 b458eaec-5c9f-582d-a60b-ede7428fbeb3
 37 f2593cae-4225-8f28-9d4a-5e49c50cc532
 38 5242bb0b-3b5b-5b3a-9076-dadd71ca3622
 39 6c0de9d5-7981-1197-a350-e73adef02f0f
 40 4aae596d-d7f6-0a79-9dc5-27c3a033c785
 41 587327b0-f2e7-1a4a-aba8-40177efa621a
 42 999fda26-5bb9-6c79-9e39-cb56c6f3da4f
 43 a5357b18-7bbf-747d-87fe-e36fa08199a1
 44 d0ecd2eb-2406-889f-8424-3d61d03eebbf
 45 c6443258-67a5-479b-972b-2e3c1e4aec54
 46 bcedef39-e69b-8ab9-898d-d422db3e4786
 47 a07d60c5-09b9-0799-9530-aa0691ecb1fa
 48 290969af-6552-3258-ae4e-c5fd4ae4c3e7
 49 5b215cca-40cb-0250-8d46-c3e6965a1230
 50 d962cf36-317a-5c67-9184-f55fe390f2b4
 51 61b75e1b-a3f6-5caa-841f-02f021a5fdec
 52 dfed11e2-b0bf-8297-963b-cc13df4863c3
 53 19e77b25-eda8-3fef-87f0-86c5c56e4935
 54 fc8f2fb9-8c7b-161c-a9a7-c79110aa5416
 55 2a4fb183-7bba-832b-9493-8f5df7f3fdbc
 56 93351cc6-0ca4-23dc-8fb9-8ea85326fc9b
 57 0c05a4ea-56b6-764e-bcd2-6a7a27d4fafe
 58 7e979a7e-7341-2461-bbc0-ff9138bdd854
 59 4668ac95-38a7-39eb-a125-4d5598bf37af
 60 f9b27883-a077-8638-acfa-2b848db2df43

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 264201873528725183087882707628742665851016784803055831827238. Exactly this sequence comes out of new Random(828).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 29 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 60; the post has N = 60 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs