A858DE45F56D9BC9 archive

201308100606 1k2iaa

explained decrypted filler

seed 97

Metadata

Post ID
1k2iaa
Title
201308100606 → 2013-08-10 06:06 on A858's clock
Posted (UTC)
2013-08-10 03:06:55
Timezone
UTC+3 · title 06:06 against posted 03:06 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308100606) = 9601106942855740ee0948cc93c23629 (name+title)
GUIDs
40
Filler GUID seed
new Random(97).Next(9) ✓ verified
Run
Run 50 (seed 2,278,890) (seed)
Draw
34 · predicted N = 40 ✓
Machine boot
2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

0A47F42B60025492 62281F84387267D6 85F2274C8CC3538E A5452DB9A0669608 9E347960B30BD693 DB226FB18531B685 90DFB64D50F8C463 EAC8BEAF53F0484C 840502A8B0AD0EE9 708F9F9461A5450D 49D8DB7155B3D267 5D0F697C4B3258D8 4FF729BE66109283 4A5BB608B52C53D1 DDC1764509B6B3F4 DB9621174119E4DE 3124038C2BF7684E 4ED3EE8986643B6A 418A74E3FA81BE5C 8C1D0A1850CB222D 2F6A646BB67479E4 F3FCBD3EA9B548EA 29BB671559676209 C736286925C404C7 102E371831CF2E7D 07BEF0098A1DF0F3 D2AA6385CA667D33 14D56041BC84816A 5C0C2169D168F427 6431D55A6E81A392 D081D0A143818686 34685649232DFA14 8EDA95E2D9997983 49C579BE6F104DA4 09134821997ECF50 9CAB217B5C979227 FF3B8B69303990CD 8768C48C33B9AE83 C69F171BDF80441D 47276850DE4E8421 B4D93BA1DE9DC70D D97952C20E78E14C 807EE0EA29FC7C72 18DC45B3BD39742A 046A1D697E5558AD C94004D2CD506A31 16CF770943A4A89D AB320E425A48AA11 DBEDE22AE929A295 2C9A0FA1B97A2169 9839B851303A4290 E4CF09010B28C4EC EA996146D20E5676 4CA88B7027C571F2 A617AF501A9C0A9F 3E88828747271E2A AB7E3E3C4C139CAB 19EDDD0769876CD5 3EEBF8AACE1DF54D FBEE5DF813720831 0EF026790A15E81C 7714CB317EB12917 6B11824EBCA83468 672E0F212C509F47 F62252FBAA945AED 5311682B233C05E4 A90C523431EBA497 33BBA073411E58D1 C11F58D6F3534671 AB6D118CF84FFCBB 6D53ADE24220B4D6 C22955E722EAE3A1 414BECC6F69F5AC6 C79C0D2C8FA9D9BF 1478726D4747B754 86E8AFF299E13F19 E95D24E0779E5ECD FDA28A3DD10C9653 F2C78B52865FF61C 661038FC10F72EE2 9CD85B3650F950ED D1BECA8017D13C73 6D0D91E372FD79D1 CE72F7901AFD1EA6 386158D50AA84A46 3E97A4CCCECC0904 843336B2EF95A721 5236729AE6B65F20 63745AD0EE8315C8 B14552CA2492D284 28FE9EC37A44A49F E6279F1932CE21C2 819A480425137DE4 5EFBFDEDEC855D2F E565B1142341C073 2A1892A39004AB76 78ADED95FBA351BC 6D4E8C1C885D01F7 14FAACB118E6FCB1 4B384D32B2A831FA DA5F0A8C667C37A5 869933F9109F7930 B0CCFC4C9184446C 92D2701FD011C28C 324CD9703E88255C B3FAADEFB861F4BD EF8B0ED775061CC5 0F5D29FB8D046504 E30F7545E7D4CDE5 826688C73034FBE2 85EC575A661AAD70 D493B8B2FC89F3AF C9B3C48B7EE4CC40 F8ACED3E0DBE1731 3798CB85593650F6 503FEA8F46340BD8 935909EDFCF86B2D 928C1D7100D6F9E3 A9618372EFB975AB A9D529FA2115707B 3BC74E890BBAA544 D3460C80A773BF4C 377582CA062EDD05 5554AF31C3D89078 F0E7ECAE6ACF667A A007800FCF2B630C 3E87E7D9314B3366 DAEC29CFD882F2FF 3D889C13582D6420 38DC6CC5F9FDCF9F 40877B529BF4BE87 9001C3406BBCE205 848C9568512CF8B3 E3DBDBCAB46F57CE B0C1B6F9C6E593BC B63A8F9B62DBBBA7 8E873B9D105A12FC 0A54284FC4DE85BD 99258BBEA6636B5B B2A39323296B0E32 323912E4279C98CA 2F3DAF7F7E3C4898 5A063C3F933EBF80 F6CF51F5325F1965 FD033DD661471A22 D496B86CEA99F313 8057AC649D181ACB EC47CB9E99237324 9429809558FD6891 4C8DE84AAD31A878 02FE803829356FAA 6D05BE8E2E79045A D714B52B67BBB44B 599E973B5F8B33E1 1A8A3B570D389524 91E5EC71365224A6 4B7DCE55FAF65619 162CE4D8E84D3656 8090E0839730DFEA 6A213D3D270A9BA2 E955042197B53254
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308100606 (name+title). Key = MD5(password) = 9601106942855740ee0948cc93c23629, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d98d4bba-8bc7-32dd-a85f-97887e4f46e4
  2 5ec0d5b0-575d-2368-a62a-6a3f1e783a6c
  3 625cc4fd-ac07-5cc0-be14-5624c59e9e4d
  4 1f44653c-308e-227d-8963-3cc6e8994903
  5 e3209dc3-e45d-04d3-8383-5a4b0a41e1a0
  6 56e36c57-32b9-2eea-a189-9a6b2aa9b7e8
  7 7842ad7a-3a44-385c-9ab3-825c01de04ce
  8 8f577732-f179-09cd-88a8-6fab642c5bd3
  9 e71c154a-33cd-89ad-9889-5b303f5871fe
 10 8a02f58e-f24c-0a79-9ba8-e8254d61ebb2
 11 d1f3f184-cff5-6af8-813c-82fd31ab243d
 12 ea3111b6-c0cc-140a-a9d6-664c0078a918
 13 106cf6d5-ac5f-22d1-82d2-2126b57bb36b
 14 ccdc817b-7275-8288-9e3e-6180a4c9f574
 15 a4b4c778-7124-7b95-ba71-1f18618f8c9e
 16 db2efd06-3981-56e1-bd6a-ae660aff94e0
 17 0e459058-f1a1-5238-a310-6435fbea3bb7
 18 94cdd718-aa3a-18fa-a448-6765e4f1541f
 19 69639eef-88e3-25e9-b6ee-9c8df8701b54
 20 39d9132a-7d54-7f2b-b55d-c7eeda85de0c
 21 22c9a017-bab6-6d8f-8862-f1fd64c7a309
 22 8a4a1a39-3e18-5c8e-af2d-c0174a269738
 23 1fe4d748-2496-335b-825b-acee5c28aabb
 24 51bb9448-95e3-8407-9c5a-7b9ca847f706
 25 f05945a1-863c-154e-9823-697d338c3a29
 26 64264dcb-c928-89cb-8a2e-276538cd9fdc
 27 2c26316c-824a-2583-98b2-37e131b521dd
 28 15f76bf5-cd85-71bb-b5dc-98bff2236d10
 29 0b5cc89c-9e4e-38d3-8d40-6de9503f4082
 30 a3e82b18-caa2-1cac-afb9-36316a5f961b
 31 d16a4bda-93dd-8160-9194-6dc3c7211cb6
 32 cfda8d6e-8ac6-0f0d-8206-8a868d76702f
 33 2e3143a9-5a07-20e8-a132-e4d295b17b5e
 34 110d9fdd-4da2-3022-9597-45dd7b6cc5fc
 35 0d1aa1a8-422f-4b04-972d-ee78daa5da66
 36 f8d1e441-e3b2-8021-81a5-827bdc8645b4
 37 d020c885-f0e2-37db-882c-e7b542dc72c9
 38 8a8af811-4c9a-4ebc-880b-c51afdae8761
 39 16e6f414-83b3-8a1a-bb44-d09bef5fb73b
 40 b3950178-5d16-095c-88de-0e94cccb59d9

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3252023080612875512765381827318023483480. Exactly this sequence comes out of new Random(97).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 34 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs