A858DE45F56D9BC9 archive

201308131506 1k9u9n

explained decrypted filler

seed 331

Metadata

Post ID
1k9u9n
Title
201308131506 → 2013-08-13 15:06 on A858's clock
Posted (UTC)
2013-08-13 12:06:51
Timezone
UTC+3 · title 15:06 against posted 12:06 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,600 hex characters · 1,800 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308131506) = afdbeb2567718c975b522d1e540329ff (name+title)
GUIDs
56
Filler GUID seed
new Random(331).Next(9) ✓ verified
Run
Run 50 (seed 2,278,890) (seed)
Draw
61 · predicted N = 56 ✓
Machine boot
2013-08-05 20:29–23:29 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 5
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

DE1F5AACFEDD016A 1D0CCEACF4923CC1 559DAF23B5938D98 5F3BF25BCE38E8E8 8F8A55B87F5FB9D5 E68FC1FE5A17908E 15EEBE48F8F87014 B13B21E273551892 EEFBF3122275A996 46E16006E7AA0893 25E5766B34704448 81138403562E4D54 931B5FB6065FC2E5 B869191F9BDD290F 9AAE5911EFB941A2 E7A882DAEA680EA2 7C1D410DAF229E26 D492DACF5729A3ED 0E3EE4923944B65F 0FB3042E26BA5397 A962FD4954082AFC EB805389BFC9D7C7 B014C30E0D777063 A16C9A0933EC959E 5C5AA69C306DC579 90E15085E9E54EC4 D7A446B35EF2B052 AA33B7BE66ABA186 39D7E4EB44F1C54B 9808900E7EAD6B55 E03B04CE201CF7F1 D507F8B1F7B4F042 325B32E5D7C9A7EF 009F8D3F3D5DA861 D21ABFA00BB56F95 A34CC5ED0E21B509 613CE714BB12C52D D71DDD76E2CC4EE9 9A75DAB32515996D B4D764C42131DE03 0973EB70D1BB07BE FD4DBB3EC646B4F3 B5ABF13184A89126 AEAC6D2DEE35892D 8C500D7C1D14B1AD BB2BD341054CB5C8 420DD3259BBF4E6B 910180C45CDACC31 6F78D18901DA6863 D98393BCB6032F44 5A5DDC1EE230F0EF CB80468EC35ACEBB 7FA0C76A077783E6 0C168CBA5CA5A30E 922097243735AD14 33E976DC5BCB6FDE 10FA39C3EDABE530 E657A068E55AEFDB 1756B983B342E8EF 8D4C85739D77542E 972C7430B2A446ED 446F1138FE2B6F1A AD1C189FE3A69EBD EA4E19BA93432F2E D70859127275F188 3D46D5D482355D5B 17C6D97E62544DC0 8FED5E0C42923F67 10BA5C37F126816B 0F620CFAB415B88D AC09E8D49FB675F6 EB484CA866827EF2 67B8CF0AA1366B77 7EABF0ABE09A37F0 8C5CA675D98BD076 8F84CF019DDB52CC B049F4C51AFE7693 E60ACCFA7BB5B8AE 95A251DC72869E2E 6543454243F2544E 1F1C3CDDB609B936 140D66337B4CBC21 220F5441308264C8 40AF15501349260A 98C6AE6F36A423DB E0A481F6E24BE7DC 0137139BA4E60EFE F5DDAC77CA8E457C FDB04E44F639E726 E7EEF48F3F746ECB 145FDF3804D7880C 809F8629CE3AE344 08CF4F346DFE88D1 74CF7F1071FBE5DE 3525CBFBDF97244E E2570866EB895A09 11846A18D6E542AC A27B0BFA8A909A70 0B355855927924D7 54FAC11456619FF5 F2341794EDA58BB4 48EE3C487C296787 41E35CCA77142217 2F3A41DCF15B644B 584D69DFEE3E6075 1C3F0049BAE5549F 13C452E07B0D5D24 7BBBB16EAF3B0B5A 412A4EA013D2A85B E8AAB4BD0085D7F1 E63876B33AE023C6 EEFCC0E4A0DD2169 E8682796D688DAA4 CDDCD0109BBA0BD8 BFB627CFDB21596A 1ED69C609D6BF89A 50A37390E759F10C B47AFB2B4DCEB158 31656235490C27F9 441D535AAA894526 401B2033AAB51974 91DB012C41D8BA17 5173A63338921511 8DB6771180F00A99 0935B21D18EA7422 F6B44AC172D2FFE6 7D933612D2122506 3DDC04D4CC775C28 F8542B1CB92B36BB 68996EDFE57EE104 A8136C135EB525A6 03F7D142AAA32FE9 60DFAAAA0A4F5F4C 51A64DB3F7C10AFB D60D7D3260796A82 31EEC2F7EC02C540 C48FB0DA52B98D0B 89FE731DA9145334 20AF2F10296F4706 D18163198125C9C4 1ED63F4D6D3790DD 43A94BA0699B6008 F70327684BF937ED C5DE5EB5FDEB9E8D 88B09D2DBB02D202 4C18C82E91966C56 831F7586943E9FA4 ADF27300BA4D4AC3 4126A6F3DD0CB83C 4F97231D8AD71585 4EBB77A6CD2E1150 4D4AB1DA6AB44CD0 20F41C5E639CB7D5 CFE1D1B6FE48CF53 FB3D07D0B4D0FC71 525A201671998DE9 91C6443ABAD092FF 1A38672EAD9F4CB3 34D6A2C26E815948 F22719CE231535FB 91453973CE7100C2 5EF180DCF4BAC813 924FF91B39F64B07 17E4003654980F76 DFE53DDC946BCBCE F56093B75F17BBC8 7482B4A1BE76A2BE 0BBABBB6526897A0 89BCD9B3A1868742 58E3D2D4870B2465 57791A8CC52A7469 27524F087AE56585 EBB5686E67BAE99D 5DF396A03A4348B7 DFD109CD513022C6 FEFD7BD1BEFC1EB9 C52991DB36BAF1D0 BE9E3100F8517FF0 22C415B169BBFF7F 89F5A656A0C93774 A890BA94FDCB0A40 62BE09F1C54BFA0D 9272C7F8206EF2CC 9133E3CE0ABCFA77 729281A517BE776A A2905B647853DE4E 547A9DCCD684DBD7 D6939423AFD00432 A850409E81D27CFD 1D94CB35C3F187A1 5BAA64778A6EC497 FB0EF3F9A3C7D476 81404D22842B23A7 B79FF760F62EF75B B7F4285932A6CBD8 E2CBEA0CEB72FD34 825E3C92A8EFCE4E C7CCFE3595E1ADC8 AE0F2CE661735580 2CB8EE780CC70BD6 D24B874647302ADF 9F9886E7F8A5BB14 6334541E6C9E025E BF7C0345752296F6 03A959162BBD42FC 35DC468111BFA352 820EA5AEDC6A4FF4 144E2D3B387E9D85 67A9715B7FB420C7 8218E736628FEB16 0357DF2F75560909 B92BD007658C01D3 B26ECCD34413F2C4 364488D544A6D46F D89A42BC1753EBF6 F85E26BA826C837D 44D0E14619459781 F4CD9E9596F3E100 1CCFDC424FEDB0D5 C0CD9127CD26DD9C 7DF548497BDC6DBF 325B5682838A8459 33311B71A69544BF A338B95A449F7D06 5C722D0EEE9F9E11
  • Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308131506 (name+title). Key = MD5(password) = afdbeb2567718c975b522d1e540329ff, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a200e712-7520-54b1-babe-388d94ed07c7
  2 fbc692eb-c731-8888-9d6a-4005b25684a3
  3 b8b45157-6ff2-192e-b23f-e063392af38f
  4 972c3582-dd94-145c-9a27-6e38253a63e3
  5 98cd6103-f6bc-5cdf-98ff-2a65878dd408
  6 93e30b80-7247-7968-bf3c-05d99da42af3
  7 5b3d9ba4-3672-178e-9837-fbe7c790458f
  8 a45d763d-ffee-44a1-a675-6e00e86136d5
  9 d82b3adf-2014-8af7-8d30-59d4ed6d4a44
 10 b10b2d6a-6c09-2b15-b948-034428ece5be
 11 cb50e4f4-45fc-1c7c-be18-c06914af1a16
 12 7027051c-ea7b-7445-a914-f6c4c15b6877
 13 da072cb8-b054-19dd-876c-a4b9a125a099
 14 965b57da-2c1e-6b94-8431-ad5b6f89123a
 15 db0a79e3-71cd-64a7-9eb9-94e6d7206159
 16 81aadb0f-4e8e-6b8f-ad6e-fcd2ebdbf8e3
 17 4f005813-357b-0310-b97f-4944d2bfa065
 18 94513c43-b32c-1750-9cfb-04053ecdb74a
 19 783ad739-7235-5454-9ac8-24e95a280deb
 20 bfa04435-186a-45d5-a680-b03c2524d3f3
 21 6637e140-cee7-7a0d-87bf-55aac8f7bba1
 22 89d640df-7be5-0aae-ac61-a6ddb4f7f71a
 23 61f2d2bb-9415-8538-a79a-7a6b2000260d
 24 5ccc2dee-3e8d-505b-9c3b-a5f12d827c40
 25 bb19f587-24a6-1fb7-beb0-5cc5c31aca79
 26 bebef0c0-ba55-3f02-96ac-278b9c72416c
 27 1634da45-ed46-47e0-b4f6-376f1a7cdef6
 28 a9b3ebed-af04-788c-bd80-7603f3e69cfb
 29 07eeda8e-54c9-88c0-ab2b-04ca4325b1da
 30 9da26db7-2104-5f10-9aac-9a8a883f146f
 31 af9b67f8-fb5a-3acc-a773-dc997926a338
 32 98ad4d4a-d2c8-5537-b660-630468285570
 33 2223be77-0e49-3ff7-a395-dbe5744e2f34
 34 60251f29-eda7-2f13-b52b-1d4f92401251
 35 b50533f5-21b7-1128-98ae-02aaaf679b91
 36 e5d55c3e-c50c-0e05-99e4-3f7539ce1cf0
 37 e0e0fcde-6c02-1337-bc95-abd51bd7654e
 38 648932cd-9ab1-8c9f-be4a-cdf2a6b6bb4d
 39 c4c8e1e1-f4c1-0fbf-8073-eefaa51374b8
 40 82a0a9b7-d6c0-8895-9e0f-ff3f15caf1d7
 41 5a31fb0f-8d9c-50d1-95d5-92bec636f9e6
 42 c9d686a9-14c6-6977-970c-baa21168b606
 43 d774cccf-2c3f-434a-8d8b-95df8836b3da
 44 7130b438-add3-6766-9220-68121730e8c5
 45 287a3777-eeba-3eda-acfe-1ba3e536cce2
 46 d7d481a7-7b8b-23d6-b003-596893b13c0e
 47 d57b8cba-a526-8a8d-a7f2-a7314ba596f5
 48 a8917ebc-9df0-5858-a2c5-8f2be4b7179c
 49 0a414c51-d006-4611-96be-db80f4ac5f3c
 50 1b9ec7b3-6150-8143-81ba-3f1dff4f9135
 51 48704a5f-7e0d-7dcd-85cd-a89445297943
 52 4133981e-ef7e-895b-9607-7de31f8001a3
 53 06e804fa-3380-17de-a6b3-bcd3ad7df53b
 54 f3f3572c-0870-8c87-b07a-e59be046f837
 55 632e2a74-e48a-464a-921e-e03a3d5d77a3
 56 8619a7cc-850d-50bc-a802-02e66bd8553e

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 58115714821716660154708513478535321018085646328548781845. Exactly this sequence comes out of new Random(331).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 61 of Run 50 (seed 2,278,890): new Random(2278890), 4·Next(8,16) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-05 20:29–23:29).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs