A858DE45F56D9BC9 archive

201308261329 1l3vmw

explained decrypted filler

seed 366

Metadata

Post ID
1l3vmw
Title
201308261329 → 2013-08-26 13:29 on A858's clock
Posted (UTC)
2013-08-26 08:59:55
Timezone
UTC+4:30 · title 13:29 against posted 08:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201308261329) = cac048ed77e574a41a69618f0df20930 (name+title)
GUIDs
40
Filler GUID seed
new Random(366).Next(9) ✓ verified
Run
Run 51 (seed 714,271,718) (seed)
Draw
9 · predicted N = 40 ✓
Machine boot
2013-08-13 23:35–10:35 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
6 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

F06414F00BEE789E 5F71747144057D63 DE71EDF481FB83B8 1D73E4B1ABF26456 D4E4D16F2CCA848B 785F1BAE233A1A8B 5615E91DC477DE4A 579BC246420DA9D4 864EA4C52928840E 2F0B4D9DB7ED670D 3327DB1A21940AA1 C83C2C69D9E40CD8 7A0A9B7A41636466 75EED725F5F2237B 8DCFC3B1230344EC F65FF61D435BC16C 9B7664B91DCF27E1 02E1F0BCD4AC1576 4C820FDD3BE42C0E 75AFB7D0ABED8FAB A50C42404BAD5CF7 9E6B4C24434D82EE 96CB0088673EF383 71B84097F0219D86 FA59C1511D13A898 6D86DEAC37FAA1A7 A5DBCF82EB763A8E 824B5DF3603AB6B2 F78D1BD599958B2B B0203EBB98F9B96A 207392B2AED25585 67CCFA3B3058AA87 A61F25CF5C1B82C9 EA5A1F36EA8BAD3B B8461BDD74BA4D46 17C403D15FB1F174 DE5D68D90CCAC3FE 8CEAFE67AB195C00 7AAFE5507499345C 1B9D5D7D8A8E6499 1434B16A84B94C49 A7C2B74CE1D8B174 1F02A4E995102843 E616F7F170BF26FC 5160AAD52233AD1C 2129BCED4E079767 A91F639375BF0DC6 B5BD655FD60D2138 C9DD4B270E9853F6 3D6B6E86A3F15094 24A831C6758DC3F9 3DB23E0D65343AB3 9F425FC600C971FC 212AD0316332F9FF 063A53E71754C18D 5DDFACC3EF93DDFF 01A06E8096530BFB 25384BF3B1F6D777 34D61C0F835B0DDE 43C7BA4E557A5FD7 11D9A72743545CB1 54A7823A42D7A08E ED6A3B97FC0A2E70 3E19D92FCDFF0AA3 35BEF315F0BC7840 113FC168F1954BE6 D0E16F211F073064 BDC988230365471A A4178386D4F8256E 3D86F135804B075A 76BFB2EAB63E6F7B F0B49295FC311AF1 A67C9B2AAB064F8D 49ADBFBA77AED1A8 DC2DB1F1A48DDCF3 D7139F330BF18A3C C46751232313ADF9 3AA3E97518AFC88D B103857F8C89F1FB E3838867C375FA02 F373DBDC5BECD0BB 7D9B31D85A0F3BAB 1551CA06CD611414 141F374476CC93F8 314AF44B10FE51BA 9C3B0B9CBA3DC70B CD9FE013AC6BC849 D3776B4F06ED880D 6FAD33D49C64B93F 6BEFDC46481A4477 13CE382959CEA4B0 4261851F9FA88958 1A4BB60358294C16 E9BFC21438B6BC73 8C81BBC1DEB59A2E 8F20BF9696D7476A E86A80496EA425DD 49CCC9EE8885A980 534D2B7AADDA446B 4522467287E6AD0D A2BE4DDAF7C52374 B1AA4E9BF7A66FA4 11A585479BBF756D 93D839F24AC45748 835CDA13F357D6AB 0D9C4565B78600B1 4F069B8FE336BCEC 8EB93E677E782CE0 FFE39BB2A380BBDD 6164F1EF8626C16D BF6532654C5DDF66 B3885E1B9DCA6177 95BFF9A8281331E5 72756E809D4ED560 C8D8F8358CD361AF 307DE324FBACE9A5 AAB8235FB55CDB37 D2441A7868D59305 7A8AB2DC869D419E 2F54A591B7CA0930 70700C507F91A96F FDA0951D3A47718F 88EC28885DB716EB CA6414590458738A B9A4FECDD033C0D4 07DE09B23BA40978 A96A0F9D2F2CE69B D9CA745B55A776FE DBDE49418A736A04 849AC8325C0D2256 13AE7B35B86E3559 666FF324393706EA BEF30284E967D09E 450B26BC7A57C1FC 0994AA7F96498220 983BD29E19CEBE99 25E3280160E0F384 D9421B1FB40F65FE 1F8D8F5F15377A7A 5B79B2412A853021 9796D7CDD0139501 2E064B3249396F7E 5AC3F3E4DB086513 C922D4131A6DB0AB 6CE18A06CAE2DA0D D1FECCE4B2910BBA 956D5CF1B4CA7BE2 166E287BD563EC66 9534F3355077BDB6 1E00A31E6BC77E0C 706CC16EE85B703E AC445554C5EFB3F6 CBDC27D6E3CB15AD E6BA9F28E016DA14 FC55821F38A2FEAF CD97E12609CCC7C5 90D6F338E431583E 15CE562E04845E17 4FD618FB07C84178 AEEF459216854DB2 D1D7EBE6549BC964
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201308261329 (name+title). Key = MD5(password) = cac048ed77e574a41a69618f0df20930, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 680c3d9c-1d52-8a07-8396-d617a1352c26
  2 f3b1d128-e84c-141b-87cf-29a022a10387
  3 a43ee40d-5862-5531-b7f8-9381851d2458
  4 bf0c698b-95e3-67fa-8ad0-187a5d6674d9
  5 5b864026-ec5d-44ef-8174-9a2e0fb9914b
  6 ff325fe0-453b-37ec-bbda-a3f7b5cc367b
  7 6da47710-29c2-8a33-a165-8af948c3db8a
  8 375c143a-299d-03a9-9cea-8ae8793674f9
  9 62a5e43d-29c6-28f3-8ead-a955cc2c7dc9
 10 9fff78d8-de45-28c7-b58b-27c14398ff53
 11 324d3bca-2778-8f1b-945e-73ef9700d1f8
 12 b66711ab-df60-12fb-90a2-a97512438a20
 13 68ba53d9-2b87-2012-b695-7b2523a0a054
 14 ded76b80-4fff-70a4-a65d-234a3f1897ea
 15 babae83b-2e9c-15d3-ab09-b1f5547045bc
 16 744afb2e-13c2-5ee0-87fd-a474a21b2c7d
 17 7d26376a-6563-6684-b1b0-78e0cbde2a68
 18 4ac4b384-64c7-8a73-9e89-2cc2fd2882ea
 19 2a430d1a-3468-5549-a7af-02ff98c7d337
 20 8f5dd60e-4c0e-0650-8807-e167dd0e62e8
 21 0dca62ca-9df1-4345-bb17-b68be544f985
 22 93a10ec5-e0c0-54bc-b330-ac37bdae18ef
 23 046dbb5d-d5d0-705f-8c2c-7ec641954933
 24 cf6a7014-02a8-85b8-a476-fb3fa33000d3
 25 f713ebdc-cf7a-53b6-b926-3318f70813cf
 26 588f5ee3-3e90-8386-96d2-13f8c89e4398
 27 266bec54-b4cb-5a78-9613-efa21465b320
 28 d5778ab3-35ef-40b5-9764-276a766286a8
 29 e3a5e0b7-1715-5182-a36d-eb58244f9d20
 30 d60d6c4b-4fee-7a28-850b-be6a6a819c58
 31 3ea2724b-39c4-215a-9dfe-3175cbe3d16e
 32 f39f858c-f0a4-781e-9385-fd3d60aeb199
 33 d578c95a-467a-4f0f-bd2e-d26e37c32117
 34 89c8228e-ed88-118c-a2a4-7d1a3d588390
 35 ebf16082-2008-34b1-a578-fcfd6e4f4779
 36 122bae8e-685c-586d-9204-69adebc4cd2e
 37 353f2b42-5f60-1c85-89c2-8bf26a57f1c1
 38 721d5193-0499-7035-b9ba-474904d13664
 39 48d45662-2f3d-05a5-963f-c402f5c8e1e4
 40 2320deea-932a-6f15-9c4a-6de5835da269

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8156438022812715685045785854572741351706. Exactly this sequence comes out of new Random(366).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 9 of Run 51 (seed 714,271,718): new Random(714271718), 4·Next(8,16) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-08-13 23:35–10:35).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs