A858DE45F56D9BC9 archive

201207052206 w3wf0

explained decrypted filler

seed 378

Metadata

Post ID
w3wf0
Title
201207052206 → 2012-07-05 22:06 on A858's clock
Posted (UTC)
2012-07-06 02:04:38
Timezone
UTC−4 · title 22:06 against posted 02:04 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,768 hex characters · 1,384 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9) = 34a14a42e98ff96095af56604e290cae (name)
GUIDs
43
Filler GUID seed
new Random(378).Next(9) ✓ verified
Run
Run 12 (seed 36,542,234) (seed)
Draw
10 · predicted N = 43 ✓
Machine boot
2012-07-05 10:25–10:55 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: namerun: seed

From the post to its content

As posted (encrypted)

7ED9DCA473132AF8 2295292C3C2B45D3 C1E3EDB0C75586C8 3AF9D21301C8D469 7D7D7210FEB982F2 3EF1074F50BAD127 6C15D60D2A8E095A E928A6D39AC2D54A 1DF5EC77219ABFAD 89BBD693E1CA78DB 423CEDC4E51A26BB AF1F7EE1920F9663 102B2F15F8C1AC8E FA521C00AD5E3F9B 0181EFCEE2FBBC90 68A1F014C5C8D880 EA55E1A551A3B716 A79E0AB566132F85 1DBC943DB1405AA4 63F55192985BFC26 97585FD3853167A1 FDCF603984C782B3 1F98624EA23BD83A 888B21CE7386E103 0238BF5E09C861B0 11439068A59297FF C8B0D73FA3966AF5 FB8ADA079B7424DA A1265A5745A9E752 B25BF11C346D0A39 5E306C4C5E13450A FCC022FBEC1C4A43 2BD9551391B5FFD3 16D0F9A1521E6FBF 5ABF06F2AE29A3AB A7E0BB84362EACFC FA0DA0C54C2746A9 28A2F9183CEF57A7 DEE7E7A442B994E4 822DD89393A3EC0E BAABDA8983604188 CA089652C847A1D0 33C3EDC897F8AC24 7CAE4556D3D5071B 3DE83874001E099A 30D48991878F10BC 55E1E6A2128A4CA3 79705223B0047C3F 74F8D95EF20A17DC 9EB85AB762BE2E9B C1A969416A345D16 EA9CEF13323932E3 C1BEFB137841240A 9D1607D86EEFA28B 8CB01B7DF3547BBB BC444F2D7D3ECF85 375B8CC90AFC2F42 72AC1BECB0319028 7FBFB022534A24DA 5B83D818F1BE1FA2 5154D5C5EA2FA94E BE80F6A488EA2DC2 BB76C33DADDADE51 C82013A6D5FDA543 FDC95263E8D69CE7 6EF9A28B7266313F 69C2A2597115C487 A2E785A594F45F2F 8CE7694D11ADE816 B6B7A94829515D89 78717E38DB0DDB68 254D8A02F7B1BE3A 1A8841F877ED3765 E66EE89B678E1EC7 596030D0B1F13802 0958BDCD887F9F6E 62F9234E52CFC31B 9A6B04776E90F349 C714489D5039D386 8ED485BC3BEB67D8 8B056447C83CDC56 C969A466F2DD0E7A 50FE950E82B06CED 6036FA3D33F2A471 3D61B98BE22E0501 B07DB3DA37CABCEA 2E5ACCE5E4919AFF C7C47F333219DB76 3239D0CE5B7F790F 7F71E5045965562A 29B1412DC31E67A4 8D109906477D2293 3C7520F3DC0B3947 383A32E33C75BAFD 09752D3B3AF9CBB0 F1736EFEDAD83CF2 2ED2FA735DF5A184 D1DE4B6760E9FDE8 6937355582C329E4 DF04D688B553D262 5BD5229ABF132831 DFDAAF792A58DBFA 543E7E24AED01215 26C9FC41F62355CB 0C59D4AA82BE2DBD 9EDFABA5064BE6D8 DE5579FFC1722B99 58378D3629369BEA 714625ED8A195986 7F1741A7196E0515 B8B15D999935D2F7 29B7560BFB686D7B DCB8DC3B466015D0 7E204C89B8902A7E 160D0F15E720E74F 3F438FF04938F306 CFEEA9A7F606F419 B7CA170E27CA28ED 6DB8E436C1893369 89D7C7BCEBE4E154 53C2E6A8C246741F 41B927FB068D86D7 22B390E4A95B4312 D9F4E29F05EF029C 74091BF7ABD31902 63244248E2CF209E 73CD711EE72E757F 8EE4A512F752758D A9AD13557E4D111D 7C54BD081A30A479 1770E84EBF9EAD73 D0440C6BCB4DE56D 1CEC710781778C2C A194A0257BEB766D 1F8774A1133EFDE4 694F89C5DF454C96 AA652A0275A265CA 6977DF62A6F47CF7 BC65A12CA6BDE15C 1671481C3496B1C5 F13D52E9286205EE 3E5037C39EFE5A8C 184BEE6DE9D28990 FF6DBF3AEBD73A17 D1A8D3E85CA4074C EB1B429371CF5F69 DDC82E09CAA998C6 AD18D39A3D24438F A2B88911B5191552 EBEF17154C2BDE56 E4600B3C52F1724E 8AB0449E64488994 C49079813DCE1787 C4CA530B24EFB385 FF470BA9833B51EB EB75706863A8EBD3 E8F3AEABDB4B64AC FBE0C6E1163B88AC 182F3D3BB9E6B822 1065063BA34DB183 077984690D329D18 AB15FA8BA9A484E4 E426B63F807663E4 512AF80192F68B10 449B8A2248112A6E 3C66CE6239E1A6EE C4E9E57EF7D2AB30 91AB4789B525D2B7 676507147ACA4DB1 979833843675A792 C4D040F6A4F9B4BC 5D9551991ABAFEC4 5DACFFBA8FF64DBD
  • Read the ciphertext. Strip whitespace: 2,768 hex characters = 1,384 bytes = 173 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9 (name). Key = MD5(password) = 34a14a42e98ff96095af56604e290cae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 43 GUIDs as hex (shown below).

Decrypted: GUID list

  1 6f90ee4e-5898-1e2e-a001-3fc27fbe4e36
  2 0176ef53-d5e3-6f49-af68-625305e3429c
  3 cdd2ef6d-58f0-8e9a-99e1-d3b7a8d4dd83
  4 b38c5f97-e73e-26fd-8133-748baa72a83f
  5 aa5659af-2e56-7457-b0c3-905b2ff504bc
  6 1390473e-6d8c-8a0b-ac91-a97521221648
  7 035dbc85-482e-2f8e-9d35-799f63968ccb
  8 117a084a-f837-0dc0-91ff-8d8b67f26f95
  9 cd0ac36d-46ff-6431-b44d-f1d54fc56439
 10 cca1c5bc-ff65-5817-9bb1-14c9bfcb73a3
 11 9e3a980b-6340-6c15-8e9c-169f60c35f78
 12 0bc52f96-3f84-5ad0-8345-0c9f9a51ebbc
 13 906b1dd3-94a9-4c3f-be9a-0efe8650f9c3
 14 7e797dfe-e6bb-11b0-82da-25b34342f0a8
 15 48a5a4bb-0149-52e3-90b4-163f1a1413e0
 16 94c72849-0a94-0482-84c1-32a5e3af99bb
 17 cc789e74-62d9-6618-92b6-78d95ab15eea
 18 14ada3a8-8152-3b10-9fdc-24490426af08
 19 deba314c-eb5f-8b43-aac6-95686b9167ab
 20 37fc5312-2061-6f20-aa1d-b0d60bcd4548
 21 3be35b12-b31a-0279-adbb-332b107dd2f2
 22 369cd268-f0d8-5fe0-9513-596edd37543a
 23 17746706-b2e3-77eb-86ca-aee311fac7f6
 24 230f924b-5967-0db3-af6e-c4165e6e10e5
 25 6da8a6dc-9254-667a-834f-96af05b7e9b0
 26 902336e5-1f4b-5de3-8758-ec124761b3da
 27 71f9c3b4-190a-8aac-92f8-f7009e852e6d
 28 1e18579e-4751-8567-bdb5-4f4b3b6be73b
 29 4442cc4b-6174-86d9-b593-eadef7dfa6df
 30 49c23d51-bf6c-4b9f-b765-bf876a9a0df8
 31 2843eac0-2e88-6baa-8d75-e22513dcfcc0
 32 79298e81-c6cf-05ea-9221-e5aa373ae20f
 33 c8b488d0-9cc7-2940-a5b9-43ddaf3dabff
 34 64435480-7bfa-4019-b0ba-bcdec7c5b2e6
 35 a4596ce1-ff2a-5760-91ea-c7cec515162c
 36 22b43837-30af-1704-82c7-06e8bb3a1711
 37 b81bb1e3-3431-155e-a132-0403f527103f
 38 ae450270-e04f-8329-90e1-5515fed7735f
 39 c8e6206d-60b1-0025-aeaf-94cc8097a52d
 40 ff4ca5dc-5c11-5dc0-acda-9a8c203060db
 41 72197e6c-e765-66a6-a210-8d431f8741c9
 42 0379039a-457e-63af-a712-4827faa8f6f7
 43 36abab30-874e-347d-be5f-a4ff96cd989f

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1682782065654150638605706588846024511805663. Exactly this sequence comes out of new Random(378).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 10 of Run 12 (seed 36,542,234): new Random(36542234), Next(8,64) per post. The RNG predicts N = 43; the post has N = 43 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-05 10:25–10:55).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs