A858DE45F56D9BC9 archive

201207080643 w7081

explained decrypted filler

seed 402

Metadata

Post ID
w7081
Title
201207080643 → 2012-07-08 06:43 on A858's clock
Posted (UTC)
2012-07-07 21:41:43
Timezone
UTC+9 · title 06:43 against posted 21:41 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,640 hex characters · 1,320 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
GUIDs
41
Filler GUID seed
new Random(402).Next(9) ✓ verified
Run
Run 15 (seed 117,733,640) (seed)
Draw
0 · predicted N = 41 ✓
Machine boot
2012-07-06 08:59–12:59 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+namerun: seed

From the post to its content

As posted (encrypted)

FC44DA146B0932AA 09A1094938F2123A FC7E592BCCCDBC48 1BA2EAF19A30E8AA 0185655FCA8ACB5F 605CB8ADC734B779 26DF52882F98FE01 8650C5ABD2E57D9D 9F664490323686A9 EC856AC99CA47D95 485AC9DF8B050CE4 CF7B737A21A0E19F 76382C26A1B830FC 0EE91A40A77C9107 F08378A8DB37CDF8 90B10B2784D8F03F E2E0A8EEA7EDB54F FEF521A59DA5D544 C362F52D6A935253 B10108CBC4070F9F 8497A4F53167E698 F8E87242059D65E8 6CFA649D28BBBC4A E20F5DD42D43C6DE 45BFBAE6B50403D2 EB272B81B0B6219E 7C956426CFE9FDCB 5BC066D2B6F09054 8951295A202D58DB 573D46A3246ADC17 C8BD165903ADBD6B CA3428F1348BD45A 7DCC43ACB427D341 96999CBC4FF80DC4 14B9E25F31FE5108 D398E543D4447EFC ED0676B03968F923 42B98D0E93236E96 71E6BF4A17B4DDEA 0FDD29345F1887ED C19C3735164818B7 457FA90B87799FC9 3B8F128A9098C44E 7A33CC7B97E7CCE5 F5C003E0E832F9D0 E8D66FC555ECD709 D69437B93E096523 4226B0A496452F80 E2C7C22156480524 4AF57E35FFDC9659 5C6B7C7661D8CCBA 9B7C70E6891CD5A7 089743B6F694EF2B 80760F0BC8CA010B A33757F8186C0961 C2FB15C2C3CA0C8D 41E352A0F03C1462 7F9D7466749D85FA CC0B175631B5B565 8E68171402461378 336CE67AA2020C12 6AE3D2A12F27F4C8 9B17376939438757 5D70A64B5FDFDE44 A07D6093469CC2CA 615441FAA6A2811A 274FCA4AFE806473 1024BE4288E838F7 0CE2F5D4E3FA4D67 32D4CE908D0C671D 9808E180501A6E95 19B85C1E809BC55D 092BDD881C969B35 4FE82065B1322F39 37E9F8419C7E6231 B9913D352DC3AEA7 E306480F7FC73E4D 0D3633096ADF9E67 A258DDE7D0FE53A5 4500C3D8E06285B1 8FC1B55FD52F8E97 6D9D7D2C1CDBC04C CD75E23365F46883 747AD44A90DE3216 0785869D1A3B788C 340E053D68A0B83D EC0BC122EB7141D3 CD5157496FE62989 404825EF103EADE6 6F6FC5E2A7AF037B E52F0EC09DCD819E F265BC53910F6355 24766FCB82B9BF23 0A54C5A4C9B8AE29 A8DCCEFD386DBE52 581F013D9246F721 FD6CDE519D52E12D FC3951AC859537F1 FE610684F9C9F063 B435743370A9E249 432543E0883C9E60 B67F34FFAE4CDB62 518E6F095FDDD066 FE7BE6D0A618676A 0DEDD246ED855730 C7F991AE4C37A7AA BC3A1361C721ADE9 675F33BF7B99EE64 8F304AD0A435CE5A 8C836B9BB93DE9FA E17419256670A67D A345BE4F670C18F5 5CD52031CA4AD023 6D2817226DF5E2AA 2AF5EAD3082040AA A01E757FE2F9F457 6804DBFD97DDB6C7 20B0185706F459A5 CBEF5689EC87BD63 170A6D9DFD64C015 C0801AFFC0DFA680 7DCAB821D2B4EBD3 335B31F5FC286AE3 ED008F06348B69B8 536628B98A27B206 B780E6AE9193254A 2503225E984C0836 4FFA31EFCF9B855E B7D83A1945ED1D0E CB01585B8D3050A9 E9C779042435C40A A6326508B5E95084 0EB23122678AFD4C 67B81CD5B4C67AAE 1F68A352FC6D9B7C E17D70B77007E668 E0AB4EAC6D56BA3F B04A62252F9B3274 A05AB067B5197A96 94914B8D1F3BE417 364F724C236A6F09 583C8BCA986A0636 3CAB2C080239380E 08C75763951F13CD 32D31274FB057BF5 F61EB7A080967A08 0516EAE062591C40 E8BD6AC7FB4A3261 F12C21C373E97718 401ECFF19EA98696 4646BF31D1A02374 34CA7CFD0C24CD09 F3CB579F2EAC82B5 5934B2CA0B230188 A17BEC9735016420 31C4C53D8378758E 60730944E5DEC5E2 069411ADC5B6AA82 B65813AA0E233CAD DE31BAD1CC1ED580 6F9D0D041DAFD21F 94EA2EC94344496D BA32C1E078D9E009 21054D1EADE0A057 12ECFFDF2899BD4C
  • Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).

Decrypted: GUID list

  1 02adcf95-e27c-6dae-a491-2da185f84968
  2 3a3da735-4ad6-6ab1-a011-771dae4f859b
  3 c99a7688-5468-69c3-bcda-366f7ce1eb1f
  4 baeafd67-4255-33d9-aa08-eccdefb1ebbf
  5 4a224b5e-78d6-67c2-9184-9fcf29962afb
  6 e22974fa-9f36-7ca8-a698-72699d5e69f0
  7 3aacfaf9-6513-0d79-8dae-2efb62fe8a5d
  8 47f79ad6-6be7-196c-a81e-c9f1541d9ce8
  9 e00d35a7-999e-64c8-b873-7862afd66264
 10 09f37399-c4d7-44a2-a4aa-4610a958d5da
 11 fcacbad4-b839-409e-94a2-020edbe6439e
 12 5490bc16-f017-2190-b714-c1a73e7c2fa7
 13 197db832-bc1a-8dd6-8ca7-184407dce1de
 14 cfadaa71-b5dd-545d-934e-83c915ad007d
 15 25139ba2-0ae3-3bc0-aefa-a09977d6eaf2
 16 37c4e236-6edd-0b20-b68f-ee08d23b2e4f
 17 9ae19cda-3de3-7c36-b51f-e5798790e96a
 18 673166da-71cb-2d47-b78e-e6351f27b6c7
 19 e4a11e72-aeee-50e3-8348-c35b1c36709f
 20 3f0cf7ce-b304-8288-8d52-e8c81c0056ce
 21 d8421650-9a60-2251-bb78-775eb49598e7
 22 1c8bbf5e-9d08-4374-ba26-6e4cd4d14079
 23 02aff675-2699-8af1-842f-0e0520741752
 24 3c734719-cc00-4fcb-851a-1578eb673e43
 25 e0fb284c-64ce-0273-a18c-d74611cf0725
 26 b0a4d90c-1219-0c16-b778-74f82b0a4ab3
 27 ba0269bf-759e-5178-a453-24269b065c03
 28 493583f7-9bbc-6303-aa23-0da166b3a7da
 29 a3ea434d-6bbe-58de-afe4-a06cc9cbdb9a
 30 c724d54f-eb52-7d56-9da9-02c2ce79d857
 31 bc2edf95-63db-5237-891e-49fc438b31d8
 32 5b2f42fc-d7b9-3271-9e69-54617a91bff9
 33 871ef922-6622-81c9-9dbb-d3b8b8fb448e
 34 e7fb8741-93c7-0df7-9ff7-c0e4e7058528
 35 403420ad-b066-0241-aad6-ca6aa7d8b731
 36 7c1efca5-7b06-1d1b-854c-a79639c8160c
 37 e4184e47-7184-0cf9-9b51-7299858726a5
 38 8645d4f1-2729-3cee-b077-b22f51ee0bdb
 39 2cedc48e-3e28-1e30-a5ca-f68c252945ec
 40 6cca4648-ab1e-16ce-a325-1bef04b157c4
 41 2eafe8cf-b8d3-1e61-a24f-b729ae4ca00d

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 66636701644285307258248400565753800103111. Exactly this sequence comes out of new Random(402).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 0 of Run 15 (seed 117,733,640): new Random(117733640), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-06 08:59–12:59).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs