A858DE45F56D9BC9 archive

201207092243 w9pj2

explained decrypted filler

seed 921

Metadata

Post ID
w9pj2
Title
201207092243 → 2012-07-09 22:43 on A858's clock
Posted (UTC)
2012-07-09 13:42:10
Timezone
UTC+9 · title 22:43 against posted 13:42 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,768 hex characters · 1,384 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
GUIDs
43
Filler GUID seed
new Random(921).Next(9) ✓ verified
Run
Run 15 (seed 117,733,640) (seed)
Draw
14 · predicted N = 43 ✓
Machine boot
2012-07-06 08:59–12:59 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+namerun: seed

From the post to its content

As posted (encrypted)

63CD5FB5499389AA 3DFF7476EFA5E16B FAB4EA948ADBE10E 61F78C66A48A4AF0 23AC0EE285682DE1 DEF4ADE216EC9E16 D7CAE29FB941C35D 3C5CCD319617729C A4C0D5C365CFBCB5 B1D81181852420C6 2A4A9EE856133513 9B7580AFC23EBE69 4B92A82C30309E3C 053FA3BA1496DB50 4A0BD36365334594 D83A6502151142F7 C44649C8D5C6CFCC F0D07C7C566CD9DB 67BAF147F0AA47AF 57454D2215FFC971 342D4384CEC2E6D5 1174600DF59B1A23 E9A1719671B4D45A 6F08B72103D05A0C B2CA37DBD6E6E8AF A9C9F78EC95E40B0 81F94CA9FCEAAC37 035BFA886F516C68 5B10E26D64B10C77 897DF0F8C7E72705 96F8657323830052 09FB62573CC17727 9138C3FC78F95A5A A48414C8F08C9A40 BAA5A7D381FC51F4 5C4AEAEEB5603E0B CB039788D13F2FA3 41837903037BA819 625F8F03E621C818 F4F8AC7EB703A13B 10220E6B1D069625 F05E7BA9C42492DD 7FD7CFC2EC517E82 FC4D6858DD72AD16 B3242D0A7019F614 70019F711E148376 D72C7E64394EC7E7 231E1894C7F3E28D 043A7B323DAE26ED 855511457902304E BAFA070C5C7FCBC2 EBCAA8C77DFD8728 3D01586628390500 C1E01E9D178B3F25 8E55ECC23B42C878 D319A77225F92F3A F779C5D55CEEAEEB B4FBF66E88B055CB D6FBAAE8DE1F7824 80EE49B4FBD35297 4E02AD3C03867E60 BE8D1DB8C5074AB7 0E80CD9B8CACD3DE CA8C55E29BDA243B 4030A801A5BE0BE5 5C5565D84D938C20 1AF26EB919588B4E 434EE587F1E1F9B1 AF714972844EEF85 BD990770E2A709B7 E1E9F24FDD94ABE9 88E5DC3730BA719D 841903240723D0C9 4708D7E8B23F0295 48FA9E3CC28CAF68 7EF43CE981A0A3B7 2F7881C645CA844D 568CAF81CCF1CC3D AF2AAB9C0E72515E B657357463F4C468 B2954A95171A6BBB F6593D28E1DB5701 D6A871447F04CAEF D7697FABE3CF1C8D 16C52F875B0BDA49 A6B37AA253549AD6 3E0F0F6CE9C2B2DE 70A9D55E513D9ED6 93F91EC9D9863B3D 767CFE4F2608A5C0 B5219D419BCB5C24 A7715AC713438AD1 23C5BEFE49342A0E 821A1238DD1AF3CC A43B252D81F43C93 0726120C94F428E5 EE3FD00FB4DDEBAD BECA1B35ED9EFDC2 416411ADC1327922 772366E4A5538717 E3C18C7A2828A51B DB2CDF865E3857D8 E7888C3DB5FA379A 95BB2F899CD24C7C F22D7C9FCFABDC42 F23CA7CCD4C93B7E AB03048879ABD9B9 7A38FD855A385EAF 7C996D4C27F2AED2 AA0A7FDDB21ED733 C3B86D2A8FCBD32C BFE3F69038B17825 45DC662FAC3E33B8 3356E9FE57FC0122 F5778B437AED05EC 733130850B5F7830 2320F174A3BAB8BE B6F046FB6C3B47AD 6497D5DCFE4EF334 2D860BD48EADF97D DF0A51A23C47A441 EBD325D36F767822 8469DFED2B35AE3B A8A022A077303F8A 8816D069136524F8 2EC0B31D9C20ECFA AE154C5ECEE40E3B B23F480EFC12C1A1 9EAD8F887B2EBC70 84382B5A5817C838 925081F36BAC01EE 6152FBFE9BD2C89B 2649BE287D2AC883 68685D146D0C9EC9 FCA0B69CA012F91F D36C7F14D3007206 7DA27AACF7C922A4 C30237183DE2F948 149A8467034C8D65 58D497B87A8FD407 4C3DBE616933C2C1 8B125D686AD9AF9F 3311C797A615EB62 5A39482A72F199FC 2939DBF82FA590D4 216684E8F8335D27 A20677597333522F C96F1512684B0D92 5661624AE8AB61BE 81D0B0629D328EEA FFF2D9CFE31E7DF0 B2FD8252C6539336 5D94F645CBF4EDE0 2F7D4BBFB419CDA2 AA41258954744B02 E948D578972B398D A05C676EFE7A0E62 1FA4B692192A485E F3EEF682C4AD6106 2E606DAEC799B945 B95D5D72C6213F94 668BF45459EC8FDD 966729D7C4DCC19A B63CEDFB8EB2999F 8C1DB693F9D5F4F4 3C364F40393C1B6A B7D1D4A9DB731B5A A3AF9B65633E7655 7947537E52CF2695 E2F8EFC202E16FCE 60F00E6E4F217152 CB3DAA50C8CA8BCF 12ECFFDF2899BD4C
  • Read the ciphertext. Strip whitespace: 2,768 hex characters = 1,384 bytes = 173 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 43 GUIDs as hex (shown below).

Decrypted: GUID list

  1 af8e8fef-81a5-761c-96c3-f8633848a17f
  2 0462906b-6a70-045b-a366-5c82b863f4a0
  3 b1eb7335-0bcc-4252-9b9e-ca7cf89173da
  4 7d0060e6-f46c-12d2-b012-62ab1470dc46
  5 a90fd49f-9a58-09a6-9a72-c61ff424f1e5
  6 4493ac96-bdb1-3011-b05b-9601e247be59
  7 1aeec8c0-9817-5af7-93e9-a4bc70546b4d
  8 50bc2159-2772-45dc-ae4d-cd9e67571c1e
  9 3bd0b848-bf7a-850a-8466-877870f37155
 10 dc062ee9-6014-802f-b288-174a299c3a33
 11 acf4536d-584c-7077-9581-9bc245802379
 12 a4b10661-6720-464a-96d6-b5fbcd23cd68
 13 d8da070c-cfbf-6cb0-a8c6-4e0cf6acd720
 14 aa5a459d-b5a4-528f-ad0f-a166cd1be28e
 15 d76f9dfe-7d0b-5aa7-98f6-55d99fe94cce
 16 66607eda-de81-1c7f-8d14-6aa842e23e3a
 17 889de436-05db-0e00-9de3-a38d1e2c71c7
 18 e37e3e7f-7267-0fad-a737-16353aa546ea
 19 afbfc0ec-f40e-5534-b6e4-2876df8d236a
 20 07ddaf94-4768-896f-a622-fc93c46dff40
 21 247ae992-b5b5-1fd3-9e20-a878438c8d28
 22 ebe697a2-2b05-710e-a4b4-ef6adb485248
 23 ed9795c2-7ec5-5440-93da-f455df99f2c0
 24 bd3ddeec-284f-71a6-95ab-de6afe049a51
 25 2590f855-3d2f-84ca-891f-7b294fcff788
 26 4ae99e42-e2fd-826c-b85b-e75d5e42b72b
 27 57f8bb77-824b-6954-a7ca-2ffe726effa6
 28 2afa728c-42a0-37e7-9ddb-48b95100b1cb
 29 85b4c1dd-da0e-83f4-87b9-98735fc7a0f5
 30 853093a0-23a4-7a20-801a-558a55c78990
 31 076773b7-0fac-1d66-b1d8-e4b5437d1ccd
 32 f69073f5-166e-0eec-931f-15001198037d
 33 123aef1d-9e51-5169-aab8-0272269ac6f5
 34 80e36aa3-00cd-023c-a3f2-2a35e56032c7
 35 98f260ab-00a8-2a1b-9050-a89a4446987d
 36 c59a2026-dbc5-696a-8a34-7254922e0cbd
 37 dc6f4729-33be-8a45-a216-dfd904e20d57
 38 8573cf18-24de-0ebf-a76b-3a7f3ed96321
 39 5c5fbaa9-035d-0510-b224-1445793421ea
 40 649e08cd-76fe-8165-8074-95fe2c073900
 41 b93effa8-c601-4fe5-9486-9ef534d8bd27
 42 7ab54bed-db3d-5d81-815d-a8d926574b4a
 43 f48d3c11-4d06-0e1a-a392-94f1a12653b2

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7041035488746551005817578863871050268008450. Exactly this sequence comes out of new Random(921).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 14 of Run 15 (seed 117,733,640): new Random(117733640), Next(8,64) per post. The RNG predicts N = 43; the post has N = 43 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-07-06 08:59–12:59).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs