A858DE45F56D9BC9 archive

201207202318 wwpg5

explained decrypted filler

seed 831

Metadata

Post ID
wwpg5
Title
201207202318 → 2012-07-20 23:18 on A858's clock
Posted (UTC)
2012-07-21 03:15:52
Timezone
UTC−4 · title 23:18 against posted 03:15 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,472 hex characters · 1,736 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9A858DE45F56D9BC9) = 0dcc4bd9e114ebc42078977dc9125404 (name+name)
GUIDs
54
Filler GUID seed
new Random(831).Next(9) ✓ verified
Run
Run 17 (seed 38,757,453) (seed)
Draw
25 · predicted N = 54 ✓
Machine boot
before 2012-07-11 16:41 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+namerun: seed

From the post to its content

As posted (encrypted)

F3B1D8852B28A0CC E3B5923F1E5F8099 94DF8409BBA18185 3D56B96CEE763E62 1DA0AA74A2D7AF16 AF11915EA78DBCC7 204EF2EE8A0A2E44 5428A1A6F92E9435 3EE911CAB823BA30 DDEF21E35CB5D53C BB918360D2B1FF7C A269D76B43B2BF87 790308D70DDEA6F1 21ED850EC02D76E5 476A037E9B8397F9 EA1CF0C49E146218 A65016020EAA256E E42241696D8D3DE6 A9C2650398AF5DCE BA94D96B259327CE 171433560DCDA6C5 853AED98037A7A09 15D856BF5463FB0C FC49BF2CE85AB24C C294EDD2C24414D2 00F35F78451EEBFA 908EA96AF1AB4B98 42A633630A582F0D D16EEBA14CD6BDBA FD9D6B8B5BC66916 79C4C00F9BD1B0F3 9221AD65804884EE 4A0ECCB2AF050A15 B43D3D84AA1E0F64 BC858CECB603FCFC D7B932C0FA0BA443 BDEDA232BEAABD0B C0CA57545A96BCCC 4B6EBDACBB463F1D 572756FD72668BA4 567D85C295ACDA96 9BB7A515089D264B C6FA135F1282950D 81E728B6353EDF18 B3B8BBC572FC8964 5E31DACB1A217135 9F40128CF90CAEA9 23839EED6FE21C79 76EC76205CAF6E28 531A58AD1DBA20C0 C4CF362E354CCFAC 0B3D460F9440C640 BB5131790C4BE874 EE45E7514D0CC425 CC3B1C4898309379 634F3E78047D164E B2EB74C4D8E413BD D26685F5D632066D 875B57712050D0EB 938B7592A21DD2C3 87D28C6F0825CC7B 1EF2B27170487AF9 499307D54CFDCB39 F09F7B5481216193 71AD2D969908BA64 CE44AAE8A8EEB3F9 E7632F3C1FA51B88 617637B220698A3D 7C4AA75ECD2DF7B7 7A54F5C5D4720120 0F41EA5BD7D3435C 06A98EFB4E96863B 14A3ECBCDF0E7699 442E87F8BFD1B9E2 59DD8239BA7331A6 5D7341393D4C0644 9EBD92C3972142FA 061CBE1B7D00E282 5EF73AB6DF79DF83 10B294BB714B8450 7C768F64BD395F66 EB581A0218E839B4 7F76AB136525CE90 9350BC6C636B2AE5 1C5A7711AC5E05B5 14C8E08103E077A1 A920ED8DA579E0CC 9765042096DC509C A6BCCB6132E7385A 943D3BCE1E969DAE 652402B79629F0D2 F8AD976CFEC29ACC 30E89EF695FFA062 9951F9E3F7C0D896 D30A6C9D07AD5322 EA04D8460FB2112E 345C25F2428C3F08 C7F235CAE63CB004 F7CA9FA7BC936FCC 890AC2A96172A13A E4F7BB874C245C35 2E8FD83169913FCA DA0DE93CF2BFED02 D182CA43043ADB10 23339F30B23BB37E B65BE05534A3722B 8E85945ACBBAE691 B6797DC448422CDC 7044366B39FA85AA 1CFF555AECF60A5B 3ED9EC0C2E66B34A 16C2B7B373327A10 4EEAED35C7262743 3AB4B44B7A2047B9 7C20E02257FF4A47 70A431487745EBB6 4EB2788277E60C0C 51C8EEC20A8BDB06 EF6166FD3A57DA5A 3C287CA53D4E5AEC EAA9868689DC0F8D FE527F36FD8E7DAE D3852F7170D7EF62 CDE9A4A13261467D EF4BF4DAF6257DD9 11733A64B53D6AE9 8A5B365555FF0F12 B53C62C71FB362AD 25E38D1C97B20843 48052B6EB1ED2A7F FC24337340BF0AEB 7D2B4AC8186F6B90 C7F5869ACDD3070F BCE6CB70B46EA4CB 75613F9B38491E1B 9DB00185CC437B5A D79A2E0BA631AE80 8EEC8218B4E90B51 761CFA3DFA639134 9E1BE10C4C3D6369 0943E9BAEB59226A 0CD5315B1B35E628 9F586C8774F14866 108F8A6B446C8917 9113FF1C8E0F5295 6D09AB1B5E952E9E B43DAE720A5A0171 FCCDE496B3DBF349 EAFA962CCD06BABD 31C8DDDACF0ABF85 DAF370895B8D00D7 33B79D77C0ADC829 2E1D8DC6222999B9 98D2226BB4D5E0D6 B19D79422216B2A9 507A17B833DE4C51 F970195514CADA09 7984996C9CB34C8C 9E98EF9E7740C738 9BD56FF369B4DBF7 2D6B5B817363886C B3F2D226B154D9F4 92E33044C75A6FAB 7CFA48D6397A2627 2E08C3DF96127FB7 A6724FCA254ED242 12B9D241B89796E4 705352E700E5A12A 9B03CDE0727B8C74 71C1A8375D2A8DC3 EDF99C304C85F2F4 7A45624A1862B4AB 0402F267590CBF42 E1207C8F0F320280 7AAE6640D256470F B1163AA2C178D3FF 9CC6611D1A40423D C9D0E286843D40FB 50527A0620B04E8C 6CDCB9507BBAC5BD FE4A2EA0B822577C 74A17A653BB338A0 92F254D0EF3D506F 3AF779447569F610 70BCDD80D9E900A2 F34E3B084CDBA087 8620A4BF03624953 465B5BB2FCEA3376 D105289BEC5BF79A 1449E8CFE93E8D07 75E4AB23E6BC67A1 3A880FD114ACFEBF AFF687AECE21C734 3C870658B25727AD 33F3A2DAB991E766 59E8BB4A81A9784A 7115AECED90FFA35 C9E133715A2D0E96 0189DEBE0C8606DC 88FB4C53CF61E819 4FAABEDE29FA5FA6 C8B996C87A0621D5 9EB8662213C2599C 1EFCC29BEFF29627 FB7478C916DC658F F556EB8763F57933 5CE16B697D54894B A40F1FAC9E8E0E62 3BF7BEC410E3C774 F60DE7EDC022A400 C9B608090ABAB583 6069FA5166C1DC7C FEDE5280AAF2F310 F64F26BDE68CBAA3 0B1069F4E05CB618 57D4BD0CC133281D 12ECFFDF2899BD4C
  • Read the ciphertext. Strip whitespace: 3,472 hex characters = 1,736 bytes = 217 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9A858DE45F56D9BC9 (name+name). Key = MD5(password) = 0dcc4bd9e114ebc42078977dc9125404, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 54 GUIDs as hex (shown below).

Decrypted: GUID list

  1 595281ee-5c2c-7c69-a8dc-7fac6a886c42
  2 8cd34590-a116-5825-847e-76a485dadf63
  3 bc55803e-8e79-5824-be62-5d5ad18ec8d7
  4 176d4e3f-aae1-83db-82bc-99d2c46b7a3c
  5 296cc6d8-058e-302a-b267-061a6a9c367b
  6 1b421f0a-bc48-67ae-b604-a57ae3a4fd2f
  7 aca1182f-4026-2371-a981-325a4252bf6d
  8 acdae5d2-c6fd-318c-85f3-3fd6e87345fb
  9 440720ba-5a5b-749b-a4fe-22befc4cdb84
 10 91812089-411a-6e75-93ae-e4c9d9e34c03
 11 4cd8eb38-22b5-46d9-ad80-61adae2d8f0d
 12 9100fcac-caa8-2f54-be3e-32f4e9d2966e
 13 b28314e5-9a21-8a8c-8e21-a611279dad8d
 14 ff6f7b31-d33e-7241-b296-712ab72d1dcd
 15 5aa235be-f73a-5f88-9cf9-ced394097641
 16 d4e2c3e0-e3d0-0cdf-aa06-8739fc8da52f
 17 69eaca0e-a70d-1569-8c49-e87bd7d21fa7
 18 21fbb49a-d966-1559-a4c7-101a9a6f4fbb
 19 ca56f180-26d7-1408-a54c-448488211b25
 20 0a83c572-73f9-06e6-905c-b5ea9a2aeccb
 21 674ebf01-e8d9-2f69-9db7-9430dcceed99
 22 cf4e7326-6b61-6b08-af24-370995dedf9c
 23 ef401ba8-f19c-3b2a-8754-f5a36faadcb9
 24 82b04f9b-03ad-3835-9e8d-6ffcf5b0fa7e
 25 bf4d1c07-3ff8-1729-abbb-bf522919cec2
 26 d759f5fa-4347-068a-8f71-471198409756
 27 80712a60-d1e2-3640-ab13-0fdd78643006
 28 444c4484-cba8-508e-828a-22c7903b441d
 29 41b95f0c-af45-0eb2-92cb-c88f3cd81d7b
 30 37632bec-fc55-3f15-b9db-40bc570b8cd1
 31 4eae542a-427e-8f56-a2e5-7e4147425a51
 32 5ee27ed1-ece0-332f-b67b-16389586a18d
 33 2f67797d-145c-4669-97f6-219229f72001
 34 a3a3a55c-206c-7a35-b50f-bb991229ba0b
 35 b8241d08-57ee-7c35-8320-09ef2805f37b
 36 a3bd8cfa-b9cb-60c0-bd28-1baf1f13d7c8
 37 67c807a8-213f-3175-b811-5db39a1c7bdf
 38 f3a2c399-623f-6f9a-9eb1-eed9a59a2ee3
 39 7e840a52-6265-5cc9-a582-44486e8af086
 40 9c3f6f6c-4655-76e4-96ac-14b88e3c4e85
 41 2f145a28-0cfc-415c-9cd7-6e356ca56ffe
 42 91f690bc-1da4-59b3-9d9a-91f9960fb84e
 43 9a22e175-c1cb-55ac-a409-57ae42497352
 44 6fee3e2a-873d-25a6-9597-fd6341c6bfc6
 45 03c1c831-9956-09dc-8e2c-58fca04fa483
 46 b109ca27-637d-590e-9ffb-0c025a4b9bb9
 47 bffa6f5a-26fe-08c1-9e13-3a514ba06a97
 48 6a41580f-6b8d-4f67-8327-729303a844f2
 49 117f7bd6-3506-2813-9dd3-e50892f933c0
 50 cdfeac84-ef17-07c0-a786-5e68e75f86aa
 51 73756bc4-a0e6-8da5-a596-78e22365f128
 52 e567b2c9-0315-2720-a079-c644a52a0137
 53 da9fb24d-219c-4f5c-8644-49b9b1561fa4
 54 0091002d-a0e6-7edd-a4e9-bbc3acda00bf

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 755836237642875011102633103503834776365745520504208247. Exactly this sequence comes out of new Random(831).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 25 of Run 17 (seed 38,757,453): new Random(38757453), Next(8,64) per post. The RNG predicts N = 54; the post has N = 54 ✓. The seed is the machine's uptime in ms when the app started (boot before 2012-07-11 16:41).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs