A858DE45F56D9BC9 archive

201208170333 yd88a

explained decrypted filler

seed 290

Metadata

Post ID
yd88a
Title
201208170333 → 2012-08-17 03:33 on A858's clock
Posted (UTC)
2012-08-17 07:33:30
Timezone
UTC−4 · title 03:33 against posted 07:33 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,640 hex characters · 1,320 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208170333) = d3c7fae97d6eb6388cf668d4924937d8 (name+title)
GUIDs
41
Filler GUID seed
new Random(290).Next(9) ✓ verified
Run
Run 25 (seed 158,297,437) (seed)
Draw
7 · predicted N = 41 ✓
Machine boot
2012-08-15 10:14–10:24 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 2
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

1ACEA98D2B26296D 4ED9F9B3DCC74C50 F7D1D56406780D90 641748CB795C1316 8753DA2EA19C630D 6FBE2EC376E5650E 926CB3084CA91EDB 01075FED855DF88D 42D56F09F560EA96 DD994B046BAF679F 5B81C507532EC7B4 B8D0C9E2F478FEC7 87E02F22BC0F120F 550AAA4779F34CEC 109495497CC504C1 697FEBEB50A82BAC 36ADBCDE4A9C758D CAB6669D0D1F844A 40F3716B00FA1435 59D1711D00BF7909 8D3605A595377978 667A2DF32A278028 B05EDB32762AA2C5 AC1165F91B94EC8D 4B9F8CB2566067B4 50FCFBC8E289DE35 6629E70896126FA7 753F3818F22958E8 24D9D6C3AA3D0987 CE59ED7F34D371F0 A784CEDD2E8181DC A0B2A865E631CB79 1D92B2F36F98C3F2 A3C6739D8B60F9D6 E3E7218B7901AC97 5D96DDE4C65288A2 65A0924E62B1B354 EAA337077C3D0E92 D8E480F4F3AF5DC1 4A32D48CF55F6DDC 6DD5CC82F521FD10 E53BBCC295FC199C C41B33418E9DF07D 0170402679B3826B 8A200A4A6FCABFB3 B26C43AE2223E7F8 C491DD89524E5A98 3DE981B7B43BED77 55893690C2A0A49E C421217C1722C448 19F392DA9670CA71 E765E64BBE850F28 4689BEF8B8027B7C 3F7B287E1EC993D9 20BA1EE4452EE209 C956EF0AF820DE7E A13A8F151794B851 3CBD463E74A0519F 16FDF917DAFD2657 5C9BDC2C84901BCD 17B5B5423359C99B A65CBB193C612CE5 BB0C261F65C11D68 46C25DCA09367C95 4F8F6A58F4D764CD E2249DBAE5AFD50E 4796284CF40965D3 328D93547C41D458 022029CC2AEC6FBB C93B28950962C52D 72911BD3A5448F2B A323C44B44ABF814 7DF85B552CED9BCD DB3E7DB1F0ACB1AC B14770669694183A BB3AB435BB2E9022 4A58BCA34E280098 E4D2E0E50F52CD87 976F53A90089C579 A047E2FD80A6368D 4D2C893C25E76031 22CE6D4329CF203B 2FFBF624FEB04A31 2CF8A7F46DB21232 3E713692543712E3 ADD6DD3D1E142946 80510DE02B7BED01 6262AC2BC96D7AF0 33D9AD04E67742D3 7890BEF9086522A3 48C6F76631C36046 A1145889AB8C62E8 A0535F918F775FFC 0821AF30B7879EC3 9236DD83FEE65329 631ECAD76420D578 739B13939CF8F33F DE4C7525B2E3AB4B 4A604C4C77AB680B 75B9FB42674BA90B 74ABE73C8FBDB723 072C9DD55E7274E5 604E5316C90BE090 F0F712D5DA4DA62E D74C659FD64D4473 B4205CFA6A3D9395 3F9D1F61D4C3C6C3 BCC0878D046A3733 49F5E885D7AC1037 77B4925A434DF442 6E0D8A9E6E3826EC 552EBB2DD930AAB5 8A17C6F89EA4DF3B 20EF26B7C3A9178C 3F8FC23D65EFD139 7B2C5B033A034028 74E5A5BBD0E0A60F E179DD65F98F3F07 B777402F4292CFA6 CC3678563894272C E01D841DA2221589 F3BEB27149123096 80A8FB3B49A17A32 6F7F72E664352742 46F84B35F936E868 44CCA5679B93A710 80BF4CD0F218A4FF FA423D60C0B3DBDF 4DFEF14E6F35653E DE0CB01B76F49D07 CEF7661F983CB28E DB6DAD566FB4B830 D2AB6A6EFBFC1BF4 814C3EF601F38276 28519C7BA2296E1E D9D96F0A7E7E2F18 C53193948144935B 91E63607FC4E86DA 607BCD9D9803DBE4 4191FE79F4ACAAEC 182D20D551B6B516 1FAA737FA1CA83DA 0D8D17707DFC6922 947D24885C30A682 C34C73012894A8E3 4320E414C251217E 21D350C9AB235B5F 3928964ABB8A147D B5B78F00EB149678 936CF1E1FBB9307E F2696FE51BE59275 E867CE697504E13D 4D7D2C094E36586F 21F854DEA5B44891 8E2281A64508DBA3 4A4AB67258021CD1 D34BEF0E91BFE82C CBB9478D9B6E405C 56D593F832AC14E8 D500BC7663BFAC19 CA818BF26D869835 4C548806E9A4C73E 3DE764608B20DA6F E5F769EEC9218DA3 D5012AC830DB97D7
  • Read the ciphertext. Strip whitespace: 2,640 hex characters = 1,320 bytes = 165 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208170333 (name+title). Key = MD5(password) = d3c7fae97d6eb6388cf668d4924937d8, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 41 GUIDs as hex (shown below).

Decrypted: GUID list

  1 e0150179-ee26-288d-aa23-a84b99176fd4
  2 6f49bfc8-1ff1-8bb3-9623-1e21a4b38bd7
  3 3c2b981d-308b-426f-ae97-be77639537ae
  4 83303987-5a1f-49ab-9a4c-1e5f5d4014f1
  5 431c6160-7389-1546-9d6d-5058b51c9a76
  6 fc262f0f-3964-86d6-8a3c-2467f3fe6080
  7 71229c94-7599-7583-bb33-1d758be5779a
  8 48a231e5-3485-8cf1-920c-2ab3491f57e9
  9 612c5d31-06ed-7d3d-bd6d-6616595b32e7
 10 f21d880d-46df-17ef-8808-54d0b58e9766
 11 6b76d925-fb5d-830d-826c-8f58f2ca3429
 12 ad710a4f-2d5a-7b2c-97ac-8e9eb2b91af7
 13 cdbc0806-6916-8c8d-8a84-a2be713a06bc
 14 b91cb3fe-83e9-323a-ae33-0963671326e9
 15 1136bd9c-bbbe-871e-bbe9-6c558d8ec7b7
 16 288439e1-ca15-1fd7-8073-1203d3d7409d
 17 b58ba8d4-1d59-67b1-adde-49dfa82ca45a
 18 5e8b99b1-8d17-7030-b908-091814b549f4
 19 30d920ab-4ac9-4c39-bbb8-3c64bb9301e7
 20 f80c5787-7899-5a20-9008-7be732914b3b
 21 ff03f89e-ee2f-3be1-be3b-c0e7eb4bbf78
 22 2bb78570-df31-8d22-8960-6f2046f02841
 23 f001a532-35f7-0177-a88c-50fe24fab9c5
 24 6c1a1ee4-b1af-3343-82f3-67fa70a33ca9
 25 a3a06f0f-3e82-13ad-9f71-3a2ba95044ec
 26 5c537e15-6398-0b3a-8dc2-88be1d7c8dff
 27 a76306cc-5156-2cc7-9242-f35853ee5ea6
 28 1597951e-85c7-3229-92ff-75096170d502
 29 d014df28-f020-54a4-b290-83d56ecc60de
 30 2d599a03-cef0-50ef-bd5b-a032662849a9
 31 6356fd2d-271e-2f8e-abeb-102876e0b097
 32 766a918c-656e-794f-9f8e-704be5d82a8a
 33 573a1602-6bc9-8ec0-9917-09a5e25d0a34
 34 0996fe0b-bd3c-2102-acd9-7f1470c382dd
 35 815a44da-97e7-86e2-a971-839660ed50bb
 36 4339f3d9-a97b-2083-8a03-4f2b67c0f418
 37 292f226b-f700-2985-957c-a1dcf5f3237f
 38 0ae78bcf-f5b2-0bf0-a7e3-659b0eb94dc4
 39 84954a39-3337-057d-9382-f5022f3b50e3
 40 6e0d30c0-f26d-51ac-9a33-a4b348a29efa
 41 f2fa0592-17c5-1326-81e8-364092d4710b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 28441878718783816745380310235527828220051. Exactly this sequence comes out of new Random(290).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 7 of Run 25 (seed 158,297,437): new Random(158297437), Next(8,64) per post. The RNG predicts N = 41; the post has N = 41 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:14–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs