A858DE45F56D9BC9 archive

201208281631 yzax4

explained decrypted filler

seed 132

Metadata

Post ID
yzax4
Title
201208281631 → 2012-08-28 16:31 on A858's clock
Posted (UTC)
2012-08-28 20:31:03
Timezone
UTC−4 · title 16:31 against posted 20:31 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
3,600 hex characters · 1,800 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201208281631) = 65543531a50e9b7d2e0f9ea33e40a9fc (name+title)
GUIDs
56
Filler GUID seed
new Random(132).Next(9) ✓ verified
Run
Run 26 (seed 1,159,248,375) (seed)
Draw
2 · predicted N = 56 ✓
Machine boot
2012-08-15 10:21–10:24 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

AD35AC4EB7AF955D 2A3E0E047389ED39 6D9C082058AD8B4D 9185EF32D258EA00 EB0C4EFF156BA43B BFD99354A918D477 9319B28432B7613B C3B82CCF711740D9 23110408FB97B9CB 505CC2B6C7963B15 65520445BDADE4CA E82968EFEF45000C 97810AAE136A00A7 23937D59AAB18163 6FAEC30178DC0551 A07D02A2C71106C9 9B9B6A67F94E271C CA1B41C864CD399F CBC425FD0FDFD553 09D053E042CBF847 27A1CA8002AB23F6 BB118D5148AAF6DE 5088BA803D9029BF 535A3FEB064B5806 1AECED8850CFA230 31B75E2344231B2D 0B23B1B105C722D1 DB13FEABC7BB316D 92EAC6C0190D83C0 1862CE780AF0B9D4 7B7BC69F657736BC 2E38D96940B1F062 CB13375FF37E820F 7FAA1D58A2CDD04E 5042CE624A4B117B D66549AE2E15DC5E 53A376DD11F06D3B EEDE93F128527EF1 21C40968D071CB2A BF332A80ED80F123 01F452DDE92A4237 07BF3AE9028DAA04 03C3BC2F01BAE1DD 3E065EF8AA0E73F2 5E3C47658B494A89 7A73BFF474319A10 C05893EA67BE88B1 67AD6580438EB4D4 A704A20FA25571DA 1C12A263C04ECBAD C9D629944972E9CD A1BDDBCC7252C353 E8CB52C1DC532B3B 589EC1623BB5239D 7C59EE94AD739AB5 83CA5A3958434A64 1511B4D48921AA0C 02470315E1A5CC6C 9C403D174B4E16DF 5C6D298EAF8308A3 306F045B000B7502 3649B5A28D09381C 4BEB27D119976762 D55BCF0F0BF1EA1C A935D069E22063C4 6DB4738B860373BE 9660F1709B9A2757 52C1FA78BD130980 49433484AED691F1 4386869F69B959FA 367DCA4EDDE40823 49545A5E79059868 3A5CAA8C8F1C2853 4DA9B96F3452C669 A33F0790B0E947EC 9B34CE0046BF8F2B D2D1EE00B43DC7B4 06ACF921C9D4A208 52B275EE7521AFB0 48171D3FCBE47BA8 4A8BD8F88D3BC7D4 68E25022B20FB437 C8F21BA3E54944E4 804545E94BBD8C1B C091537A698DEBC0 DE3CADCA6A49569B 0C96292BA7774FE2 D84B024777FD35CB D5571297306D6E8D 85D0A284530C767C BF5846E0C2DC840A FB684863307F5347 02561035CE5101E3 9AA4587CF9CF1026 D20F2E2A281D6CAF 3848803D32A29F36 B172F3681C85ADC7 F25E58453E99EE33 8CF19716965769DD 5A7E874931490DCA E93AE38846C88D06 7209388052B3D2CF 9270A8AAAF56611A 52B99E3867B59BEE 710148B287F8F914 9A0E64BB47019D6E BD59A20A0063B009 FE12F3D8C91CD049 B44DD9CCFAFC51CC 055D184260C7171C 0D34690703D49679 92CF0E15D7577173 7F4417E42F64A802 68281D1B4CD1FB35 B440736C660E733F F15D8EBF6CB7D6BA 6A23B534D59861C3 023932ED606DE196 22D55D5FA29BD114 D8F37C8BB78562C2 2C3B42EEBCB49390 480B50B62F1F1BAC FD17AF2FFE61A9A7 24D9705C7F185FD7 C5D863C7C2977929 7194F0A5A216496A 431FD6BC368619B6 C288C5D63A71BFB8 62FCAAB141FF175A 80A3EE2497EC5DF0 CDA8A0CF71BC5BAB CE527B9AD4648A42 8C378E45EDD8A1A5 89066B33F0631BD4 3DB5F150E49B8DAD E57B75F715B2B0F1 263C313365D84CBC FB0853519821DA2D C7BBAE5B3E4E3059 A0F71DF0C2959158 852FCB48925DACA1 0A3E30BE1AC557CC 0A88FB954CDB4A06 ACBBCCC1BFEC5B1C 9F5B819F8F7DC572 A2433D270B0FD1DA E123A693AFE4E4CA 96EAEF5ACBE85F42 ADBF71B1775528D1 952A80BD84A5AB3C E4869A57205AF4EC 566642BA92A6C737 ED66659F2A95F41C 0A6C511ED7C6B189 F7A83128A7AEF319 BD1849A7F5B782DF F5424A24FFB4E956 809606FF0A845FBB 2DD1470FC1E89F92 AD195E02F28CDD80 D045EFEA080EA7B9 74F0E1F4D038EFCB 9F840F85255EA8F7 6C9103859805142A D5388073CC06C9B2 801743C89409B51F F097DD747DF47E85 089D4FC4CA5B052E 75D701208B8E47F1 8ADE0D0DAB5A037A 322A9D628855B439 6B9F707035CF0ADB EB700F97E08F68B2 DA10E7D7F80D2F84 189740A55D6B6F50 8004A0E77717F3E7 01ECA07763CD5F43 C82828F7BEB64A59 BA99DB5341F4FB36 D831C41D0F27D641 BBDC8215A939A24E EB8B1247A4B3B9A9 190B2B4AE8B2354F 7385570EF9AA5116 E65E2D502C1FD128 F7F7A5FE35479965 EBDC690C88464B02 FA078589270F25E5 85F01D2DC5CD7607 72656B92F3758440 B20D6D75D6B49389 39006D9D42E34225 B21439DEB9A40169 FBD02F7A290943DE AF5B05FA94D2C168 403AC36DE6636C6F 1416DA8516B075EE 16EA40B7F5D86D53 6DAC200D7CAAAC7F 028CD13EE719B6E0 5E80DDB7D3D66614 6C52D262B1DA0217 3A326E5F96C56F47 39B59B0C447216DE 8A8AA978DFAE3893 3864CD638CC039E2 CEAC51C1FBB07C3B 8942BB8A1C550C16 DB27AFCA158C7D0E E03A7D5D164F0275 540C0779F82CDCB6 AF61604C03CBCD7A FA834236F9E9CC39 0FEAE7EAD08C75A9 6479059AA7D60BAE 612C7A76B384D4F5 9F9A0D0C078D6902 AB855B05DF39964E A69F387E2BA62FE8 759E9548046AE04F 0FD7A0FE7D6E99E6 4B9D98EFAEEB2CEE 69FFDC98E0521081 1791D77D80B0934B DBBBC87906AFBD71
  • Read the ciphertext. Strip whitespace: 3,600 hex characters = 1,800 bytes = 225 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201208281631 (name+title). Key = MD5(password) = 65543531a50e9b7d2e0f9ea33e40a9fc, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 56 GUIDs as hex (shown below).

Decrypted: GUID list

  1 beed12e7-df10-6539-ad73-c218482dd3ee
  2 7196ea4c-72c9-4f67-b18b-f3c24ea33fb7
  3 f55012e9-37c5-08d9-afb7-00fbaf80ce39
  4 d3a96946-ca4a-6948-9637-f7e59cffad7a
  5 c945c107-7c16-70db-88aa-1bf8114e7248
  6 ef9e5249-968b-8af8-8806-5d2030d6a705
  7 8d902176-87b6-0e9f-8594-1c1f8e5ea9b6
  8 6dc94db7-af24-57cf-b623-f808be3a54ab
  9 3e4cf9a1-aa87-2340-9a12-1519f967aeae
 10 ecb33ebf-c23d-8587-8045-a2623fd0d10b
 11 3ed92e68-a903-4746-ab70-f62a0cda7f00
 12 8941e3a6-dd7d-4927-ac3a-0387f40bd16a
 13 bec38c22-3111-3776-9608-9e63acc15ad0
 14 b9279c64-b6bb-1876-8d9b-8a97e769014e
 15 c3e31fec-7a6b-34bf-bc28-98fece8234df
 16 78987a30-ab69-47d9-b565-e1fcf8c38286
 17 9ed4f3f6-78e0-37bd-8c11-b8961a96e149
 18 ac554092-ea45-7340-8e50-9137992af0bc
 19 01736c19-6d0f-284d-bf23-41c37c55cb62
 20 17e62915-8d51-3104-91a7-7d4dd5e9061e
 21 15a9647e-63b7-3d2a-97be-936d44dea478
 22 7c88f326-effe-21b7-b79d-d3a5d9a93a9e
 23 f8af1eeb-edd5-23e8-8ba8-e53ca209b766
 24 e1d399a7-109a-136a-9239-49e679afc916
 25 f83d6795-07fb-5efd-bd39-d8f8b4f618fc
 26 a5d90c76-8dd8-356f-a5e6-7a396c91953d
 27 44efdbe6-68b1-32e8-931d-79ea82078240
 28 37023b20-a9da-4d3f-811d-b54fa2d2771c
 29 e1e05156-82d2-0f88-8cd0-96da33c48450
 30 0a7e9e68-6b40-35a5-a5d5-88cbfba9094a
 31 dc95cf5a-23a5-8e8d-9d42-36a3fc392590
 32 88931023-3a25-2777-a66a-cbc75ee263d5
 33 5672109a-810d-32bf-9535-240e1e542b9f
 34 d3df92dc-dcc8-2115-8896-8f79e1824213
 35 7639fd47-1a4f-6314-a76e-af13151f9444
 36 b91f278a-f9fa-47c3-893b-16af67e8faad
 37 0d997efe-db04-3f1e-922c-17226523690b
 38 3b276201-52d6-3df2-861a-526653f9f4aa
 39 01f7fb40-99b9-8611-8c65-32cb059da783
 40 67b05304-793a-8702-870c-51d2a4e77e69
 41 06a1485f-a3e2-7719-8587-2a84c5e198ff
 42 6c1c4754-962b-3abf-9426-43773275416f
 43 b6954ad9-abbe-574d-aa71-4924dd49c1e0
 44 6f1fe5ef-94d1-1abb-b6a9-cb4746fd1cac
 45 6ef93a82-7f7c-4251-a818-732505c36afd
 46 06ac6c9f-cc7f-06f1-a589-0bb703a35791
 47 670b42ff-aa5c-27c1-90a9-c992375649bf
 48 b5610c3c-7ca9-4aaf-b30e-9123690b091c
 49 08fce896-efc8-0f33-84d5-29230ffd0b27
 50 26c34c2d-6523-6f7c-8e96-5790e55dfdee
 51 24bb82f3-b280-6082-b39c-4842a7b4c800
 52 587c0c05-4858-1823-bb87-f2ef1f4ba74b
 53 dd87b12f-2dbc-4dbd-b09e-9b79a126bb05
 54 e9b595cc-10a4-39c9-9ab5-be47e0902759
 55 2142d53e-e0bb-5eea-952e-0e3a65eb2d8b
 56 c022e832-f005-41f7-9912-13a48693d1ab

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 64067805284431343723322153340382326433887351402406614354. Exactly this sequence comes out of new Random(132).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 2 of Run 26 (seed 1,159,248,375): new Random(1159248375), Next(8,64) per post. The RNG predicts N = 56; the post has N = 56 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:21–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs