A858DE45F56D9BC9 archive

201209041000 zb6wb

explained decrypted filler

seed 362

Metadata

Post ID
zb6wb
Title
201209041000 → 2012-09-04 10:00 on A858's clock
Posted (UTC)
2012-09-04 01:00:07
Timezone
UTC+9 · title 10:00 against posted 01:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,768 hex characters · 1,384 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209041000) = 63e59f7b797be2ceb04a425a091b563e (name+title)
GUIDs
43
Filler GUID seed
new Random(362).Next(9) ✓ verified
Run
Run 27 (seed 1,337,299,625) (seed)
Draw
40 · predicted N = 43 ✓
Machine boot
2012-08-15 10:07–10:24 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

E1EBAAE2377700F4 90295B930B76CFD5 39C3DC17742A7045 946E5DF0D7620CB3 4217980B1A0C64A4 80830423F3ABDCA4 5261688B6536C8C4 3A21A190ACBCC552 B1E97A43C0FC83A1 B58662BE9B859A1B 089219330DB5E8B8 FFC3CB9325696E3F 229839DDA3A281CE C04410B00EFD736B A9B261925124AD32 1073B10DDFC0DCC4 DE11DA28D1E4BC8F 5C9E9ECC4F25ED84 02664E20828A014A 498F1744A51502E1 3EC2B937054DA160 05E9D79CCC841EBF AC9715F5124BD604 1D49A81FFD0AAD85 451BBF9AF04C796D FA23B69F46D727C6 39C30A23B03500F1 F0D8EC1B60DD22BA 09A206BEA5C6E6BF 79ED68ED3BE9DB25 8F16A469C66D4A47 983305E45F73C03B 1D4E08C2539754A1 BC3EE92F065A3791 5F66FDE7772FE771 6FE83B2ACBE50B63 2DE7BF4047BAA668 04F7CCDD202F7BC9 92E1781A5B0AE097 2E9AB5D5300F522F F9EE75DA4029CF66 7DFCE2B56FD79172 79CE71A300EA6786 FDDA77A0EAD86CBA 8B964C30F86093B8 EA135118993F0439 BA99835B3F52351E E004B19AA55C9F23 10658DE52EE6E213 563108C83C99777E FF633CE1F7C3D39C 83CE2982CC2C1E7F 1CF24F2A3099DED6 FD497DCF6493D8CC FA9FB2C1791A03F0 3B388C00C88B6097 AC260EA8935570DE E5C664140A6FEAFD 93C5441E9CAC6344 E943D4861D0B3CF4 509EF40DBBF20727 60F17AB879449D09 957BFFE7D7353673 30D958BBCBDF0CDD B17FC943B338B9C4 4FC64706CA71BA3E 0A6FF1D415F922C3 650AA0C9351D9497 DC9858436346B42C 7BB1D012ED4A3A2A 4A30A46D4BDD47B6 2D1CF8A14DE5DA4F A9208821C11256BE D71F0EE5F5617768 87B9A8B62AB61A32 ECA9BBDD719096E9 4088267BED3EA163 15247255558CA1BA E495B4AEBE29FBB1 10217F2C7A80B361 2C6BBC5D53C05363 CA99127F794407BE FB50C01302D70415 74F02B4E7EF9D646 9F7CC77D53277063 62BFCAC27FC992DE FDAC8211B8364B0A AD2857DAD1C80E34 30A73762C23EBDC6 370499E0EF4F09C5 09E44284D91979FA 4CC8E85832367C60 0CBC0F59BD862776 A62A064302D2E59C 5B7C6218FC4D3445 8630EBE5E1F2C3C9 B92C8B947C45FD17 FB20A6D1A809EC4A EF80BA3EBA4629C3 BF1093655BCA094B C345532A0C978273 F065E54DB992B183 DADE3FC84EF52DE2 87650457233E98CE 90E43FE69C1A2D35 588117B539F8B4BB 30F39D9118700581 0145F5F0432E4F6B C11B5C5AC584A608 6FAF1C64420C6B36 48BCD30F7F172FFA 1421BF1DA0B86AAE F51A274CD35C21FE 104946D4C3071812 1A119C0528B8DBB8 5B65E316FCE166A6 6DBB36F9ABC8FAFE 096AF25EBDB60291 FB5385FF51CF376B 7AB9EEF788CC7205 80C0623B13E170DC 047D10F838CA2171 60B6A26FBE0C413E F4BA291DD718B43E 24CF11CEE13F4F55 A5425D172E46CDDC 686F39DA6EE09E60 0963523733F5872A 583353DFBD18D37A 4093C5F84212C0D6 A37620CA5D77C2A9 3FA37DFFB4DDBA4C E1E31AC6EE2FE432 8E973C8389C59D6F 82F3AB2BF847E242 EAE04989ABE18E17 A8AB0C389EF79EB4 A66A8F3F4D2BC7A4 9F96AF071478DDB0 A2B51EEAB115A7D4 DB6BF826C42BBDB6 AD59DFA89C56760E A2FFFABCBAB99463 1B42EFDAA1C199FE 241F31EF7FDC7714 C835C5930D4B041C B4AE73E1BDDFE22D 5C02A4CB416336B3 CC21B44CF3A36330 D25E354E847D44C9 91D9556C3E91D661 666318A270B1E805 1580C4FAE04694A9 45DC5C7FADA9215A D2A7063CDE726242 29E01A4F5C0814CC ADF84F76CB4CB44D 44739CBE8A9457FD 63669CEE47A5AA93 43812A55727D6E88 930A4B625EDB0F20 862FBED9F6AE4ADA 4E051377B5D8B67A 6A94EDCAE2BE5E35 3B5E401CD938506C 78364F3EC0E063FF 8BBAD0CF8BA5E0D1 3930948CE3C8630A 9DA60F9C4BA65FA1 943B159ABBE5A1DB DE70412C7A12C75C C881EA84B4855034 ECA4E3378635720A
  • Read the ciphertext. Strip whitespace: 2,768 hex characters = 1,384 bytes = 173 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209041000 (name+title). Key = MD5(password) = 63e59f7b797be2ceb04a425a091b563e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 43 GUIDs as hex (shown below).

Decrypted: GUID list

  1 661a4744-4b8f-7764-bb95-24aa17034357
  2 91bf0855-5c8f-029a-a9bf-06fa6542ddf0
  3 3e54b80c-8f9f-75c3-bc8d-902ef984cd36
  4 e437126d-118e-7110-a760-2071819ebf45
  5 b21c33d1-3211-563a-8876-7c9d13cbbe29
  6 bfa40857-0a2d-8990-b8a2-4032f0fb514f
  7 fe8acfe7-542a-0def-9420-f10cfd24d1d5
  8 b99d56e4-9a94-0560-ace1-3fcba13b265c
  9 388d012c-78dd-64f4-95c1-63ce01f89b96
 10 0f39d848-a3c3-64d2-b5ec-8459884eb4cb
 11 d68730ad-7c31-8c33-8c13-fbd6bdd135bd
 12 06cb8c8a-b381-0424-9620-7abf31708a23
 13 dae52ffa-567c-4908-83c7-1390067ec060
 14 6e480a7e-47a3-748d-90ab-57fd379bed16
 15 673060e9-7e45-3b23-bd70-3f84481b3e73
 16 7d2efddb-291a-0166-b5e7-f5b1e1f35dd9
 17 8984e605-f2df-045f-a86e-9eea3b6c3ac0
 18 595bfbea-bcd4-3821-ad59-82105ca8f5c1
 19 0619ed70-4b75-47b8-a757-9db431e76680
 20 0fce97a3-66e6-4208-8ebf-0788a2b6f000
 21 01c0b5ad-d752-8ab6-9847-c77e1dd6d546
 22 e144b114-17c0-5c00-8827-f3f70b13b8fe
 23 15f149bc-31b7-10dc-ac81-ee35879f0d43
 24 18730e55-10fe-46ee-8f4d-4685b3eae380
 25 25e304af-fa64-1e91-b129-8c071f167ae8
 26 a0589006-1b7f-3705-b086-b7e79d88757f
 27 f112a950-d68d-198f-b416-6b3c4c3c391e
 28 7b769912-ce6a-8521-a62d-8f30b885cbfd
 29 66f4447f-9e9c-4ecf-b03c-f1e85c9d9480
 30 83f80da4-491d-5fe2-b2de-ec54d8126e80
 31 becea1c3-1a33-74dd-abfb-4982ec207de9
 32 bcdd44a2-8e56-767c-be46-6507b6ee869d
 33 f211020f-0690-7285-b6ee-ac2fa8a79d9f
 34 558e2bd8-914f-0791-8000-919b9bbcc787
 35 7196b263-a939-047e-8172-8ccf33a9f264
 36 6d5cdaf4-85ef-452f-9fda-fffec13ac1b7
 37 e8418b72-34b1-82c7-b003-d5cf4dc2c0eb
 38 e32d4629-baa2-085d-bc29-368e98cdc01c
 39 d65df2f7-9baa-3d74-8f15-04200b28ed8a
 40 8df3f228-357e-4db2-b47f-8d4c50ea80f8
 41 ecfd9d9a-ec97-39e4-a51b-393d4795af65
 42 6abfe784-e38e-2336-a929-8dd86b3584fd
 43 9110cce9-3a65-234e-9418-33e0eb393ab5

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7077580066804730034485141318457770048034322. Exactly this sequence comes out of new Random(362).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 40 of Run 27 (seed 1,337,299,625): new Random(1337299625), Next(8,64) per post. The RNG predicts N = 43; the post has N = 43 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-08-15 10:07–10:24).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs