A858DE45F56D9BC9 archive

201209091400 zl9dz

explained decrypted filler

seed 321

Metadata

Post ID
zl9dz
Title
201209091400 → 2012-09-09 14:00 on A858's clock
Posted (UTC)
2012-09-09 05:00:04
Timezone
UTC+9 · title 14:00 against posted 05:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,896 hex characters · 1,448 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209091400) = 5a108d6d78ad7c8d9a4e498d4969f006 (name+title)
GUIDs
45
Filler GUID seed
new Random(321).Next(9) ✓ verified
Run
Run 31 (seed 15,917,281) (seed)
Draw
11 · predicted N = 45 ✓
Machine boot
2012-09-07 23:34–00:34 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

226AF240EEEFC431 79C50E7A03527231 D3464F33A2D165D8 3D3E810F812E2AB8 D7BD71626D8432C7 D67A14096BADDE9E 91D9D2EEB988F997 293992DCF45448F2 A51139408C5F53C3 593D4ED752F640C2 3D4C4DD3A039CFD5 99C0C69F12EC19C9 AF874B002A9B6E57 C945934A54227801 D95EBD77EEA9E01E A814024F217612CB A830EBB4C7E41F90 7673DD37066D0EC8 D90C0B5CD44F214A A7172129AFF28E3F 006B5030DD0AE955 CBF2AD2DA03CCC81 7328E19A1F82E7DD 3315051BD116B767 CE4438BA26FCA00D 4481EF528BAD6F06 A1A0B8DADA7254DD CC209E6B9702AE8B AD6F26F997AF2733 DCFBA294DC15EF75 B2EAE601E9724855 C9359881B07E3DBA 37B7F1B2E701FF0E BEE0B2B3927053AA 6449C10310A02535 42BE8BBCDA13417A B63501E3772A8C7E F8487779F4BD51A2 FE5FA4F8A0A18904 D908B50A26B1505A B88C25B7E9200E8A BAD3ABD91CCC502D 1AAF209FDB03C77B 3874F4D7525B6A3F F85DFCBAA9D2DF0B 271803C880F4CE05 316AF523A9107E69 CF6A96B8F2D907E2 E07681342E870594 6421180630C847B3 75ABE50088CA34FC D5735103A23D151F B549ADDD173691DE ABD24A396D701E5D AFEB8BB405E41F29 B96E42CDAE77221D 2F25997B3D804DEF 1DBF0CA947AF7AB1 E13A6112017B4E09 A6232778E0B43E33 69849E44BA3CED68 780856E2B570EEED 829111E3C503FE17 FCC8BFA041784564 BB116A65CDCF04EF 9C6763CFBA183EE6 2FF48AFDB20301AB CB5E9EB881ED24DE DC9EF38CBB6D052B B23B6E19CA581CF9 A0EA93F449CC747B B19BA8F49939A9EE 4C079EE57E9F80E8 4C6690CEE2504576 C024257962E65CE1 FBA81F1578744A85 D3D45BAA1A40DFD7 4F4F1D5686B57A05 8ABC819D1DE333FE 63EEA95A25EF676B 68DA9B8736F72233 7D8AF8B970BE4FC4 D9CDCA4A194049F4 FB8DDEE40E8DDE89 BC867954B72C4FCC D82F03804F1A8343 B2E849ECAA6E976D A32E24ABF814925E A020A408FF6C8FFB D4A841C868F6475F DF912B1841CFE81C 1F18642EF61F64EF 0D5FBF0357B1443F 45906B7C84E2F91B CDDBEC5D932908BA 753ADB34253A19E5 FBBA00176743DDEF D08A786A3BD70ABF 3E98AC5F8D7C9AE6 83CBFCBD903B9EFE F9ADFABFDD9ABEF8 A0D8FC92A6077A64 4CCBB69D82AA76AF DE6928E478A24E54 389AC50815F4CC95 EFDA9B5949CE8823 018CF532EBD122C4 DE6EA40CCB89730E 1D40D3DF0400FF79 35F2CC9E0BD6C6C4 FDA1978C0CEA3FD9 91D5EFE3C9902916 DE52A1B53DDEE028 EBF18F89B4FB005B A9A932C2706A6CF8 3DFF926825BA4501 0ADE2C37F8CDCA7B 4D931DAD971D9BD6 787764A215215DE3 DBE926B2582B2F99 95227A20692F4077 710400A12D3F7ABB 5E071F9488048124 43CFD2D677769250 B25BD4608CC05B76 1AEF287AD7FECF55 8F41CC54887D8086 A3A15CF4E0A5955E E7AFC97BB61FC886 5F1519D2469BDEFE 9B55587395A751E2 3EBDEEC028FF7EF2 20D632EEB1C139F5 7482F98FB1173C2E 42BCC9EF5794D80B 18839B5AF0FD4C8E 804FFD004EE5845C 51D896FBFAA5E337 4AC936AAC1486717 296FD5C8B6AD0805 A86B0D7D24CC302B CFD3613434A04317 69B500D4D1E11D0B 908879F1E89B811C 8500356BC8A73729 D2023FEA3F5D5BBF 6C958B5498A9C86A C88839B2E4405BCA C5DB630EE4B22CE2 DDC993C68BCE082F 50797AFBB0AE5618 1955A1D67A715D73 05775401C070903E 499C7FB891C217EC FE10FA0AC599B99B 975EE41D23BBA552 5E2079C20DB41157 201338D4C238B709 913119964D1AC1D0 9FEAB91B865C5686 9139AAE0F625FEB1 484F53F41C0DC112 FF4EAFE577D591CB 0CB4C9C477D79986 BA841A35EC0A86F7 C5FD8B7F2AC279FE 5135CEF1DC88DCF4 F0A8C7858E687C9D A5935B1D29074B0B BDD8AEC8A3BC9A47 3A00F9AAF8F05BD0 BE23848982A1841E 922805DD696EF1B9 0327505AE11472C8 D7E7942DE38F29CC 462D026C52FD9D19 ACCF8E309DB0F990 048572003437650D 29737965BC824CD5 9A43EEB7B425C56F F30B9DF24C018E4E
  • Read the ciphertext. Strip whitespace: 2,896 hex characters = 1,448 bytes = 181 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209091400 (name+title). Key = MD5(password) = 5a108d6d78ad7c8d9a4e498d4969f006, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 45 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2f9ccad0-903e-32e8-8208-22c61a632a00
  2 fe8c3fca-00a7-06c0-ba5b-5ae969ec3ae9
  3 6e58230f-c06e-18e7-8973-23f96c506da2
  4 33c12818-89e9-02c1-acf8-5a8166ce4de1
  5 956c549a-c08c-1ca0-b79f-bf6803c8b23a
  6 97681a31-5ebe-025f-ba3a-4af8d99aa87b
  7 091e5d5f-cf31-6304-b768-06a5bfdc0497
  8 17a819f3-acc3-4aaf-abba-2bc65c366e3c
  9 2392d468-3d94-6a66-a7f8-e520db382764
 10 0f6f4016-08ae-53fa-8144-42044f9eb03a
 11 eb413b4e-57b8-70e7-a1f9-0c37a571848d
 12 c5756ebe-2a49-0bbb-8f31-f79c946d984a
 13 3eb57718-f340-221e-bddd-88f402372d41
 14 90774bb7-7371-4aeb-9f59-526a16aea8ca
 15 7658a624-3de7-6ec7-b919-46066365782f
 16 e6556e0c-ea66-4bec-a970-d92f0173a52e
 17 b55477c0-2be4-709a-b690-6c5c83cb43b4
 18 c0c48565-6f47-002d-bf92-b1adf6894d72
 19 9bcc8beb-c298-320f-a6b4-daba2afa5de6
 20 7fcbf974-f958-54a8-9d33-d431438bfc24
 21 65a703ec-ac4f-49b4-922d-f0bf8ac9d5d5
 22 c5f9ebf8-39ab-5832-a71b-696eedd3259b
 23 1c5387ef-7c32-2f72-b03d-631749342824
 24 3cf9b609-60b0-1bb7-a039-a55858bc8e8b
 25 cb6caa23-0712-1781-8948-d23df691383b
 26 71431940-d50d-8876-b719-f0cc1bc3e764
 27 0b246920-169d-8aa4-9057-9243a09a224d
 28 8e21d809-8de7-50f5-a404-d74a65e73d93
 29 0987e9e9-c66b-1ee2-8742-227023dfc51b
 30 4e56b2e1-ab5c-5de7-b697-1835ab6c0b48
 31 53d298be-41d6-6c25-be5e-b3a9ed957bf0
 32 e443141c-439b-01f4-a0e3-ccab4e3b96f7
 33 67414727-eb77-339d-9cbf-6e57b85b9809
 34 65ba60da-e6c6-0b3c-94c9-0cbfe2e01b46
 35 c57e0f85-c0ea-6d17-a831-8aee152f14fb
 36 53dfb75f-ee5e-6020-8a70-5dfe9620d793
 37 88eb2167-60b8-8b2b-b648-22fe05ea8b90
 38 2f8540cf-e496-1e65-855e-e9f540a3164b
 39 e296c40b-579b-2e46-ac73-04151c27912f
 40 39b4fe16-d8e5-2968-a195-0f2d9d6171a0
 41 43bbeda8-7bfe-80cf-bfe7-76e75f6de8d2
 42 3ee1419a-bedc-804e-9473-a05140b57d22
 43 31690a9a-d35d-7987-9026-9aa251cc9027
 44 7727589d-01ab-5e1f-b03b-57facb927494
 45 9cb8ae2d-9a81-1882-bcc9-2d8f651c6126

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 301010646570246470354521188515603066812288751. Exactly this sequence comes out of new Random(321).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 11 of Run 31 (seed 15,917,281): new Random(15917281), Next(8,64) per post. The RNG predicts N = 45; the post has N = 45 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-07 23:34–00:34).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs