A858DE45F56D9BC9 archive

201209200930 105zt2

explained decrypted filler

seed 309

Metadata

Post ID
105zt2
Title
201209200930 → 2012-09-20 09:30 on A858's clock
Posted (UTC)
2012-09-20 00:30:14
Timezone
UTC+9 · title 09:30 against posted 00:30 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201209200930) = f4fca72b3a39663b18ec4b587e6e4bd5 (name+title)
GUIDs
32
Filler GUID seed
new Random(309).Next(9) ✓ verified
Run
Run 32 (seed 945,377,703) (seed)
Draw
15 · predicted N = 32 ✓
Machine boot
2012-09-08 22:08–22:23 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
9 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

E97AF26938FD8700 8C3B90C5B8C1A4BF 280AC8ED72E094FF 89FD22E94CC33C52 9F94927738EF6C74 712DC5A365E8D888 57C266FFDD625A2A AA880D594B81E451 80C5B2151DD84AEB 808C38927E4AE7B6 B59DEF75948E77A6 F5286C1BB5257B7E 36D367561716345F 95FD50E5BEB1D3DD 7F6436865A6EF9FF AE93E02ADB7BA98A 6083F7F003AA041B 37635E7322E7DDFC 2D735B1273A4A9EA 6325EBDA5EBDE6B1 33397BA5E58559B4 F4CAB53B74F92132 E1CCE6E6ABE9B5B4 F870B3A81A508987 63C72DC00976E01C 47EE52D4269E6ECB B4DE68B3325D5E7E 0B69AF5B3288C771 B2D2A8B923D3A3E0 3132A960D041C0B1 C7DF5BBB34FC98DB 51C886F6B11B73E8 5B2CD4499155C299 F0FCFB0AB50D6077 7CF490189699895C 2FF57361B730869C 5AA28C6EC8BF16CE 6B742A4ABEFEC57F 2515D12F61F5317D BEEE5B9DCFABBE1B 7AD779EC02E8687A 4CB1EE0F3669EBA6 B1322463813D8307 C647E86742C8623F E0E4F39116210F34 896E9A1BEFD9658B F050763F2A556B3A F9886D30A024686C 5AC6FFDDDA74EB89 82D49AAFE52516C2 CC3CE82BEF9F63D7 030B6AE9D71BFB80 D1BF552B6C8345A0 1FE273C078438455 4886A311B8C28801 BFEA9F7438506050 B35B8155D3E9D0CD 6416D5C0C04D5BD5 F4B91FB1C5BA370A 94C857399F115363 5A593821C5086399 4DE4E9A8D6BBA7DE 7429568A24DCDC7C E21C7F149E62B06F ED047ECF113FD92A 2F0BE7006183D97B D8D8B385F067479C 5E6661D6C2CECB6B 10DC85ECD3DFAAD1 46ECD1BB2C3F3758 4A598E10CFFF9795 02C6C5C79793D015 0B4FC233C7F76C70 16ED203B323F1C9F 548C89BB50AB4A18 D4983BD3E0C948A1 F04D2DD54930C4F1 85BAEC60C4B71201 AFAAB393182E12BA 212F3C23221DE1C5 0C49403A060D0196 4543D0B17FB14DDA 7E29F302E7CF8560 2C279C258504B9A6 C03B2DC02F0F36A4 C15F078986FD473A 252AAA26C8D889FF 4340D63FDFE56A32 F8400DBA09C79E58 9E71CF12FD4C0A00 624705E4E25E7944 1FF0B1BB44A46F11 4AFCC89CD0429A27 B165061EBFC6F18C 98A8CF06C51E4CEB 80C56A8257C79E47 4A3C323434D63614 82E86E62831F6B18 0D379B1B07E28249 3E1E335E7216FD2F 2641EFC812F18308 553971D605B9E42A 6BE2D75F3018BC1A 860EE614ABB1A26A 3235A50E7B1642BF 24F8C053FD233A16 374782DB66717275 3EF63F2F5D822FB0 3B5071FB2A0A7C02 28356C08987E7A41 C640ABE5CE80D035 8DD069E5BD968455 4402DA8DABC9E073 1FE0EC2C61507887 D66196F57C4C6805 E0C79C3CBEEC110F 45007BDF3D3D3EBE FA9395867A173EE8 FBD29FA7A5F56E3D 052FC7332733B575 20B4C0FED37BD2AE 859F760805DC2E49 36B5F8768539492D 3232494454D9C5AE 0AE2E48BE4234B2C 739B9BA7CC74157A 8E2D269F59B2DFC5 5C7863E5D35B7B9D 2487DA584D9A9537
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201209200930 (name+title). Key = MD5(password) = f4fca72b3a39663b18ec4b587e6e4bd5, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 1e3fc481-f6d0-1b6a-bde2-08da62ff3516
  2 6c68d825-a00e-4c61-a506-98ff04c21202
  3 10036dc4-0364-602c-862c-d4945389b810
  4 0e073819-e614-40f1-858b-b0813dc25a5a
  5 7bfc1b3c-2bbe-677d-a3ac-28dcd0981f65
  6 d1ced755-c1c4-59aa-a005-29c6c4148115
  7 16e73ba6-9c55-3600-9edf-da00ac405a92
  8 388af60b-0c77-467b-ae26-2398533e95f7
  9 61f79b3c-b331-1e3a-a500-34ca16b806d3
 10 8d06f2c0-3345-1d31-9d01-7f96abe5f5a3
 11 5cfd47d2-b2b2-822c-9018-917486e91709
 12 3167f7ee-7b8a-69c4-b613-576f3dbda87e
 13 b0b1e1f6-2bcd-069a-83bf-4269920569f9
 14 6901b286-d363-2824-b447-1b5b8c0b5a8d
 15 be1591b3-ad38-2a83-beee-86be128f39fa
 16 da7def69-92e4-0d85-ba51-29a1cd80e1d3
 17 9aa1ae05-78e3-63b6-8b48-83ff807c8dae
 18 77736979-a4ef-5234-9e81-dfae67226735
 19 45d532ce-6ab6-09d9-bdc2-e24dea843010
 20 a8ea8884-9188-8d8f-8f61-3e39942829c3
 21 c9cf6a53-e52a-7141-877d-f9150f62001a
 22 52c4189b-5e99-5525-a6dc-b909f89047b5
 23 b99fea5b-0d13-1ed6-9bb7-2cf3e34ccb7a
 24 6eb98a8f-9904-8fe4-888d-c63af1084a43
 25 d6248c76-3b58-82cb-b8b0-da794ec07109
 26 b4394732-f7ee-27f9-aa02-d95204d5ceaf
 27 5deb00c3-54e0-5719-a995-592062ebcc95
 28 f70c3d30-0aee-1a14-bd25-b94e3e8cf035
 29 ceef8d45-ba99-888e-890e-ebe1061ea436
 30 bab9a5e0-dc47-8b44-bb79-b991ea64420f
 31 97df7ad6-bac7-2cbc-a999-94ddd0c06e3e
 32 ec2cc1a8-2917-75d5-94e9-e7e5bb099a83

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 14646534118602206508751882518827. Exactly this sequence comes out of new Random(309).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 15 of Run 32 (seed 945,377,703): new Random(945377703), Next(8,64) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-08 22:08–22:23).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs