A858DE45F56D9BC9 archive

201210051603 110bwp

explained decrypted filler

seed 780

Metadata

Post ID
110bwp
Title
201210051603 → 2012-10-05 16:03 on A858's clock
Posted (UTC)
2012-10-05 20:03:26
Timezone
UTC−4 · title 16:03 against posted 20:03 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,448 hex characters · 1,224 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210051603) = 1f51280fc682d87bf4ed33a27682fa62 (name+title)
GUIDs
38
Filler GUID seed
new Random(780).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
252 · predicted N = 38 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

FB23B13C77CD9AF3 4DEF44A82AF80882 2EFF22000C2C33CF 40F76DBCDD9D36FC 703CDAE0D8116E2E 67BEC41F7BC4F5F0 B4469D286E45913E 3706FF555FD8443D 36DA6ED70937A77B 41BA762179D4A3DD F7417B29F3267D51 3B8877E8230452D7 FA60D6451EF86A30 C592A190F5DA7D5C F7F8BFF4C8705A4A 3DA53C3B834FA7BC 6DA2585454ECDEF3 8BCF83CDBDDC5755 2588CA813AAABB81 3D1B3D901A6B6777 0754DCEB5F5D0E71 B6295D0AF5F541DE F56DF373DB5FF8C1 3B66A0EE3A0508A4 76A65A67C47C7BFD 06AF5558F5C5624D C4DF0394B5F26458 7ED86F09D7BAC0C4 A393DC0CBDD37E27 533470CE0094DBE8 497B7ACFCDE1BD33 03BD304F61DB65A2 565E4284B030007A EA77BC9CD9F99522 43A8448AE621C108 003F38CAEEDA6318 D9D4D33BB8563BB9 E9E49C6FFA6A222E 135EB2FEB8E9F33D 7FA8578606FA38CC 9B94B4A0542A6BAF BFF7BAE71FA4266B BE0619DEFC790C5B 0DF1C870CDDDD88B DFBB0E26606EF518 D493AD674CBF5467 624C116598ADF11B 51F782B9EAB0B174 592279C21CF9067F B2A8589972421180 30800D22FEDBC9F6 76F10BFD5D40AEB2 FA149569ADD39EFF 90BE9A3FCBF4F510 345884BD6812B99B 91AADCB9BB9ED4CA 76AC03D03068B6D3 210D35D99399ECBE 01FE33ECFB24E566 1E6C9D5FB79B821A C99EAA1990086B98 9AFBD4B6F10FC7EF 31CD5B15BB83C74B 2B7B37D31CEE9472 35F7E321409188F3 57273F8A7E8E88A2 889EF610746D5C97 44114F5D08D74DBC EF5E77462FD7978E 54971DCCAA468896 8742B466AA2035AD 029679110C693455 40CD2D25613EE6E5 F338554219DC2A11 6E9BA44F6FDCC80C 503FE467A97B9E07 B4774C17DAAF862A 15977C05E3E9B004 CC94E3E9DF5C43B3 A26BB95F7C0AAE1A C7976CFC4C11FCB7 01805144C735C0D3 9B11888B811CE7E5 E18EC084D5320EBC AD2EA5ADC700597B 9F9AC5ED621FCCDC 971E184B97EA2B1C E4F916592A498CA6 28D095AA88ABFC27 6EE9C00F34EC59F4 BDEF426488ABE475 18AF69C8D7D9A112 D294501D9236BEC1 ACA805DFAE3AD4E5 83246448D9617765 B01368B17F5CF192 47CB3C896249BBAA 23E3E3340EFE9634 D59BDCB63AD403FB 9BD33FD538202974 324EF7BAC90EFEB7 26438F3423A1091F DE4D153A24D9D49B 5FE11A8521BFBF9D 4E5148D2D107B3BD BC72083A5FCD22FD FA2679F639790D4F DCA59F43679327A0 AE974B7E4AFFFA4B 78F5917690E23B61 67A814A0BF027503 AC9F621868CAE57D FC7D79B7A0E2D03C 5424BAB8DED9FE51 C2B52C2AB3A0658F B0FD22CA4148E222 55C62FFCD54C467D E731397636775051 8ACC2C7727D72935 41A3BEB5CB1D9F9D 158687CA2F98EF8E 112E854804F617C7 125AEF9DB3AC2646 1EF9C3F6DCBF9FC0 C064F471252CC6F9 30CC63096532F8D9 560E8C1A5FBDC354 917A0D8A6872D821 7E74453B9A1FADBB 1BE91BDB78C71310 36409BC2693D6704 E54E642AC4AB95FC 9AD7351B8CB8288B C6AABE09A5F201D9 B2357B411A8A515E 56AD4C9CDD1A5690 4B5D06C4661FE755 46DC653906C74115 D0FE633984020D0C 9CA78B9E13235B5B A7E5BC702D52287E BF647134110F4BF0 BA7C48EFC2C7222F 0901A84669C47FAE 87DAC5984078A355 A367F5A61FD5CD71 1CB27AE5CFD5A46E B5B56AF8293187EE 53A65349168AFAEB 815E56F1D4326837 18C0AC7389548C3A 292392019952581C EC7541F1A6A4FCF0
  • Read the ciphertext. Strip whitespace: 2,448 hex characters = 1,224 bytes = 153 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210051603 (name+title). Key = MD5(password) = 1f51280fc682d87bf4ed33a27682fa62, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 38 GUIDs as hex (shown below).

Decrypted: GUID list

  1 b0c3051f-092e-1b60-8de2-621f2961ba86
  2 55cf589b-aebd-60f0-aceb-a6fac966d63f
  3 700a1c76-1daa-8367-9270-bab00e473b5e
  4 6391deaa-0a5e-0c78-9e3f-36f890d5ea23
  5 a24434ab-8f41-3ce4-bdf9-19be4fc3a07b
  6 7b09a05f-0193-1be5-a33a-2e0820e4c50a
  7 818e198c-3ba5-32e1-9d80-e6ee626afbcf
  8 efa714f8-c799-6fc4-a4a5-0e01fe284d75
  9 bafeb423-5ee3-402f-b8db-86e6dd70afb7
 10 8a1417a0-554c-87d1-a7ed-5130e8f293c6
 11 a6e91cdd-ce11-8b77-bcd2-01e78f844244
 12 d96f8d06-e13f-35d2-8802-2b59c3369450
 13 dcda8b47-9fcd-7002-8173-8e12df0b4e48
 14 c35c9340-fe5c-200b-b0a8-8242466f5e0d
 15 59df8c9b-ae18-82a4-a490-32710b8360e5
 16 3ac82523-764c-1032-b4a8-0f539fd24a20
 17 1fa035cc-6170-6695-a555-166834cdebb1
 18 c07b8ca1-37ce-5145-b3dd-0650309ef712
 19 296f8a66-089e-7ad4-9d82-a8d6435bb2a2
 20 916b7551-5aa4-3ffa-aae1-e700ce1453eb
 21 4016583e-ba63-4153-878e-6110b9afd42d
 22 b72a48dd-599a-1ca5-967d-ee4f33a252ef
 23 c3edd3a1-9181-7cad-96e6-e64a5d6afde5
 24 e8b62329-8483-4573-a376-66be2b858fe4
 25 00027012-3b56-1d10-b0d7-c0132706e4c1
 26 5f5a9cbf-f949-14bc-a01b-2a2530f5cc62
 27 4be9770f-0cb8-46e2-af4a-b10a5e4abfbb
 28 ea623969-955f-8b7c-969b-83501cd339fa
 29 899305b3-afbd-82f2-b3c2-a7b988bf572c
 30 c7874d4b-f5b1-283d-a4eb-4cb8d5aa90f6
 31 638b1532-593f-108e-9f83-20d8d7cee184
 32 c0f65463-1282-8a94-8e06-71f08c14f04e
 33 7a10851b-06c9-86b1-b52e-0a682bbe68cb
 34 98b0091e-da86-41a6-8756-6e5702bb97a8
 35 0842079a-2323-0f2c-ad78-507f6857ce66
 36 6b23a6cb-ccb7-57c3-8a83-bd39fad536cf
 37 583572d2-3d1f-1522-bb0f-5e90ff666fc9
 38 c18aa0ed-e5a6-859d-b173-293709b0e065

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 16803136488372816573417411488218840518. Exactly this sequence comes out of new Random(780).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 252 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 38; the post has N = 38 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs