A858DE45F56D9BC9 archive

201210071725 113ruu

explained decrypted filler

seed 291

Metadata

Post ID
113ruu
Title
201210071725 → 2012-10-07 17:25 on A858's clock
Posted (UTC)
2012-10-07 21:25:24
Timezone
UTC−4 · title 17:25 against posted 21:25 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,872 hex characters · 936 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210071725) = c104b7876c75111f83e513feebe62a49 (name+title)
GUIDs
29
Filler GUID seed
new Random(291).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
400 · predicted N = 29 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

CE063EF68FA37795 C47010ABD1F1D3EA 5EBE8C64DB78BFE1 4BE00A264320E816 C86B4035A56ADF07 13A4D2C71F0C7098 18C966D4EC6EDB67 B9379AE169E99037 9F5B71BFF8B43670 0A35A43385ECE479 54A0F88033E413FC A2AFDED23F0B0DC7 F8C97FF0F455A3D7 28FA8F605BFE7591 D2CA97864F2A460B 26B2D552C45B9D7E 84BE7A91E5AAFB1B 7C53DFCDE577FAD0 FBE9D21825D0734A E24BB226723EF7AC F64AA77D3392A78C BA732EEFF52554FF 2C8C82ADAF5019A9 6EF12FDEEA047671 305A6CFACA481048 AB6D2F96308D7EEB 4423B5138BB6A6B3 CF84E7536BEE0897 D6CCEA0A8064188D 5E76E7A05C4C31D5 352CA5771F51A685 2D06FAEF18DDD18C FB4856F6E4D4E8D1 BE55732C5E88F88B 8D215A7BB1DF0CC0 F1C4C2734935C7FB DD68F739002AF734 DE7C269179912C76 DB97D0186B944B5B A249BAAD779E218E 8AFBFAA72DC14C8B 2ACE5875376A4343 33C34493248655D2 FD312A187BBEEF52 C5EA31F693835AEE C89F82D3A910FAD4 9712DF41822C261C 1561FE4949DD4ABD E69C78D6184A7D8F 21396AE730DAD5AF 87C97441EDB08F63 1357E7FFAB1731AA B2A0E0A89998DDAD F9A2915FD1758195 5481860698F0DB01 F4483444ED43BDB5 E752288E36CED9DA 51935582E2BA4F20 911045BB98C21BCF 3B5420C87C10AE78 DC9E273CDA8F3916 9198B26890038CA2 90E24BF4471396FB E168CD2115FD0441 2C1F3F5551AC6B02 BBCC6983F7C41FA8 6E720FE2D6CC3298 B3BBB946A72E12FD 66B4F0E03825D8A5 D31892AF38998CC9 EE975211821009EA E4A9982062249402 5FD6E6A50D32F198 C106BAC416435B38 E6FFF3EBB956927B FAD6279182F3241E 103F1AA5C13CAACE 85ED8FF69593F6A6 41390F1113A27724 C63C83062F24B39E 7322AC308E2F80C6 609CB245512CD94B A708A910D1013ED5 123EC3C8AA7C469A D6CD46688065DA12 E2A2A21685A9BC5E E58AF9359109A278 3FC09E6959664C4C F8CD9673B54C8DB6 69782168CEAA5D4A D3EECFAB6B041B6A EB5F8975E65D210D FE5470E4C6309026 EE7EC68F4C539368 DFB8CE7057C7F35C 45FF1547AB83A8DC 1E98540ACF7AD326 67302F5030547E94 A059E9A592546DE1 3447C206AADD4093 5CFFAD247DE972A2 73C5AFE6D922CE72 48270B7CE24F2E86 2A3BAED282CADB22 92B048881329DD1A 42F93A88F036010E C0B318EFE3A299FE E178B10203C0FF66 F5F7804CEF09E706 D6E4B6630DD5A987 C07E326249D09CC3 32E12E774DA216E7 BB034F0A65E23576 A056727C77BDDDD4 34B13D90DDA0EC4B 1007BE4A3F75456A 484A6038D45A65EA
  • Read the ciphertext. Strip whitespace: 1,872 hex characters = 936 bytes = 117 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210071725 (name+title). Key = MD5(password) = c104b7876c75111f83e513feebe62a49, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 29 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0e022566-2ce7-64ec-a4c1-31105cc58ea9
  2 5535eb22-d97d-1f34-be6f-2175bb151517
  3 9d384841-efbf-1e9e-8633-b1ad5c472684
  4 6742e005-f6fc-6a3c-9ee1-17cacd4139b2
  5 45e10312-a955-53e9-84e8-4a96139166bb
  6 5393d59b-15a8-7721-a415-05c7612d80fe
  7 9ca808da-a42a-2901-8241-2fc2e197dfa2
  8 992eaf9c-8c5a-326c-8bf2-e7787698bedf
  9 f0336b9a-9f25-89f6-a6c3-c563023b470b
 10 92c159e5-4d4b-5d0a-8fc5-bd113ecc7b36
 11 e46566f0-6856-61cf-8a9e-5c2322a0b9e9
 12 aa33f7dc-b3ad-51bb-9c13-406f6db767ee
 13 cec5d7c2-2824-6b75-bc2a-76e3ccd43c7f
 14 ffc05a34-84d6-7285-94d8-bdd66d328cfe
 15 0c4e5c75-8702-6b7e-953e-9294d1a4ad8d
 16 a2dcf1b9-d25e-68bc-897a-6c24b88e36ce
 17 38201c10-0922-1559-a5c1-8562fcb114c2
 18 9a366165-2023-35fb-bf90-b075f7fd849d
 19 f722f11a-dcd0-4ada-9951-11899092a072
 20 2403e54a-4f0c-8935-9960-26a981456814
 21 de723006-9092-4b68-b697-9b2af64da0ed
 22 bc3d4a3c-d2f0-24f3-8c5c-a2b3cfef1c52
 23 175dbe46-5f4a-19db-a347-7413a2bdbfd3
 24 a2848d83-17ae-6871-b56a-61e80cc3342e
 25 15f24bb4-ae75-1d82-9415-d63388612a85
 26 95bd350f-e4ce-696f-ae2f-246fea49784d
 27 b1851762-0c9f-171e-a07d-e5e51075c53a
 28 a08f4bb4-d19a-811e-b791-58a839416287
 29 612fdb8c-aecd-8b2a-aa1c-e8f59dbf7320

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 61165723856567661348421616188. Exactly this sequence comes out of new Random(291).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 400 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 29; the post has N = 29 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs