A858DE45F56D9BC9 archive

201210080605 114qyp

explained decrypted filler

seed 837

Metadata

Post ID
114qyp
Title
201210080605 → 2012-10-08 06:05 on A858's clock
Posted (UTC)
2012-10-08 10:05:54
Timezone
UTC−4 · title 06:05 against posted 10:05 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210080605) = ef03efc79170d020bd9f5369e9d7a56b (name+title)
GUIDs
28
Filler GUID seed
new Random(837).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
438 · predicted N = 28 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

3F4A8B9A174AD991 F9A5BCD1C4C32FDC 0A7923AA0E2FEFA4 931829C3A31E105C 31A2B8F998508710 BB23F337E42FEE46 A2CA9C3FA45CCD6C 3CDA64DC4E5D2B51 248BFDFFBAA3944A 6A33A12DAA9C7210 FAC9FD892937D399 A91AE0A50E3395F3 59D3C10BADABBFAC E9A52ECF8ACA1BF7 7AFF09EB927502D2 AC963E6ED43CEEFF E224E4F6F2BDCCED FAD95AF7429370C4 7C512AC2A1414B00 239830CD129EB95F 13DC92D635713EFE 1C9376E10F729609 758EF32C4D86A02B CFC6699C8BB39506 06D70E1E3DAFF243 D5DE4A60163BF003 0B27AF6D18A17371 3DD09D42140EDEEA 62B83131D4607175 318AA3F11FA12CA4 1DF4E8BC0504984C 31D4D568E8E0C24E 1E943E48370FC545 6C25EE525C878051 0A237379EA6CBBAB D22126E5E914386A 0417C594F1B0341E 5141E364FAC45EDB C267A39C9905EFF4 10932DE1DFF9B2D8 1A9F9D0C4428918F 0A623E1F0C92C703 3F1D86CE33D3DABA 9F47D87F6CE39785 5CBAE092B1AD6CFD 0D2DE2D03177B228 38FFEA4284414BEC 0D12275670BE918A F2D6FC14CC1443CC 1798879D0521A8B2 518B4D7C26C01B96 1A1C21F5F277AC7A 37213F1390355DBD 50D4B44D388F7056 9F2078E81F5A3652 47940F69A62DFF87 4449FB182797197B 69FEF48FD7A956C3 A3336E9CE2A0138A 1BB495D9FC647515 54BF1B0FF5FCB8C7 EEB638D9A44CE7E0 E4DFD7F52DE3C5B3 79B705751A8C10DF DE197C0B58708293 54507E9AF8984AEC 5BCB0A9355C905DD 54BCE1309C08D905 34E6C3A6B3C2915D 50BB1ACCD6FE6494 8B90EA15B2CEF144 EDDF300A9AD4D88D 9FCCB876700CF202 97658C76A9F1E16F 6CF836FCE4B1C02C F6F026414F785589 5DAF3586E3BF18CE FB61C330F7CCC061 C6CB56DF2716A770 B6AC76522D2B9E91 D507A51A1FD11EE7 1CF376A6F83BD054 0E196130D3261BD5 B247B053B235BE30 6F40C8538295A8FE A4199385BEC6B11A 999CD12991D8BABF DE37D5E2F202EB4F 4589203848BF9DA8 A42DF50F7F99926B 0357F4AA68F33A2F D5B5EBE22B83CB62 AB62DE468FC72175 3CFD60E0D0B355CC 67691D18947FFF4E 62EBD671F51B9F75 C58911DE93BD173C 8ADF7ECA7B0A0BCA E9702C03C18A1987 6D4BE733562D845C 1241A4C0E376560E 6D0F8FD1E4CA1C8F F555FCB43789515D 5A3551E280C7A10D A564D88F91AD68B7 80FAA88F38D039F1 B065AA37B92DB0E7 B2F67609BCADCEB5 40314BBC37FB980E 8C2A347E243968F7 E50F6A4A99B8BC44 AE59D139A5A68B0C D5F774CAA736BA1B
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210080605 (name+title). Key = MD5(password) = ef03efc79170d020bd9f5369e9d7a56b, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 0a271f37-2bcf-8c25-b561-cb02b944f65d
  2 32f496e3-9d93-36ce-bf6d-89f385426fb5
  3 4909dfe4-f57e-7c9f-bcdb-a726137bfb42
  4 0b7fa3c6-c4ab-1054-abcb-2f8320abf002
  5 f8cd5ad4-a90d-0958-b5be-cf06d0e587a4
  6 356d15d4-0450-0f1b-ba0a-76b2282dd9c7
  7 d524c06f-da67-8784-b8ff-627cb567e6b8
  8 cceb54ec-abea-3747-857a-6ee81332dbfd
  9 ee774b9c-c4a3-40ca-bf95-91a4b277508e
 10 d156a53a-e16a-8ad4-8f2d-c81373f46955
 11 6c749303-7bb4-8549-a441-d55f9b4c3d6e
 12 e408f063-204f-8947-9958-63b8e6fdb596
 13 84f1e812-4d8a-0930-9f5f-52e047d9b6e4
 14 48b7df61-062b-8d90-a3b1-38e4e39012ae
 15 bbd51598-7625-757f-8ccd-a9c5058e69e4
 16 c4875a08-e946-69b5-bd05-9ce1319d7cc0
 17 8c5b3f84-d716-6ff7-acea-dde7f5ac289d
 18 a8c8cac1-50bd-8dae-8ee4-65f96dbbd535
 19 3174ab81-1806-3a50-81b3-d24a4b144562
 20 f173764e-fd80-3a98-a042-b787251e61fc
 21 10c43321-fb3c-0a25-aff4-b41fe16e6e97
 22 eac629ee-e73c-1833-8d48-40c00c0b1986
 23 cc6b4813-15bc-4cc6-a4ed-19e4b1386bf3
 24 3fcd67bf-ca35-3839-8364-60d6da7d3459
 25 90060ae4-cb21-69ee-a2d4-d55d04af5cf5
 26 ff923f79-4546-79d4-9e53-e3303420dc62
 27 6ac0d595-dc51-59fd-9c1e-5ed5271ef792
 28 8cc25aa5-cec0-2222-8a22-8da2ad6e58f2

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 8371008348880876683301436752. Exactly this sequence comes out of new Random(837).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 438 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs