A858DE45F56D9BC9 archive

201210101200 118di1

explained decrypted filler

seed 559

Metadata

Post ID
118di1
Title
201210101200 → 2012-10-10 12:00 on A858's clock
Posted (UTC)
2012-10-10 03:00:21
Timezone
UTC+9 · title 12:00 against posted 03:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210101200) = 0e5fc1f88b495fd6a8ddb7922b7d424c (name+title)
GUIDs
33
Filler GUID seed
new Random(559).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
517 · predicted N = 33 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
10 · 10
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

427F114F5AD79085 20E7D6332E1A9A61 F108C14E4C7B1169 958072ADAE1B70F2 902A46AE402FBA8D 00A30E6259AE5ABB CA901A5B9963535E E06CFC401BBD51DA 0D593E3F808A4D0F 3B29EEF0B766C70D 41259A8216F23C58 BE3ED7E547EC2A43 339E8BF13B58E293 CAC52609D5C38E6D 6E1BFC4C2BD9DFCC AA8554B71D1B966D 1D378A3CF7898F8F A7F76F1C10F4EB00 BABC25A91E3083D1 FB1169154256C062 A317738965F832F2 7E87F328650ED2C3 1053A192B910BC4C DA41033FE6C0963B 226BD10042BD3975 2A0E2808709474C7 09D896F1818887A5 5CFD269B132BF7F5 F9E2AF596CE6E617 23DDBDE9A0628D54 4CDF91CA22D21FB4 3E592764770CF706 CFFAE6928D0A00AB D459E212BEAAC80F 1A1C0D9EFE1B3867 C1F8B865C462DA00 AA5C6C0EB9593A4B 31ED016E878786AE 12C3E442D1E5A1D9 93FE9B682D19CA7B 7AFF1A124AEFF8A1 A79B7000E7A5F3A9 3DD4188324BAB48B 8F0EDEA950163E77 0C6080BF1613571D 74783046DB8419A1 89C8954908558779 3FC2AE818B8ECFFC 890E07B2A5AC700A 3EBFCD652B052546 FD1BDD777A80D92A 423FD5E9057507BB D76BBD8CAD20E2A7 EA64F21A74656FD1 9E03BF8628B35AED 96A522D16233A2DF 5FB9C9ABF49E9014 0EFED6952B76E6F5 08373BA2566FC813 E27A63002715E62B BADBCB44B6715E42 7BCE9B374FFE9A3B E008FB5C9D66EAAE B83AAD0BB24333BE 8DBD30F83A7503F5 E163EDB78D963296 7D0BD565D5E781F9 BACAB41C385A1933 9C043BC8D3418A87 277AA72EC79D72B5 F8FE1C9DB7A9F7E4 D64602A703CD14CF F140AE340E40DBF3 8618049CE8CC10A6 7E03973D8A4F6179 09EB4CE725DF4A5B 91BBF86B337C3200 339EA3305B24BBE8 410CC18B4654CE3F A759CA3CF1674233 9242ADC9C6BB8FD0 51126690B37A316B DC6AEDFF627EC27D 333B607916948891 3F3C0D501849EAF2 0CA850932D71CB54 6E832A90D992CCA3 27B6A7FF7DB0F916 7A9B425DC912A2E3 2A8D9A83A8931212 5D053BEA78DE1A3A 71E6049E518EB408 5455675A21740C91 8CBDC871BF8129E3 B8D2D192D3388F38 FA8098FFAC6F1A67 56BE0E29C1A0E6B0 B344BBC108BF79B0 4A416C6E4CB98670 FCC544952CC89285 D79B1C54CF9B487E 27716CCB836C7018 4C3FA9524010EC20 7A8453E5C2DD48FD 783E4CD79CF7E27A FA819FD617CE0520 C31E811BF50459B6 112BA451FE501979 19654A8521A15F40 DFE821418CFC0DFB A59B2D3F6D2F0E26 1909A4E1CF9B01E5 65B9628FA4E291B0 0CE6AA9AFA86B2D0 7DD89DDC590345D9 E1252E964B1278AE 41B2B74070BBD5D3 FDD2DAB97D79136E 0D453D8D6DE18A4F 036E00DD2209FB2E DBCE1019B0970CA1 A7D2A671C03F09BA A72649B2A1965EFF AE3C6156AD40ACB2 E824273E0C0402D7 DC869733CC62F96D A45583F976F20518 8FCF6A4AC1C5C001 045550ECE0828C0E E9114C171958AB1D 97C4B5CB7B2A4FA3 1440FB3E4B93D473 F531D56315B599FB
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210101200 (name+title). Key = MD5(password) = 0e5fc1f88b495fd6a8ddb7922b7d424c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 31100665-b260-653b-a28d-1cbb8a7ae524
  2 0c6e2129-acc6-7a36-b74b-c7c2fb61aaee
  3 996c0e3b-0c34-4b3a-9f42-3bc8bb61dcf0
  4 4aea9934-c0d9-7ea0-9ffc-1d9a6b7cd7ac
  5 8f13dd11-f924-5931-af88-74ac7e5fdc3f
  6 8c306be6-12f2-0dd1-b0bc-a74463791b76
  7 7e8b0972-3262-31b7-b549-2c92ef666116
  8 da2dbf5b-9219-7a32-976c-541b2410a503
  9 c633dc08-3527-113f-b89c-0f3207d1740f
 10 f26346b2-c2bb-34e7-943f-2ac34b9e9176
 11 f47877ec-c7ca-1283-b9e1-67067697b519
 12 1a08ffbd-dd8a-73ab-98ec-6155644f1faf
 13 851b488d-8094-8cd0-a64c-d28f8251cb3b
 14 788eaad6-058e-2cd2-ba46-60c677aae56c
 15 f92d45d3-1869-2081-9016-152c03dc4c3e
 16 64c6d5d3-7d15-1870-8da3-7f2b7b7827d4
 17 df05ebb5-2e80-7376-bf3e-5358ba00f9f7
 18 ab5dd19d-0f59-5efb-8124-ee44df9e621f
 19 909bd74b-6b30-79bb-ba30-f1bdbc5e6f15
 20 c86c0f4c-b52f-6019-87a5-52fa9d04a7c1
 21 7aea9a87-9acd-095a-992c-672717c4a81b
 22 bedc1cd5-338f-8269-9dcd-1f2fc1ee9886
 23 a1b0484f-2df9-4295-bc03-c97d72b93139
 24 fe45ca35-ecf8-211e-ba07-72c3dc7385d1
 25 cdbe928d-11e3-476d-b151-995c268dcf5f
 26 61ac50fd-30b8-0713-b4d8-c1cfdaf59d80
 27 6065982d-be2b-4066-81cf-6dd6fa85bb73
 28 57b8aa4c-a2c1-0931-abd6-3eaeb2010967
 29 561ff5fd-ca38-84fa-9a55-acc1d70801e6
 30 aa3e2aec-97bc-21cc-9866-503592431c51
 31 395763b5-4ecb-54c5-849f-35cbf47fe123
 32 b87cf28a-be29-6f7d-bfcc-ed5158fe73a7
 33 2b4646a1-df0c-048f-a5d1-097bb0428f8f

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 674750371317822175760842404082560. Exactly this sequence comes out of new Random(559).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 517 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs