A858DE45F56D9BC9 archive

201210101700 118r5v

explained decrypted filler

seed 809

Metadata

Post ID
118r5v
Title
201210101700 → 2012-10-10 17:00 on A858's clock
Posted (UTC)
2012-10-10 08:00:26
Timezone
UTC+9 · title 17:00 against posted 08:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210101700) = 15eb00be6ed906db62092c639eda627c (name+title)
GUIDs
28
Filler GUID seed
new Random(809).Next(9) ✓ verified
Run
Run 35 (seed 854,622,578) (seed)
Draw
522 · predicted N = 28 ✓
Machine boot
2012-09-22 10:16–10:36 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

34B3198A1C155314 C35D4DA15FB0CCB6 FBE9395FB2AEA3EC 3464D2CE9EC78B70 D3F2CD60B5A0183F 32DAA67E6F636C00 BB9C454E98FAD568 5F1ED0D986FBB41B 03AA1E13EE26831E F96526BD8B0BDEE1 2CBCAEE45E1843AB 2D2B7B9460069B0B 80D41B22145C4F40 D067CC652AAC3B6C 9C632824230A2374 0376EF3575AB473A F4C301BF72AC4E2F B71506D31A4509BE 5B5456636D1A6AF6 75B0554CF5C13228 4DCD648499CE73F1 6A22322D9D7C2943 1F0E9ED78751E7D2 226DEE5CDA50A8C6 2956758123037ABB 4200AC4F4D984B46 A0ACF6AE285D0C9E 74601257AB09D8CF 2FD4ED73C7A9FDB1 2E71028E2E7F4749 DDC87747C3700753 7C86598544BFE09D DF54A9F165BF0BD4 24C0DE4CFB54D7CE 52BA5E5EF8CD3240 05390D63A52A12A6 B643B393CA4A761A 831F48668186BFB4 DF38923BE56D8434 AF2552FCE771510A 5953F093BD951DFB A637F2D941C4E6A1 48D0F123946FDE55 328EF184ED93FFE8 9966F9C636B4FD40 5E6F4DAC928E3F25 3C42071058C51E21 FB5F466864082696 C73AA161A85B6BE8 5C0791A95CB7EF53 E8E6864B0433E9B9 0896172070D92C94 9B958800F674D379 259C874FE2488942 5672D13E3BC12C9A D6109192CC07A6CF A39396D84DDE13D0 89C1CC81FA1B9BC5 43336225A3856932 EB3EF31181FCB671 A821DC1CCA824842 C30602A9405E1D8E 09B189D540AA1A77 E2D189F36F772246 A53450E2727DA989 E32E79468B8BAE57 CF9CD02F4765A9A9 18E2256B40DD3AC5 A003ACC74AC474F9 4790971235AA5657 1EEF78A8765ADAB2 E1857374426A5B8D A54470E15DE72C08 032D9394ED070ADD AA39F2E539727DE7 F0A5B62A3174B3BA 919519224F76DD3A 5EDE85B83ED316DB F93178991DF0DC7B 0C5DFBF6F26B6456 5338D5100E757454 D0D532ACB79A6643 E0F864066257C962 368D24F2F53426AA DED0930D97D5965C 68172392003FEFE7 8AA6F6D5243A25E2 620C51BFC23FE7B9 0991F882504C33E8 750E3BDADDE67D4F 4F3628DE3420CD3D 2ECCDBD1FD93EE7A DCE1727A4CF39621 E68CA31636F3EB0A 99ACF28097D521AA 66081E2C4406A2CB FA59507611E8064A 21DD43218C75FCC3 AAA493D4D28FFC6E F0429152DEB02608 20D19BDC84AB1406 6DEFF3962F9F7199 136F59700A68D5EA C7F42B641C6F23F8 4F5AF2BC395E9400 95212C45571ADA68 1C00181F0940212B BDCA61B6E967E4F1 F5A0308B7FBA6CEF C3947EA4EBD31305 2430EA35893AF339 F8CDD55E9DCA4538 871420D3737975D7
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210101700 (name+title). Key = MD5(password) = 15eb00be6ed906db62092c639eda627c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2d14a103-dfab-3fd6-adf5-11e1a07fd4dc
  2 a4c30564-3259-1db9-9777-b4e19893acee
  3 8550e0f5-a6ee-2938-97d1-d3ed6e1e6c23
  4 25938ddb-cd02-2f81-9e7c-6dc1a58719b0
  5 d4475d31-7d4f-41c3-b488-7e6a8e0ae6c6
  6 5d1487cc-125b-4f75-98a6-656c505e4e14
  7 d24e596a-c6a5-3b97-b073-fbc98eb191f9
  8 21801b8b-9d39-2372-a301-f102f63970d7
  9 29905f5d-7897-0218-8782-3a6ac3f28b3b
 10 f2cab4e9-7b54-5fab-b732-ee3ac27e199a
 11 a6f382c6-ab69-2454-b1e7-2d56f2c7ced3
 12 55a68a0e-5929-02f9-98a5-bdd2cd1f37a7
 13 9d4e2f61-9db4-7998-b432-09cce10bc3a2
 14 7b0fe958-2132-311b-bbab-195e7adfc45d
 15 bfbc468c-71a8-27d0-8896-1443c9798f1a
 16 4b1f8e09-fe50-2911-883a-f05c90565da2
 17 bccfa0cc-0f72-88a7-9208-6ce74173d6e7
 18 f89d7316-6d1b-53c0-a086-5951f4e65447
 19 f3719a68-ab31-5353-907a-bdc81d60f016
 20 0661fbd5-f82b-5355-a517-a937e06c006f
 21 41663a9e-9183-22d7-bd56-8c88fd38cf3a
 22 ed2da3aa-e98a-29f4-b8a7-a51d33be1314
 23 1e0b8670-4fb5-67df-98e7-8d392f760fb0
 24 bfd0f0ac-796e-5568-9481-fa25af941520
 25 7e6ea265-6d4e-80cc-9883-7fdac3f5321a
 26 d225f7a4-a13d-7f45-847a-9d75aae0b711
 27 d8c46e71-3e67-41dd-a43c-ffb3170850e2
 28 a70236e1-a7ff-8328-bd61-7d8aac40d367

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3122443205207322855522658748. Exactly this sequence comes out of new Random(809).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 522 of Run 35 (seed 854,622,578): new Random(854622578), Next(8,64) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs