A858DE45F56D9BC9 archive

201210130900 11euz7

explained decrypted filler

seed 856

Metadata

Post ID
11euz7
Title
201210130900 → 2012-10-13 09:00 on A858's clock
Posted (UTC)
2012-10-13 13:00:16
Timezone
UTC−4 · title 09:00 against posted 13:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210130900) = 9d7aee0d99b7d7cabdd35b4487345581 (name+title)
GUIDs
33
Filler GUID seed
new Random(856).Next(9) ✓ verified
Run
Run 36 (seed 335,015) (seed)
Draw
16 · predicted N = 33 ✓
Machine boot
2012-10-10 20:54–00:54 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
14 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

1616F415B65DA2C7 CA6CA1906EB6C9EC 51F68CEE015A4E75 D285631F81953E9B AE5D576145B54A51 CF2DFFC561F39CF7 8761214492EF7688 F711D6D917BF9A3B 4B00842EE2B273E0 7D0DDB25CDE296E0 B9552F83B6882386 9C84136118F31FBF B6F7467EA2FA6FA1 EF6382FD210094D7 D561ACF18AA8F513 E385CDF6CED4309F 17A01AD4D1DF244F E31D7F945834050D 01A34D99525A4313 658627756BEF6A3D FDEB85801C1E8CA6 34321AC30B891D01 56CF4281EDC15204 1D7D7191576CC90E BE1E239257479873 306C7626157FBF2B E190DB165A7CA02F 3F2EF2D3AE87631D FB5B75C5DF4406A6 8B5E9480B1CA5FC2 906B02D6048FB5DF B270EE0ACAC97279 D7DC31A7639B5A2B 95C303F7841838B6 A8D2C7603CB72A5A 1591E882D75464AA 75C49826E441BA16 F06559558E739404 8B34718AE434DEA8 1722345D1686812D D52258105F8EACB5 31B696CC089CDAA8 EB7032793F1C4D3F 17F5FF39310327F6 B902C52F91BE4179 214FC3BA6EEBD68A B402D0DB3C69690A 72E372F30B5BD2F8 3A1C06AC15D4361B 79FD3213F7CEF720 1D28B85236C9BA53 37DC7248183D9302 318808E0D79EC85F C952EA16BF46AFBA AB634721055252AA 4FCB2EAD53AAD21A 680D520E5BBBE43C 9F01452FE3580D48 6AF172DE9D35A3DE 9490B029A6849E01 2719C82B2F8C5FD6 ECDB8A2D6FE0E6A5 786E9E339F924BC2 ACE51C8C8346B95C B41A84F13BCE6D5D 7CEE977D00E2DB40 7BC92A567B721D76 1DE6976C67CB914C 402ED87A588A30AF 7452A07539A298DA 7F9C46E9F914D926 0278B255FDCCEC95 344C6158EDC2D510 9EBBB6AA661DE9A0 D72F25FD5AFDE07A 8D76BC4E567C48DF 30142861A93B8012 937C1D954E6F8E2A D1DCD87B853CA896 D26EDEE283B2ACF5 0576FE5BA8773D47 1D878314FEAAEC36 7A1261664A85C648 0B2A8D4720094D09 3592835844574937 2D64DB1C02573394 3D5E2D7885419333 8F43124DACD75AA1 2807805B199ECB68 4E2C5B99BF1B939E 8CE1612B0F1FD155 2A8C91E09F5C92E6 5F78770A72A21EBF 1F0D1E0F7F531D22 A682835E1F528236 0DC6789F93A807AD 28F8429EC2D6C97E 8F2FE990577A910E FB35EAA48DB76591 44D0C3FDF4572300 9FE5127F8EAC21FF B4CD27E85847C98A D9AF03616E4E5CE6 623ABC66FF1A6381 983019BB38BBEA75 82C3BFBCEFCEEB34 5FF41EDAA04C9774 C7B5333D89BD9BF6 3A1C2E23B53D759E 223FD7B762F43D83 EFC3923A96B7E796 8E5D91436552D990 AB3134916C6C7A55 79884FA1E9C5FF82 0286B5FCB347B8B2 9BDC9E2B34F2CA5D 489406BCE673FDA7 0F778F54ADF42D89 9902539ABED2641E 59FA4F3E23CE164A 7F4707FF50E05E1D 90C16D17D0D1A8C3 9CBE66D446B8593C 1F3CDA6904A96D5E E20929DE44896CA0 3BCDBB3E1D9A4D85 062BF091D5D5C1B6 48260AF049588F9C 9723B9DA6F75BE36 B08987B8C54FC534 CF8D861B3CAD9A15 577CC597B8D294E9 0612F7B0AB40D299
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210130900 (name+title). Key = MD5(password) = 9d7aee0d99b7d7cabdd35b4487345581, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ebfda4f6-395f-8d64-af74-29233dc89edc
  2 b4036548-2708-8960-9858-b02065275e17
  3 b139653c-209f-012a-84cf-f06f0cdbda31
  4 927e1131-ac69-28de-a210-3ec7f4691a7e
  5 b1eef5e8-4941-612a-8320-ec078e3a0d17
  6 af133457-6bd8-5de3-ae3d-264ce707c9e0
  7 4435f39b-60a3-307f-9d25-8d38bbbba167
  8 6f2934e7-4616-7a17-b4a8-5f652348b2ce
  9 8e4598f0-1bc8-7427-87db-541890abb7c3
 10 73799c53-0457-84b0-8e6b-9bd359599c57
 11 12389199-d3ed-82ce-8af7-d278d88dd152
 12 821425ca-5710-6c76-bea8-92d10d9d395b
 13 1c7d66fc-f854-0a84-a134-ab7d678043da
 14 d36d6831-fccb-7a71-a86d-b8b56e7ecce3
 15 40daa7bb-01f9-1c37-bdb5-4754e810b965
 16 015e8c91-41b0-5ed2-86f2-c2f416518dbe
 17 c6abf2dc-3285-6c2b-9bab-bd23b70189d7
 18 35868b89-3e6a-6ff5-a888-bab11545c0d5
 19 d4eee89d-2241-7321-9eb8-89efe9572329
 20 724367d9-d9c3-644d-80be-8628434eaed5
 21 e227a6e2-51a5-4420-81f6-83031b23aabc
 22 5b26aea7-7911-7dce-9d0a-ae29defb9618
 23 17e08b11-3ebb-5900-b699-c9b3e568f5eb
 24 a513c477-d919-0888-87e6-3e1efd1e7ade
 25 913f9b4a-e46d-57e0-884f-b712164e337f
 26 f6762e8c-e7e5-0948-80cb-84521cc8f996
 27 cb40866d-1c17-8e39-ac0d-e48aaada9209
 28 1bef6a08-08e9-010c-a4a3-6ddc9b8e15d2
 29 b517bf5c-2fc9-8631-b489-bf7b9e17256f
 30 6a3524ec-0679-4a69-bc56-b1f9bc26e6ec
 31 87651a5b-4faa-1144-a3cf-be64bd769c01
 32 facc1c0e-0922-8d64-aad6-0ff477bee2fc
 33 2042894c-db42-474b-a3c1-19985b346256

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 880265377886071566764750508084184. Exactly this sequence comes out of new Random(856).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 16 of Run 36 (seed 335,015): new Random(335015), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-10 20:54–00:54).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs