A858DE45F56D9BC9 archive

201210301459 12cok9

explained decrypted filler

seed 125

Metadata

Post ID
12cok9
Title
201210301459 → 2012-10-30 14:59 on A858's clock
Posted (UTC)
2012-10-30 18:59:59
Timezone
UTC−4 · title 14:59 against posted 18:59 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,768 hex characters · 1,384 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201210301459) = 90aa5be329aa190218d6e2216af3d5bf (name+title)
GUIDs
43
Filler GUID seed
new Random(125).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
68 · predicted N = 43 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
20 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

C6E252078CE78D31 3339ACF80894F2CA 51CDCAC1FE956E26 8A1F1BF23DDBF90F 907F985ABAC25744 F9637A8770EF3B24 1889B2EBC564221D 596991F27736E9C7 66DAAA7A98659C93 077B9957688D7B9D 00C572DD7A096C83 811BF2874B20423C AC689D3DF66B2A2A E7D04A003009A37A 198C5A1B235A0678 0EEEE8DA2188E029 FE69279F00933484 F073C05781BDEAF0 7391B829E548563D AB81C627FDD5B60D 139DD99FB91259FC C4D09D8132260CBA 73830276156B7DD5 2CB31ED94E359FA9 D6E597A47E3D5FA4 3899A500FC30D95C 7EDAB468035F75F9 7AFC74F83E39BF67 119DEEB26BA399EC BD532F785BB3820B 9B2746DCF8B22E83 F64E000D8BB60EBE F7226A9843BECB08 D7FC8343128ECD58 96E885C0E27A8617 D4217EDD1F379469 565AC67BCAE77655 4EDB95E480294695 50C019F0AED864A3 D807FD4CA6104B78 DE2647EA98F158E4 2B4852F2DEAFA946 1CA1D2958E21AB00 190BD77F0263B780 23B1FEAFB1F4A85E 1A8CA0462C0CB5A5 638D49784278C209 50FA70A45F4D21FD EE38CF35E47066DB 898ACCB91B6F8703 EBF4512F65AE1C5C 306301810A503C83 1D1465EBE0BAF1A8 0AAA8D483680612D DC71068B20D9687E 368A9311A2FFA9A8 C406B216762C8239 9BAE401BCB60926C 1782113E5CCFE2EE 0AA9AC6B24DDF65E BB12745B63E0CBFD C53A58FA0ED9ED2A 7828FD3C4F0495EC 9DB1E6D8F872A9A5 3DB21B2A5E9E756B FB6063B45D947689 427B3906722E154E D9219E4112923EAF 65DC14C2662D7833 089305834E2FD126 B89554566901AA03 756381423031D8C4 A6EE36B2748E7A69 257288FFDF9D86C6 CABC050BBAD63F0D 3F9442171C852A89 9500F32069F9C999 AB2E6D9E6C55A3B4 75CAC07B421068A5 9CB590B429F730A4 3EB63523915F885A E8F260F0A4E382B5 0EC8BCAB2875C222 5F877E47913A9604 66B4D4AA0D0AD556 6AE624D2140A30D3 BE28C85E3DED819D D1EEDC08601A8B35 B858CA068593AD54 5778C909BC77FEF7 E046CC712F482574 66B98947393608D5 306BAC29E3AE4041 F9799B5A40C1576E 4ECA96DEB2579EB2 E6FC03036C696737 CAD0F000BF97DF74 F1CB56A62F8C81FD 65ACF50C61A6DCA7 DB5628F01DB9F823 1EC5FA41EF32DDE1 6C96BFF0D3E0356F 0B817C5560A32E55 64BF92496F422DEB C030D76B5ED34B17 517E2E609DC0B3D7 83038E9AEA720517 9072362CD8226F3B BACA6487CE280B6C C5B613C2170B038D 3D852BD35ACCB641 726641BF98ED28A8 DFBF5D4344FAA00D 6C3C797C56DD5FEA FE45BA3239ED7FC2 C644097A11692B0A 48FCBC858EB02D5D 738D4AE9A3C6FCE0 02861A42311B8EAB 191D967D66E08BA8 D4CFE647F595F99F 55310842DE4F2FA4 A6C859A5CB8D2A5F 2991C8872B7ADE3C 4F2C87859CA390CE 1B1BCEC3259B0511 A59028D0CF1424D4 8E877B99547380D6 350420E7A7C6F23A 2C7B8162B2DF043B 2CF9AE4E35D41CC3 D36E82CC47814542 BB219A05698A1172 A3F91871B18FC63C B2CD6F4AE525D6C5 0D3FF6BF554BBE4A CD745A73DB4D913D 5CC55AC00CB193E1 E315DE49565BCBD9 7EE02784E0CB17BD 931A555F90B90AD2 E2A1BF357D19E871 063F1C511B884DE0 368FA42636744DF8 916A5D17522D795E 51855BF0A45E4635 8BAD6E8972195ADE 88DA14D334E2442E 85727924338086AC 980CB2D39AEEC587 0569AAB01466F29B 0FBCDA2F64166271 1CB4EBB584298461 461E6A533DEEBBCD B6EE46674098A081 6A0BEAC0E82F103D 9DC52B39D81BF078 0C1CA41C3C53AC19 3FCF06D2BB755ABA DD5085C981BB8624 432B643902104D53 E9F5674FE6B19CCA 92888EFC840F760C CEBF04AF4A6C89A4 E5CC63D43D936DBF AD15F362DA262F1E EB7F5D3DB1D9888E F957B3BF39B5D555 91599045635FF8B9 2AD543019F6D3153 9B92342A3ADCC594 DAF3BB5EEFF64090 7765452895374230
  • Read the ciphertext. Strip whitespace: 2,768 hex characters = 1,384 bytes = 173 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201210301459 (name+title). Key = MD5(password) = 90aa5be329aa190218d6e2216af3d5bf, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 43 GUIDs as hex (shown below).

Decrypted: GUID list

  1 2d7c7aaf-c0e3-06a2-8409-7caef76467ab
  2 4525343f-c251-43c9-8066-b6de0b8205cf
  3 d6d0d088-1d2b-151e-a15a-e73e456d60fa
  4 b935b264-1507-23ac-b8b4-0499ecb54948
  5 b0ea7cb6-8e7a-5a12-b34a-2501c619e848
  6 38956cc8-d941-70ef-b95c-6ef23eb345e8
  7 6e3e9ead-71bb-8869-a1b8-750ac30b4c95
  8 e1ecde7f-b558-12c7-a6a7-ac45842aaa02
  9 e18b0807-8de8-3eec-adf9-8c52d33928a6
 10 c6be4c46-c43b-3a6e-9a4d-7402d5140308
 11 122d7208-f649-3379-af92-c57662a2972b
 12 79492bb3-1545-0ee5-9267-bf45639041db
 13 30f8a895-ef80-517e-bd82-8944eebea478
 14 c0afcd60-97ae-4e4c-b2b4-473cec6af0c2
 15 a6dffd7e-a0e9-4301-90ba-5efcc7787645
 16 2a6f26c5-3ded-058f-9e2d-1a966ed80d66
 17 f7788761-4ac2-37b3-bd04-3be2fb6c36de
 18 0b05f3e1-2ebb-4be7-8439-85ce3f300b0f
 19 39954d15-dc9f-040b-9fab-81729834f1fa
 20 7dcef2bc-591a-6145-a35c-4b9d8e765035
 21 fd3536db-6b40-307f-bd71-df6b99658d6d
 22 e82035dd-412c-4cd1-97c5-f9a24ddac380
 23 36eee1ac-931c-1f7a-8e6b-a9a96c9258d4
 24 2e910a0a-3a5f-6621-885d-845974cf6c9c
 25 58d51623-e89c-8544-a273-bb93e95d6511
 26 ec99b918-364f-8ecd-8cf6-8277b6ed5809
 27 d4cb72ae-6469-339b-baf1-6ea7e259430a
 28 9a1f0cd6-4b9a-1537-995d-2b3001e9acdc
 29 6be2400e-d78b-06a7-b79a-6a9955cc4b9e
 30 cd9bcdd0-2015-6590-ab16-4c16e15838ab
 31 5e0e8c74-e74a-369e-8a82-0021c2401360
 32 a9d3fa8c-5624-3dad-9d1b-9771cf9c5690
 33 163deb13-f55c-5e02-9114-ac2a25f737f2
 34 9d14efee-6887-1529-82d7-d44f02560931
 35 ffaf3556-0914-24a8-9b96-a560dc0701d8
 36 7b974378-99df-13b6-a798-cddf3edd6fc4
 37 d52c1fe3-ee18-5ff9-b0fb-9893b0a311c8
 38 0bd25851-b889-5a43-82b5-0c55d7c86d84
 39 09d41f50-87f8-6d62-b984-64a2b6658350
 40 574a6d8d-4afe-8290-b83d-e4827a7c9121
 41 ec5a5059-e2ea-42b1-80b2-81a5a3d607b7
 42 f5f776e7-05f2-303f-b00a-5839239f3231
 43 c5dcabf8-0419-5042-b0ee-693aee4d9194

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 0412578133305440340634168831063351215568435. Exactly this sequence comes out of new Random(125).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 68 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 43; the post has N = 43 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs