A858DE45F56D9BC9 archive

201211081435 12ugpl

explained decrypted filler

seed 866

Metadata

Post ID
12ugpl
Title
201211081435 → 2012-11-08 14:35 on A858's clock
Posted (UTC)
2012-11-08 06:35:06
Timezone
UTC+8 · title 14:35 against posted 06:35 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201211081435) = dd7866e0fde18b7b12f7cabc8fcbd145 (name+title)
GUIDs
31
Filler GUID seed
new Random(866).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
85 · predicted N = 31 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

83834C90419D5A8F 5A8B9FF6DCEC6611 CE0641EE46874C06 66B1C806154009CC 18442DA4EBDC2EEE 99C781059679E161 EF0E9FDABFFBF778 4079E0FD4B85739C 0E9755611A4661D7 802DE6BC91ADB585 7D7576ADF069FDEF 8CCCEBC7CBD16D1E 0EA4308BF9362947 C9C4845FCAAD9F45 3DA12CE03D874F91 4287EAB7DD9F4FCA 56FA473A6E84C2DB 6B96C92DB2B05FD4 72EB2C157D3F830A 99511DF9C2479B63 6D8D7FEDCECF18AA 33BFC1809AF700C9 786A32FE7F3C5EF4 A4BA11ABA4B3C7AA 7B88D503B8A0DD0D E6120199C75B62EC 1A0DFEA81518ECA7 550EFC4E32F96B2A DC3C363E528777DA 747E72FEE8EBFD50 7A591149E38079F5 39E95352755E839E 005E373C11A679F8 B79C66011CF944B5 8BE8B69009351EBA FD3F4A318DABCD27 332D1E537EBAF017 46F5EDE82990A4A6 B73C849CD50E4193 1D96AFC1D59AAEC2 50878389DE086271 E94F9247D9ABBC9D 0D1EC4E7BC15A78E BF4A92793F0CC876 585D0CD2DEFA128D 3DF30147B9F02C0C C20D062B9DD6A6D1 8F6466134DD86DBB 0D2195AA3F6313F6 28084BB1E6474266 FF9D19C5036567D7 A5D13F42B479A8E6 D48973C74F17F022 A7A4CF60DEF2F661 CAF4FF64B9CFE6AA 81F54589C5A3A2FD 7686B14541005DF0 C2F4CE792320848A 6E27F1BBE0289645 7816E71E05314F21 09719396AC5B6953 FA6B56F1504848A5 DAC0EDB70061A0DD D3C43E85002D0C2F 0CA9A484CB6F82ED A07A1249B49B0019 044E7795BF66B3AA 9F191A89B0CBB7A8 718EA5AF1D10A15E BA80F27B7EA8C8F5 FCE4DBB69A4FA7BE 35D2867DF8CAEEE7 4E3ADF91714113CB 9E4138CACBFD612C 2B7309DE61C4A0A5 D70AE03F02CF20E2 7014EE8EFDDD0FE2 22E70D7F5FC1C103 9394D7DF96603F9A BCC112E6D37A599E 41FD9E95AD34ABEF 33E844476F688CB6 74F1E9FA68FB495A 8D174C8728DF62A5 555CBB91DA8433D8 7AB1CB6A8768A37C AE14600DC1052F81 D58EAA0863B199B2 F561F420927088C6 B6ADE27FD095EBF5 FDF5A51C96A6B3B7 44B364C85AD63307 1457FB225A12E832 30A4BC83542CE800 6DBD1D27D94339F8 AE60D6D91EFE9BCA 568EC7C16B22F37E 6AE94D8C8887E591 C611FFCF04AEA009 65C436EC8AA5ECCF 5CE9025E501C3675 C1C73D695151E72D 6B0AB889CB72C8C1 625D99840F4089D1 E0EBA3755EB3F5AC 5A517FD5DFDFBB8C 86A8394F0AEF6609 82998B608BEC4E75 2DE5AAB9476C66B2 3E1F415DA1D070AE 3F25AAB72A1860D6 3CD6B98D5442F464 D7715550D0E36DDB C3B594576B0345D0 93EE93BFADBE1658 DA37D0A5149DD4AC C2E4648B0DCE3689 3EE43FD936E34A76 63ABB186C3278677 554A8C5354722624 724AB9A760BAB761 E076B2A5A285E6AF F43B156768E5E346 14859F10B33BAFB9 BDA6505C822CE258
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201211081435 (name+title). Key = MD5(password) = dd7866e0fde18b7b12f7cabc8fcbd145, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 f4b27774-f362-1dc9-8c3d-a7f23be8c745
  2 5c08da2b-ed66-8dc0-ac3f-c5cc6e42d6d9
  3 f9b43a7e-0a59-0db7-b553-6fe691d493eb
  4 e0f3f306-61bc-3b2b-9a2f-074e3731f38d
  5 c44788e7-53ff-187d-9a9b-3c117705f9df
  6 1e43f67a-5fac-3491-b224-13fef1466559
  7 dd748585-b0e3-847a-8284-c42779f19a1b
  8 90992440-0c8a-8dde-a528-5747ea4baed0
  9 3c182eb5-be06-1165-9830-81764637f30c
 10 e751082c-4e6c-5f2b-8210-bfe5164a78d1
 11 752911ad-8807-2783-8df4-043fdd1a4fce
 12 b292e390-0be6-5bd4-a797-d26964c772de
 13 f42bec71-59dd-89e5-b796-2fa99e68bfaf
 14 fb30b37d-633c-05a9-891a-3a813334db9b
 15 0a3956e5-a865-1c5d-a3d2-f938fa03dd1a
 16 18f331b6-109f-77d4-b793-e58e476cfaff
 17 88f08a9f-d4dd-8975-9cbb-bf7ceef18f7e
 18 52466d14-255e-8007-a8fe-fc511adb58f0
 19 c8257af9-7694-1cf1-a1b6-c731ec967e87
 20 d5df913a-9677-5a33-a095-16b655e92f46
 21 510eec52-feaf-7dd8-9f43-b70768b081f0
 22 e41d9a17-5eec-2650-97bb-a5693c2a70c6
 23 2ecf44f0-e5ed-317d-ab7e-6e786fb9a2c7
 24 5f9e0a3b-eeea-5aa0-a67d-caf9b355f7fd
 25 66f52804-5e8f-5488-b6ab-adcfcebb8c2b
 26 7a93d007-2956-48a0-81df-6535434fb0d3
 27 45c9e17a-0dda-4a97-8508-71a40ebbd4cb
 28 68379294-ee33-2f06-9f4b-f331e207797b
 29 57a5864c-4f9e-654b-a7d8-47adae831ea6
 30 269c84df-a149-4046-bea0-b94df66f7856
 31 52c4fde5-c74f-8130-b5b8-a38fb43b5ad2

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1803138815258017881572355442648. Exactly this sequence comes out of new Random(866).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 85 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs