A858DE45F56D9BC9 archive

201211081455 12uhjy

explained decrypted filler

seed 921

Metadata

Post ID
12uhjy
Title
201211081455 → 2012-11-08 14:55 on A858's clock
Posted (UTC)
2012-11-08 06:55:07
Timezone
UTC+8 · title 14:55 against posted 06:55 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201211081455) = 4a77d961819bd8e8b75d086e368d9eae (name+title)
GUIDs
40
Filler GUID seed
new Random(921).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
87 · predicted N = 40 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
4 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

4444FC3CC1CC409F 0CA3F29A9F17EF5E BC4C47B98788ADB1 E93E95003B749587 3EDCF14F12B8EA41 44A00019D7D065CD 8E38253187C8B695 12AA0D410BAF0758 E7981FD61CA14E0D 509EAF9E08CDB29C D187DFEB2EF8400B 4F658B35650E77AF EE7F1DCC04C46ED3 12699C9EFB8B21FB 949B7BD22A9DBD4E 7EDCDE76CF439403 FA8F6F1708141519 0F9F3379B68DABDB 1D89E3B168BBB48B 507228BFDAAE4D36 3EC793CCB6039D57 3A360C42128AF39B CAE69024CB12443B 8A5B42B1DF66C900 A36BED9A27A19B86 8CAE2AC68F78ADC7 A4C66E920E07F5AB E2EE3468A38237D2 09F3F60F8D0EB559 37ED695EAE9758EB 5544DDA4E8E8848D 85A3D39BBC851574 21B3CF1E01016D1F 1AFBDC85EEC0D7A5 9B41F9CF605F9AA9 92FA8C265EA81765 C5E7996E4AD1529D 74A87BE959628B12 5354093CAA2B82D0 EB6FC2A299FF370E 45229A8D47BBA007 D09C53516B20BD2F 5B79321271911C5C 071587889331B48D 54BB980372844C3C E1CAF90DBBFDFB02 823A21D677A6285B 1F95FDFEDB7CC07B 2ABD66255F965ABE E2E7B1C26C28AD7D 25C7EF9A97A48487 F3313E87DA52F861 5EA142C48F22FC07 422A1CEE7403E432 A08AA48A08D93E38 0FAF1F2566D94C46 3807904037109191 6BCA793E1B66E1FD 776BF3DCB69A9796 0E91EBEA1DF52E33 2A943CBA897A3543 D9429E54C6A0F16B 053F72F4E1E7A931 DD1AA06746AAA482 4E228C248D978097 BF90F7C92874A513 9271ABF3D42FC5A8 2C45C482B4941F36 087F7B9E289662BC 1B1018BFDBA6EE0C A61D8935025146E9 561DBB559E7232E5 1C77E9723B9501F0 BC46A5B0AC3E8FCA 0C5B32B08CDE6848 2E3D4A57D4716A79 C92D4AD1F22106A5 7169C078E7883B51 6FD7546F8F71CA78 3B0B04441153614D 8478BD8A9176ADC3 690FD8F2D7168BF0 5874D47A83378C15 0E0BBE768508AEBF 2CC49775ED8F3EAE 3AE652B218647E95 EB2BA433CD360921 0F9AD783A7183760 AF82A8F97C8FFA55 1DFA610D77FCCB17 AEF7C6AAE9CB1CC1 3C5000B0C5C03DC0 6B1DC3F91B2950F2 14E6AB63A477F9E2 2580C5B4D1C1C8E8 E5428C71965ECFE8 78857FA98839A7C7 8F1F967193CAD3F9 B2D8FFFDD681693A D74A43A8C4D2EFCB C01FBA9BCC4D34C7 DEC47E68A34B748C 82E6D9696F716D68 326D16848B5586AA 8ED12D974E899723 531AE0ED2A0CE701 D3FD7BA88B1ADEDD 18804927A01BB613 616660C201D5D17E B84EDEAEADE1B06A CEA340EB9385B40D B97BCFCB3883D276 5074F1ABD2B06D94 21014D511A342627 22519E207422DBD5 F7BFBA4A296B7987 E02CD39D35FCB069 81BAA40C35674761 328DFEBEEF073F45 988056ACAA105988 62E8237306A26D1E 29375A39E2E1197C 234E66EABA407A04 912D4221320FD3E9 1B3882AC12FAA124 A39F5671CB3B766B 0D9BB8CC189E757B 38AA4B43D74DF3A2 A14A0C227F08E89C F5930EB872F63646 0079EB7C67F7E5BD E54D61619B90FFE1 3B38FF12C6D5D282 979D24112314C5D1 31ACE4B855CE360D 8889A10A9EE7492C 9DE2ABE90ECA2180 F094C11BFAFCB047 AEA40373DDD25E91 9435CE979449404F 71A4DF2CEC403B43 F8871A269879670A 4014FC7BFA023AB5 22A9C0BA2EF8A8F4 324A44AEE08BE4F9 635089695D8B7C8C 4A9E98DFAAFEAD30 C6BDE609BD046247 2EA7607A5E445D91 F282A48D70C3F640 098EDF289B484397 BD0042593A699C3C B98987950FDCBFFD E872ABE2A30279F7 07A115664D7D0262 BE327B8E3BAAD759 A7B9BC6DCF7F5AC9 1063C3FADA01A07C A04349AA6633E399 82323FAA19B529DD EDC602ABCC5B08F3
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201211081455 (name+title). Key = MD5(password) = 4a77d961819bd8e8b75d086e368d9eae, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 73945977-2869-7efe-a52f-c050d4aca788
  2 4672b225-cd7f-0762-bafa-e7aa0eb06e46
  3 9113736c-c932-4805-8a66-53968e314c02
  4 cc20490b-85c0-156c-a1ff-97dff7fa30d3
  5 50b4d92b-fd99-0d68-940a-965b7cd096ba
  6 9441f83b-a623-35a7-a0d1-8713cbf4bf79
  7 99d03723-623d-5aa8-9038-c97af7dab6d6
  8 0b6979f5-b065-4a67-bff0-bce3be35aa08
  9 01192113-35fb-8be7-9413-182814d08bb3
 10 0104ca34-2e2d-8812-afaf-6ee695688494
 11 f8a5ad74-39e9-79bf-b7fa-b886d8a0be1e
 12 29eba339-0626-4972-b5c5-b88e35432328
 13 11c22069-f25a-6e29-90db-453375fcc776
 14 004dbf79-d91d-5410-bdc9-882a6c3b1ce8
 15 36f127d1-37a1-51c6-95fa-cebecb5b21ae
 16 03c3fb64-a226-1120-953a-1851780cb493
 17 39e96009-1623-0fe2-b3cd-f52e35509c5a
 18 08ff560f-f496-08cf-a6ed-3afb6077ea65
 19 b820c7a6-0f10-59d3-8d86-0045ff61b084
 20 b4c12675-9653-83f2-8297-307b7aa2eddf
 21 fca0208e-b759-1b9f-8191-b1cda6b27a87
 22 e00ed81b-7aa5-7b59-b451-d627d6a1d80d
 23 f94c5ee0-0a95-5d73-9439-12fcb39648a7
 24 63ce3b94-cad6-7b16-9d19-188981e3dc1c
 25 ddd333f0-d40b-8550-8453-d458caf0e9c2
 26 6fcb1e2d-e286-87cb-bc59-8f40835d1a0f
 27 0ff284e5-601b-698c-94ea-048152ac8fb4
 28 dbad032e-135e-3e28-ab19-3adb575f4d86
 29 d8a6c119-c2f5-8b7f-87ea-9fd8ee34a7d4
 30 14a6ce50-e37e-7b6a-b07f-757217bb488c
 31 64338e7b-835c-1149-9f26-837a7d0ff434
 32 16ddc1b3-f5f4-04b2-9d16-736f943c138a
 33 88fe7e73-bce3-5078-9f80-58d174826ea9
 34 439c2e60-dd44-0112-b96f-7e41f9be689e
 35 563eece0-f1ce-21cc-95b7-7906c3198657
 36 6e17955a-d790-60ab-8344-d61f56a58352
 37 45dcf8ac-8542-826b-8fde-cf0db58acc40
 38 5fd32529-e759-06bc-9cdd-134236746704
 39 2f724b5b-e4b8-0cbf-aa13-292532941cc1
 40 c4d7c54e-12c0-8472-a03d-1d97d2f06b43

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7041035488746551005817578863871050268008. Exactly this sequence comes out of new Random(921).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 87 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs