A858DE45F56D9BC9 archive

201211081645 12ul3c

explained decrypted filler

seed 664

Metadata

Post ID
12ul3c
Title
201211081645 → 2012-11-08 16:45 on A858's clock
Posted (UTC)
2012-11-08 08:45:14
Timezone
UTC+8 · title 16:45 against posted 08:45 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,256 hex characters · 1,128 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201211081645) = 06e59ade6f50ae5c749894ad684dd8aa (name+title)
GUIDs
35
Filler GUID seed
new Random(664).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
98 · predicted N = 35 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

647820FF26DAA6A0 940B0C30F7C2E2E7 9DC92F6F782A6C91 2D14B4148E21ACC3 92233514EA790A13 68B9548C93C44C7F B3A81C7221A6AB6F D90C28C8EE2203BC DE8173F9638E0437 1C2EF8C9AB263753 40396185D39BEF3F 53AEB9637C257662 973293D7DAA4712E 1F48FB9379BF9A69 66563ACA0D5891DB 35670EDCF6638155 21E757B9BF3F379E E09FA29489125091 03C833A3851791FA B9FB4E2AFE9E5479 8F275DE7FF487DC7 56B024786845DD64 0F40BF5C7A8C45A0 64DED9F55C34BA1E BBD01A8016858F68 F1E97F1C3E0F1616 9F8BDA31F8B283CC 57784760254B5659 185C1A1615394BDB 7B49095AF48AF3FA 2AAFCF8060D7FBFB 9E9C8B0BB28541CD 4A5A4CF5A43E53A5 665FDC4F3A39A3CA 053A33693D9B93AD F0CD04EB9F938431 FBD6A90D85B1A6B7 ED7184A5961F9ABF D6A3800F22434F69 953FFA014922033D B093F8D4EA94A37E 6CDAECC11FB43C45 4B3315789D6E4856 A12FFFC0A139B671 3E5EEDBFFF23BC2C 6F9AEEF4DF058C2D E5FA39B75A699941 C2C0495623255EBF E846F32F26591172 DC009D4FB6072252 5D94331205884512 A00249E351B75EE4 23D0F320F20AD011 9A79A52320F8702C 68542209DF5203D2 F4063E5D3C07E86B F9E096DC4D678C11 918C0D3ACED5F260 405346F2662F00EF 6F1C7E564A225DC9 A28AFE0124743D5E B318E6F0996AD00A 091C267BBC849791 69733DB11E67FE7E B31E9122F1C6761C 42F2AA7077063746 1913011074CD0CE6 912DDC56C50F8006 EF9C2E0F249480CC 35AC96F6A8C8CD0F F4BF6360A8F89A03 720B3C8A4B71C7F0 BA13E9A5A0AF7581 632872578350A29C F5BB0E9084D405CA 07A04DB847A1E847 4D221EE0A078CAD1 37AA0F4816EDD43C 21211E3B89DA5FB7 58BDCFE44219D7C9 F5EFDA93983E6DA0 DFC83EB363C94F80 63FCB9C73FD9C33E 95B034CA648C9223 4825A7CA3B0F8726 1C67E447D2E3305E D58AFF4558608C92 0676AF7186A596E9 257DCD06AEA45E71 C1F63061B8DFB979 FB0031ED4E8910DD F0DC1B6AE7AE59F4 B58946CD14CFF042 EF9ED43897E9EE2F 9DDDAFAADACF125E 9542227E6F6C16CF 1D80E8753CA4EE1D 805BFC9258035E5E C05E5F2B6A6BE976 182DAF1FD64949D4 7666FE39EFACDAE4 D9A4A6E27F4B9A77 1A0A98D29A38B22A CF9ADF4C6FD38463 18080CDBE03819C2 AD239C268370737C 165DDE34A6E0432D D632F253BF35136E 0F5E4B2063F02FFF AF50061FDE7D7C3F E50ADB2AA9716567 7BCBD5A444FAC7DC 9496BE771FEC95F4 A745CE5D91770ECE 4A7CA4276CB48504 7463243AF0901582 B4346F953DADE809 755C3EB5AA6227B2 536B2F5FDB6E5285 8F91621C56A13CF9 961E21A9D7BEC90A 87E99A63B92BD89D A6187ED879E536AE 82A0184A20F5F585 D77A3EB2AE6B113D 6116BAF13BE358C0 F0E58FF876A82E29 0732F01A9517BF2F 20A1A08ECE93E527 0E80FE6CAA662909 0923403D08FBB3C2 9093063EAADC833D 289E768A32A25C0D 9F7EE0B82ACA456B 48C2C531204D94A8 B139E46A09666203 135701F0C8240D5F 8E8BB0AA91987C7C 9D452CD7B4816766 C05C5BEF4D501AC1 A1C128959C0E41B1
  • Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201211081645 (name+title). Key = MD5(password) = 06e59ade6f50ae5c749894ad684dd8aa, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).

Decrypted: GUID list

  1 48d938fd-b724-57bc-b192-9e61b6e8366f
  2 09e9af9c-05ef-55fa-afac-5e46f4600a33
  3 cc5ccd78-da8f-85fe-87b2-ded60db25b46
  4 a65fa130-7801-224b-98ca-35997571c771
  5 86740806-7b81-8f58-a471-f1585b105ea7
  6 b180a580-8991-7b76-807c-e7fed18f5234
  7 85847540-d66f-351b-8291-7859039976f8
  8 41f96def-4e94-5879-865b-df44f000c7f9
  9 c1d70e50-9065-1ba7-8f83-efe3d3d2e7bd
 10 f1db0a0f-0308-185b-962e-a62844d4acdc
 11 37cba303-5552-4578-a8be-473d62bc961e
 12 1fc54faf-1e0f-7ad9-b277-bd46885810e8
 13 2fae51b2-db58-09bb-b204-b7fb58a6e17f
 14 823d8ec5-9c19-885d-8ff9-220316a1ea02
 15 5a7866de-5caf-6ef1-baea-a966b6ef7b1a
 16 cd778ee3-2a22-6c84-a411-8a5402ad4786
 17 865ec643-cfb5-8622-b652-59ff9f858b8e
 18 d42b9fec-b59f-6696-a949-f180215391e0
 19 fb9c9cdc-48f7-5770-b6d6-91ceebac4ae4
 20 62d5a896-dea4-328c-bae2-ef60ee7eca6e
 21 3b1b4c44-0d12-0145-9fd7-204edcf539a2
 22 1bb8a899-4e4a-693f-8f37-96fc3703246a
 23 390a46d2-6421-1777-8fd7-4e0eb6a5aff7
 24 03e8a37c-6024-80df-806f-8a8cc7a13b61
 25 b7e088bf-fc8e-6c17-9c60-684d5eceb5ea
 26 d8ea5728-8c1c-5866-85d7-ab99179c028f
 27 d1a4269b-485e-7fbd-8db4-5f4b676b5bd3
 28 aa8518c7-615a-04eb-8820-239f99be91ec
 29 6bb195fc-fc3a-832c-bfe9-069ec8fd4b4f
 30 3f2fdd8c-3940-7692-9ea7-a436da6c2cf4
 31 b8cabb3b-545d-22c6-b859-0469df60a430
 32 7cb05b65-9a34-3038-994c-161a6e1213cf
 33 e15501d6-2664-21ec-b666-e7f8a3dccf24
 34 43e683f6-597c-52d8-8d06-6a9de74a79a9
 35 41443519-025f-4611-ae06-3e6cae103bb4

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 55828735114708668653061865708723254. Exactly this sequence comes out of new Random(664).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 98 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs