A858DE45F56D9BC9 archive

201211082115 12usee

explained decrypted filler

seed 695

Metadata

Post ID
12usee
Title
201211082115 → 2012-11-08 21:15 on A858's clock
Posted (UTC)
2012-11-08 13:15:34
Timezone
UTC+8 · title 21:15 against posted 13:15 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,576 hex characters · 1,288 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201211082115) = 40b04eba6a3bb9365a46589f1b7208dd (name+title)
GUIDs
40
Filler GUID seed
new Random(695).Next(9) ✓ verified
Run
Run 38 (seed 1,045,884,937) (seed)
Draw
125 · predicted N = 40 ✓
Machine boot
2012-10-11 03:41–03:51 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

45BB1AC519D5A943 9D43E15839791455 73A3C6ADED6EC2C2 047C0898005478C9 1C89711D77E5DF06 81F9C32CDD97D2D6 26D7C4166171E046 32779108DF9C2D66 9D8A63AAEA517038 9E142C2FE45321A0 EE666BE836C39026 A215A2B5847C3235 93A1E0AA1140CBBA DEFFE07D5C8C9B34 843585A34E2037E7 2A5417ABD3B694CA 4EA6416AB155B2D3 3E037B1CCFE2C55E 189E7981A35AB324 6B8AF63D2C5CEDE6 8139AE0FE6B6FA47 DE1B43A9A158B871 55011C2FF23342B4 BF0EA29EBD16738D A8D5E763DE4506D3 CAC338977D9DE7C4 9B8D4C71C8C94E3C DD4F9EAC663A4EEB E5411CC5BECA3ADD 8F100CD3E495F43F 1582ADDEB83C9185 F85D0F90D0CF7D35 0D066E8106F3E935 0659396DA4F47A8D 7755CB21B220D54A 074E0B0DEA0CC846 463FD7C1AB61ECBF 896B839FDB84E436 D46640CF0E9AEAC9 22E6D8038493B0B0 98A5A4A4EF3460BB 32B6AB97404FF454 D44F3CD86F24825A B9D2AC7D61F36877 F8E1F34B9BFED513 4230A1E519AB40DC BDB6D2893B3973DA 2308281A7525C219 209BB29BC24381ED 1E7B41293364F19F 48C85188E38451B9 AA98DB2D6905DA21 DFF54C731619B610 8E5A525479DF7A69 83D59BEF1276BA25 633FC278BF84308E 8B565AFD2360FADD 09C39EF3E5466EEF D744E4A1B75E2439 CB9154903EE4E652 CCA91A4BD0C38E8F B15C1A23C831E693 67987E1EA195D227 A5A999A72F318E00 24ED47DB8E5F2565 ACD20DE7E7D3F9A8 001D8BDD1CA1FADE DEE7931376549EA7 FCF697FD3650F159 154F403062A17DF2 914966D6DD141FEB 9D18EBAC8BA94C7F 3CC93761ED7B5E1E BFAD3618E11E3186 1BBFE36489072127 AED3A10F5FC17CFE 1BEA9762CB41B340 ACC4F30B9B2369EC BDCE1E2CF618277F 8C63F6D5C5053D85 A79FCFE69E2877B8 61AA17E56E2F2008 567B643807ED0806 99A0713899BE07EC C7C037AB60FA5D40 9E5922FC8A3D3C3B FF4DD33306BCD9DC 70A45682FC32F66E EEC2117279DF6AB3 9CD62EFD1A3FA6D6 37E3E5CDBB48828B 82028034A1BF043E A1ED5392E510CB8E CE8D039910307A11 907C0DF46DC3EF22 2DEA93608C9F4E1A A349303F635D38D3 01FBDB23CCF84611 BD610CEB380A361B A2C5B9E0C2CFFD2C BCC6927A4BBCE1BA C53CF226D88F2F53 D723847655F2DAAB BB64918F9DBA33EA A7727D9E0B1B7E1A 40540FD68533B62C 18EC8DF6FFEE2026 D3CAFCB36511EDB5 F305C4F3F8F48B69 570D2641C0C4E5CE 917A06978BB69A4E 6E39EBC7DC7C3D6E 3B15B707236AB7A1 F1033353601E6239 7C5605209B400E83 84D27E8E046B6508 B9410873877F2A66 5D6DEB573E6A38C7 4932AA423C31E4B2 26D5B3C501375877 BD1BA8F6A06638D4 487D4758AE3FD77D 45DE8B82CF4A4D4E F2D54A24418EB837 3C2907194232BD73 17D6B24180E1F03B B64D14043F9917E6 90AFCA026C886D0B 43D24ED49DACA5E9 8E190C25CF837557 B6481245C31432DA 01D55DFD65F54675 D817001FAA244F21 614E03C0E00372F0 D3B1474079F52262 8AD200B94190294B 3ABDABE2C42C3015 36B516AC25ACAF18 9AB7BE296F0F0631 8E9CE74D22CFD6E1 E4B3717ADF0A9E5D 4EEC6AD720BA33DD A0F97DF31547F94F 88D075B452CB85CE 1DFB1FB454B13BAC D23DBA27B9A60C46 CD96C361F8235FA7 5369AB7126CF7770 D379DF7B3512D744 722EC4134CB672E2 F466CBFF74925257 C0DA4D0CE6D45C63 EBF54E207D3682F6 16B3BD99C20735BB 2B7199D286EC76F1 515DC89E77331386 478400C07C14A9A4 9B095B93DE58AD2A DD132761D0BDF8AF AF61269D60FAB8B1 7D08F373B17C0AE4
  • Read the ciphertext. Strip whitespace: 2,576 hex characters = 1,288 bytes = 161 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201211082115 (name+title). Key = MD5(password) = 40b04eba6a3bb9365a46589f1b7208dd, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 40 GUIDs as hex (shown below).

Decrypted: GUID list

  1 5608449a-8279-7fe7-a183-e8afc5471540
  2 60826d84-a938-62f8-81c7-ed618e3b90e3
  3 753fdc31-09c8-54dd-b432-eb88e1b12d51
  4 5c47801a-7062-8c02-9c04-378e5af04750
  5 b47228fb-0dcd-8d92-b341-747fe1241baa
  6 ee1c9918-6180-8329-8060-c92ed940af03
  7 e6eaf46d-0feb-2a98-bf44-4ca1c5a865d3
  8 d0aa8776-5fd8-16fd-a719-66ecd689eb87
  9 1b3e0f08-d897-8199-9aa5-67e14274e7ac
 10 4e6c0459-2c60-5a6a-8674-6b2773fc35e1
 11 cd23d3cb-63aa-2048-84b1-bcbe58a5aa3e
 12 6004de59-b301-046e-9b5a-47b38e5de57e
 13 cfaa4954-1758-3263-9555-ab6a2d60052f
 14 2121c123-dc86-0ef1-8570-b519d991fe8e
 15 5d000a2e-e881-4fe7-afda-bc1cd7f6b954
 16 5990af7d-3e62-042a-92a0-1834fdf26af0
 17 ac489f44-d93e-06be-8481-cd25caed3aad
 18 081361c9-a4f9-8893-a794-3000a19d51db
 19 b263980e-1123-4f36-962d-e95cf10d962f
 20 61b09901-8877-3d0a-9536-a6c53fd3b145
 21 5d780564-de66-1b51-bf3d-0a44940fe9f7
 22 b07845c6-cf0c-314f-90e9-9207a3acb1cb
 23 59a18d87-3c27-4030-bd80-adb78564c9b0
 24 39929877-8c40-7e7d-9b26-8fdbba247342
 25 d6851182-8d20-7937-b3ae-c0caec08887f
 26 5931c318-eb9c-4faf-a812-c288c550a909
 27 47884e70-d4a0-4d21-86d9-d83605519d04
 28 49133c4e-1508-272f-84a2-0cbc840a3478
 29 c9158f2f-ea5a-4d63-9755-2e05a7f34832
 30 5863d208-00dd-7e65-8d64-dcc49c057aa1
 31 3d9929f7-c482-6176-b8dc-c71d6aac9822
 32 4f5d4b9a-5c52-4ed6-ab18-1ea38f0ad129
 33 28a97c00-c16f-64e6-a71b-a3908af1b176
 34 fcd256f6-5e6a-3563-8232-ceffa1a4c7a5
 35 c2728d7a-6bd6-2626-993b-d01ff5ab86d9
 36 443041f1-821e-73ea-b234-c73c7ab2c42e
 37 a263874f-9ea9-6e97-bd1f-91666186a6f0
 38 4b9dd95a-5c98-0684-a03c-9b17357719fa
 39 4ef00f65-ff3e-3532-ae9f-1ccad601142c
 40 d334ff74-cb4a-5fc3-888c-ba3ffd23c0bb

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 7658882185203040084313477442476463276035. Exactly this sequence comes out of new Random(695).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 125 of Run 38 (seed 1,045,884,937): new Random(1045884937), Next(8,64) per post. The RNG predicts N = 40; the post has N = 40 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-10-11 03:41–03:51).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs