A858DE45F56D9BC9 archive

201212031422 147qlw

explained decrypted filler

seed 807

Metadata

Post ID
147qlw
Title
201212031422 → 2012-12-03 14:22 on A858's clock
Posted (UTC)
2012-12-03 19:23:00
Timezone
UTC−5 · title 14:22 against posted 19:23 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,936 hex characters · 968 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212031422) = 3aee6c500693b7a05c5f91da4bb5e802 (name+title)
GUIDs
30
Filler GUID seed
new Random(807).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
0 · predicted N = 30 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 11
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

5B7AB1C029153888 9739C2E83DF076B1 5499A2FB6D5B3E6D FD0740F88D272088 CE0FA55CFC2E75EC 6A0138BF6FD1404E F28029B2F873B568 6F8FF812D30614AA E41B5A2F968F6CD4 DE35D5DB1317BA0D 86C9F20A754FB781 E2B27612D1066D94 C6595BCF3D4AB7D2 8BA21660678B02F9 B95A210AB4EFFEDB 760A69298E07FE11 92928D0F047C483D FA2ACFEF98EEB085 A58CFB82C861361E 8AF447C787C483B3 7EC5E91260289577 9C0C60829EBA59A5 B5623EA283BAE2E0 A1A2E4EABC34ACBE CBE667865F738B21 DB03215D196DE318 9C328F5566F46EEF A953C3EB211CED5D 4C46137945AEB1AC C9923DC85D547710 EEC378B6C89B46FC A21DAD515B9204DB 5E1B63CDC791B65F DC71808B5D9ECA25 34A80E844B7126AD 47F463C1CCEDA358 4C0D18B504B12B19 49E94EE47D883150 080275795D8A8467 561EFC8353A79027 DE1CBF9C3A26E888 C2256BFA756E663F 46178617803644D8 FA3E5EF512B2B78F 0F86A2F3751081C4 A1A155CDBE3CD4D9 B9EBF120A2BE2965 715FFF49C1C4C756 32A2B6CAC7D04AE8 711AF5843D443708 FFAE4551A0A1BC5E BCCC0A0AB7C39A34 099A05B14AB0F434 AA6D46194A8C97A4 F67B50F838418D04 FC3AF790CE1DFFCF 1E5826BFB156D1F1 97AFB5A58FF7FE01 A80030919E121433 F43365D0FEBA2030 D29554F9C3375B42 07B49A846E2F1619 F693ABE66A111D43 045CAE39E7C12C3C 94C4E48B7D6230C8 46FF35C912FD03AC 3AB4B3B3E2EDCBDC 7242FF9A67FE6444 3B06FE1DCFE674DE 881CE46D4675D294 124E0F7E725565D9 B21D9735403BE431 C46432A920DDE1DD 880389D7E32C0737 FEF3A16886CEAB5E 135388ACAE62EEB6 F6C2C1B71386BC2F C2EE8EBCF49236BB 64C828F5887DDBD6 DB752B170CCF7473 D7244FB36A6E965E 01701C971645B4CE 77D0F357C54E0619 28660CF316B5DD61 6F6733EFCFBBE391 4D49931F5B825100 0FF5CDC9B7DEC14D F63F9DBC6BBF2F5B 37939903BAEF6818 F6D35A75645018A0 18F446623F9ADF20 DF4BA687896FE398 A616BFF60207B61E D64F5F19F6FABBEE BE63FC0AAC144DFC 4F77E26EB692ED29 514B343A242BB108 A33E8102410D16A8 5D3FF350B47C1663 A6B802C9C0FD7107 A99DCD888DD2F6A2 0793B3DC4E250302 8CC0874FE9A5F457 9C1DF452632AD687 32AD9CC2D71655A2 92519FD820A5BAEC B1C2EFD533700358 A1BCBFC6EC007D61 BD3C207B5FC1AE04 F53F30CFA4271021 C7D728EC948C6ED6 630CD1DC39D5DBF3 3AD836C7A75CDECA 3118770AA5E76D73 B335C81467336989 04A6EAD30969AF46 1E749A4E654D1D5D 1FDDEF521DCD28A4 1A6049F2F191EFC6 04501C6689988504 57B3382D8EA9AA28
  • Read the ciphertext. Strip whitespace: 1,936 hex characters = 968 bytes = 121 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212031422 (name+title). Key = MD5(password) = 3aee6c500693b7a05c5f91da4bb5e802, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 30 GUIDs as hex (shown below).

Decrypted: GUID list

  1 d99c97bd-f2f7-2e83-a973-b8bd370b3caa
  2 7141213f-02a2-5015-9a1d-94cfc3e1f47e
  3 e536f7e8-740a-73f5-84e4-4dbef4ae7156
  4 42ac29c5-aca1-7f4d-8ded-42e0631adeb1
  5 44b7c1c7-acc0-44b8-8ea0-cca3b1dcc19f
  6 bd342c37-4cae-7b8b-8ea9-3eefcdd6f277
  7 1e1a64a0-f28e-4786-9b68-a8da0a17d1a1
  8 d5fab3c0-b50f-267d-ad00-a002aeb3ab3c
  9 cab3a144-a688-7c1b-8809-b3b9a4b04966
 10 e501c51c-6181-79fb-a194-a0e2a36fc3a0
 11 b2b4cf73-e33d-7279-9a2b-4f03379784ba
 12 ad8769dc-f448-4484-b4c6-a6d0c40eb6cf
 13 f3cd2546-577d-3891-a1e7-27477fa9123b
 14 196d4b5f-e87b-222a-b412-32068c0af329
 15 b046a1c7-5231-717b-8aa9-dac0bf8fa540
 16 56d611e4-8740-0168-af76-d3577bd1a689
 17 1df71fb2-7055-062a-81d0-549a5ab0bf22
 18 562992a5-58bd-31f0-9528-abe51c6198f5
 19 d739b615-060c-46b7-aa08-baf132ce4ed0
 20 1b9c478b-7659-7d4b-8af3-6e73f8aa3a5c
 21 6e75cb28-d380-0fd3-af41-818ad385ac73
 22 68345d47-34f0-75d5-b8eb-e4bf830e5d9e
 23 1f1842da-29f2-347c-8c2f-27bce252f936
 24 64d6a309-bdd0-89f2-919a-976877a565f9
 25 9c8f1b7f-b781-7b6f-b4e4-9977ed3eff97
 26 67e19dae-c098-56f1-a684-39365663a7db
 27 d55f6cfb-1351-6709-9419-2466a1f18c6b
 28 9c46f411-6cec-6f0b-93e6-d5c30a918ffa
 29 5565fff6-5ef2-403c-8028-5f4074e88f5c
 30 37b40bfd-b937-08c3-a121-367e303ab994

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 257747427774327003470738756640. Exactly this sequence comes out of new Random(807).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 0 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 30; the post has N = 30 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs