A858DE45F56D9BC9 archive

201212031920 148c5d

explained decrypted filler

seed 589

Metadata

Post ID
148c5d
Title
201212031920 → 2012-12-03 19:20 on A858's clock
Posted (UTC)
2012-12-04 00:20:07
Timezone
UTC−5 · title 19:20 against posted 00:20 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,768 hex characters · 1,384 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212031920) = f2d19f2ec8ef44da24d2a6c250bbf875 (name+title)
GUIDs
43
Filler GUID seed
new Random(589).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
9 · predicted N = 43 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

C654F22A6189772A 54A9AF259E32141A 91542C62622B9A6B 1D8371AF494BCA92 327FFCE2AE1AE0BB 31335F763BB3A9AE A067300883362068 0F6E3C06316FC92F 3CD98334D9DECE0B E4E2A6730C78EA33 FE552585FC924348 EA78EA3FE3EF9556 6EAEC40F62788E07 5FCB0A216B3CCAFF D160014F9FA9C224 727A194AAB2386F9 01DE9BCCCCB22A98 EF64DD830A2D1392 3AB78C94E2111C34 C47ED28B4FC88B23 C8BB839827C15081 5838CEE021172B0D A7A240EFBC210D13 6248E8E372B56C10 8B9F924917D043CD 342EE75869E92FE8 F9C43C21E04BDD10 B7BDD13111CC5F6D 88BAF4867103C0B9 B360566A4913991C AB5FDCEE8CC67B63 D0E95D38C2538420 903F8CB9FF1036F1 A74C3A1D142A85CC 6F5FA655EA2F87D8 4CFC7FAA8AFE19F8 DA755981576015A4 9553429FC4D8B8ED 6C8E91FC79207C72 832B978C3E323251 EB9BAEEBDB58F562 94BB2DCE4E7AE6F8 68ABC66835FA15BE CE134C8CDDD99280 5A5826D184D6BB83 DFDECCE5C8748170 1ACA85F6E9A9AF3E 81C1E1AA60AE6412 B27203C0808A6F84 501129B50069749F 84979D34A42D7F00 AFCD3A1BD29ADD2F 19CE541CBA95D5CA FDB94830A42CD144 3C0EDB2E11F4EDF6 C23339299748AFAC 9B625E563147E67F A93627CE2E138B86 19529618F49C6C11 476E568195885553 2C5F96012F5BD9E1 D9278E486F63203C 51EA9671525EDF52 D37AE927BB57598B 7440CBB3AFC9A12E 63AD88EBCCDD5AFB 6553794D301AEF20 4A586952368AE522 9727423331619381 5D49F04B55A5869C A16185CD97908822 BAA30BDB2BA6D4CC 086E9CAD4B64F06C 55C1B1DEABA04A80 09587C0FE46742E8 C6BB9BC4169F7B12 BD73C170BD2CD1DD 6C8844FABC0A9F01 5724DD5ED4782ADC 3AFA22BC2D843BB8 FE9BABC48E235B3D CBDB6B75BE218A6F 3F34D9DB6EE90C3E 300CDE86B77D3899 1019A380E6B64EF2 E4A33285A242B5C7 B3DBEB78D3BC8BAC A4590307900187E3 DCD4FAD9A9A1B255 74B8D121D6555FE0 E2E08BB0D866A386 6F8E38C2E14878FD 9179F5A659E9C325 49D6D9883A65121D CFEECC74C0CC8E51 A6593C09CF556798 3574973C72FA523B 69768F26108662AD 650BAB9B2556DAB9 8FB885515305D3FF 2D53A4578843F4E4 9C1CEC05CBC19832 E53B119BDD3E5924 E479F25E70E8154B 4AA0CE2ADD4FEA78 6F62A36A443E50F3 BB314C316E7B0D90 9A3F28B3A9857A3A DA17A51A39789DDA 2A0500148CD05823 05A550218EBD2EA5 89797730EC74A52D CF851E49E3897093 0B8D10D755DF4C9D 38DC09A7EE2F70DB 42CC49DB5F2684EB 4635FBF2BB09BB77 14C92D2882788A4C 0ED9BEA3B9D95272 77A1D97C93320295 C79687D4CE24D179 78FC7DDD814F394A 82B6EC10F7838F61 A7BAE36301B2FD91 0F7F2DF6E7B9C891 124560A39CAFA13E AF0A812CB43D18D6 975423B7C2D01CAC 660EB508F0E05A5E 20920859DDE6BAD0 C7B3DF6044F7CEF7 C55906B461A4B350 14F001141ED91462 B0C74F37906741D2 C9CD871B3225E631 AD79B2481A445D20 B9CCAA9691B45D21 2961B2ED4D618B18 EDAE0DBBF88BD5C5 2DFF5BE7D4689C45 941EBCD2DB2AF66D C532F9ECBE26E5E0 703BFAE1B642B0A1 B292067E1912249A B50B650D4B234E5D 29B93312CEF3DA0F 2B9A1F4585B4646A 3757CF6E8E5FA3F7 C4063BD2F2682BD4 36A3C99E806AFFDA A35D66F3C4F6F151 8D561A728FE849EE 2313F32C2FF1F00C 722EAB2698329FD1 FF23B433F1C43D80 68C42E6254CBDF11 8A2820E0EE0E5159 551409A70C6BF474 5941D130D64FE870 8B7220671BA6E011 A7D486B970D1FE48 DA44DB68A54C9648 E98BD92DEA5107DD 67E1C8C96550A31E 325524EF0467A40A D2670F282C378C5A 519E6CE8595505F5 DE46CBC7692682EB 625A122E6015A65B 7D82E6D67D3408F9 7BC4F0BC9D8F996A 37A6DB69C3EFDA80 05358E615B17D296
  • Read the ciphertext. Strip whitespace: 2,768 hex characters = 1,384 bytes = 173 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212031920 (name+title). Key = MD5(password) = f2d19f2ec8ef44da24d2a6c250bbf875, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 43 GUIDs as hex (shown below).

Decrypted: GUID list

  1 390c8e9d-5b1f-3dde-86d1-d5f61669fd67
  2 b98c6805-dc00-58b6-94ab-633484615e5e
  3 1f61a755-36c5-45a3-94dd-c65d187cf82a
  4 f5dc645f-d5dd-2c0b-ba7d-2598e9846dca
  5 5fe26f91-1b6a-1389-9ca8-bdc6ced27560
  6 2e368f3c-fa15-298b-b158-5389936fafed
  7 94450fce-11c7-77ec-a093-549b15824092
  8 f6bca922-d305-82a9-b22e-c5c18993bb10
  9 87afafa3-b261-7ace-baeb-e3786691c99f
 10 b147f233-ba02-4c96-ab0c-b6e9d0616071
 11 5383e60d-ec76-2fe1-ad3b-72b5644ef551
 12 5c40bc30-eace-2897-ad35-e194becc18a4
 13 9bfc1a8a-c185-4e91-aeb3-87fe65cf25b3
 14 7f0fadcc-3739-8cdd-9238-54dcf0d14cca
 15 4939c5d6-e7dc-2a17-84be-89585fcb8803
 16 7de86c44-7936-78c7-a2c7-2f78ed37ebb8
 17 3b9075f3-0c49-44d9-89ca-c6ad70929e47
 18 ef7501d1-bb24-134c-bb55-8818c5ef28a3
 19 5480d650-e9b1-58d7-adfe-828090aaedbc
 20 86f86ce5-fb69-3665-9523-7cd8e94c5bbc
 21 7b74998b-4b34-08ed-a776-58afa64d2b3c
 22 5894a00c-21b3-3911-8e80-9ce2739f30f3
 23 7e9e5ffc-4844-4479-a078-b11a16bc2fb5
 24 c460da51-76da-77fd-9718-a75030a84ad6
 25 4b3c02a7-aa1f-3d8e-93d3-93c8fa7af57e
 26 f870a12c-3be4-30c2-88f7-ae422055e4cc
 27 618af566-a23b-3106-ae8c-37f49b073878
 28 6bc4769d-36c8-50f7-a2d3-0f7891d3cfbe
 29 92ae648c-5c21-22be-b94b-2e8c5a1388f0
 30 c1206e60-5cf8-3af0-b56b-deb691724ab7
 31 a8f31b65-1848-5ae0-aa4e-802c622522e9
 32 fb56f553-9a60-5d8b-93e4-2729a2911ed9
 33 18c43a75-f4e7-1b3a-80c1-962e63a93487
 34 b669835c-50a9-62a6-93a9-d313f13e8f39
 35 2c5de2fa-8281-2d1f-934a-814fdb4ec604
 36 38fd8e3b-abeb-2552-ac51-63c43ddb8407
 37 56364771-1f9f-80a5-a24b-326f12591074
 38 c9b74988-228c-7b4c-9207-6c0603a5d6d7
 39 b29d377a-4f46-19c7-b51e-79ff694ff314
 40 8f7e0e87-a325-36e8-a85f-c2b8eae89d1b
 41 65e3d1ee-b129-60dd-bf0d-3abdb022919d
 42 9d3ea5fa-166d-3434-b5fc-2c4a64dd7e06
 43 a4806e91-24ce-17df-a7d4-e4f86fdbe556

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 3542127874224827415303473335235516228713631. Exactly this sequence comes out of new Random(589).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 9 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 43; the post has N = 43 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs