A858DE45F56D9BC9 archive

201212032132 148lpn

explained decrypted filler

seed 288

Metadata

Post ID
148lpn
Title
201212032132 → 2012-12-03 21:32 on A858's clock
Posted (UTC)
2012-12-04 02:32:09
Timezone
UTC−5 · title 21:32 against posted 02:32 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,680 hex characters · 840 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212032132) = 9e6fd98a02cf14fc259eb36e92949b45 (name+title)
GUIDs
26
Filler GUID seed
new Random(288).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
13 · predicted N = 26 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 1
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

1890DF26C6E7D57B 66B3FE229BFBE5BC CE8173B612C167FB 4EA2549443B6AEF3 BE0241F830B2321C 97638C3A75EB5E39 88BC41D4C09950E0 754C402A2B0465B9 1EDBBCB79936EFBA F16C364D85B46D13 1597DD91135F900A 7565B273754F2C45 461A87226F38D2ED 4293A471CFF359D8 1A58859808688EE1 01A84EE45277641F BF40FC968A851A7B 6D2A72B99442B1AF A2D87AAE95E55823 A50C108C1DDD3F7A 0B5409EFD52E1CEA 0C13D0E962AB28E8 C024F0A847AB50A8 2AE5AF025BD5189C F3F5E7C9B19C7E9A 95C40C479CBCE17F CA3BE1A25F61B97D 63991E66ECD51C1D EE4CF1E6D22CB8BD 13530E94E9088E03 B6A5A4CE14C59DB7 82941AB0363C2F13 37D44BA3D43EC602 D344D1ACB13BDCD5 291977401848727E 925881CC8BCA29D6 97C34485C49571D2 75459628D1F11F83 C355C3979EB38CEA 2F0AA379D540E78E 1F36544E1EFE47A9 F152511EFCC0E7EF 091DE0A034181FD7 191CBB18AD0E1D7F 5A43F43F0D91482B 7F9EF09AE8B046DC DC7288C1D41CB1BC 8A0FB7939053FD9D 3E226E3CB312274F 2AE8043B9EC6B87B 410A0D40406D601B 951DF914BC938660 DAF9195B55E49552 32A90066337CFA68 2C5196072617F1B7 77F650B7693BCAC9 EB16F727B90CA9E4 50457173E969911F C2443376886FA097 0F8B26452417EB3B B98709809FA45B58 B1CD08969726D13F D9A6B01268153CFB FA0E809FB851620A 959A8C150BE8BA5F B3AB54F02D18B1CC EC29D00C84E23697 685CD240C3A98F8D 5D638AE717CA7BA0 0EBF01BC77FEE7D2 DA0B7630B7590817 F0D6EE07D10876E2 9901F7784C9B3472 1F328E67BB7519AB 080395DE6288358F 3713D37DAFE5BE97 CAE420C67DF6E42C 43106871B95F9978 44A542874B763338 D4EC2284C115639A C126BE021300FA28 17D10845694FF00C 13113A6CA7CB9A48 454EE7E8A230DD8C 16CE2B428EB9D160 100B720FDA119716 C3775A77A5F14902 11B1E3CDF3998255 D07B5CA5719094AF F7947F5EF893F915 7EC3E9C8E5FE245A CA61838A0DC85884 41CBDAA1A2B0A9BD 20FE077126735C43 C7E3131B0AA2966E 9459F3F8088360FE D5EE50982AEDDD2F 3852C270B27CDA09 5EDC50151E61ABF0 D335BA8A569D0D58 DBB4C95251850161 67BB13D0FAD4EA93 8C08AF145D810041 AA8F7E668AE1D560 82E3E40BC2A945B9
  • Read the ciphertext. Strip whitespace: 1,680 hex characters = 840 bytes = 105 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212032132 (name+title). Key = MD5(password) = 9e6fd98a02cf14fc259eb36e92949b45, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 26 GUIDs as hex (shown below).

Decrypted: GUID list

  1 a919b534-fbca-1b26-bde6-f7c1f4db0a37
  2 59628ae8-e838-2bb2-a6b0-aaea21f819ac
  3 c424f832-35a9-07bb-89a9-af7f429cf4ff
  4 d2adc1a8-b2ff-09a5-afa9-1a0d4e34c507
  5 32a43e80-72c2-2fc2-b6e2-cee30e15bd9c
  6 b6af0e99-67db-25c6-ab15-ea0f1491a3bd
  7 eeeececb-8394-8e17-a80a-f6487231f7d5
  8 19b88721-f972-899b-8e18-9c43a86a7a8b
  9 e51084e4-329b-564f-bfc9-e85cbe64e3b0
 10 164ae7ad-74db-4a8d-a534-d6aced3d948c
 11 01f47ea7-da0f-4ac9-a951-387cda76bea8
 12 6d0cdab4-faca-2539-bfb8-6bca7c730005
 13 97ce4c4e-399c-5bbb-b7ef-de42c488f72e
 14 448a7cef-c676-27ad-88fc-f8f9ceac1a55
 15 fa89b698-5db9-50cd-9d5b-aaa5bc75ddf8
 16 f4e659f2-18cf-8103-bebe-3f3bf26fe38b
 17 4fa2e6c2-534c-8620-a2aa-db8b35153b83
 18 47e32f45-a799-4e1b-b606-3e35e3798519
 19 18adf692-052c-44dc-820f-605fae97b787
 20 857ce12e-621c-7c43-a21d-ed7c3bfd0575
 21 ab296a7b-c258-0e8e-a341-fb5e09d322fb
 22 f111a516-e11f-4a64-9550-65513141b757
 23 ad538204-e170-5d7a-8898-1ca8bbd99adf
 24 9b9351a9-0da6-5519-8afb-30e9aa4b6058
 25 55973a39-349b-89cd-90e2-6f7464141a2c
 26 53bd1238-a663-6a04-bebf-707dd0824dad

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 12002288544252588447045586. Exactly this sequence comes out of new Random(288).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 13 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 26; the post has N = 26 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs