A858DE45F56D9BC9 archive

201212040514 1498em

explained decrypted filler

seed 45

Metadata

Post ID
1498em
Title
201212040514 → 2012-12-04 05:14 on A858's clock
Posted (UTC)
2012-12-04 10:14:18
Timezone
UTC−5 · title 05:14 against posted 10:14 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,768 hex characters · 1,384 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212040514) = 2598e5598b42d1bdfae23f7f806c41a7 (name+title)
GUIDs
43
Filler GUID seed
new Random(45).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
27 · predicted N = 43 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
3 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

78FE3C1ABA3D5B02 6C5ADE0D107D08A2 E6A352BD197DB7D0 11839F963F40AF2D B24C144E920FB4FB E9284B2B6D500CBA 7E7D330A61FFB94F 0406CE8A5E43332B 33DFEF03A933F783 B7DA31B4A3966133 0B4C2836D576CD51 54FD0BACF212646D 46D5B68CB70E952E 98680CF6C2422BDB E24DAC7EFE609516 14D1ACC883179CC9 3CFCC4B14C6A62D3 07A8E9529BE045A4 8C400E6005B125C1 49CF1D3A98F003C8 BE5EC11157E634A3 1A6F1DADC967F574 6DD04A1A400C57BF 66A6086181450361 C40B74B4886123FF 876459AEEBE2F79B 8D8A365315B961F3 C15BEF88A955418C 982CAED00830C5D0 35E5F0DFBC752985 35A9A84F262E102D 51E44D71789EAC76 7D6E0D45F9155F8B 4E874B0F96A73E9D D0C204131D44DC05 EFBEF1E6326E1EBD 170C5B04B2576984 17FFD6F8B36C92EE 863D702E6FC199F7 1F761A9DFEE7E80A 675E188B620635D6 DA6638E6FA1561BF D6B01B508BDE4054 D49571D2BFF311B6 5530A942654FBB76 79122AE2BBCDC632 D796DF72F1FD2BBB A1B285AD53C42917 480DFDFF3404B3A5 564F8F31ABDD6F1E D24B9B6344CF18B8 EED54F56470E633E 088C16FD7665290F E489BDB4ABEF78B1 91FF9A50D5128877 1816B755931D32BC 538EE91ECEAC8D15 E6857FE2E959AF47 0F965A5F65167D8F 1178FE135701CBF9 01358C6C9797E587 0D8ABF60C54D4B94 54571A29238743E2 545A0EF8F9F52E08 1DDBBE6006A217BC 44A4F1DA28F5CAF6 0FB88D7D23F4E7F4 6BD79BE0EE40308F 0C9509E6C94E14DA E7C4DC38AF7098F8 8AB98EDD7DAF6D84 AFB18838D99B6BFC AE236A4D4D566929 6A36B9D46A7DDE3F 3072FB30754D51EC D195229DE9B709A1 9EF273C62D625B7E 7CE51F5F17B1DA58 1E7D0D699E8309DB CA8ABDB5B637FA4A AB0D700C53457C0A AE60F6CBF63AD71A 221FD3A95B29729A 350473DB0B69DD27 79559751E298F1D8 F227020EA5B1E4E5 1FDF4FE90E5A4B9C 8A033D5C20DBBD88 C25E44D54992C5E6 A9A1F48E515F1A2F B0C95F2859616E91 CBA319D2736ECA47 E715AAA59EB89A93 B7D0BD27CE1B7AC2 23B9455BEE15F8CC EAE5A32563745C56 91433A33E73D57AB 9F4B2E391C7C38EE 6B01DC6435A3BEBF 2FF2F9AFB1F7F6EB E0F658455B170E51 CA240A24AB4CF68A 6085B90B3E5964F1 84942423C8ED7B63 E9DF2A9A675BF308 A7A8FA2E652009E4 3FCC38CDA362FE0A 1B49DD4A6B847A70 2ECFECA093920AAA BB77F1EBF920875D C8C4041D93FE9849 9B7E7D2569DEDA89 177616D6CEFCB755 D934DC444F5EF92E 83DFDA7973D375EA B4FFFEFF6B4051B5 F0FDE1EEEBE4C4BA B7C0274726B4EFD6 C7788A0616E56F76 3737C1EB0D435728 72F2B62C0C5D62FC 44809E76AF000657 FC2D28A8290EB922 F3FEAFFA8C931E8A 70B82D2336913B57 7B99A7A81585381B FA97A7DF6C6861B1 B57086E595A83884 D873E6BE75DC79BF 7F624A3DDC14BC7F 60195EC08C831442 A717CC021CFE07E4 D794A2204A60404E 0E9ADE2EC93B9FAF A8E2FE8944507FE5 A19F07457B1104D7 C6D0C738584AC769 CB7D9387CE432C2B 75F25885ABB2B626 CAA7C44789BA4F4E C0F5246ADBAC33DA 0A7E1DB8C71E2D7A 3E44F7E19AE8A2A0 15588F219888D011 F1A5F6F45CAF879B 02756A851879DCCE 34A7B779AFC02896 506119191F5D1CD9 0717C9C80402583D 44851065ADC6630F 4C90A1B7AD2CEFA2 F4499808CF2A3083 4BF59A6E4B34E4F6 80E1FDCC3E97ECAA 3601164B9E6CA8F6 DCCD3D363E9F33DB 05B61885E9DB6A73 2459FA1291F34BF6 D138C5E37C8B387D F07B81606C51B2F2 198B759F84CE5E9B 947BDA9C1A87B6F0 96CD1036EA54F066 7920D019239AF3BE 26117E59815E9E48 E7F09AF2D66C6499 9C8FF441A874D02A 06B1C85CACA8FDFC 8F822ADF14C795F4 63D1D26ED7CA4D19 50E90A1FA6F15103 AE9C2721BE461D89 361EA2FDF9EFA9C6
  • Read the ciphertext. Strip whitespace: 2,768 hex characters = 1,384 bytes = 173 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212040514 (name+title). Key = MD5(password) = 2598e5598b42d1bdfae23f7f806c41a7, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 43 GUIDs as hex (shown below).

Decrypted: GUID list

  1 eb558acf-a9be-2e3c-91c4-d7948cdc8640
  2 b4c82a9f-47e4-0528-92c8-f3b9d4c4a6b6
  3 49764a57-c85f-2f53-883e-c1eae6547fd7
  4 664c86a1-8756-10c5-bc86-84582822e531
  5 6f419f0c-bac0-40e7-9e28-4c9c6360aa88
  6 da0dbbd7-0a7b-7a51-8504-165753cb6501
  7 c77acc3c-483b-09a9-a1c2-034764a37867
  8 85a980ee-10bf-0c90-aa21-4e4b237cbaaf
  9 7bc1680e-fd84-48ac-9a1f-e443a2994734
 10 c817f89d-de08-72fc-8ee4-c299ed1f2552
 11 50f98642-09c5-44c6-8736-264677049301
 12 d9a035d2-19af-56eb-a0eb-50d2b1f0077d
 13 542cf423-0bc8-5794-a721-567e966066ce
 14 5f7e02db-9a3d-7b36-ad68-cc87e30823c0
 15 43e014a3-b1d0-4c39-b37f-bc2cbd171a12
 16 ab9297f1-7442-1a72-a1b3-40eb19b6e580
 17 d44fc7bf-80e7-725e-a1c0-ace1fd8246dd
 18 c485bdcf-d3b6-8b36-80a8-245051c1966d
 19 37d8d7f8-9c9f-8bf4-b482-dd165ede7c3e
 20 eb3e755d-c2e5-69dc-b023-72ffd262180b
 21 d6468f19-2e3b-74b5-97f2-0678b21cf5cd
 22 431989d1-319a-705b-8ea8-58e2f7607e4a
 23 587a3a2c-04d7-5dc6-b2dc-2e07c09d19d0
 24 24f7529b-c23c-6aab-837b-3cf4c4ed9e63
 25 572be6f9-d711-0770-ab38-4fd72331878d
 26 d298fe68-852b-4c46-83cd-96c49bd8eb68
 27 a99d0c8c-7e9a-5774-ad1e-7e992a8ffdac
 28 5ecdbaef-5752-5985-8246-3c6c05bdcd93
 29 57b70c4c-0662-8fa1-accd-2a24e191dbe5
 30 79ad17fc-60d0-2a33-8b05-74cd0c5c4c08
 31 5117aa25-bb5e-706f-9bf8-6ed81c59b8f2
 32 526122ac-cc29-2863-a2c9-b9f2a3b69f25
 33 82d26d50-3aee-3c29-aa61-479df21ce78f
 34 ae5869a8-9303-1d0a-9cf5-b4ebd1bafceb
 35 4e6af278-e220-3b6b-bed9-d28bcedacce1
 36 152cfbc0-0f23-60ad-a6c1-3b6fa4f2f70c
 37 ddf780b1-c3b6-24f5-84dc-6e0ca8e44512
 38 f6d017e3-10c1-07e9-91f4-18b73cb2082b
 39 3f748e49-ae22-0e98-a435-938f3eeb1920
 40 4754ec65-d8a3-4854-a63a-f8bad0af5e19
 41 39cda486-9f74-05dc-b058-cbd44aba4f94
 42 d1a22cc1-ecd0-13e2-b49f-492f9fcf2980
 43 4bfef924-c682-740d-932c-2ae9cdf30c45

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 2021470047455741788677560455827231362004017. Exactly this sequence comes out of new Random(45).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 27 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 43; the post has N = 43 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs