A858DE45F56D9BC9 archive

201212041223 149pwf

explained decrypted filler

seed 64

Metadata

Post ID
149pwf
Title
201212041223 → 2012-12-04 12:23 on A858's clock
Posted (UTC)
2012-12-04 17:23:26
Timezone
UTC−5 · title 12:23 against posted 17:23 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212041223) = d1451e954864ecc5ac387bd4b8710c79 (name+title)
GUIDs
33
Filler GUID seed
new Random(64).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
40 · predicted N = 33 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
0 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

DDC30F9FD66C00FA 4CF817DBF071131C 0C9830CB7F56AE59 BFC11FF7DBF05846 EF02085D0781AE1C 86B1FC185846D6EB AE6CF079610C41E7 66665F4EFD7477A6 774C1726B6580BE9 3C7607A2A7E81D09 567914FDB6F989DB 816CA81A7162C09D 32012B3ED1E92DCC 1D6E9D3CDE07FCB2 9E4DB31AE119F98C B0AFECE0CD1B06CA F1A6B46DB6608B9E F2138EE6126FCA35 5BBD05B3977272BE 4746F45AB01D955A C314157B50F5448D E9F1E2E50EAA5E22 C7F326BD4479FBBD 69526A38708688F0 64098FF66377C6CD 9867E6C38EDF17A4 CC480635520BA300 869E412DB774C2B7 01446305832AC513 64280E2CB6528450 285D6632E3EDFB4B 221E273876C0B943 211D5F66900319BB 6BCD9A2506184CD2 5D9629781E465EA0 F7239D311852F34C 3664444261B77BF7 0CEBA8E34F56FF69 3DBAE4EF43E518A3 D3368077483E08DA 21848941883CAB3C 5CA9B63A68B1B798 59A3BD36B52E87F5 66E3AF8E3A9D70F1 3285A54D9391D297 6F60300FD757DABE DFD17B877A32C797 9BB63258648F4D86 AAD4865C3D48670A 2CA7B4F3D2C732D0 27F18D3C5EEE5449 C891260C9E156A17 0C2EB6A0AA28FB60 F9CE23B13233C93F 1EEB72762FA6E040 B2DC88FD555883D3 AB6696FD8C8D592A 6B261387EAA915D9 8FE70E385CF652B4 2623F02EF6DA7C76 571FDA4ED3250E93 11ECC5CE179DE5B9 30F8DE76784F6115 1A831B0373D02DEB 54497FB3D7A84312 1538D9C079087109 5DC451B35212CF71 F7F95DBC785FBC2F 24DA00D2BC10C4CC 3EE335741DDCBDE9 6BE1D35EFF8A451A C8E934A5EA8CF01F AC6230B39F090E54 642F2881F757718D C60EEC086D495368 D3E578002C9C86D0 1C5E5A5882EB84E1 6144C4F3930AE529 40EDDF9F89628C63 18997C70FBA1C4E4 70B2201F191B3A6A 20DCCC6C3C476F74 624A6D3E0BF2BCE4 ED8C39136F85A1EE CECC6E7A7CA20AEC 496C974C3A34CEFF E8A51F33D7E83178 44F875A1EAE70710 0C546372FD16B7C7 FEAC0E7BD7A1A59F 88584E0833BC376A B10C5FE3B5383107 C576EBFC2946AC1A 1CAD037868208D95 5E1D02A920185A8D C5BB55B449A57E9B 2A0EDFD439230A1F 5D3572A0A34150AF 25C98BC43B49E0A7 57E19C889A4733DC 84C94B915587E804 4AA61498DE22C1D3 F513D0387BA5C990 EC02F320C7A996AE 826BD423D40A5CB5 1195AEE1C71E1291 3566DDB0F2542A1C C303661DCC5658C9 A2888BB26038C988 EEBF53B7ACDB1B57 EB7146616897E988 1568F71A06076F19 3C3EF49987E35E3D C1A698469B8B762E 78DE91E74305352B A5E3AF8C028BFDD2 3901FB1C4617D755 6B8C774446836692 8630F19A5DF0AF3B ACE9E2653C086137 10303056C12C0146 E165CDB31C5E2C0D BE0D5EDFAC1BF515 C44A7D23A786E1C0 ADDA78884F53DDBB E836FC9A0A67E4E7 662B7E1D9685E543 9E55280CE381AC5B A93E886F6B9D7E46 07F657FC182091C6 6E188488857116E9 09AD93685FC2BAD3 0B5ECA06617A4F7E
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212041223 (name+title). Key = MD5(password) = d1451e954864ecc5ac387bd4b8710c79, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 ab0179d4-189d-1b73-aed5-cd8125be783f
  2 19e8bb35-6763-5025-b669-e6b57ff30119
  3 dc574d68-95ef-4a1c-9da3-0cf8d645e2c5
  4 d1bb260b-0b34-1dee-827d-8412218e97d0
  5 2002c7b0-a0a0-0ed6-904d-3c989efd7195
  6 0f25019b-9134-4738-9b6a-67809a67ccd0
  7 105a0e89-e6a2-5c0a-960d-f1eac7a89572
  8 ca1ff3f2-d32b-4849-bd9b-c8c7ff940c43
  9 3428d958-b66b-84e2-aa16-68a1d418c998
 10 1c674774-2126-752a-9e02-cd8590bd5ef3
 11 e6282a1e-7373-3500-9922-0ff12ff401f2
 12 3bb939b0-38e4-3de3-9200-33ac3f831712
 13 1cae26cf-b44a-5cb8-a7d0-21adb9a204ca
 14 78289602-b61f-6f81-aac1-0a7fa1a63c03
 15 3bf26d0b-429c-7b7d-942d-ff710406bddd
 16 f757318a-1a59-8cee-ba41-0acb0b93a489
 17 16c19e74-71a9-6f0b-b4c7-4406bbcd0a79
 18 54c4d64d-0f60-6e62-bd6b-889d54eb3ac3
 19 8725eb5c-3c5a-3f04-9e8f-b9df97cf75af
 20 d538903b-d983-0f8d-b1f2-f95d53bbc64d
 21 dbbe27c5-ebd3-26a9-88c9-3b9348e706c2
 22 2c42b550-03ab-4023-9bb1-f9a75331945a
 23 2f1cad70-baf5-73d7-983a-b26437fc2351
 24 ccd87f90-b801-30c8-9758-28b2e59b4715
 25 7a449a21-99c6-878b-80ed-cc4aaa691c3b
 26 cddc679e-4cd0-64e3-b010-5459286a14d2
 27 a31f3d79-4bfc-8a50-8f58-20c6653afec0
 28 75db92ca-b50c-3d3d-8bf7-26f7653b85bf
 29 96c485d6-9500-299b-8c95-6ff4fe262a36
 30 3aa2779a-ed41-58fe-b8fc-41df8bb4e668
 31 1a635f7d-c5a0-7cae-810c-3fd75c1b3100
 32 f7623d54-868d-2d5b-adc5-6686a3322e04
 33 286c51bd-17cb-0e6e-9826-e02b1d1fa0be

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 154104548733567866302473868325720. Exactly this sequence comes out of new Random(64).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 40 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs