A858DE45F56D9BC9 archive

201212041329 149u4l

explained decrypted filler

seed 196

Metadata

Post ID
149u4l
Title
201212041329 → 2012-12-04 13:29 on A858's clock
Posted (UTC)
2012-12-04 18:29:27
Timezone
UTC−5 · title 13:29 against posted 18:29 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
1,808 hex characters · 904 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212041329) = 3926b759374b49db7e6c0cc7335be182 (name+title)
GUIDs
28
Filler GUID seed
new Random(196).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
42 · predicted N = 28 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
7 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

0CEC1530948BF33C 1C49F53DB3F45DEE 5B4F91AE1FA7D430 6C525847565388D0 BA63307413B42D15 78AF99AC582DB491 47C2CE296B90AC73 432364B665F9669A 9DD145426F2D45D4 3CB354B19E86D80B 881E88026E44DA55 93B0FE00D0430773 3655A611FC35ED5C 4CCB3C82F731FEAF DE7D13C7154609D7 60446A7D408522FA A8ED916B649A13A1 70D1EE0618753C09 6AE66E691D6E2DBE 3C4557FE2B0FE6FA 216CBECFFF299732 D8A9E72FE31B97A6 D27B348D470BD990 2FA97D9991156569 722903F828E6D97E 320B5389E6688586 9064D8A43E7F3150 53E9B444C315CADE 989419F2CEE8852D D3A4C6D5582C3B86 BC13E16D14C657BC BDC16FEAF0EEC0DE EE6309B6E7071689 E397A82A9081959E 63A9BF524FA86F9D 905C5103091646C8 5481BBD0AA9647FF 484FBCA99A97352E 76D560B56CE9AE8C 9D9509CBD039AD35 0BBAD87560F41274 54037F6F82DF675C EC6E39D249C72C95 AA7DA98207FE3514 6EE11A44FFD4F71A 0D16FE62EF5F85C0 70A6786F4145E27B 7FB8E5D42D1C1B34 57A58A692470926C 861BF3345CA0CBBA 7061694A2CF6D8C4 8C94AE5E06966BFD 8F5C4391BB96FA16 AC74FDC3C6577133 1DB06B41C9FBE691 96D5585EF1B7333B 9DCF295F463A5005 77DD893C425AF364 439350B199E33D6A 847438411D85A3FC 3521CE07FDE62102 DA7B9D9BC5256D02 4876679BF8D3BF88 01ED4151AB1C01E7 DBAF7C43FFDB1989 C48824617BD39D33 63E9CFC7122BD677 A9708F5393AAE566 63ED5BA11959B371 C37E2359071A4818 9CC07EFB41B5378B 7753D7ED8F8636A2 C8F4A03B62EF9BFC FA4E3D8BEB78EF6D 04F6628F5A817722 D0AD0E2E4C57E143 2BF104435DF00EED C8F7D4D6B0508741 A1C18C9EB3956088 01EC3C2F8CDC281E C07CFEFBDD0B529F F67485CE43BBF301 97584A4F769B4063 FBD8DCCE3623C31E B0B8169C3EF463DD AA07E8DF47709667 E97C4FC720B99CC1 B97FCE42F63545D9 0BE086C9AB766881 A8587518B3DC9443 B657ECBA79C7B198 BB1AA4616F00258B A1177FCF37429085 87290B64C4463798 D3B83D7577299410 B912FAA57F3C920A 3C165957A350750C 39A3B7EB6A7518B5 F04CC22552A8E9DB D47CFA266F115BF1 522712D87D72BFD0 44670721C5F644EA F2C75AD1E84B1F19 15B06595FFAB1EFC F2C8C9316869B3E0 BC93CC92F376823C DEF24D281A157F7D 385AC0C9E1398A98 797AC38E0422A342 F35EE0DF48B7D48D 87B5627144DA29B8 555CCD89C883CBF9 BF6D11D1CE04D0CD
  • Read the ciphertext. Strip whitespace: 1,808 hex characters = 904 bytes = 113 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212041329 (name+title). Key = MD5(password) = 3926b759374b49db7e6c0cc7335be182, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 28 GUIDs as hex (shown below).

Decrypted: GUID list

  1 7cbc0d99-fde8-1321-8ede-2e9166304292
  2 ded3b9d8-e235-29db-87a9-7b03c15f1c75
  3 350b4502-7b2b-6ea8-85bd-32ff7eb79650
  4 68436113-8b41-3ecc-90a7-2a41d8c57bdc
  5 792f6393-633e-6c85-a5aa-0a1d104fb684
  6 0e8994b6-644f-76ce-aa6d-30961736732b
  7 8cb10db3-27b2-62fc-a9c5-52ae93a1a0a3
  8 58e497e4-d33d-663d-b1b5-0c1cb28fd12b
  9 fea84b25-9a80-2b2d-a770-28b24ef3b48c
 10 71e42e2d-a394-4841-bd1c-4538cabb781f
 11 6a9843ae-2160-68e4-90ea-0b2e11035ec6
 12 473cb337-1c41-4ecf-b386-76368da874ea
 13 1e351af5-dd6a-311e-802f-5a747e9237f2
 14 5bf6da83-396b-3337-b5bc-ca2188c1f883
 15 76df8e7b-5501-1740-a758-2d228d13e893
 16 a61b6c1c-8c3b-385b-a1b2-fde60427f687
 17 5eb12861-7af0-26c4-ba68-c94b24d4a507
 18 dc8d2086-71da-4f50-8103-acfdd2b720fd
 19 33ee43cc-ef9a-8a6d-bb5a-9a95512d5cfe
 20 415a388d-c6c4-1884-a8a4-97ed268edb1f
 21 b6370256-de06-793a-86fd-9931e1d026d2
 22 0ac52eed-aacf-82cc-8cdf-71de37e84751
 23 41d6bd09-5358-1d7e-9dcf-9e00afc73ce7
 24 899c0a7c-dcee-4096-b290-83d5a6711a46
 25 d75f2183-d4e9-84a4-ade7-aa4386e2228d
 26 46f52a56-657a-5f54-9a36-aec521b6b690
 27 d452da16-bfa5-4092-9479-c831faaa2b84
 28 ca3b9e68-19f2-1131-b442-0b9de273479f

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1263676624643313248178148541. Exactly this sequence comes out of new Random(196).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 42 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 28; the post has N = 28 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs