A858DE45F56D9BC9 archive

201212051600 14bawn

explained decrypted filler

seed 399

Metadata

Post ID
14bawn
Title
201212051600 → 2012-12-05 16:00 on A858's clock
Posted (UTC)
2012-12-05 08:00:03
Timezone
UTC+8 · title 16:00 against posted 08:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,000 hex characters · 1,000 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212051600) = fbc5167b4947aeea94ddfb09a8e2b228 (name+title)
GUIDs
31
Filler GUID seed
new Random(399).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
54 · predicted N = 31 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
1 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

4F68F0A075CDEC0D EFB3FF588BF003C7 DE2519DD639FD182 B0D139B7851B5FD2 59A2672FDE5B0F4D 776A4E753974FE4C E0FE5F9A38DA954F 8E41797DD5152EDE 44DA987FA020C878 8907C5F1DFBB0E97 55BE8AD79CA506C5 BFABFDB382FB7F6C 16B6FF9BDDF88CBC 47BA65AFEE453877 C5B690DC8C194667 E6A4AD1F26F38884 DA7578EFFBFFAFCA A85041F6117F886A 815746DEA941671F F8DFB54373DB9345 19D89F8CC9F6E7CB 161A426C461BFCAD C901EBC1ED0E2333 1BFB68D62FDD219A C6B51ACE85A0380E 5EF2CDCE0A91A086 FF84C5BA2939232A 28A0237148615A58 DECC25FB7FE71C8D AEF20D30F2B7620D 125175D21A1B796E 5B9D27B426F3C085 E831514FF70CC9AD 34264E6507351DE2 31D78AE8B3C388DA 3F669F440300C3F6 299E2CF07D5BE5F9 4139CBC68A14630C AD28C25E68B412DB BFA961D6E3BB2B66 852F70C8507EED0A CAF21F25BE82A46F 51C9E5BBC08452F9 BE08AFF01C7568EC A0B57B2BCCED18C3 4CB10D9A4F594956 641ACF3FAE65B54D 181AA4B6A7BABE62 8B220C2ADF74F5BE CB8CC81C2F00EE22 C6C431A4F0287FD6 5CC737AFBEA27306 D0C9509384B3EB73 FEDB4864BD84E0E2 C2078F676AEECFB8 0A49580EC4860B00 A92D31B46A3EE57C 4B04E7E99CC57DA1 46A637B34DE62865 4FD8A484AEAEF455 2B91D5D0EA230226 685E97E690055590 6D4FE0A05AA3725F AA60684EDF38F4D1 1896EA453CD2ACC7 AC7B1095DB54E6CB 0672FBEE2D87A39B 827FE355A3BF63B8 052C968779A9E978 1CC80656BE02A2E7 D76AB361393D24A2 9784BB1C4BCCF0F0 FEEDC73ADF6A2AFA DB0450298E4AD3F8 B83E0608E59158B9 522DCF1999921DD9 66793275F0CB94AD 7D829E060ED64ACB 3D3B4EEC20FA642E E9BFF7AE6443F884 B607784DB2CF6EDE BA23C5A0E55ED15F D14D74669DA94840 A542A836FC62DF75 654BB310660073F8 E1828C36016824A5 76DA6777F4DB1DB5 DA3DE1F98FA21D26 88425E4A6385096B 556D755350D7FABE 561C0BEAE344E98B 259664DB986A0BC3 FF2945321E05F822 631591A62B862470 3D02010E6C60C7CE A77C617DEB91CA66 1B7E1637023976E3 F0907D73E8DC233A 58D7C272CF627E68 823F67890295FB22 6A35158E22222B2B 423F80CA56F10FFA C619634CC0811413 1CD1D7E75DA40073 8F73F0026264F87A 6DB0DABE4AE8C056 2A3F637F05E5C407 613A4D4D1397C9A0 F041E1ED01F80F49 FABDC980D23A435E DD9FC69BC28A3582 47A8260347C7B76F C6B674FC66FD8B03 C5625E2D44E2A9AD 07AFA216B297B655 34059FE9F400D639 2B9F13E99C0B21BB 999D2A1F9E0292BA A57876BB7BB1BC7B 454E62BB1481B3AA 26A46D33F65FDE53 0BB9B2B43591F48A AC5752CD31F2E8D0 E0A568E158A09B79 3B2C49E9364C8E05
  • Read the ciphertext. Strip whitespace: 2,000 hex characters = 1,000 bytes = 125 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212051600 (name+title). Key = MD5(password) = fbc5167b4947aeea94ddfb09a8e2b228, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 31 GUIDs as hex (shown below).

Decrypted: GUID list

  1 9b1096d6-e464-1bff-9ad2-edb709656290
  2 56bb40be-e23e-832b-ac23-5620058bbcd2
  3 d9a8558b-701c-5dc3-a0a9-ea4c98b0363c
  4 7ca68964-f65c-6156-b58c-50e2f019758f
  5 832d361c-3ee1-36e7-a02b-7ad98ef5b582
  6 d4cda2f0-f42d-2745-9bb2-5c6ed5326cd5
  7 e096a265-20b2-6908-98bc-f3bfb65f126f
  8 8f88dc13-865f-5f69-9119-f8636883e018
  9 eec5a575-068c-3501-a82b-e728ce8ee1fa
 10 b4be7020-b4a0-34ea-9808-1a12f8c41811
 11 5a22c5ed-c086-2086-b1f6-daa943a955fd
 12 eec0855c-45fd-8902-8dea-e358d71b196b
 13 23acaa6a-e632-8f81-9f73-b5dd132eddd6
 14 b748e146-77fb-0001-89ef-c50a7db5fcb2
 15 7cf1d528-0cc3-2f1e-8fb3-f5a4eca84bee
 16 3a40c3d1-dfd3-1633-a4bc-a530a4393179
 17 4f036491-4125-58ed-9641-cbdd393eb1eb
 18 2efa8010-3226-387f-8330-c78bf6689f76
 19 e58e8be0-d435-48a3-9584-4e63704008fb
 20 549fffa5-7b72-762b-aa09-afb6780c1893
 21 476d0ddc-5816-7852-9e84-cbc796b6d79d
 22 f8a42943-966d-62dd-b358-2c41ba8f2fb9
 23 484d4f70-52f7-33a4-b3a2-33456d23b0e5
 24 a206d64b-0249-3ec6-9e3c-8a14ecbac367
 25 51f13718-42f6-717c-a548-f5c2477e9b5c
 26 1335ea82-12be-1511-ad1b-d81ca51b226d
 27 b4cdcd82-9522-84e8-bdb0-53534eccddba
 28 9d694530-c267-8dd6-ad7b-4f3bda3f4ed0
 29 99539434-32cf-6c01-9d50-eb0a111bb808
 30 152b00b2-2b7c-3c12-a769-2387f1a8fcd8
 31 9705149d-9e6a-4c24-80bd-8e367812a0e4

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 1856326533288021534776337188634. Exactly this sequence comes out of new Random(399).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 54 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 31; the post has N = 31 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs