A858DE45F56D9BC9 archive

201212051800 14bek5

explained decrypted filler

seed 805

Metadata

Post ID
14bek5
Title
201212051800 → 2012-12-05 18:00 on A858's clock
Posted (UTC)
2012-12-05 10:00:04
Timezone
UTC+8 · title 18:00 against posted 10:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,256 hex characters · 1,128 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212051800) = 3915a40dc3aa5a69b320722678e34d54 (name+title)
GUIDs
35
Filler GUID seed
new Random(805).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
55 · predicted N = 35 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
5 · 0
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

8B84EC8C51906DE5 8DA80D42AD7D6BD1 B23429B4D6A210C9 F1BD24855E923EA9 E6D6DD263F776003 073D3659B6D2667B 650726062A8C15B3 420A8363324294DD 563874DD510B0E6D 36D5100828FCC6D0 B504AF199D2DEAB1 D010D1B794258DBB 4D304B1227B8E69E A5698AFE5B7A362D 20E854DD4551172B A42BDDBA0F77546D 98A989445E30423B FD8D28F00ACF5B07 06FBAECE46513B30 37984241B65AC412 9AE7BEFE56BE1525 6350760C5C66CD40 4361DB22C911C2BC 4417654DE4BEE867 CBCD9BD24D903027 D78693B5F0515CC6 1D329D1E4BF865DA 83B3FD148C632AE3 027A2A5573C9CE74 2AFF8EEA409D6E4E F1ECCFCE5C3534F3 7CE36B834AF94486 BD350708364D1DD2 ED983BC3051A0F6E 325024C93A071E46 6F14D4E65D418B89 B9C551DDB1BFAF6A 0818FA25AB883938 323DD8F29DEC329A 900E671B5B7240D6 E2F62B2561A6B365 B72C3AA0850A78C3 C40F9E6EA9D16DCF A32CFD496A5182C2 564BF1A52776E226 E5805AA1F4ED6CB7 F0E02EF3310D4934 5EFC0BE556AE0DB4 7DEC16A4C435601E ADE329491256733B CA4048E6662889D4 E785FB1A823C56CE E5582C9F62A55223 3C702BF215A86BA2 57019C859D55785A B422FB5850D6D26A 3908EBB48200E786 EE9E457DA4900FD6 29186E84C0E959D5 28B58103C527325B 0F8803FD74CD2FD0 0C94B87DA19248EF 94A816325E51680F 21B7FAFBA6951DB5 7688CAEF8519DEA3 00958A84A9AA6D5B 694EDD0A527E3EE2 0585BEF9E835E480 CD5120C8989237B3 B679E6F80677E512 19CD10940B99DE3B 26D893EC53A33AE9 7B90120B0DEBD891 08D1B8F5E3CA9F8C 9F89052E850E80A6 93D3A6BBD39987FA 73B1D10CAD05B972 D842981F6DA96E06 6742034FA64A68BD DCBB158BA9A73F40 83A328E6312B9318 C3AC8A5FD2584465 969B972C366A379E 96E56AB353F4BF0D 946B568FBE1FE0B2 A24256EEE1FED075 20F55C748C7FA86C 832032D065D20ABB 7E4AC9A74CB1A0F1 60905A7B49CFEA83 DEFB91C5F1D49B06 60FAAA30D9AD2C7B B3112F34E721D365 4A8A02DC6433180B 593AF86A92EE9D91 E23BE5787D2FB321 4E86C7E6F96F61EA 2E51924C0615E482 56644DC062C0C612 1AD6E57F59422E5F 538DC3CE871CC6D0 CFCFEEA55D0CB923 D573D752BF60C7A2 FC4E06931CD9D79A 3DEF99CF9591C420 5DD30C5084E42290 61A06B45752D7086 FD2DA88B00AEDF45 690517D0F2B5C024 FA07FCB93E6F6AE0 9606F5A68771CE72 F200278A645527C2 E0F0841F6EBC647E CBE66C2F38075F05 A9D0EBC1D2CEE063 8013063928947D38 12086B2F31583185 A81AEDB9014AEFCB 119C0E4E6C186DF3 A39867BA32F8446A E1925E268259FABF 88F61C84E139C969 F22BFEFC63499364 33557E08CBB443D4 A65D66184476A7DF 5A9EEC2651F9A3F3 0BA2DEC486D9D0D8 760444903B924D82 909060A402731861 2022D4EFAC3212AC 6C3B20F80806D378 0D1664A35EF2B7AD 4FE8CEC8DA6AB024 DBA96F3649DD70C2 A43BF188EE69AD8D 1F7AC20593C42901 0D975ECD0045789F 29D9690E0B7BA65B 89E4C6B8615DEC04 6183ABB51490859A E32D34D7ABA09AF7
  • Read the ciphertext. Strip whitespace: 2,256 hex characters = 1,128 bytes = 141 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212051800 (name+title). Key = MD5(password) = 3915a40dc3aa5a69b320722678e34d54, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 35 GUIDs as hex (shown below).

Decrypted: GUID list

  1 32aa3993-e5e1-2799-bc22-85fde70f8575
  2 bc2e06d1-63b1-0d4b-b55b-eedecaca7c47
  3 6a6ed50b-999a-457a-857a-c8b4a01e394c
  4 02a1a489-f4db-3abd-9cd9-ee84b7eb59c0
  5 153dbe43-33f4-5174-80a8-490386b1b2dd
  6 d073a2fb-a3f2-0ff6-abf8-637496384c5a
  7 4454156e-1bcb-53c6-96d0-3b3528a97cee
  8 e7cc35bf-52fc-2630-b7c6-4ffeb660ecbc
  9 7d27026e-67e7-589e-bf7c-f96ae2a1f590
 10 6f344206-e8d7-11d3-b639-6195d1bdc53f
 11 f32f5bb1-220d-39d4-be24-515c5f1bcbc8
 12 b38f0a44-18e6-8515-ace5-d3d3b8659531
 13 befe11d6-a4a9-083d-88db-e35a9d4888f5
 14 068e92de-a32f-2543-a8e8-640b5005bd72
 15 c0d08713-3af9-4f37-a5be-3c837df0f130
 16 6ace7756-46ae-641c-8e09-ac5d131e48c8
 17 12102c3b-8bb3-2ecc-bda0-72581f34ede4
 18 0a5e1dca-7796-0ed6-844c-b17d172f38cd
 19 f665be28-e1fb-4741-8a62-47d01c321f91
 20 312669e2-d602-0f56-8252-3bed2933bf3f
 21 c4f31e62-69e8-65a5-8641-df0dd9cc355c
 22 a733b031-13fc-3cd9-8502-3d6bb039e956
 23 5e3f2c55-321b-0a35-935d-2fc9b1a38b93
 24 8ac07738-ba82-2999-b1f0-f240740ab5aa
 25 abbbbaaf-dc91-5b75-870e-883b045ff6b2
 26 7c4cca3f-88d4-2263-8575-e4aa1c2628a2
 27 4d352c6c-a6b9-09a0-ae1d-3426b06784a2
 28 346c2d8d-26e0-4dcd-b346-c8f4c0b68ba2
 29 ad28b729-b009-889c-813c-ee7cb98d4eb4
 30 9e64eb33-d2a0-3531-9acc-06d85a02dcc4
 31 4b1f8a58-062e-3f40-889c-d465fe811608
 32 995a175e-04f4-48df-b0c3-d080d61b93dc
 33 4113b616-f9e6-04a6-b347-4eb73dcc36cc
 34 31cff598-ca4c-1ca2-bb52-2be431d24d66
 35 c9521b49-54b5-6e83-80e1-e195f9a32c79

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 20435052513802462040630252048334016. Exactly this sequence comes out of new Random(805).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 55 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 35; the post has N = 35 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs