A858DE45F56D9BC9 archive

201212100700 14lmt1

explained decrypted filler

seed 345

Metadata

Post ID
14lmt1
Title
201212100700 → 2012-12-10 07:00 on A858's clock
Posted (UTC)
2012-12-10 12:00:05
Timezone
UTC−5 · title 07:00 against posted 12:00 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,128 hex characters · 1,064 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201212100700) = 4d101479ab2f3f3b1630163ce301481e (name+title)
GUIDs
33
Filler GUID seed
new Random(345).Next(9) ✓ verified
Run
Run 39 (seed 1,106,402,812) (seed)
Draw
96 · predicted N = 33 ✓
Machine boot
2012-11-20 22:02–00:02 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
10 · 2
Tags
automated (decryptable)2012Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

57DCF854F7FFEE02 68A0D5E7B292C1F2 F6BF39965805AC16 D318CD5D5B364BBF 2A169C77075A4E48 C74CB832D7E98216 E060EC84475F4497 86DC537CCF768B05 ED432F5F545E883B 7E0FCABBB5F2BE17 D3EEE9BF6BED9CB9 58C2F23340BE6C91 F979FF6C1D6AA2DC A4D053895D8F6C02 4C18CEAD7128185A 30037D891B3B39BA 6D33D1C7E3908A24 CA02C5B2782B7450 7708E7672277AB11 3C6711D10F6F7C16 E32CBE5B310CD531 C679B7074FFA5A15 4CC1096E6F9EBB9B FB9154B8E26BFDC7 24A8B7CBE0DB8578 DAE83637D62E89DC C1B0602798FE26BC 0342DF65EDAC20A0 03E763D3E604B9DD C0062E23DACBDA45 099161BD9F331CB9 E25542E4973796E7 60FF5BBF7356149D 0ED50A8E0AC956CB 4DDB0CC1C2025018 07950EAAE550D902 C65F2B9E428EDD50 7C05028D849EC790 425CBB7D0601EFBF 03ECDEA76770401D 94DAA0876989138E E1B0CD428B124DC2 2AE1239BB9048E62 8F3C1B990E968F07 4DE564D9B2F19721 58E533A99D7DC352 FA615125FB42DFF6 27C467C97C39B5C6 6E72AA380EA2197E AD35469588B5AA38 D06761DF2C2F4F1C 48CD8659B4913E99 02F85E647DB03E32 84245C44594C1EA6 492F9C7424B7F3E6 7ADFA115C81A29E4 6B05C395D7EF9784 2DC7BF05AAD41973 F32ADF5726994253 2430A08E62FE1804 A97855F447931FCB 76771A31A602CA71 9743B4A995A1D776 A67FA7225541F369 BBE6F4A840987F60 8C1815A6D144F53E 9B6B578F05B7874A 6214D10E89FDFF70 C1EB07AC1D7A62A1 8B1B2C407555C5F8 C3D7B1AEAE2B4AE8 4B58B251B0A946E9 AFA8C5327000500F 0702E4406D135BEB 5CDFD96202CE9D88 05BA94E9354B34C6 B5A2FD4472EEF4C5 03FB7E27A9DC961C 57B0AF1284B22A92 1FB90BE85274DA3F 96B2BDD25E1A1785 E5C7F4644ACEE536 7C2DFEE27AD5B0CB 3E3293D8CDF9647D 758ED634376198BA 52075E11D423781A 2433CA5428CD465A 9944423B7ED6B0EB DD73A2002ADC2468 E032EA889A65AC60 D798BDFDD04D6BC4 CC18710834F71D41 D6FC19BDFFD93B2F 07C7FE2543C8E512 97B9432110FD2128 D7FD0DAA5B53428F 81F50F69BC347A92 39773FBD9B942CD1 0B22F1A8B88D7641 8E80ADB839E8C34C 2A292AC0D42513FF A3F4D23842758ACA 97F5161D89C05334 E0C3329BCB977124 7274A6761B4E843F 81413925519DD1FF 83CF18260ECB588F AE42757D895D7AAE 0DD375BB1AD57D27 884500D5CE17941E 6317E445E5449894 B11C8A8722FD8B42 2E6BD9899AC962C5 FA5A274D8F62D3F6 9002D2F6998FA2DB 2720DFD2B4448C7F DFCDF3FEBF439A32 FF403B6AB2B0D34B 2488AD68905911F0 4F0FCB34B6355E48 8C1C2662671CB3AC 1019CACA76C28964 7A060B5ECC524815 4E298A8F989E32C4 765AE3BB0E49AE0C 485C88FA598DDDC2 5386978CD055D148 88120313AF9DA663 01C63D42C6F30593 FDC85E82C4CACA6C 94AAE7A3C364CAAD B13E57E62D5E65AF 005E4CF16CDEB17D
  • Read the ciphertext. Strip whitespace: 2,128 hex characters = 1,064 bytes = 133 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201212100700 (name+title). Key = MD5(password) = 4d101479ab2f3f3b1630163ce301481e, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 33 GUIDs as hex (shown below).

Decrypted: GUID list

  1 938ea0c0-f9e2-8366-a549-49394bcadb3b
  2 870cc3e1-39d9-060b-a204-db7744f6a40a
  3 63366d91-31f1-877d-9e9f-96550c3a8c33
  4 c2dcdf91-a83c-1add-af58-44a9ae1d0240
  5 b2617349-9bf0-8080-a39a-cf1742be6c70
  6 60af661b-26ba-0c14-8264-052c7d33f46e
  7 36345a6d-87c4-472b-bea0-3948e4f54ceb
  8 457916c3-9428-407a-9f75-361bf02be22c
  9 dc88101e-63e8-5506-b5b4-c748b28672a6
 10 1879858d-8fbb-4ca0-a4e5-82b589f45bb6
 11 c5840527-e6ff-46d6-bc07-cb6058874438
 12 dd562340-e92e-79a6-9ef3-4d4f2c312a6f
 13 3000a756-64ee-7f5f-a90c-8e37bdc283ed
 14 2fc1b19f-9a6b-88cc-98ba-91a8706377fe
 15 2570289c-920f-4b02-b921-1256383f565c
 16 fcd62add-b698-43b5-a8b8-bfe543abfaae
 17 7df15d0b-587d-70b5-8cf2-4318b2543e13
 18 215a59d6-1019-82e1-83e6-9fce9718073e
 19 bcf48f72-30c1-05ef-8a0c-1575780446c8
 20 6aea18e3-9e61-85b4-b510-6291fed6702d
 21 0cb4dab1-e611-53bf-b4b0-f1515887ec11
 22 f81d71de-fca1-4817-a26d-dd5e6ca5d6aa
 23 4b915e43-11cc-2d42-a6e6-0c3c624edaed
 24 2953459a-4138-5ba8-9642-4cae6f9e3800
 25 b98cad34-6341-40f0-8d48-f6d63e2a0333
 26 f1b44798-0c6c-308f-a504-c080a5a1fc5c
 27 97661147-2603-40be-8114-ef0c2117a5a3
 28 1d7faf37-6878-433f-91cf-88394464db91
 29 73913cfd-e425-7a3d-8f47-411834aa0ef3
 30 1821662f-075d-824f-bc07-450bcc60ce61
 31 13e50852-47fb-4d79-ade8-5eacaefaa36e
 32 6b57f18d-9ebd-2216-a7d6-deabadcbb25b
 33 f4798db1-3b60-0378-9e12-2dc2066b2c3b

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 808180445447784478085425434478420. Exactly this sequence comes out of new Random(345).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 96 of Run 39 (seed 1,106,402,812): new Random(1106402812), Next(8,64) per post. The RNG predicts N = 33; the post has N = 33 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-11-20 22:02–00:02).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs