A858DE45F56D9BC9 archive

201302250250 196kup

explained decrypted filler

seed 426

Metadata

Post ID
196kup
Title
201302250250 → 2013-02-25 02:50 on A858's clock
Posted (UTC)
2013-02-25 07:50:59
Timezone
UTC−5 · title 02:50 against posted 07:50 UTC
Author
[deleted]
Account
A858DE45F56D9BC9 main account
Subreddit
r/A858DE45F56D9BC9 the main subreddit
Category
F3 filler: 3DES(name/title) → GUID list, seed known
Size
2,064 hex characters · 1,032 bytes
Cipher
3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key
MD5(A858DE45F56D9BC9201302250250) = ced12e9f0bd8c75b15392387bfca472c (name+title)
GUIDs
32
Filler GUID seed
new Random(426).Next(9) ✓ verified
Run
Run 42 (seed 983,934,859) (seed)
Draw
11 · predicted N = 32 ✓
Machine boot
2013-02-13 10:26–11:32 (seed = uptime at app start)
Sources
community-archive, arctic-shift · body from community-archive
Links
Reddit · Arctic Shift · JSON
Score · comments
2 · 0
Tags
automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

02719A786D7A01FF EC7CDF79C8C53904 9931681DB988AEF5 98654C8B146B5C98 0CF52FAEA5BC3A92 D164F404477BB63A EBD62352B04DC4D1 E8B84DB525F6E51F E188D68344791459 1C0D459BE19C25A5 0B14A5179F389629 B110464C10B948C9 0F518E2A28BBD858 9CFE555AADABD22A BF08706C3EB15C58 84AD5ABB57CBFEA7 DEAA0752B306850D 137888CD5E25C1B3 507EB981D565ABAC 5BA728FEBDE087D5 748BCE0A015EF0AC 3E7F7E8C144821B2 75A3127FF5762ACB 362D0C225ADB86F4 D44A065AF2557BEF 79DC6CB3EF5661E8 AFA6D787DD047D27 49FD838FE5D77E2C 0625D5183B579EA7 AE63B12FCCB49072 1379810FB6B2761E 2169D6FBF77F36BB EFCFD9B0E25AFA2C 6A817341B0F50EF1 F5B1F21B369FC8D1 92260EE2C42AEDD3 3FE1201B26B10465 9855BB8F93F31443 7908606EDCEF8E5D D7216CEF6022741D A5625009AF058B0C EF4BD3C172E33B73 638933B25C857B74 982AECCD3A316F8E 3CB677B4A8383645 1D22AC8EB08A994E 297B5A55C0F47840 21392B74432E2C4A 231E22A60E251F0C 2CF575DBA23A5504 D52CA7B896994A55 010F2532678A1DEC C2935D314508DA4A EC67EA317B50FC4D 69C9CD144E4B4B77 E1A262B2E0F31AF8 F6F4A8D1AE2E31C2 3B968E86E7DD82A7 4E6F633F643B4FAA 3BAD42CF1678DB3D 0D299C3A36742229 845EFDF8923D1625 66BB04C698186A50 185D95D92C1402CC 9406EE240AC13BD9 2DD71413F56E82C8 832B715E88AA7685 8302A96492107A49 2F984EFC67FFF434 B72E63A198E6F720 18F3389D8BED5B82 53358C073C727C6F 8BB829C3926B3786 E0A03CD084F7E85D 4B5BE613F086F651 03506374C0CCBFAE 484CAD643E517369 450BF6965AD750B1 3AD9CBD1552AFB0F CAA5AC433BDBC442 66CD709CF1077EBB DEBD42537867BE9A A5566769348D0A6A 607E680E14AAADB7 7B690FB55A567EE1 3A338A2F32EAE30A 19A5B728EDCCB383 4A33FFEE0D5CF712 4F6B925E893B1E73 AE6AF0A42B058294 E9DB40CBBE05ADC8 16C67ED136B47055 01546DC21A6631E1 42161D3CE1238D4E DA84916AF7C07378 18411C85C0305037 6FB1CAE09CFEFD82 73B8F1EAB118A09D 2045A331EB400EE0 6CB720E69818E212 5EEBF7EBFE48C661 479F5829BB1A37C9 0D7A7072506EF3B5 A09E4267431BA452 743C0AF60A3364D8 99923AAC5F7325AF 9FABA6888A7F2574 5628FFC434EAAE2A E95F0CC578216A44 F09C951D71559F7D 05EB7FA299E8508F C240B264B9F61B0B DE9D7324AA58E3A3 A39D609A9994D403 1511568BC95F5FD9 64C484B0B7119DE3 1162AFA00C8FC35B CD3F5808A1B88CC9 9A4D634ACC5C6C42 D3C3E8F8E3A40C02 6D5E763090FE7CE4 D58C8ED43619CE8A 2F9693873C5FB7BE 08C1E8E0D38F403F 0D6F1A6482F18C31 BDF47FD83EC4AE07 33E7B137627685F0 E02E1DA3807D5FA1 DD667740A8B8A9CE
  • Read the ciphertext. Strip whitespace: 2,064 hex characters = 1,032 bytes = 129 8-byte 3DES blocks.
  • Derive the key. Password = A858DE45F56D9BC9201302250250 (name+title). Key = MD5(password) = ced12e9f0bd8c75b15392387bfca472c, used as a two-key 3DES key.
  • Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 32 GUIDs as hex (shown below).

Decrypted: GUID list

  1 aa500934-78f4-23bd-a963-b218a3082fdd
  2 fdf970ed-004d-7cfc-a331-3ecffa296098
  3 b19e1047-6273-4e75-997d-50f3cdaccc36
  4 a4bd65c3-2321-43be-962d-d2e2c9a3827c
  5 83dd4e3c-d1fa-4561-a76c-79aeb07b098c
  6 62addeee-c8da-7f0d-9af7-813fbd5bf2ba
  7 5b432323-0bbe-7e8a-b398-688cbfd1196f
  8 33904998-d526-1919-a743-a9577404fb1c
  9 d97d2bc2-f16e-6b81-9638-205ceda9b0e0
 10 c47e9b79-9d32-3277-8e6c-ab0e7adf1ef3
 11 64b4f952-e53a-101c-9f86-a56aaac51675
 12 f38dc92d-d58b-0d50-9d39-1bb2616de625
 13 97652df4-a22d-4f79-8616-0ed7c9442ca3
 14 2d3e631f-b643-0c6f-b19d-2854034c566d
 15 832e36b5-9f42-1720-bbb6-dc4866c5b392
 16 6f0875e1-d6be-0200-938d-f368aa1c9d59
 17 de25ca2e-7f80-8244-89d8-34f95f954309
 18 568f1037-2814-1b0d-ba32-ca44fc01a1ff
 19 25aaa417-38dc-1817-906f-624fb5b04764
 20 218c302a-ce3d-2277-996a-e06bbe4f4061
 21 a967e4ab-e88b-3189-8be2-cf57d588d7fb
 22 37e4f1f7-6215-3c2d-87bf-f996e9f3b4fd
 23 fbfb8dee-1bf9-8223-9f05-abb4c8b9fa6c
 24 39bea38c-9c46-7647-bda6-00ed62362462
 25 963a0bc8-2b65-4151-920d-608c3d752614
 26 a3559392-f69f-4e82-a9c0-e923fc42f1fe
 27 46329e19-8f7b-1952-ad74-88cb0155c28d
 28 fedc353f-9000-5ca2-8783-04289ebf35f0
 29 799e0572-f17e-19be-8d72-4c2555c9a1c1
 30 6767aab3-1fa6-1ff5-8df9-cbcc9d8d76c0
 31 3284c186-f2c2-4db8-b1fa-35a694562018
 32 5090d9de-abc9-5554-969b-e7b5f5836d33

Explanation

  1. Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 27444771631040108112338744151145. Exactly this sequence comes out of new Random(426).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
  2. Explain the count. This post is draw 11 of Run 42 (seed 983,934,859): new Random(983934859), 4·Next(8,16) per post. The RNG predicts N = 32; the post has N = 32 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-02-13 10:26–11:32).
  3. Conclusion. Filler. The content is fully explained by the two RNGs.

Related

Findings: Mask digit · Count RNG & runs